$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft File: psue-0_owcTgwvGwDoTH8aL0nG8.mft (raw, json) Hash identifier: tTrnUKmGQKsggm8tbQJ2jytm9I8zv6cgoFaLUJeixwc= Subject key identifier: D8:57:68:01:CF:A8:80:27:9D:37:78:28:2B:C4:53:81:F4:E5:36:BA Authority key identifier: A6:CB:9E:FB:4F:E8:C1:C4:E0:C2:F1:B0:0E:84:C7:F1:A2:F4:9C:6F Certificate issuer: /CN=A91AEE28/serialNumber=A6CB9EFB4FE8C1C4E0C2F1B00E84C7F1A2F49C6F Certificate serial: 13F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft Manifest number: 13E8 Signing time: Thu 18 Sep 2025 17:04:01 +0000 Manifest this update: Thu 18 Sep 2025 17:04:01 +0000 Manifest next update: Thu 25 Sep 2025 17:04:01 +0000 Files and hashes: 1: psue-0_owcTgwvGwDoTH8aL0nG8.crl (hash: 8TjLbnsbAwlBh1nDhA6s2ZtCM3hUJCRGW8EMikQFXgs=) 2: 7BD0C11E8C3311EAB2E95132C4F9AE02.roa (hash: SD43F6ndbx8cQg58d8qyQwvKSbxddffft/0WNF7cCQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.crl rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5105 (0x13f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEE28, serialNumber=A6CB9EFB4FE8C1C4E0C2F1B00E84C7F1A2F49C6F Validity Not Before: Sep 18 17:04:01 2025 GMT Not After : Sep 25 17:04:01 2025 GMT Subject: CN=68cc3b81-ede6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:78:9f:fe:d5:bf:f3:b7:4f:23:e8:6a:c8:93: 9b:52:23:39:b9:15:6f:b2:d5:0b:9a:2c:d7:87:5b: 95:db:e8:9d:76:40:c9:84:d8:f2:5a:53:3e:5c:67: 5d:42:7e:b3:f2:fe:65:62:14:ce:48:89:d1:1e:70: 4b:d0:c0:b3:da:54:dc:2e:7a:53:34:0b:24:de:c9: 3e:c3:e5:f8:eb:d0:dd:9c:96:d9:46:13:69:e6:17: 39:76:f5:b3:53:75:13:b3:77:b5:01:3a:38:42:da: d6:dd:c2:60:47:95:3f:93:ac:cc:fc:eb:04:f5:76: ca:b4:ba:f8:6b:c8:6c:ca:28:69:a8:b9:87:16:0e: 58:14:e5:af:94:a1:30:6b:36:01:eb:e6:13:5c:f0: a7:a1:16:50:0d:b3:9d:79:c4:92:42:c7:cd:3d:c4: a6:85:4b:08:a5:2b:40:96:5a:77:4a:14:38:3a:52: f0:57:34:0d:cd:7c:d4:7a:a9:63:e9:9b:91:4c:3b: 4c:85:5f:c7:46:37:67:73:1f:2b:2e:46:cf:a1:48: 0c:80:b3:30:5a:90:84:93:f0:ac:9d:93:5e:5a:bb: 36:cd:e1:c3:b3:2c:f1:dd:aa:ad:72:b7:95:6d:82: d0:8b:cf:f0:13:71:03:48:81:8a:33:ef:42:ef:65: ef:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:57:68:01:CF:A8:80:27:9D:37:78:28:2B:C4:53:81:F4:E5:36:BA X509v3 Authority Key Identifier: keyid:A6:CB:9E:FB:4F:E8:C1:C4:E0:C2:F1:B0:0E:84:C7:F1:A2:F4:9C:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:11:cc:74:e4:31:22:57:7e:bb:2a:84:3c:e5:df:9d:43:0c: