$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft File: bsuJSMsSdC3GH2RUECvzGsaoT9U.mft (raw, json) Hash identifier: eQbEbw3UhTIOgH40ePTTbDR0uUHdD9KJMa3AYgXSscQ= Subject key identifier: D5:D8:58:D5:F3:E0:0A:3C:94:93:AC:85:4E:D6:EE:BB:26:5D:6F:FF Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 Certificate issuer: /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Certificate serial: 1B30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft Manifest number: 1B29 Signing time: Sat 14 Jun 2025 16:14:59 +0000 Manifest this update: Sat 14 Jun 2025 16:14:59 +0000 Manifest next update: Sat 21 Jun 2025 16:14:59 +0000 Files and hashes: 1: bsuJSMsSdC3GH2RUECvzGsaoT9U.crl (hash: ts3vZuCOWE7MV/j+sDgaYA6wJZBrZYkpzuAO44GbwPw=) 2: DCDCF87AE17511E8886B1878C4F9AE02.roa (hash: KsLGHi4+kHYjw5B+CT+5OlCyjuOYeOPXd/7bbATaIPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6960 (0x1b30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B14, serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Validity Not Before: Jun 14 16:14:59 2025 GMT Not After : Jun 21 16:14:59 2025 GMT Subject: CN=684da003-4dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a7:17:bb:c4:65:2f:4f:53:61:50:6c:e6:4a: 6b:80:6c:a3:bb:df:34:12:ec:a8:ad:f8:25:77:77: 76:5e:46:00:01:a1:3e:e6:5c:21:a6:42:75:6a:90: f3:0a:9f:c4:d2:40:61:1e:15:39:d5:31:25:8a:04: ef:d8:56:e6:d6:87:a4:72:c9:99:e5:1b:93:a7:97: 7a:9c:ec:ec:2f:f1:2f:e8:ff:25:5c:4a:d9:72:00: 7a:b8:04:db:9c:c6:0b:bb:f5:63:9f:88:ed:34:27: df:d3:b1:a4:08:d9:fe:0c:2e:40:6d:9c:e8:bb:e7: d3:e1:2b:87:bb:81:3e:3a:6c:a4:19:53:b2:f6:a8: c8:49:af:e1:7b:3a:89:4c:33:3e:8a:7f:65:f7:17: a2:be:ba:24:7d:47:5e:fc:79:d2:d3:ec:30:be:df: 04:a4:b9:dc:1d:02:5e:73:06:46:7a:19:40:fa:5b: 52:61:af:b2:53:03:58:a8:a9:95:ea:81:a9:1f:74: c6:93:a6:51:26:aa:d4:69:8c:1a:f0:4c:cc:4e:d0: 11:d1:6d:df:99:71:cb:9f:c5:84:7a:ee:53:1d:73: 91:6c:81:63:ca:c3:4f:74:23:34:44:c0:68:ba:53: d1:58:0a:29:65:5b:4a:78:fe:d6:10:e0:c3:1f:d1: ed:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D8:58:D5:F3:E0:0A:3C:94:93:AC:85:4E:D6:EE:BB:26:5D:6F:FF X509v3 Authority Key Identifier: keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:be:be:38:81:c2:c7:a2:4d:cb:53:22:43:3b:71:5c:54:29: 2b:3b:20:65:0e:6e:d0:78:67:56:91:a1:c3:1c:fb:ee:ce:4c: d1:a5:28:3c:15:13:72:56:37:93:ac:69:78:2a:11:25:fc:61: 63:f1:32:cc:c0:6c:af:f6:65:00:6f:1c:f3:95:30:dd:9a:74: 24:d2:8a:89:3c:0e:75:f3:cb:30:51:21:64:81:99:30:4d:af: d4:1c:84:f7:5a:35:73:fe:f4:8d:dc:06:ec:63:61:1c:69:02: 59:a2:53:66:02:b6:f4:ba:92:dc:d2:29:b2:df:77:f1:27:ee: a3:90:99:9d:95:4b:63:e5:f3:e7:25:a1:a1:be:ca:8e:10:0d: 20:d8:6f:f4:6e:e3:87:17:5a:4b:14:0c:43:52:71:79:3c:63: 0f:a6:07:d1:04:ca:b4:7e:5a:7f:d5:53:a0:c0:7b:1e:2d:48: 5f:58:84:67:ae:b5:dc:a1:ce:aa:79:90:b8:08:54:15:7a:d1: b6:5a:3c:f9:7a:51:3e:a9:67:97:22:37:29:7e:2d:96:3a:55: 53:9e:1c:7f:1a:85:15:35:c8:99:40:1d:93:9a:0b:e9:ad:5d: 8e:0d:f4:72:95:38:8f:61:75:1a:c9:4f:d8:08:d6:00:ef:dc: 61:ae:06:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMTQxMTAvBgNVBAUTKDZFQ0I4OTQ4Q0IxMjc0MkRDNjFGNjQ1NDEwMkJGMzFB QzZBODRGRDUwHhcNMjUwNjE0MTYxNDU5WhcNMjUwNjIxMTYxNDU5WjAYMRYwFAYD VQQDEw02ODRkYTAwMy00ZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6cXu8RlL09TYVBs5kprgGyju980Euyorfgld3d2XkYAAaE+5lwhpkJ1apDz Cp/E0kBhHhU51TEligTv2Fbm1oekcsmZ5RuTp5d6nOzsL/Ev6P8lXErZcgB6uATb nMYLu/Vjn4jtNCff07GkCNn+DC5AbZzou+fT4SuHu4E+OmykGVOy9qjISa/hezqJ TDM+in9l9xeivrokfUde/HnS0+wwvt8EpLncHQJecwZGehlA+ltSYa+yUwNYqKmV 6oGpH3TGk6ZRJqrUaYwa8EzMTtAR0W3fmXHLn8WEeu5THXORbIFjysNPdCM0RMBo ulPRWAopZVtKeP7WEODDH9HtgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXYWNXz 4Ao8lJOshU7W7rsmXW//MB8GA1UdIwQYMBaAFG7LiUjLEnQtxh9kVBAr8xrGqE/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIxNC9CNDFBNTgzODE4 RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RDM0dIMlJVRUN2ekdzYW9U OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JzdUpTTXNTZEMzR0gyUlVFQ3Z6R3Nhb1Q5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIxNC9CNDFBNTgzODE4RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RD M0dIMlJVRUN2ekdzYW9UOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3vr44gcLHok3LUyJDO3FcVCkrOyBlDm7QeGdWkaHDHPvuzkzRpSg8 FRNyVjeTrGl4KhEl/GFj8TLMwGyv9mUAbxzzlTDdmnQk0oqJPA5188swUSFkgZkw Ta/UHIT3WjVz/vSN3AbsY2EcaQJZolNmArb0upLc0imy33fxJ+6jkJmdlUtj5fPn JaGhvsqOEA0g2G/0buOHF1pLFAxDUnF5PGMPpgfRBMq0flp/1VOgwHseLUhfWIRn rrXcoc6qeZC4CFQVetG2Wjz5elE+qWeXIjcpfi2WOlVTnhx/GoUVNciZQB2Tmgvp rV2ODfRylTiPYXUayU/YCNYA79xhrgbP -----END CERTIFICATE-----Generated at Sat Jun 14 18:48:07 2025 by rpki-client