$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft File: bsuJSMsSdC3GH2RUECvzGsaoT9U.mft (raw, json) Hash identifier: rxm85m/1scnA8p7U3lEct4owhmea/CrRgoFwZ7QapK8= Subject key identifier: 0A:76:09:B9:F4:51:F2:E8:EE:56:D9:57:B1:0F:85:64:D2:D1:8B:40 Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 Certificate issuer: /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Certificate serial: 1B56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft Manifest number: 1B4E Signing time: Fri 22 Aug 2025 16:21:43 +0000 Manifest this update: Fri 22 Aug 2025 16:21:42 +0000 Manifest next update: Fri 29 Aug 2025 16:21:42 +0000 Files and hashes: 1: bsuJSMsSdC3GH2RUECvzGsaoT9U.crl (hash: qWq4koHlfKZxLLHpcwXIvnDIo4CL6AzjaNdx+6e5EZ0=) 2: DCDCF87AE17511E8886B1878C4F9AE02.roa (hash: IqZZVcS21ii5zkxWPYMuKQR1NOi0O+Hj+XB33t8u/K8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6998 (0x1b56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B14, serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Validity Not Before: Aug 22 16:21:42 2025 GMT Not After : Aug 29 16:21:42 2025 GMT Subject: CN=68a89917-97f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c9:d4:d9:dd:51:31:81:f8:09:77:f0:bc:82: 8d:7b:f9:32:00:49:14:8f:ae:99:aa:03:66:f9:1b: a9:94:d3:93:4e:e1:65:ef:e1:e0:fc:59:ff:75:55: 51:7c:94:df:d2:df:bc:bf:c9:aa:1f:58:08:5f:43: 2e:28:62:d3:7b:67:bd:0f:54:64:7c:cc:8d:68:6b: 33:55:db:ff:fb:b0:54:7b:d0:c6:e6:20:d1:50:f4: 60:4a:58:a8:6d:e6:ac:39:f1:47:c5:44:f6:8a:bd: 36:93:5a:2b:cc:60:32:67:18:af:73:be:b7:2e:2e: 11:18:42:54:ad:c7:b1:29:3b:3a:2d:8b:77:c5:a0: e5:fd:b6:77:2a:95:e8:31:b0:ce:b0:89:fd:dc:c6: 34:a9:8c:12:c4:b6:ac:02:81:f7:d4:c5:4f:16:5d: c5:45:b1:f2:ab:78:5c:1a:90:d8:0d:29:ac:43:00: c6:7b:cf:9f:22:d7:f2:89:9d:e4:b5:72:dd:ed:a7: bc:1a:75:f2:14:02:ab:61:1e:fe:7b:41:f8:35:6d: 16:2e:f6:db:da:fe:e2:77:ac:1c:dd:70:9f:84:0b: 51:1c:78:a8:3c:55:4d:98:83:2a:1a:7c:5b:82:22: e7:a5:bd:5d:a4:f0:b9:37:2a:a0:c3:02:f5:c0:4c: cd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:76:09:B9:F4:51:F2:E8:EE:56:D9:57:B1:0F:85:64:D2:D1:8B:40 X509v3 Authority Key Identifier: keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:ec:01:a4:fd:11:8f:3f:11:2a:65:36:06:ac:e9:da:c7:ef: 17:83:e9:31:cc:25:db:2d:6a:d4:9f:49:74:2a:ab:0d:e2:14: 30:18:b6:55:07:2f:57:bf:16:44:bc:c1:21:db:5f:41:2e:93: 9f:4e:44:6d:17:d9:2e:a9:5b:da:11:18:34:e2:c5:4d:a2:03: 40:f7:f3:9f:c1:d1:b5:20:3b:74:0b:5f:07:53:5a:3b:d0:cd: da:f0:63:97:39:bb:78:4d:4c:b6:48:71:e1:77:d0:ef:44:54: 08:94:10:37:61:0d:98:4f:ee:71:eb:ad:5a:27:f5:44:03:f5: 1f:19:93:75:5e:3e:5e:bd:6a:ab:1e:4d:87:cd:14:21:2c:ad: 27:d7:ac:16:8b:e5:17:ba:5a:b1:2b:05:fe:5e:b9:4c:7f:da: 25:d4:16:ac:5e:04:6d:07:ae:9d:f4:f8:8a:e6:b7:32:d1:a3: 0c:bd:ff:3d:ec:d9:7b:22:e7:75:d7:45:57:78:5a:93:e9:66: 0a:b6:9a:bd:8d:43:51:59:8f:73:44:8a:73:f7:93:f5:8e:8c: b4:c7:ee:ca:75:b0:ad:0e:12:f7:6d:25:2f:ce:ed:b4:43:4d: fe:d7:62:10:63:23:7e:bd:ae:8b:1a:e4:e4:75:78:a6:23:d5: c2:19:ad:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMTQxMTAvBgNVBAUTKDZFQ0I4OTQ4Q0IxMjc0MkRDNjFGNjQ1NDEwMkJGMzFB QzZBODRGRDUwHhcNMjUwODIyMTYyMTQyWhcNMjUwODI5MTYyMTQyWjAYMRYwFAYD VQQDEw02OGE4OTkxNy05N2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8nU2d1RMYH4CXfwvIKNe/kyAEkUj66ZqgNm+RuplNOTTuFl7+Hg/Fn/dVVR fJTf0t+8v8mqH1gIX0MuKGLTe2e9D1RkfMyNaGszVdv/+7BUe9DG5iDRUPRgSlio beasOfFHxUT2ir02k1orzGAyZxivc763Li4RGEJUrcexKTs6LYt3xaDl/bZ3KpXo MbDOsIn93MY0qYwSxLasAoH31MVPFl3FRbHyq3hcGpDYDSmsQwDGe8+fItfyiZ3k tXLd7ae8GnXyFAKrYR7+e0H4NW0WLvbb2v7id6wc3XCfhAtRHHioPFVNmIMqGnxb giLnpb1dpPC5NyqgwwL1wEzNnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAp2Cbn0 UfLo7lbZV7EPhWTS0YtAMB8GA1UdIwQYMBaAFG7LiUjLEnQtxh9kVBAr8xrGqE/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIxNC9CNDFBNTgzODE4 RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RDM0dIMlJVRUN2ekdzYW9U OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JzdUpTTXNTZEMzR0gyUlVFQ3Z6R3Nhb1Q5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIxNC9CNDFBNTgzODE4RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RD M0dIMlJVRUN2ekdzYW9UOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY7AGk/RGPPxEqZTYGrOnax+8Xg+kxzCXbLWrUn0l0KqsN4hQwGLZV By9XvxZEvMEh219BLpOfTkRtF9kuqVvaERg04sVNogNA9/OfwdG1IDt0C18HU1o7 0M3a8GOXObt4TUy2SHHhd9DvRFQIlBA3YQ2YT+5x661aJ/VEA/UfGZN1Xj5evWqr Hk2HzRQhLK0n16wWi+UXulqxKwX+XrlMf9ol1BasXgRtB66d9PiK5rcy0aMMvf89 7Nl7Iud110VXeFqT6WYKtpq9jUNRWY9zRIpz95P1joy0x+7KdbCtDhL3bSUvzu20 Q03+12IQYyN+va6LGuTkdXimI9XCGa2C -----END CERTIFICATE-----Generated at Sat Aug 23 18:12:14 2025 by rpki-client