
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft
File: bsuJSMsSdC3GH2RUECvzGsaoT9U.mft (raw, json)
Hash identifier: PX6Cu8alu/NJXMKrJmodzuroawfmLnrbgmckCoKy+Iw=
Subject key identifier: 95:BA:CF:DE:3E:FE:C6:B6:55:5E:4C:81:E2:C4:CB:FA:25:9D:96:11
Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5
Certificate issuer: /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5
Certificate serial: 1BB8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft
Manifest number: 1BB0
Signing time: Sat 28 Feb 2026 16:17:26 +0000
Manifest this update: Sat 28 Feb 2026 16:17:26 +0000
Manifest next update: Sat 07 Mar 2026 16:17:26 +0000
Files and hashes: 1: bsuJSMsSdC3GH2RUECvzGsaoT9U.crl (hash: RtTVOlR4eYq09J9da05QnK2fFugTsflZX/cAhv/KSR0=)
2: DCDCF87AE17511E8886B1878C4F9AE02.roa (hash: IqZZVcS21ii5zkxWPYMuKQR1NOi0O+Hj+XB33t8u/K8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl
rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7096 (0x1bb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161B14, serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5
Validity
Not Before: Feb 28 16:17:26 2026 GMT
Not After : Mar 7 16:17:26 2026 GMT
Subject: CN=69a31516-62c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:5d:93:94:25:12:15:d6:fe:e9:04:b2:b5:
cc:2c:3a:cf:e0:24:31:65:27:aa:c1:fb:52:80:2d:
6c:fd:90:d8:9e:cb:f5:8e:76:a0:52:b7:30:b1:39:
28:4a:90:41:c9:6c:65:02:dc:b4:9e:7b:74:84:89:
15:66:2d:96:74:f2:34:77:c9:e4:d9:41:82:00:a6:
85:53:1a:27:9d:f3:1e:16:b7:e9:3b:84:53:0b:e1:
f5:db:f0:b9:3b:19:41:1a:05:34:65:fb:31:15:84:
d9:f8:f4:45:71:c3:1f:20:ed:d6:37:d1:e7:ed:83:
06:c7:2e:14:c4:db:19:be:f8:62:ec:47:d2:13:89:
a0:63:93:53:97:25:cc:a1:2c:bf:36:b5:c6:3e:b3:
85:ff:81:bb:e7:99:e3:6c:f8:e1:52:e8:df:26:50:
0a:91:c6:84:57:50:c1:7c:a1:5d:a1:bd:2c:18:4e:
2f:87:08:c8:43:6c:86:26:b1:e3:d9:1b:df:2f:57:
c5:0b:5d:53:9c:79:4b:92:a0:a4:ff:fc:98:41:b6:
d2:37:cd:0a:a7:1f:e1:6f:4b:1c:b2:b1:75:84:9f:
a5:f0:a8:fc:25:2f:b2:08:eb:6e:16:8c:73:e7:3a:
a3:d8:c2:83:11:b0:75:79:1a:45:eb:9d:1c:be:c1:
36:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BA:CF:DE:3E:FE:C6:B6:55:5E:4C:81:E2:C4:CB:FA:25:9D:96:11
X509v3 Authority Key Identifier:
keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c8:73:83:7f:c6:c1:c4:51:11:be:3e:04:a4:a9:10:12:6e:
15:ae:12:bc:f5:38:8a:18:46:ce:8f:2e:6c:c2:5b:eb:9b:d1:
65:73:26:2e:e3:e1:1f:29:ec:ba:58:ad:9d:1e:69:2d:4d:6d:
4c:4b:48:96:c9:8a:c3:55:c9:11:90:55:3a:a6:49:39:1a:98:
a1:72:2c:a3:55:b9:d3:3b:92:96:5c:f5:ef:eb:80:0f:ba:db:
0f:ad:b1:a7:09:ce:4f:a7:2b:e7:dc:af:d0:81:46:59:98:05:
22:44:f5:73:7a:93:f1:35:cd:67:75:44:c6:b3:32:a7:26:7c:
fd:cb:6f:6f:db:96:29:a3:fa:38:c2:f5:5c:64:e0:b4:79:58:
e1:b2:f5:0e:92:b7:8a:2e:5b:cd:19:da:b0:5f:4f:97:52:b5:
8a:38:f6:7f:02:5c:f8:c5:fc:76:ad:29:14:6e:2a:bf:70:7a:
2b:5c:9d:4d:f0:e3:23:c0:1b:f4:6f:ba:14:c3:5d:d0:86:16:
a6:34:51:c9:d7:e5:fe:1f:a3:7e:93:29:80:7b:88:6c:5b:82:
6d:b5:7f:69:f0:53:64:0b:94:70:d5:d3:19:93:29:eb:9d:d2:
2b:4d:77:be:a1:1d:09:89:d4:93:02:cb:33:1f:ce:28:92:c7:
0a:8e:c3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:28:40 2026 by rpki-client