$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft File: bsuJSMsSdC3GH2RUECvzGsaoT9U.mft (raw, json) Hash identifier: np8PS83FUj9J/OGF7KrUncosY801y6w/wxbcKpJgNIk= Subject key identifier: D0:5A:35:60:1F:D8:BE:EB:48:95:E5:39:08:9B:FE:B7:76:C9:F9:04 Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 Certificate issuer: /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Certificate serial: 1BD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft Manifest number: 1BCA Signing time: Thu 16 Apr 2026 16:11:25 +0000 Manifest this update: Thu 16 Apr 2026 16:11:25 +0000 Manifest next update: Thu 23 Apr 2026 16:11:25 +0000 Files and hashes: 1: bsuJSMsSdC3GH2RUECvzGsaoT9U.crl (hash: B+DYT1ouV4VExaAg2PtsCZgl9j6G7ph1ix5xkvoogYU=) 2: DCDCF87AE17511E8886B1878C4F9AE02.roa (hash: Beu7VbTQzdwJMvqmpcL7L0qoIs02xDsFIrO4v53qnZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7123 (0x1bd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B14, serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Validity Not Before: Apr 16 16:11:25 2026 GMT Not After : Apr 23 16:11:25 2026 GMT Subject: CN=69e10a2d-653c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:07:a2:1d:5e:cf:e1:04:fc:5e:08:46:c4:86: 79:5d:57:51:ce:ed:49:5f:56:9a:75:24:a4:c6:45: 41:b8:d6:11:92:d0:f4:9e:a3:55:be:a3:7f:7d:41: b0:49:af:78:b6:27:21:bb:c9:69:68:82:ac:d8:d9: 37:13:63:e7:10:a8:bb:72:67:71:7d:04:5b:45:d2: 6c:41:fc:65:78:a8:83:43:0c:c8:94:1e:4d:10:78: 27:3f:01:ee:d6:a6:e2:3e:d2:4e:43:03:2e:30:44: 43:6f:df:96:77:68:10:5b:8d:ee:12:cb:da:fa:3a: 5d:01:2f:3d:99:9d:4c:0d:c9:cf:3b:21:01:c3:a0: 21:64:2e:39:ee:8f:3c:5b:91:6d:b0:eb:fd:93:75: 9d:41:44:80:e6:e3:1f:c2:1a:77:4c:f7:15:b9:bf: 07:2c:90:95:26:9d:43:e2:0c:2c:cf:d7:9d:b4:89: e0:0b:37:58:6e:72:46:a5:da:f2:1f:8f:d5:74:60: aa:10:93:79:3b:2d:2d:32:f8:42:7b:45:dc:58:2c: bb:c5:87:20:1b:0a:7f:42:2b:86:7f:61:7f:f3:74: b3:b2:16:01:65:a9:92:55:3a:c3:d0:8a:3f:30:c5: c7:e3:5d:21:ed:35:5f:65:63:5a:7f:69:9c:17:8f: 99:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5A:35:60:1F:D8:BE:EB:48:95:E5:39:08:9B:FE:B7:76:C9:F9:04 X509v3 Authority Key Identifier: keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:dc:66:c2:58:21:89:39:e3:46:2d:8a:c0:93:c2:b0:9d:97: fb:92:da:59:6e:3f:b3:d4:c0:9c:64:4f:57:59:1e:c7:12:e1: 11:14:8f:4c:70:ce:df:86:a7:9c:e7:5c:a6:3a:97:eb:9d:6d: ba:bf:84:57:ec:b6:6d:e3:0b:68:3d:72:ec:45:1d:fb:d0:e1: 67:c6:b0:2c:f0:e0:35:70:7e:ae:2f:de:6b:8e:e0:ec:7b:dd: ab:4e:ef:4f:73:81:fe:2f:e4:2f:34:c9:af:a4:bb:0d:b5:35: 3a:1a:ce:44:f9:6d:ff:39:3c:b7:87:9b:54:01:f5:d5:95:f0: 0d:72:ba:8e:cc:67:29:c7:e9:ce:fb:ac:3b:75:84:d2:3b:0e: fe:aa:2d:09:bb:8f:35:64:6c:81:08:9b:60:7d:00:1b:7a:07: ab:e4:e9:78:a7:40:e3:8c:7f:df:86:46:2c:58:ae:18:c3:63: b2:05:ef:45:c0:bd:ed:62:c0:61:d0:0c:c2:6f:98:be:92:e2: c1:96:e5:da:a6:ef:f2:a2:29:9e:d6:01:9b:05:78:3a:3b:4e: 7a:03:af:a3:e3:6c:e7:88:5f:0c:fa:84:13:da:4a:fd:14:bf: b5:2c:5e:d1:c5:28:0e:c3:9e:ff:b8:91:6d:4c:fb:39:a4:73: 3f:1e:02:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMTQxMTAvBgNVBAUTKDZFQ0I4OTQ4Q0IxMjc0MkRDNjFGNjQ1NDEwMkJGMzFB QzZBODRGRDUwHhcNMjYwNDE2MTYxMTI1WhcNMjYwNDIzMTYxMTI1WjAYMRYwFAYD VQQDEw02OWUxMGEyZC02NTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArweiHV7P4QT8XghGxIZ5XVdRzu1JX1aadSSkxkVBuNYRktD0nqNVvqN/fUGw Sa94tichu8lpaIKs2Nk3E2PnEKi7cmdxfQRbRdJsQfxleKiDQwzIlB5NEHgnPwHu 1qbiPtJOQwMuMERDb9+Wd2gQW43uEsva+jpdAS89mZ1MDcnPOyEBw6AhZC457o88 W5FtsOv9k3WdQUSA5uMfwhp3TPcVub8HLJCVJp1D4gwsz9edtIngCzdYbnJGpdry H4/VdGCqEJN5Oy0tMvhCe0XcWCy7xYcgGwp/QiuGf2F/83SzshYBZamSVTrD0Io/ MMXH410h7TVfZWNaf2mcF4+ZBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNBaNWAf 2L7rSJXlOQib/rd2yfkEMB8GA1UdIwQYMBaAFG7LiUjLEnQtxh9kVBAr8xrGqE/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIxNC9CNDFBNTgzODE4 RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RDM0dIMlJVRUN2ekdzYW9U OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JzdUpTTXNTZEMzR0gyUlVFQ3Z6R3Nhb1Q5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIxNC9CNDFBNTgzODE4RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RD M0dIMlJVRUN2ekdzYW9UOVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEActxmwlghiTnjRi2KwJPCsJ2X+5LaWW4/s9TAnGRPV1kexxLhERSPTHDO34an nOdcpjqX651tur+EV+y2beMLaD1y7EUd+9DhZ8awLPDgNXB+ri/ea47g7Hvdq07v T3OB/i/kLzTJr6S7DbU1OhrORPlt/zk8t4ebVAH11ZXwDXK6jsxnKcfpzvusO3WE 0jsO/qotCbuPNWRsgQibYH0AG3oHq+TpeKdA44x/34ZGLFiuGMNjsgXvRcC97WLA YdAMwm+YvpLiwZbl2qbv8qIpntYBmwV4OjtOegOvo+Ns54hfDPqEE9pK/RS/tSxe 0cUoDsOe/7iRbUz7OaRzPx4Ccw== -----END CERTIFICATE-----Generated at Fri Apr 17 07:09:25 2026 by rpki-client