$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft File: bsuJSMsSdC3GH2RUECvzGsaoT9U.mft (raw, json) Hash identifier: 01aaR5sX7Vv1M4+BC51p+RJQozvEENwOktY9inmDCjg= Subject key identifier: D2:5A:06:BB:F6:B6:23:3E:9B:84:22:5E:E3:72:33:81:1A:9B:89:A1 Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 Certificate issuer: /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Certificate serial: 1B16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft Manifest number: 1B0F Signing time: Thu 24 Apr 2025 16:18:22 +0000 Manifest this update: Thu 24 Apr 2025 16:18:22 +0000 Manifest next update: Thu 01 May 2025 16:18:22 +0000 Files and hashes: 1: bsuJSMsSdC3GH2RUECvzGsaoT9U.crl (hash: WynYxR+GREfYZtsJ1gM88CqQ8cll1085Ro6aEixePAI=) 2: DCDCF87AE17511E8886B1878C4F9AE02.roa (hash: KsLGHi4+kHYjw5B+CT+5OlCyjuOYeOPXd/7bbATaIPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6934 (0x1b16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B14, serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Validity Not Before: Apr 24 16:18:22 2025 GMT Not After : May 1 16:18:22 2025 GMT Subject: CN=680a644e-57ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e6:b2:6e:83:3a:5e:07:ce:74:25:6e:a6:54: 51:26:ad:01:11:a5:fc:ef:f9:5b:d4:1f:6e:53:de: a9:09:19:11:98:a4:f9:e8:8a:42:9e:54:88:82:c9: 97:be:0d:13:46:27:20:fa:a5:6c:02:bb:86:c4:ac: e4:6d:03:e9:6a:e0:a2:f8:13:cf:f5:30:77:8a:27: ac:28:a9:2b:25:e7:79:8d:89:3a:06:8a:68:a1:d8: 16:c2:ea:b0:a2:f4:ca:7f:a0:bc:23:fd:14:3c:4d: 8f:2b:65:d1:a9:42:29:d3:64:4f:34:73:15:74:d4: d5:49:ad:74:28:ad:5e:6a:a8:09:5c:39:29:b3:e4: 8f:23:5b:4d:d9:78:a4:f0:c2:40:48:4b:18:4d:ff: 7f:67:43:06:45:7e:f0:1e:0d:23:8a:91:55:7e:de: b2:3f:e8:8f:9c:a4:1d:46:69:83:89:90:55:aa:85: 12:92:8a:05:55:74:9b:25:8f:39:8e:49:85:ea:6e: 12:4e:b2:91:1a:c2:b4:23:6c:c6:47:0c:e5:22:6c: b5:7e:5f:d5:9c:94:65:8f:80:c7:11:c5:c4:21:4f: a5:e1:00:5b:55:01:be:62:fb:7e:5e:29:cc:8b:96: 78:a8:e5:d2:f8:95:f2:01:ea:cd:87:73:06:e1:db: 11:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5A:06:BB:F6:B6:23:3E:9B:84:22:5E:E3:72:33:81:1A:9B:89:A1 X509v3 Authority Key Identifier: keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:99:03:6b:95:2a:7a:99:42:5a:1e:6c:3f:05:75:15:32:43: 6c:39:09:71:88:3a:ad:92:72:6f:1c:0e:f4:a2:f4:63:c2:3e: 67:89:94:73:4f:a7:58:93:06:26:49:f5:93:b2:4e:ba:a9:b1: d2:8e:fa:b0:54:d4:4a:56:3a:2f:66:db:a9:5e:99:a6:38:11: b2:e8:ba:95:74:bf:af:d3:62:10:7d:e8:f5:1f:85:40:dc:9c: 53:77:2b:34:02:a9:35:5b:3a:50:07:55:88:5c:78:ac:e9:d5: c8:7e:a9:4a:f6:55:4c:67:1b:40:b7:78:ee:ba:c6:c6:2a:99: c9:6f:cb:c5:f0:73:64:d5:83:04:8f:5a:f9:1e:0d:37:27:68: 8e:17:7f:d3:01:9e:5a:3a:bd:9e:d4:2e:c8:08:0a:cb:cb:de: 4e:b0:0e:0a:e1:00:dd:a7:6d:99:0e:3e:5d:87:59:20:5e:78: ba:a2:1b:09:c3:57:94:4b:a6:6d:00:a4:d4:fa:03:37:ab:ff: 48:50:3b:f2:79:50:a3:da:ab:31:09:7a:6c:5f:89:bf:f9:30: f5:4b:72:d2:e1:8b:e4:a5:82:b5:7a:80:9f:4b:df:97:6a:b8: 4c:b2:41:c6:70:c1:34:5c:f2:6f:a9:db:fa:a2:e8:bb:9d:4f: 7c:b7:3c:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMTQxMTAvBgNVBAUTKDZFQ0I4OTQ4Q0IxMjc0MkRDNjFGNjQ1NDEwMkJGMzFB QzZBODRGRDUwHhcNMjUwNDI0MTYxODIyWhcNMjUwNTAxMTYxODIyWjAYMRYwFAYD VQQDEw02ODBhNjQ0ZS01N2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeayboM6XgfOdCVuplRRJq0BEaX87/lb1B9uU96pCRkRmKT56IpCnlSIgsmX vg0TRicg+qVsAruGxKzkbQPpauCi+BPP9TB3iiesKKkrJed5jYk6BopoodgWwuqw ovTKf6C8I/0UPE2PK2XRqUIp02RPNHMVdNTVSa10KK1eaqgJXDkps+SPI1tN2Xik 8MJASEsYTf9/Z0MGRX7wHg0jipFVft6yP+iPnKQdRmmDiZBVqoUSkooFVXSbJY85 jkmF6m4STrKRGsK0I2zGRwzlImy1fl/VnJRlj4DHEcXEIU+l4QBbVQG+Yvt+XinM i5Z4qOXS+JXyAerNh3MG4dsR0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJaBrv2 tiM+m4QiXuNyM4Eam4mhMB8GA1UdIwQYMBaAFG7LiUjLEnQtxh9kVBAr8xrGqE/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIxNC9CNDFBNTgzODE4 RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RDM0dIMlJVRUN2ekdzYW9U OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JzdUpTTXNTZEMzR0gyUlVFQ3Z6R3Nhb1Q5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIxNC9CNDFBNTgzODE4RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RD M0dIMlJVRUN2ekdzYW9UOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQmQNrlSp6mUJaHmw/BXUVMkNsOQlxiDqtknJvHA70ovRjwj5niZRz T6dYkwYmSfWTsk66qbHSjvqwVNRKVjovZtupXpmmOBGy6LqVdL+v02IQfej1H4VA 3JxTdys0Aqk1WzpQB1WIXHis6dXIfqlK9lVMZxtAt3juusbGKpnJb8vF8HNk1YME j1r5Hg03J2iOF3/TAZ5aOr2e1C7ICArLy95OsA4K4QDdp22ZDj5dh1kgXni6ohsJ w1eUS6ZtAKTU+gM3q/9IUDvyeVCj2qsxCXpsX4m/+TD1S3LS4YvkpYK1eoCfS9+X arhMskHGcME0XPJvqdv6oui7nU98tzz4 -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:55 2025 by rpki-client