$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft File: psue-0_owcTgwvGwDoTH8aL0nG8.mft (raw, json) Hash identifier: LreRXZtyJmtk0G2cLTkVFdpmQVr46uDyxNC9a59y0iI= Subject key identifier: 93:0D:4C:32:CC:CF:6B:8F:FD:6A:84:9C:23:95:EC:67:86:D2:6F:7A Authority key identifier: A6:CB:9E:FB:4F:E8:C1:C4:E0:C2:F1:B0:0E:84:C7:F1:A2:F4:9C:6F Certificate issuer: /CN=A91AEE28/serialNumber=A6CB9EFB4FE8C1C4E0C2F1B00E84C7F1A2F49C6F Certificate serial: 1409 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft Manifest number: 1400 Signing time: Tue 04 Nov 2025 17:01:15 +0000 Manifest this update: Tue 04 Nov 2025 17:01:15 +0000 Manifest next update: Tue 11 Nov 2025 17:01:15 +0000 Files and hashes: 1: psue-0_owcTgwvGwDoTH8aL0nG8.crl (hash: ZNoE6bWvQkTR7PcV01GTDCCccF7kZ5V0KpyuwyQUU5M=) 2: 7BD0C11E8C3311EAB2E95132C4F9AE02.roa (hash: SD43F6ndbx8cQg58d8qyQwvKSbxddffft/0WNF7cCQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.crl rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5129 (0x1409) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEE28, serialNumber=A6CB9EFB4FE8C1C4E0C2F1B00E84C7F1A2F49C6F Validity Not Before: Nov 4 17:01:15 2025 GMT Not After : Nov 11 17:01:15 2025 GMT Subject: CN=690a315b-1e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d6:5d:a5:2a:7f:6a:47:ba:5c:49:41:5a:05: 2e:ab:d1:60:09:06:6b:e7:90:16:43:80:3a:10:fe: e5:74:3f:46:5b:41:35:53:3c:59:7f:a8:ac:2b:c2: 3d:4d:03:ce:b0:54:56:28:19:24:8b:3b:01:38:8a: 97:10:66:7f:29:80:69:f6:88:38:93:34:dc:1d:7b: 6b:b6:43:0b:ec:c8:5b:6a:32:6e:df:63:56:db:bd: 2f:5c:40:cf:21:5d:90:44:c0:3a:70:28:37:a5:79: 57:b7:d5:5a:bc:49:ae:e5:70:1e:5e:a3:9c:9c:95: dd:08:ce:89:e2:24:1f:e2:54:aa:69:63:5e:d0:99: ad:68:2a:59:f8:2e:08:80:d7:45:8a:cd:59:58:a5: db:5f:99:23:93:65:a4:f6:80:c7:8e:cc:87:a9:80: be:a0:3c:fd:f9:7b:a5:c2:03:08:c7:b8:7b:6d:fd: f1:8f:b5:5a:f3:c9:0b:6d:aa:e6:9d:af:99:73:99: 4f:1f:5f:3a:69:e9:1b:a3:09:6f:18:14:48:cb:a0: 5f:94:e8:98:c1:bf:97:e6:7a:2b:7e:ca:ce:1d:45: 63:aa:b6:b2:b6:db:b0:84:39:47:e5:d9:88:04:33: d3:9e:20:1c:88:2d:5c:ac:3d:74:30:19:19:1f:0e: 54:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0D:4C:32:CC:CF:6B:8F:FD:6A:84:9C:23:95:EC:67:86:D2:6F:7A X509v3 Authority Key Identifier: keyid:A6:CB:9E:FB:4F:E8:C1:C4:E0:C2:F1:B0:0E:84:C7:F1:A2:F4:9C:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:9f:8d:1e:b1:0e:09:37:8b:4b:21:9b:13:75:10:55:6c:2b: