$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft File: psue-0_owcTgwvGwDoTH8aL0nG8.mft (raw, json) Hash identifier: F6faNCdchXDp+elYIbalLAHnLggj8XkMGYNHHT/c7nk= Subject key identifier: 4B:DD:0B:D0:B2:27:AB:D9:F6:51:4C:65:4F:D7:8E:F4:45:42:74:67 Authority key identifier: A6:CB:9E:FB:4F:E8:C1:C4:E0:C2:F1:B0:0E:84:C7:F1:A2:F4:9C:6F Certificate issuer: /CN=A91AEE28/serialNumber=A6CB9EFB4FE8C1C4E0C2F1B00E84C7F1A2F49C6F Certificate serial: 12F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft Manifest number: 12ED Signing time: Sat 18 May 2024 17:34:34 +0000 Manifest this update: Sat 18 May 2024 17:34:33 +0000 Manifest next update: Sat 25 May 2024 17:34:33 +0000 Files and hashes: 1: psue-0_owcTgwvGwDoTH8aL0nG8.crl (hash: HPyk7qWNWv1KJfndwiVwBfj474f9k/VxSt3oaZO2/Nw=) 2: 7BD0C11E8C3311EAB2E95132C4F9AE02.roa (hash: g/afL00ILJ3mHttnmB7PPDH/HYvyeBN7IhanA0d/L30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.crl rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4853 (0x12f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEE28/serialNumber=A6CB9EFB4FE8C1C4E0C2F1B00E84C7F1A2F49C6F Validity Not Before: May 18 17:34:33 2024 GMT Not After : May 25 17:34:33 2024 GMT Subject: CN=6648e6a9-6d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ad:77:ed:a8:c7:7d:b9:bb:f6:e3:58:d8:60: 6e:86:e3:87:16:8a:16:ae:5a:6a:0f:3b:12:cf:3c: d6:4b:c6:b5:20:de:b5:90:93:3f:f0:aa:00:03:b9: 9f:fd:30:a3:93:e3:1f:98:0e:4f:b9:81:fc:21:4b: 9e:8a:3d:53:f5:1c:9f:d8:c6:70:73:71:70:ac:2b: a2:4e:6b:71:0b:0c:38:18:a9:29:6a:26:77:42:30: cc:87:6d:8d:1e:14:f5:eb:28:9b:46:8d:a9:b4:58: 4b:79:f3:ab:ee:7a:ee:69:38:6d:97:59:c2:ca:c0: 9e:42:59:ca:bf:a3:98:47:26:96:06:3b:17:97:86: 63:6f:e7:b8:41:f9:41:2c:99:9c:1e:e4:29:f8:17: 79:ca:e5:d7:9d:80:78:a4:2f:b0:1b:52:41:b4:7d: b4:bc:ba:04:05:3b:21:a4:5f:8c:4e:07:16:f1:04: 9f:7f:b2:03:3c:9a:39:1b:fd:7e:6e:44:00:ae:c4: 79:b1:be:68:2f:d5:af:a5:79:50:ae:39:3d:63:da: ee:7a:02:e2:c8:11:aa:6f:bf:5b:87:5c:92:49:d3: 17:ad:c8:f1:e2:34:53:69:1f:33:5c:90:b9:78:49: 9f:5e:0a:4d:98:43:62:8b:3e:84:78:2e:97:6b:09: a2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DD:0B:D0:B2:27:AB:D9:F6:51:4C:65:4F:D7:8E:F4:45:42:74:67 X509v3 Authority Key Identifier: keyid:A6:CB:9E:FB:4F:E8:C1:C4:E0:C2:F1:B0:0E:84:C7:F1:A2:F4:9C:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:8f:70:5c:1d:ab:28:40:f8:73:95:10:0d:58:f3:1f:10:79: 