$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft File: psue-0_owcTgwvGwDoTH8aL0nG8.mft (raw, json) Hash identifier: JwlbEK4+GHB5fcnj1BtDocNpXOymJE4aX+uPTpN2ilY= Subject key identifier: 74:3E:45:9E:FA:C5:B1:25:5D:3A:07:EA:D1:03:21:43:C7:BD:47:2B Authority key identifier: A6:CB:9E:FB:4F:E8:C1:C4:E0:C2:F1:B0:0E:84:C7:F1:A2:F4:9C:6F Certificate issuer: /CN=A91AEE28/serialNumber=A6CB9EFB4FE8C1C4E0C2F1B00E84C7F1A2F49C6F Certificate serial: 1400 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft Manifest number: 13F7 Signing time: Sat 18 Oct 2025 17:24:33 +0000 Manifest this update: Sat 18 Oct 2025 17:24:32 +0000 Manifest next update: Sat 25 Oct 2025 17:24:32 +0000 Files and hashes: 1: psue-0_owcTgwvGwDoTH8aL0nG8.crl (hash: qsPdEbkqukB/cS9vnw/8KIfBBZYyWIi0nJLxWYBozQU=) 2: 7BD0C11E8C3311EAB2E95132C4F9AE02.roa (hash: SD43F6ndbx8cQg58d8qyQwvKSbxddffft/0WNF7cCQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.crl rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5120 (0x1400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEE28, serialNumber=A6CB9EFB4FE8C1C4E0C2F1B00E84C7F1A2F49C6F Validity Not Before: Oct 18 17:24:32 2025 GMT Not After : Oct 25 17:24:32 2025 GMT Subject: CN=68f3cd50-c689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:44:86:a9:44:19:cf:d8:a2:0f:de:11:28:a4: f4:35:c0:d2:e2:8b:cb:49:07:f2:e7:7e:cc:eb:fd: 4b:8d:a7:eb:50:a6:e1:95:fe:4d:c8:35:fd:55:43: 7b:65:67:f9:e8:f0:08:7b:28:0a:23:d9:e1:c2:9f: 57:ec:de:17:4c:dd:1b:57:b0:ac:c6:ec:5f:5f:77: 9f:6c:52:a8:70:63:ab:2d:a6:68:e6:9f:54:85:1b: b3:9b:ab:ea:9b:74:9a:80:f0:c1:68:dd:9b:6a:4b: ef:c8:77:dc:d2:91:3a:bb:ef:5a:fe:b5:64:27:73: 14:ad:e4:a6:05:ab:e3:9c:ad:37:41:5d:bf:e0:31: 41:7e:51:ca:ed:3f:46:c1:d0:71:ec:ad:34:7f:74: c7:45:b9:c5:42:90:86:5f:53:1b:ea:66:80:af:4e: ee:fd:38:93:00:0e:2f:09:df:a7:c8:b5:0a:84:f9: 14:37:cf:0b:98:e4:cc:35:a6:7d:56:3f:b7:db:ac: 0e:22:1a:6d:d7:bc:cb:97:7b:92:1c:a2:43:17:77: 10:7f:d2:40:05:4e:f9:c7:f5:be:10:99:f9:74:23: 9d:cd:3d:da:44:33:b7:e5:e5:5c:20:6e:a4:8c:34: 00:0f:32:1e:4f:6f:86:3a:73:45:d0:fa:1f:0e:69: dc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3E:45:9E:FA:C5:B1:25:5D:3A:07:EA:D1:03:21:43:C7:BD:47:2B X509v3 Authority Key Identifier: keyid:A6:CB:9E:FB:4F:E8:C1:C4:E0:C2:F1:B0:0E:84:C7:F1:A2:F4:9C:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:a4:a3:f2:8e:f7:de:a4:06:98:30:11:9a:f3:3c:db:6f:11: a1:05:91:86:ef:eb:80:c8:f3:ec:5d:bd:79:cd:28:69:82:25: d3:81:85:2a:da:3a:7a:34:29:68:a5:53:27:2b:a6:d8:04:91: 82:c5:75:78:00:3a:f1:ff:e6:68:01:80:ff:22:da:d2:97:d0: c2:25:1e:03:f6:6f:5b:34:08:0b:ab:6e:e2:e0:eb:dd:76:0f: 3f:05:0a:fb:37:3d:48:2e:47:b8:8e:c5:10:6e:81:58:7c:e5: 1f:b2:cd:1f:a9:85:6a:27:68:3c:1d:81:8c:bc:07:f9:e4:de: 2a:38:15:cd:e1:9f:26:ec:68:8c:0a:e8:47:10:17:ba:85:51: f0:b7:f6:5a:24:5a:50:b0:ac:42:b8:7c:2f:3f:22:4d:e7:ec: 20:a9:5c:78:5b:32:8e:ad:73:a9:62:4f:c6:34:8f:e6:34:47: f7:0e:2b:3c:92:ad:db:04:27:02:d1:44:60:02:53:75:73:e2: e9:12:4b:ef:12:62:69:d7:c8:bf:ee:ce:3f:aa:0c:89:67:cf: f9:ed:51:7b:4e:f3:52:72:c8:92:18:ca:98:c3:71:98:3b:47: 44:af:2e:20:8f:8c:bc:49:f9:bd:eb:73:b8:30:64:71:9b:3c: b0:70:1a:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVFMjgxMTAvBgNVBAUTKEE2Q0I5RUZCNEZFOEMxQzRFMEMyRjFCMDBFODRDN0Yx QTJGNDlDNkYwHhcNMjUxMDE4MTcyNDMyWhcNMjUxMDI1MTcyNDMyWjAYMRYwFAYD VQQDEw02OGYzY2Q1MC1jNjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6USGqUQZz9iiD94RKKT0NcDS4ovLSQfy537M6/1LjafrUKbhlf5NyDX9VUN7 ZWf56PAIeygKI9nhwp9X7N4XTN0bV7CsxuxfX3efbFKocGOrLaZo5p9UhRuzm6vq m3SagPDBaN2bakvvyHfc0pE6u+9a/rVkJ3MUreSmBavjnK03QV2/4DFBflHK7T9G wdBx7K00f3THRbnFQpCGX1Mb6maAr07u/TiTAA4vCd+nyLUKhPkUN88LmOTMNaZ9 Vj+326wOIhpt17zLl3uSHKJDF3cQf9JABU75x/W+EJn5dCOdzT3aRDO35eVcIG6k jDQADzIeT2+GOnNF0PofDmncXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQ+RZ76 xbElXToH6tEDIUPHvUcrMB8GA1UdIwQYMBaAFKbLnvtP6MHE4MLxsA6Ex/Gi9Jxv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUUyOC9GMUIxRkJCMDkw QzExMUU4QTQ5MzM5N0ZDNEY5QUUwMi9wc3VlLTBfb3djVGd3dkd3RG9USDhhTDBu RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BzdWUtMF9vd2NUZ3d2R3dEb1RIOGFMMG5HOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUUyOC9GMUIxRkJCMDkwQzExMUU4QTQ5MzM5N0ZDNEY5QUUwMi9wc3VlLTBfb3dj VGd3dkd3RG9USDhhTDBuRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHpKPyjvfepAaYMBGa8zzbbxGhBZGG7+uAyPPsXb15zShpgiXTgYUq 2jp6NClopVMnK6bYBJGCxXV4ADrx/+ZoAYD/ItrSl9DCJR4D9m9bNAgLq27i4Ovd dg8/BQr7Nz1ILke4jsUQboFYfOUfss0fqYVqJ2g8HYGMvAf55N4qOBXN4Z8m7GiM CuhHEBe6hVHwt/ZaJFpQsKxCuHwvPyJN5+wgqVx4WzKOrXOpYk/GNI/mNEf3Dis8 kq3bBCcC0URgAlN1c+LpEkvvEmJp18i/7s4/qgyJZ8/57VF7TvNScsiSGMqYw3GY O0dEry4gj4y8Sfm963O4MGRxmzywcBor -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:13 2025 by rpki-client