a2:de:fd:3a:2f:1d:1a:63:fd:fd:8d:ab:20:dc:98:e4:40:6a: 80:09:c7:66:fc:58:67:d9:90:45:8f:2a:a8:c4:0c:45:97:9a: 1c:b1:8e:0d:d0:64:f3:69:e2:89:1e:7b:e1:9f:12:97:0b:bb: b2:83:ac:3b:4b:4d:96:8b:a9:ba:e4:d2:1f:cb:2b:d4:c2:82: 35:79:4d:18:be:8f:f9:bf:09:8c:e1:19:fc:43:ec:5e:93:b1: 84:57:87:61:77:1c:9d:77:72:9f:c6:df:7a:8e:16:61:72:07: 51:96:53:8b:12:db:37:8f:96:8c:0b:a8:f2:10:8a:c9:1e:d6: 54:26:e4:fc:ca:55:9e:34:4f:23:6d:43:97:1a:cd:5d:38:a5: 91:a3:81:6f:ce:5f:33:88:5f:fc:d4:af:59:1e:76:98:de:5e: fb:6e:78:93:11:b5:d6:5c:b0:d5:ea:67:77:b4:a4:21:f3:a0: 02:14:7d:24:66:31:d4:6c:b2:b9:77:e7:fb:70:fc:dd:54:d1: a4:d8:7d:9d:0f:f0:53:78:df:89:e4:ec:a2:b5:0c:fd:e0:62: 27:e9:87:82:c0:28:e3:0f:ce:38:50:32:d9:5f:23:48:3e:37: 5b:96:44:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVFMjgxMTAvBgNVBAUTKEE2Q0I5RUZCNEZFOEMxQzRFMEMyRjFCMDBFODRDN0Yx QTJGNDlDNkYwHhcNMjUxMTA0MTcwMTE1WhcNMjUxMTExMTcwMTE1WjAYMRYwFAYD VQQDEw02OTBhMzE1Yi0xZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5NZdpSp/ake6XElBWgUuq9FgCQZr55AWQ4A6EP7ldD9GW0E1UzxZf6isK8I9 TQPOsFRWKBkkizsBOIqXEGZ/KYBp9og4kzTcHXtrtkML7MhbajJu32NW270vXEDP IV2QRMA6cCg3pXlXt9VavEmu5XAeXqOcnJXdCM6J4iQf4lSqaWNe0JmtaCpZ+C4I gNdFis1ZWKXbX5kjk2Wk9oDHjsyHqYC+oDz9+XulwgMIx7h7bf3xj7Va88kLbarm na+Zc5lPH186aekbowlvGBRIy6BflOiYwb+X5norfsrOHUVjqrayttuwhDlH5dmI BDPTniAciC1crD10MBkZHw5U/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMNTDLM z2uP/WqEnCOV7GeG0m96MB8GA1UdIwQYMBaAFKbLnvtP6MHE4MLxsA6Ex/Gi9Jxv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUUyOC9GMUIxRkJCMDkw QzExMUU4QTQ5MzM5N0ZDNEY5QUUwMi9wc3VlLTBfb3djVGd3dkd3RG9USDhhTDBu RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BzdWUtMF9vd2NUZ3d2R3dEb1RIOGFMMG5HOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUUyOC9GMUIxRkJCMDkwQzExMUU4QTQ5MzM5N0ZDNEY5QUUwMi9wc3VlLTBfb3dj VGd3dkd3RG9USDhhTDBuRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsn40esQ4JN4tLIZsTdRBVbCui3v06Lx0aY/39jasg3JjkQGqACcdm /Fhn2ZBFjyqoxAxFl5ocsY4N0GTzaeKJHnvhnxKXC7uyg6w7S02Wi6m65NIfyyvU woI1eU0Yvo/5vwmM4Rn8Q+xek7GEV4dhdxydd3Kfxt96jhZhcgdRllOLEts3j5aM C6jyEIrJHtZUJuT8ylWeNE8jbUOXGs1dOKWRo4Fvzl8ziF/81K9ZHnaY3l77bniT EbXWXLDV6md3tKQh86ACFH0kZjHUbLK5d+f7cPzdVNGk2H2dD/BTeN+J5OyitQz9 4GIn6YeCwCjjD844UDLZXyNIPjdblkR3 -----END CERTIFICATE-----Generated at Wed Nov 5 23:05:44 2025 by rpki-client