42:80:02:cb:64:9f:c1:2e:68:f7:10:88:80:a4:2a:8a:6f:04: 24:6d:48:3d:8e:bd:1d:d8:c2:2d:96:58:c7:32:f4:6e:a3:c8: c9:48:f5:c5:db:d9:39:00:5a:71:ab:cb:dc:b7:fd:da:ec:63: 69:c6:9b:ef:08:d8:e6:45:ee:dd:93:88:04:be:4d:79:5a:02: 14:ce:65:87:d0:03:49:20:77:20:cf:52:56:a0:e7:5b:49:73: f5:83:a0:02:25:b2:7f:ee:99:f1:34:7d:e7:b4:03:60:44:37: ad:1d:ed:e6:c0:6e:f9:69:5b:00:35:97:e4:05:17:fd:1f:94: cb:27:77:4f:66:b2:09:55:8a:6d:b5:c0:a4:92:ca:75:ca:fa: f2:ea:81:48:99:a1:be:fb:cd:b6:2e:76:5e:f8:f9:b7:98:f0: 50:35:59:71:9a:0f:ab:29:7d:ae:29:bd:d7:3f:e0:81:79:8c: e6:1e:37:d0:7b:98:80:b6:e2:2c:97:43:29:07:a4:60:e7:6c: e5:ee:b4:46:6b:73:f0:e8:59:b7:05:c0:a6:1c:32:fa:ac:89: be:c0:05:28:02:06:56:af:01:4d:13:62:5f:2e:de:38:c6:41: 5e:c8:8f:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVFMjgxMTAvBgNVBAUTKEE2Q0I5RUZCNEZFOEMxQzRFMEMyRjFCMDBFODRDN0Yx QTJGNDlDNkYwHhcNMjQwNTE4MTczNDMzWhcNMjQwNTI1MTczNDMzWjAYMRYwFAYD VQQDEw02NjQ4ZTZhOS02ZDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAya137ajHfbm79uNY2GBuhuOHFooWrlpqDzsSzzzWS8a1IN61kJM/8KoAA7mf /TCjk+MfmA5PuYH8IUueij1T9Ryf2MZwc3FwrCuiTmtxCww4GKkpaiZ3QjDMh22N HhT16yibRo2ptFhLefOr7nruaThtl1nCysCeQlnKv6OYRyaWBjsXl4Zjb+e4QflB LJmcHuQp+Bd5yuXXnYB4pC+wG1JBtH20vLoEBTshpF+MTgcW8QSff7IDPJo5G/1+ bkQArsR5sb5oL9WvpXlQrjk9Y9ruegLiyBGqb79bh1ySSdMXrcjx4jRTaR8zXJC5 eEmfXgpNmENiiz6EeC6XawmiTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvdC9Cy J6vZ9lFMZU/XjvRFQnRnMB8GA1UdIwQYMBaAFKbLnvtP6MHE4MLxsA6Ex/Gi9Jxv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUUyOC9GMUIxRkJCMDkw QzExMUU4QTQ5MzM5N0ZDNEY5QUUwMi9wc3VlLTBfb3djVGd3dkd3RG9USDhhTDBu RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BzdWUtMF9vd2NUZ3d2R3dEb1RIOGFMMG5HOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUUyOC9GMUIxRkJCMDkwQzExMUU4QTQ5MzM5N0ZDNEY5QUUwMi9wc3VlLTBfb3dj VGd3dkd3RG9USDhhTDBuRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcj3BcHasoQPhzlRANWPMfEHlCgALLZJ/BLmj3EIiApCqKbwQkbUg9 jr0d2MItlljHMvRuo8jJSPXF29k5AFpxq8vct/3a7GNpxpvvCNjmRe7dk4gEvk15 WgIUzmWH0ANJIHcgz1JWoOdbSXP1g6ACJbJ/7pnxNH3ntANgRDetHe3mwG75aVsA NZfkBRf9H5TLJ3dPZrIJVYpttcCkksp1yvry6oFImaG++822LnZe+Pm3mPBQNVlx mg+rKX2uKb3XP+CBeYzmHjfQe5iAtuIsl0MpB6Rg52zl7rRGa3Pw6Fm3BcCmHDL6 rIm+wAUoAgZWrwFNE2JfLt44xkFeyI8s -----END CERTIFICATE-----Generated at Sat May 18 18:12:33 2024 by rpki-client on console-fra.rpki-client.org