$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft File: psue-0_owcTgwvGwDoTH8aL0nG8.mft (raw, json) Hash identifier: DcsdFBVinYlcxuJwpologskabDpPBnKkZBJU9T7c2lY= Subject key identifier: A7:F3:00:C8:9E:FC:B2:1F:2F:A6:48:42:02:93:DB:84:DF:23:97:24 Authority key identifier: A6:CB:9E:FB:4F:E8:C1:C4:E0:C2:F1:B0:0E:84:C7:F1:A2:F4:9C:6F Certificate issuer: /CN=A91AEE28/serialNumber=A6CB9EFB4FE8C1C4E0C2F1B00E84C7F1A2F49C6F Certificate serial: 12FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft Manifest number: 12F4 Signing time: Fri 31 May 2024 17:50:36 +0000 Manifest this update: Fri 31 May 2024 17:50:36 +0000 Manifest next update: Fri 07 Jun 2024 17:50:36 +0000 Files and hashes: 1: psue-0_owcTgwvGwDoTH8aL0nG8.crl (hash: PxhXxj7Lndrr9jhySeh/gFcBNxRrOFmUTRg5L0NKPPU=) 2: 7BD0C11E8C3311EAB2E95132C4F9AE02.roa (hash: g/afL00ILJ3mHttnmB7PPDH/HYvyeBN7IhanA0d/L30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.crl rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4860 (0x12fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEE28/serialNumber=A6CB9EFB4FE8C1C4E0C2F1B00E84C7F1A2F49C6F Validity Not Before: May 31 17:50:36 2024 GMT Not After : Jun 7 17:50:36 2024 GMT Subject: CN=665a0dec-1635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2f:f8:f2:0e:af:eb:8a:0e:e5:4a:52:36:4c: 33:df:28:9d:da:8e:ce:0d:90:68:89:04:f4:48:5a: c0:21:83:dc:0a:76:24:46:3b:85:7e:19:23:63:a2: 7c:0f:9b:0a:f6:8f:55:4c:1e:fd:73:1d:d5:45:67: 7b:9c:ee:39:09:25:70:9e:ea:d6:e2:d6:23:0a:c5: 61:fd:d6:ee:7c:ef:ae:55:8f:f7:a4:ac:8b:7e:15: 86:ab:04:a1:fb:2b:79:fe:c6:65:82:15:4b:76:d1: c3:b8:d0:a7:a5:95:c9:2b:ed:6b:2e:d8:80:4d:49: b4:f9:25:eb:3b:7e:f6:f6:9c:20:84:0e:a4:7e:5d: c2:26:c4:dd:59:c9:a7:a9:71:a6:45:8b:25:ed:ef: b9:dc:bd:26:98:22:80:8a:c5:64:5e:e6:40:37:e6: db:a7:5c:40:11:ea:62:b6:23:3c:c6:44:0e:df:07: e0:bb:f5:7f:d6:07:68:e8:a1:c6:bf:f3:2f:bd:88: 8a:2f:b2:b1:c9:36:45:59:ab:cc:64:a6:a4:a7:6f: 90:ca:0e:05:c4:8f:00:0f:29:02:f7:57:22:ed:bb: 82:89:bf:45:e3:97:30:a6:67:d1:ad:eb:e6:60:40: 44:85:5b:5a:ed:c8:62:70:a7:c6:73:b7:08:04:bd: ce:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F3:00:C8:9E:FC:B2:1F:2F:A6:48:42:02:93:DB:84:DF:23:97:24 X509v3 Authority Key Identifier: keyid:A6:CB:9E:FB:4F:E8:C1:C4:E0:C2:F1:B0:0E:84:C7:F1:A2:F4:9C:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:97:a2:5f:00:d1:04:15:67:4c:7f:f9:d4:e4:3f:46:07:2e: