$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft File: psue-0_owcTgwvGwDoTH8aL0nG8.mft (raw, json) Hash identifier: Hau+q07q172vSozmtdWNXwKaJJurw/WvawlL87KC2C8= Subject key identifier: 3C:6B:B7:2A:3E:5B:DE:11:09:43:C9:55:3D:1A:75:82:F0:50:CE:30 Authority key identifier: A6:CB:9E:FB:4F:E8:C1:C4:E0:C2:F1:B0:0E:84:C7:F1:A2:F4:9C:6F Certificate issuer: /CN=A91AEE28/serialNumber=A6CB9EFB4FE8C1C4E0C2F1B00E84C7F1A2F49C6F Certificate serial: 139F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft Manifest number: 1396 Signing time: Thu 10 Apr 2025 16:57:48 +0000 Manifest this update: Thu 10 Apr 2025 16:57:47 +0000 Manifest next update: Thu 17 Apr 2025 16:57:47 +0000 Files and hashes: 1: psue-0_owcTgwvGwDoTH8aL0nG8.crl (hash: xPgXY5ynIzgvbW9ffvkZSmSxksmV19jHU1UmTi2qRTQ=) 2: 7BD0C11E8C3311EAB2E95132C4F9AE02.roa (hash: SD43F6ndbx8cQg58d8qyQwvKSbxddffft/0WNF7cCQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.crl rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 16:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5023 (0x139f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEE28, serialNumber=A6CB9EFB4FE8C1C4E0C2F1B00E84C7F1A2F49C6F Validity Not Before: Apr 10 16:57:47 2025 GMT Not After : Apr 17 16:57:47 2025 GMT Subject: CN=67f7f88b-1f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:a5:18:40:89:ce:0d:65:b5:80:7a:c4:6e: 7d:6f:c9:04:e5:a3:8d:8b:a2:18:0e:a0:07:aa:5e: 0d:df:7a:4c:dd:c9:5f:96:cb:dd:61:7b:5d:25:76: ef:77:be:91:80:cf:79:80:cf:ad:05:4a:28:ba:2e: 3d:77:b0:b5:f3:e1:65:cc:8c:de:27:0c:22:f0:33: 9b:ef:c7:c7:89:6a:dc:88:62:89:4e:2c:8d:94:04: eb:41:6a:0c:ce:5e:9b:cd:e7:e4:5b:8b:25:91:db: 28:d1:e3:bc:77:e9:8f:5f:b9:5b:b4:4d:45:a5:81: b0:08:b3:a8:fa:37:29:8d:bf:40:ff:28:28:f5:a9: 7e:42:83:80:02:19:d6:af:ab:f1:2f:23:42:cc:af: 16:e2:27:c1:7a:36:e6:4a:b8:0f:97:78:d3:c2:4b: 2a:05:e8:97:e1:bd:48:18:4d:12:92:23:c6:ec:63: 5a:d9:e6:ec:50:22:2f:fb:e2:ec:a3:e0:12:70:97: ad:94:26:37:14:ee:f7:5a:75:b3:32:38:ac:62:83: a6:70:5e:aa:09:cc:94:a9:d2:4f:6c:82:bf:a0:62: 60:1b:8d:92:35:a2:ba:1c:e5:4a:10:f8:e0:27:fb: a4:a6:4e:96:42:b6:bc:65:49:9e:53:ff:2e:06:1e: ea:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6B:B7:2A:3E:5B:DE:11:09:43:C9:55:3D:1A:75:82:F0:50:CE:30 X509v3 Authority Key Identifier: keyid:A6:CB:9E:FB:4F:E8:C1:C4:E0:C2:F1:B0:0E:84:C7:F1:A2:F4:9C:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:b3:73:6e:ee:21:0d:06:75:b8:41:3f:6a:fb:73:e1:7b:2b: