$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft File: bsuJSMsSdC3GH2RUECvzGsaoT9U.mft (raw, json) Hash identifier: NsnNdM4QwtNmm/Sf7iGx122RpOh0xfusBTORlw7MWd0= Subject key identifier: FB:FF:1C:5F:AB:96:9F:3F:4E:4F:F8:17:6E:02:FB:97:8E:67:D5:04 Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 Certificate issuer: /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Certificate serial: 1B7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft Manifest number: 1B74 Signing time: Tue 04 Nov 2025 16:21:50 +0000 Manifest this update: Tue 04 Nov 2025 16:21:49 +0000 Manifest next update: Tue 11 Nov 2025 16:21:49 +0000 Files and hashes: 1: bsuJSMsSdC3GH2RUECvzGsaoT9U.crl (hash: qw0cFAWrvArmoz7RCizUwWHyqETlR1c0I7p+OW8jZRE=) 2: DCDCF87AE17511E8886B1878C4F9AE02.roa (hash: IqZZVcS21ii5zkxWPYMuKQR1NOi0O+Hj+XB33t8u/K8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7036 (0x1b7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B14, serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Validity Not Before: Nov 4 16:21:49 2025 GMT Not After : Nov 11 16:21:49 2025 GMT Subject: CN=690a281d-1cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:72:b3:30:b6:bf:f3:a6:db:66:f4:8c:a9:03: 13:c6:9c:f0:4c:c4:af:cc:34:18:77:76:07:9b:27: cd:5a:f4:b7:7f:10:34:49:15:73:4f:88:e6:7c:a0: b6:16:5e:77:6d:53:19:73:e7:32:e6:c7:de:5e:c6: cb:48:b5:6b:14:bf:20:06:ce:d4:23:14:56:83:07: e7:7d:65:f8:5a:f6:6a:1d:79:ba:f5:68:ab:26:19: 55:36:14:78:87:8c:b7:c9:96:bc:57:ba:07:87:99: ca:13:3b:6f:18:9e:c3:c2:9b:8b:e2:0c:5d:c9:8b: 18:bd:a1:0d:21:fc:77:9f:63:37:fd:96:4d:5c:f9: 82:a6:b6:96:19:d4:de:c4:8f:5c:38:fa:a6:c7:04: 07:09:04:4f:fa:62:24:21:56:a6:b2:b2:26:7e:c3: bb:a2:bf:4f:e0:51:65:bb:7a:1f:a5:92:b1:b1:14: d6:2b:d8:a7:44:70:ed:2a:96:a7:4c:15:e2:8f:59: be:e5:02:1c:fb:87:1e:b4:0a:86:3c:c4:f5:f8:22: 9c:e4:9c:3f:80:a2:73:a7:b3:17:f5:ed:5e:72:ee: 9f:e4:1f:ef:ae:44:b7:6e:6c:67:26:36:d5:3e:94: 8e:d3:b8:38:d8:89:48:95:b0:1c:7d:e7:2b:ba:47: 9f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FF:1C:5F:AB:96:9F:3F:4E:4F:F8:17:6E:02:FB:97:8E:67:D5:04 X509v3 Authority Key Identifier: keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:61:3c:e2:c9:3b:a9:27:ff:41:93:15:1e:ab:27:2d:17:e3: 34:2b:e4:23:c8:57:4a:a9:c0:08:4a:d5:91:2d:43:3f:6a:8e: 90:0d:41:94:ce:33:7f:c6:51:25:f1:6b:48:86:23:36:96:24: 68:e9:4c:5f:9a:a7:47:ea:62:75:64:07:35:46:3c:30:1b:f4: ba:0a:fa:38:ec:e4:5b:7d:c8:ca:ab:62:64:88:23:0b:91:31: fd:60:5d:a7:33:53:5f:b1:ed:28:ff:bf:25:2f:c8:c0:86:e3: 74:f5:6d:c6:8a:34:e2:56:20:5c:82:0d:05:ea:15:48:36:18: f9:35:71:1e:06:91:b6:76:a7:b7:7c:13:de:9b:e4:67:45:d2: 4f:3d:a0:ad:7c:3b:e0:fd:12:7f:c2:4e:97:4c:1b:11:fb:1e: 36:e7:00:f7:6f:bd:c1:65:45:0c:ed:ce:d5:15:11:2d:63:86: 52:a1:c7:49:a0:24:1a:9b:62:22:cd:97:ce:5b:31:cc:e0:5e: d9:88:61:26:a3:ba:2e:d8:6a:89:c5:ee:5c:be:9f:5c:aa:f4: 7c:79:60:f4:8b:ca:6d:ef:fe:68:33:56:d8:4e:71:3e:95:71: 66:c9:08:83:4c:52:69:81:e6:a3:e3:5a:ed:2a:b2:57:d2:11: a5:b2:61:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMTQxMTAvBgNVBAUTKDZFQ0I4OTQ4Q0IxMjc0MkRDNjFGNjQ1NDEwMkJGMzFB QzZBODRGRDUwHhcNMjUxMTA0MTYyMTQ5WhcNMjUxMTExMTYyMTQ5WjAYMRYwFAYD VQQDEw02OTBhMjgxZC0xY2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3KzMLa/86bbZvSMqQMTxpzwTMSvzDQYd3YHmyfNWvS3fxA0SRVzT4jmfKC2 Fl53bVMZc+cy5sfeXsbLSLVrFL8gBs7UIxRWgwfnfWX4WvZqHXm69WirJhlVNhR4 h4y3yZa8V7oHh5nKEztvGJ7DwpuL4gxdyYsYvaENIfx3n2M3/ZZNXPmCpraWGdTe xI9cOPqmxwQHCQRP+mIkIVamsrImfsO7or9P4FFlu3ofpZKxsRTWK9inRHDtKpan TBXij1m+5QIc+4cetAqGPMT1+CKc5Jw/gKJzp7MX9e1ecu6f5B/vrkS3bmxnJjbV PpSO07g42IlIlbAcfecrukef8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPv/HF+r lp8/Tk/4F24C+5eOZ9UEMB8GA1UdIwQYMBaAFG7LiUjLEnQtxh9kVBAr8xrGqE/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIxNC9CNDFBNTgzODE4 RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RDM0dIMlJVRUN2ekdzYW9U OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JzdUpTTXNTZEMzR0gyUlVFQ3Z6R3Nhb1Q5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIxNC9CNDFBNTgzODE4RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RD M0dIMlJVRUN2ekdzYW9UOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjYTziyTupJ/9BkxUeqyctF+M0K+QjyFdKqcAIStWRLUM/ao6QDUGU zjN/xlEl8WtIhiM2liRo6UxfmqdH6mJ1ZAc1RjwwG/S6Cvo47ORbfcjKq2JkiCML kTH9YF2nM1Nfse0o/78lL8jAhuN09W3GijTiViBcgg0F6hVINhj5NXEeBpG2dqe3 fBPem+RnRdJPPaCtfDvg/RJ/wk6XTBsR+x425wD3b73BZUUM7c7VFREtY4ZSocdJ oCQam2IizZfOWzHM4F7ZiGEmo7ou2GqJxe5cvp9cqvR8eWD0i8pt7/5oM1bYTnE+ lXFmyQiDTFJpgeaj41rtKrJX0hGlsmEQ -----END CERTIFICATE-----Generated at Wed Nov 5 09:19:34 2025 by rpki-client