ee:11:b7:2e:c3:9e:74:38:f3:ff:7d:3a:6c:46:f5:51:94:94: b4:43:6c:83:25:3b:95:55:a8:f2:cc:49:89:5c:26:57:c9:b1: 36:a1:f4:f1:5d:1a:59:de:da:0d:14:08:50:44:01:8f:1a:58: 8a:58:b8:ba:4c:f8:6b:d3:90:a7:f2:f5:1b:08:fe:24:16:6d: be:03:36:cf:81:b1:b1:92:1e:4b:a0:56:97:32:d4:a1:61:79: 74:31:67:06:5e:b2:7a:6f:3c:01:84:cc:d8:fc:d9:8b:f4:29: ce:12:29:89:05:75:0c:4c:f1:c9:82:11:5d:c5:d7:6c:c9:e0: db:5b:a4:9b:fe:7d:e7:fe:34:d9:3e:be:0c:b1:40:a3:36:90: 2f:37:82:64:c7:af:70:83:bc:31:17:50:7a:6f:03:42:37:63: dd:80:c4:26:5b:d3:a2:f4:8a:c1:20:b4:5b:71:ec:64:b2:3c: 32:2c:60:78:e1:ea:0a:3e:42:fb:77:ba:29:5a:eb:00:76:2b: 68:aa:f2:a3:d9:c9:01:0a:f4:f5:4a:3a:fa:5e:7c:5e:aa:df: d3:0d:3e:db:ed:1d:cb:a3:ba:78:d7:f1:3a:a0:ef:d8:14:d1: ee:bd:31:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVFMjgxMTAvBgNVBAUTKEE2Q0I5RUZCNEZFOEMxQzRFMEMyRjFCMDBFODRDN0Yx QTJGNDlDNkYwHhcNMjQwNTMxMTc1MDM2WhcNMjQwNjA3MTc1MDM2WjAYMRYwFAYD VQQDEw02NjVhMGRlYy0xNjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAri/48g6v64oO5UpSNkwz3yid2o7ODZBoiQT0SFrAIYPcCnYkRjuFfhkjY6J8 D5sK9o9VTB79cx3VRWd7nO45CSVwnurW4tYjCsVh/dbufO+uVY/3pKyLfhWGqwSh +yt5/sZlghVLdtHDuNCnpZXJK+1rLtiATUm0+SXrO3729pwghA6kfl3CJsTdWcmn qXGmRYsl7e+53L0mmCKAisVkXuZAN+bbp1xAEepitiM8xkQO3wfgu/V/1gdo6KHG v/MvvYiKL7KxyTZFWavMZKakp2+Qyg4FxI8ADykC91ci7buCib9F45cwpmfRrevm YEBEhVta7chicKfGc7cIBL3OxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfzAMie /LIfL6ZIQgKT24TfI5ckMB8GA1UdIwQYMBaAFKbLnvtP6MHE4MLxsA6Ex/Gi9Jxv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUUyOC9GMUIxRkJCMDkw QzExMUU4QTQ5MzM5N0ZDNEY5QUUwMi9wc3VlLTBfb3djVGd3dkd3RG9USDhhTDBu RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BzdWUtMF9vd2NUZ3d2R3dEb1RIOGFMMG5HOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUUyOC9GMUIxRkJCMDkwQzExMUU4QTQ5MzM5N0ZDNEY5QUUwMi9wc3VlLTBfb3dj VGd3dkd3RG9USDhhTDBuRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApl6JfANEEFWdMf/nU5D9GBy7uEbcuw550OPP/fTpsRvVRlJS0Q2yD JTuVVajyzEmJXCZXybE2ofTxXRpZ3toNFAhQRAGPGliKWLi6TPhr05Cn8vUbCP4k Fm2+AzbPgbGxkh5LoFaXMtShYXl0MWcGXrJ6bzwBhMzY/NmL9CnOEimJBXUMTPHJ ghFdxddsyeDbW6Sb/n3n/jTZPr4MsUCjNpAvN4Jkx69wg7wxF1B6bwNCN2PdgMQm W9Oi9IrBILRbcexksjwyLGB44eoKPkL7d7opWusAditoqvKj2ckBCvT1Sjr6Xnxe qt/TDT7b7R3Lo7p41/E6oO/YFNHuvTFW -----END CERTIFICATE-----Generated at Fri May 31 20:34:13 2024 by rpki-client on console-ams.rpki-client.org