fd:fb:cc:cb:31:f3:49:dd:2f:68:fd:63:d6:fb:8f:88:26:cc: 3a:d8:93:3e:fc:09:e3:97:7f:b7:bf:df:5b:2e:d2:4e:68:0e: 18:44:98:c4:58:b0:03:21:72:47:2c:0d:42:4b:59:dc:6b:f5: e4:b1:3b:f7:c6:63:85:02:db:2e:6e:ba:7e:bf:63:5b:95:be: ec:d0:0d:ba:f9:d5:7d:42:aa:6a:56:08:cc:2c:56:42:34:45: 64:06:14:bd:9f:20:4b:c5:a0:47:d6:83:a5:01:ed:4a:f2:f8: 4c:44:7d:82:da:7d:8c:9e:1f:a5:65:d2:74:13:33:02:28:27: c8:22:c5:11:b9:e3:91:3f:f7:8d:e0:b5:36:59:fa:f6:0c:db: f5:ba:5f:59:af:64:6e:a8:b1:38:5e:7a:04:ff:db:ce:9f:22: 83:b8:8b:d5:2d:20:be:34:15:93:f7:c0:1f:81:37:95:40:06: 88:98:4b:22:fd:92:be:ca:f6:be:49:4d:03:cc:fe:50:19:e6: 67:ac:20:0b:68:ad:15:5e:e8:14:0f:ca:bd:97:e6:ba:49:e9: 06:54:29:1e:cd:78:81:a8:54:23:03:e7:7d:a8:3a:57:b3:3a: 06:39:8e:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVFMjgxMTAvBgNVBAUTKEE2Q0I5RUZCNEZFOEMxQzRFMEMyRjFCMDBFODRDN0Yx QTJGNDlDNkYwHhcNMjUwNDEwMTY1NzQ3WhcNMjUwNDE3MTY1NzQ3WjAYMRYwFAYD VQQDEw02N2Y3Zjg4Yi0xZjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVKlGECJzg1ltYB6xG59b8kE5aONi6IYDqAHql4N33pM3clflsvdYXtdJXbv d76RgM95gM+tBUooui49d7C18+FlzIzeJwwi8DOb78fHiWrciGKJTiyNlATrQWoM zl6bzefkW4slkdso0eO8d+mPX7lbtE1FpYGwCLOo+jcpjb9A/ygo9al+QoOAAhnW r6vxLyNCzK8W4ifBejbmSrgPl3jTwksqBeiX4b1IGE0SkiPG7GNa2ebsUCIv++Ls o+AScJetlCY3FO73WnWzMjisYoOmcF6qCcyUqdJPbIK/oGJgG42SNaK6HOVKEPjg J/ukpk6WQra8ZUmeU/8uBh7qpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxrtyo+ W94RCUPJVT0adYLwUM4wMB8GA1UdIwQYMBaAFKbLnvtP6MHE4MLxsA6Ex/Gi9Jxv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUUyOC9GMUIxRkJCMDkw QzExMUU4QTQ5MzM5N0ZDNEY5QUUwMi9wc3VlLTBfb3djVGd3dkd3RG9USDhhTDBu RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BzdWUtMF9vd2NUZ3d2R3dEb1RIOGFMMG5HOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUUyOC9GMUIxRkJCMDkwQzExMUU4QTQ5MzM5N0ZDNEY5QUUwMi9wc3VlLTBfb3dj VGd3dkd3RG9USDhhTDBuRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjs3Nu7iENBnW4QT9q+3Pheyv9+8zLMfNJ3S9o/WPW+4+IJsw62JM+ /Anjl3+3v99bLtJOaA4YRJjEWLADIXJHLA1CS1nca/XksTv3xmOFAtsubrp+v2Nb lb7s0A26+dV9QqpqVgjMLFZCNEVkBhS9nyBLxaBH1oOlAe1K8vhMRH2C2n2Mnh+l ZdJ0EzMCKCfIIsURueORP/eN4LU2Wfr2DNv1ul9Zr2RuqLE4XnoE/9vOnyKDuIvV LSC+NBWT98AfgTeVQAaImEsi/ZK+yva+SU0DzP5QGeZnrCALaK0VXugUD8q9l+a6 SekGVCkezXiBqFQjA+d9qDpXszoGOY5t -----END CERTIFICATE-----Generated at Sat Apr 12 17:47:56 2025 by rpki-client