ec:14:37:f7:12:50:ce:3a:8b:09:d4:69:be:23:4a:4f:89:27: e9:f3:ea:f5:4c:01:7f:f4:15:f6:d4:72:26:a9:86:b1:bc:48: 46:33:f6:1c:00:56:57:9b:95:b8:26:ea:53:98:79:b6:60:28: 2f:3e:4b:c2:e8:67:be:60:dd:94:2d:0d:6c:c6:98:9b:dd:aa: 20:87:4a:d1:78:c1:55:2d:ed:43:12:70:07:c4:dd:c9:96:22: b5:17:15:07:57:12:1a:9f:8d:65:e1:e7:99:6e:dd:f9:ca:7a: 1f:ba:c5:ab:97:c8:ef:bd:8f:09:9c:e6:0e:32:a6:cc:44:5c: 78:b9:e4:ff:ed:79:23:c3:d8:48:94:82:a0:d5:8c:6b:41:ac: e3:ec:04:69:44:00:d1:55:ec:a2:89:c5:47:74:84:a4:de:a4: 3e:9c:de:42:84:d3:8e:e3:f6:f1:51:a2:a0:ab:3a:79:25:dd: 77:f4:59:0e:34:b0:3f:b4:19:86:d0:a7:23:7c:8e:d5:ef:62: e7:3d:d7:c6:46:92:9f:bc:bd:84:fd:c5:18:c8:7b:8c:8d:b9: 1f:52:1b:14:81:76:80:fa:3f:86:aa:0f:d1:c0:b4:26:a3:96: 6f:86:e1:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVFMjgxMTAvBgNVBAUTKEE2Q0I5RUZCNEZFOEMxQzRFMEMyRjFCMDBFODRDN0Yx QTJGNDlDNkYwHhcNMjUwOTE4MTcwNDAxWhcNMjUwOTI1MTcwNDAxWjAYMRYwFAYD VQQDEw02OGNjM2I4MS1lZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXif/tW/87dPI+hqyJObUiM5uRVvstULmizXh1uV2+iddkDJhNjyWlM+XGdd Qn6z8v5lYhTOSInRHnBL0MCz2lTcLnpTNAsk3sk+w+X469DdnJbZRhNp5hc5dvWz U3UTs3e1ATo4QtrW3cJgR5U/k6zM/OsE9XbKtLr4a8hsyihpqLmHFg5YFOWvlKEw azYB6+YTXPCnoRZQDbOdecSSQsfNPcSmhUsIpStAllp3ShQ4OlLwVzQNzXzUeqlj 6ZuRTDtMhV/HRjdncx8rLkbPoUgMgLMwWpCEk/CsnZNeWrs2zeHDsyzx3aqtcreV bYLQi8/wE3EDSIGKM+9C72XvuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhXaAHP qIAnnTd4KCvEU4H05Ta6MB8GA1UdIwQYMBaAFKbLnvtP6MHE4MLxsA6Ex/Gi9Jxv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUUyOC9GMUIxRkJCMDkw QzExMUU4QTQ5MzM5N0ZDNEY5QUUwMi9wc3VlLTBfb3djVGd3dkd3RG9USDhhTDBu RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BzdWUtMF9vd2NUZ3d2R3dEb1RIOGFMMG5HOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUUyOC9GMUIxRkJCMDkwQzExMUU4QTQ5MzM5N0ZDNEY5QUUwMi9wc3VlLTBfb3dj VGd3dkd3RG9USDhhTDBuRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwEcx05DEiV367KoQ85d+dQwzsFDf3ElDOOosJ1Gm+I0pPiSfp8+r1 TAF/9BX21HImqYaxvEhGM/YcAFZXm5W4JupTmHm2YCgvPkvC6Ge+YN2ULQ1sxpib 3aogh0rReMFVLe1DEnAHxN3JliK1FxUHVxIan41l4eeZbt35ynofusWrl8jvvY8J nOYOMqbMRFx4ueT/7Xkjw9hIlIKg1YxrQazj7ARpRADRVeyiicVHdISk3qQ+nN5C hNOO4/bxUaKgqzp5Jd139FkONLA/tBmG0KcjfI7V72LnPdfGRpKfvL2E/cUYyHuM jbkfUhsUgXaA+j+Gqg/RwLQmo5ZvhuF0 -----END CERTIFICATE-----Generated at Fri Sep 19 04:02:55 2025 by rpki-client