$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft File: bsuJSMsSdC3GH2RUECvzGsaoT9U.mft (raw, json) Hash identifier: VZEzWImo0EChMS9rqCKSZiOx8HwOIM7olLrZGMnEkdg= Subject key identifier: 3D:0E:8C:36:2F:B5:FF:A9:E9:76:4D:3D:13:98:FB:A1:AB:98:FA:08 Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 Certificate issuer: /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Certificate serial: 1BC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft Manifest number: 1BBE Signing time: Tue 24 Mar 2026 16:09:39 +0000 Manifest this update: Tue 24 Mar 2026 16:09:39 +0000 Manifest next update: Tue 31 Mar 2026 16:09:39 +0000 Files and hashes: 1: bsuJSMsSdC3GH2RUECvzGsaoT9U.crl (hash: N7TDZyNeT3Vgn3a7uZIPutGnQlMk2BOxi28bAXbGd8A=) 2: DCDCF87AE17511E8886B1878C4F9AE02.roa (hash: Beu7VbTQzdwJMvqmpcL7L0qoIs02xDsFIrO4v53qnZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7111 (0x1bc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B14, serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Validity Not Before: Mar 24 16:09:39 2026 GMT Not After : Mar 31 16:09:39 2026 GMT Subject: CN=69c2b743-5e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:17:51:3a:48:d5:09:08:2a:4d:05:7a:a1:11: f1:11:87:43:a5:62:d1:1b:d1:f3:fc:18:a8:f5:db: 3d:6e:20:86:e6:7b:b8:54:6e:e5:74:fe:c0:78:a5: db:bd:b7:4b:fe:fa:62:cc:82:71:d3:4c:14:be:9a: d2:51:b5:b9:29:d4:26:12:fe:8c:21:8f:63:2a:c4: 0d:e8:4f:28:69:69:30:b1:4a:62:36:5e:a3:ee:08: c6:4a:26:c2:cd:84:7f:d1:c3:2e:69:c5:b2:b8:65: df:d7:69:6f:35:62:6d:83:55:37:7b:0b:0c:09:20: 87:dd:17:3b:91:e6:8c:a7:f8:a4:a4:3d:6f:88:28: 24:d0:5a:fb:27:d2:a5:90:ad:79:f7:d7:b8:5b:71: fa:6d:28:4b:73:dd:4d:0f:37:36:b9:45:da:8f:e9: fc:7f:23:ab:ae:fd:3c:e5:51:2e:a9:df:92:07:82: df:66:03:b6:10:5c:a2:97:9e:32:e2:88:75:f9:4b: a4:de:85:53:f6:e9:3a:b2:5b:ab:b9:42:c3:cf:68: 5a:ac:73:eb:3f:ca:d5:bf:ef:b6:79:3c:1d:e6:c6: a7:1d:a1:88:db:d6:fc:c0:ed:86:57:2d:eb:7e:dc: 50:cf:3b:64:d4:44:21:1c:b1:9e:1f:b7:76:ac:74: 27:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0E:8C:36:2F:B5:FF:A9:E9:76:4D:3D:13:98:FB:A1:AB:98:FA:08 X509v3 Authority Key Identifier: keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:5b:bf:78:39:d1:b5:d9:48:4f:b7:68:4a:06:3d:47:c6:59: e6:3c:02:a6:63:81:ad:21:6a:66:3a:d3:ec:b9:6b:48:c7:f9: 87:e9:56:32:d7:ab:c8:e5:56:51:8d:3f:7b:80:56:b4:e4:f4: 70:3f:b7:fd:29:5b:de:36:28:9e:fb:6a:e8:18:82:63:8c:70: 29:0d:ef:b5:8d:4c:b7:05:84:77:37:50:75:c8:e0:ea:98:51: fb:c4:88:8b:cd:07:94:1e:4e:7f:50:17:d6:e6:25:ab:55:e0: a0:8e:a6:1d:31:98:8a:0a:1c:d8:96:06:89:10:6d:36:bd:7b: 71:4b:6a:ac:d0:3c:1f:82:ad:4e:0c:a4:92:d1:d3:22:c0:23: 3a:65:18:b3:91:53:20:fe:9a:1b:d3:19:b5:e5:41:07:4a:62: 69:26:22:7c:06:86:a1:69:bb:c8:e7:25:e7:d9:22:87:49:f2: 7f:48:be:fc:e0:37:f8:59:a2:6b:17:09:72:c8:81:fe:62:1b: 95:01:38:43:01:1a:29:67:62:8b:d6:4a:b4:4e:c0:05:96:ec: fb:f5:16:e4:ae:1c:bb:fd:a4:b9:02:b9:c3:b9:b0:3c:87:af: 6e:d4:fa:c8:0b:a6:ed:b0:09:cb:32:26:1f:8a:47:80:c0:5a: 9d:a4:1d:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMTQxMTAvBgNVBAUTKDZFQ0I4OTQ4Q0IxMjc0MkRDNjFGNjQ1NDEwMkJGMzFB QzZBODRGRDUwHhcNMjYwMzI0MTYwOTM5WhcNMjYwMzMxMTYwOTM5WjAYMRYwFAYD VQQDEw02OWMyYjc0My01ZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhdROkjVCQgqTQV6oRHxEYdDpWLRG9Hz/Bio9ds9biCG5nu4VG7ldP7AeKXb vbdL/vpizIJx00wUvprSUbW5KdQmEv6MIY9jKsQN6E8oaWkwsUpiNl6j7gjGSibC zYR/0cMuacWyuGXf12lvNWJtg1U3ewsMCSCH3Rc7keaMp/ikpD1viCgk0Fr7J9Kl kK1599e4W3H6bShLc91NDzc2uUXaj+n8fyOrrv085VEuqd+SB4LfZgO2EFyil54y 4oh1+Uuk3oVT9uk6sluruULDz2harHPrP8rVv++2eTwd5sanHaGI29b8wO2GVy3r ftxQzztk1EQhHLGeH7d2rHQn0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0OjDYv tf+p6XZNPROY+6GrmPoIMB8GA1UdIwQYMBaAFG7LiUjLEnQtxh9kVBAr8xrGqE/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIxNC9CNDFBNTgzODE4 RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RDM0dIMlJVRUN2ekdzYW9U OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JzdUpTTXNTZEMzR0gyUlVFQ3Z6R3Nhb1Q5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIxNC9CNDFBNTgzODE4RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RD M0dIMlJVRUN2ekdzYW9UOVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgFu/eDnRtdlIT7doSgY9R8ZZ5jwCpmOBrSFqZjrT7LlrSMf5h+lWMteryOVW UY0/e4BWtOT0cD+3/Slb3jYonvtq6BiCY4xwKQ3vtY1MtwWEdzdQdcjg6phR+8SI i80HlB5Of1AX1uYlq1XgoI6mHTGYigoc2JYGiRBtNr17cUtqrNA8H4KtTgykktHT IsAjOmUYs5FTIP6aG9MZteVBB0piaSYifAaGoWm7yOcl59kih0nyf0i+/OA3+Fmi axcJcsiB/mIblQE4QwEaKWdii9ZKtE7ABZbs+/UW5K4cu/2kuQK5w7mwPIevbtT6 yAum7bAJyzImH4pHgMBanaQdlg== -----END CERTIFICATE-----Generated at Thu Mar 26 07:17:17 2026 by rpki-client