$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft File: bsuJSMsSdC3GH2RUECvzGsaoT9U.mft (raw, json) Hash identifier: jruPwK9mov11KoSDNtaKsWiRHRWXPOcTmemSp8T4RME= Subject key identifier: A9:62:44:57:D8:EC:35:91:89:83:CC:36:8A:0B:7F:CC:C7:33:7B:C7 Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 Certificate issuer: /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Certificate serial: 1B4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft Manifest number: 1B45 Signing time: Mon 04 Aug 2025 16:26:09 +0000 Manifest this update: Mon 04 Aug 2025 16:26:08 +0000 Manifest next update: Mon 11 Aug 2025 16:26:08 +0000 Files and hashes: 1: bsuJSMsSdC3GH2RUECvzGsaoT9U.crl (hash: ZIawTZ12lwY8naTs8+fC48uDUkVi7nu8uPG1IJWAdOI=) 2: DCDCF87AE17511E8886B1878C4F9AE02.roa (hash: IqZZVcS21ii5zkxWPYMuKQR1NOi0O+Hj+XB33t8u/K8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 16:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6989 (0x1b4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B14, serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Validity Not Before: Aug 4 16:26:08 2025 GMT Not After : Aug 11 16:26:08 2025 GMT Subject: CN=6890df20-ef16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:73:15:da:bc:6d:af:a5:29:2b:3d:90:21:0a: dd:0e:a9:78:bf:4e:39:eb:d6:f5:e8:bb:23:05:47: 6e:7d:53:80:03:f7:1b:5f:0b:d0:a8:77:ca:12:93: 63:d2:c5:86:2f:af:69:02:e2:79:7d:b1:5b:9f:dd: 07:80:ff:25:3f:71:4c:20:9d:05:e8:dc:98:c0:94: 76:90:52:02:bb:31:62:5d:3e:a0:e5:d7:54:06:fb: a5:d3:d1:56:64:bf:32:99:4a:9c:fd:cf:72:d6:01: dd:cb:9a:01:4e:ff:6d:56:37:f2:2d:08:a6:43:4f: 0f:d2:1c:da:5a:4b:75:86:23:40:6a:31:c1:93:d0: 22:04:9c:55:2e:6c:44:f2:98:8e:5f:2d:0f:20:94: 3d:6e:45:a6:c3:ef:db:92:d1:18:1b:ce:c1:42:94: cc:47:2d:13:ac:74:f4:11:4c:5c:ac:08:c5:1d:43: 27:3a:fd:3b:84:79:c4:ed:49:bd:e9:8a:97:4f:d0: 01:0a:48:75:51:b9:2f:3e:3f:52:6d:c7:db:9a:6c: 38:d8:d6:a8:f2:1e:8e:f2:f1:c1:cc:a3:c9:64:d2: 80:c8:b9:ad:c8:e4:8b:0f:e5:ff:d8:ab:4a:77:da: bd:ec:e6:35:cb:a6:35:8d:73:6e:05:24:dc:95:94: ad:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:62:44:57:D8:EC:35:91:89:83:CC:36:8A:0B:7F:CC:C7:33:7B:C7 X509v3 Authority Key Identifier: keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:4f:b3:68:73:01:28:65:4c:88:d2:ce:42:89:59:cc:46:42: 57:a6:9f:87:d4:3e:a7:67:39:cc:a4:17:77:42:5f:df:ea:ac: 8e:5b:93:76:f3:b0:6e:93:48:68:a0:df:d2:48:de:80:ef:9d: 22:0a:97:f6:fd:90:3e:23:98:8b:0d:76:6a:59:aa:fe:04:c4: b7:f4:34:b0:03:4c:fc:56:bf:7f:2c:42:18:32:3e:50:62:6a: d4:66:a1:b1:4e:86:34:40:09:57:60:07:0f:21:25:c2:f5:9f: 77:9b:00:ae:e4:18:d1:50:1e:d2:87:ea:d4:7e:4e:33:3e:3b: c9:1f:7e:f1:aa:a2:71:0d:1f:d8:bf:ab:f4:30:2d:cb:9a:96: d4:62:6d:b5:2f:db:31:7a:c9:69:d3:7b:77:d7:dd:f0:b1:39: a2:75:e8:62:48:76:12:97:15:ca:10:e7:cb:9a:f6:1c:93:21: f6:d5:3a:33:f4:ce:93:ee:1f:7b:0d:76:bb:08:bc:73:a1:e3: 88:4b:18:57:70:22:4e:3d:fb:ef:0a:ce:1a:a7:cf:f0:04:4c: 54:5b:60:57:28:1c:c8:95:c6:81:fe:ef:ac:46:62:88:f7:79: f4:9d:06:5c:7e:93:52:29:57:56:e0:af:59:2a:57:df:e3:82: 4b:99:4c:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMTQxMTAvBgNVBAUTKDZFQ0I4OTQ4Q0IxMjc0MkRDNjFGNjQ1NDEwMkJGMzFB QzZBODRGRDUwHhcNMjUwODA0MTYyNjA4WhcNMjUwODExMTYyNjA4WjAYMRYwFAYD VQQDEw02ODkwZGYyMC1lZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynMV2rxtr6UpKz2QIQrdDql4v04569b16LsjBUdufVOAA/cbXwvQqHfKEpNj 0sWGL69pAuJ5fbFbn90HgP8lP3FMIJ0F6NyYwJR2kFICuzFiXT6g5ddUBvul09FW ZL8ymUqc/c9y1gHdy5oBTv9tVjfyLQimQ08P0hzaWkt1hiNAajHBk9AiBJxVLmxE 8piOXy0PIJQ9bkWmw+/bktEYG87BQpTMRy0TrHT0EUxcrAjFHUMnOv07hHnE7Um9 6YqXT9ABCkh1UbkvPj9Sbcfbmmw42Nao8h6O8vHBzKPJZNKAyLmtyOSLD+X/2KtK d9q97OY1y6Y1jXNuBSTclZSt7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKliRFfY 7DWRiYPMNooLf8zHM3vHMB8GA1UdIwQYMBaAFG7LiUjLEnQtxh9kVBAr8xrGqE/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIxNC9CNDFBNTgzODE4 RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RDM0dIMlJVRUN2ekdzYW9U OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JzdUpTTXNTZEMzR0gyUlVFQ3Z6R3Nhb1Q5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIxNC9CNDFBNTgzODE4RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RD M0dIMlJVRUN2ekdzYW9UOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsT7NocwEoZUyI0s5CiVnMRkJXpp+H1D6nZznMpBd3Ql/f6qyOW5N2 87Buk0hooN/SSN6A750iCpf2/ZA+I5iLDXZqWar+BMS39DSwA0z8Vr9/LEIYMj5Q YmrUZqGxToY0QAlXYAcPISXC9Z93mwCu5BjRUB7Sh+rUfk4zPjvJH37xqqJxDR/Y v6v0MC3LmpbUYm21L9sxeslp03t3193wsTmidehiSHYSlxXKEOfLmvYckyH21Toz 9M6T7h97DXa7CLxzoeOISxhXcCJOPfvvCs4ap8/wBExUW2BXKBzIlcaB/u+sRmKI 93n0nQZcfpNSKVdW4K9ZKlff44JLmUwL -----END CERTIFICATE-----Generated at Wed Aug 6 10:17:48 2025 by rpki-client