$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft File: bsuJSMsSdC3GH2RUECvzGsaoT9U.mft (raw, json) Hash identifier: dVM+Qz9pbKWRc0hoIViVitgQcdCxl5KvUxXzkQpMcPE= Subject key identifier: 24:8D:80:64:3C:B8:4F:F3:1A:C7:26:5C:E6:B6:B9:45:71:7E:DA:50 Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 Certificate issuer: /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Certificate serial: 1B44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft Manifest number: 1B3C Signing time: Fri 18 Jul 2025 16:24:06 +0000 Manifest this update: Fri 18 Jul 2025 16:24:05 +0000 Manifest next update: Fri 25 Jul 2025 16:24:05 +0000 Files and hashes: 1: bsuJSMsSdC3GH2RUECvzGsaoT9U.crl (hash: 6jl6cyv+zUrqqVQPOayiu6TDzXG98AoBBO9CNQJtYB4=) 2: DCDCF87AE17511E8886B1878C4F9AE02.roa (hash: IqZZVcS21ii5zkxWPYMuKQR1NOi0O+Hj+XB33t8u/K8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6980 (0x1b44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B14, serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Validity Not Before: Jul 18 16:24:05 2025 GMT Not After : Jul 25 16:24:05 2025 GMT Subject: CN=687a7526-3a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d0:49:d7:e4:2b:88:0d:bb:90:75:14:a1:37: a4:8b:31:a8:66:14:0a:26:b8:ff:99:d9:97:0a:e1: c6:ec:f3:d7:19:30:23:77:42:19:e5:eb:d2:7c:30: 08:96:6b:49:8c:ed:04:fd:cb:f1:ca:7a:1d:26:3a: 6b:9b:57:27:f4:3c:f8:2e:0f:3d:0d:4f:00:81:0c: d3:b0:0e:88:4e:5f:71:a1:0f:16:2a:e4:cb:35:27: a2:29:dd:88:e9:9e:81:66:3f:dd:6f:cb:82:3b:2f: 98:fd:14:ce:62:02:98:ff:87:c5:b0:1c:5c:61:80: 43:04:db:2d:f5:5c:a2:3e:17:e7:69:e9:13:5d:8c: 49:2c:d5:c1:c5:b8:18:47:17:a1:0a:33:52:58:e3: ac:5b:07:b7:d6:6a:ed:a3:ca:80:57:f9:6a:6d:03: 06:9c:a3:b2:f7:a4:cf:9a:a9:ca:8f:13:76:8a:7c: 7f:52:b1:8a:b3:e1:c7:50:9c:fd:1b:27:58:d4:5f: 0b:5b:6b:da:a7:1b:15:d3:c8:70:fa:d8:f4:4d:53: 12:64:5f:d8:d8:09:bb:12:8a:1c:41:08:87:f7:99: 57:e6:fa:04:8d:b8:ac:db:86:a6:f5:f1:a0:05:c5: d5:c8:ff:01:f2:45:4e:c4:2b:2b:72:25:9d:9f:ef: 3d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8D:80:64:3C:B8:4F:F3:1A:C7:26:5C:E6:B6:B9:45:71:7E:DA:50 X509v3 Authority Key Identifier: keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:db:6d:f5:7b:db:50:0b:ff:4b:dd:82:97:d3:a5:4e:9b:af: 72:95:80:3d:c6:ef:07:95:a8:53:fc:b5:91:a1:c5:dc:0c:46: 88:a4:85:d4:27:2b:0b:ac:81:fd:62:59:8a:30:16:10:ea:ed: 1a:dd:02:f3:1a:34:8d:56:72:ce:0c:a1:c3:4b:d5:42:e6:69: 10:b9:6f:57:25:ad:e2:8d:b0:02:b8:de:ae:ed:fc:45:d6:20: 4d:aa:0d:fb:8f:83:f7:ff:85:6b:64:e3:23:6a:49:04:ac:80: f5:f0:3a:e7:9e:e2:66:a1:b4:f0:89:09:71:4f:32:eb:37:37: da:95:27:1d:53:4a:36:62:40:21:2f:09:d5:0f:00:e4:dd:61: 0e:b1:a9:fc:98:47:cd:e0:6a:4c:87:18:5d:b3:d8:0b:0e:e5: 30:43:2c:4a:24:c6:ef:3e:9b:56:55:46:eb:59:bd:6c:34:fa: 13:2a:bd:4a:c7:a2:26:bc:d2:33:26:73:63:c0:cb:96:a6:cd: b1:7c:86:d0:53:e6:e0:db:cf:79:52:20:9f:fc:76:21:f9:c3: ab:09:8b:89:64:df:89:13:b0:e5:c9:04:22:ad:26:04:5e:3d: 2e:23:8b:85:0a:5f:84:32:ed:0d:80:c2:96:cf:6a:f2:5f:1e: 6a:e6:a8:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMTQxMTAvBgNVBAUTKDZFQ0I4OTQ4Q0IxMjc0MkRDNjFGNjQ1NDEwMkJGMzFB QzZBODRGRDUwHhcNMjUwNzE4MTYyNDA1WhcNMjUwNzI1MTYyNDA1WjAYMRYwFAYD VQQDEw02ODdhNzUyNi0zYTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNBJ1+QriA27kHUUoTekizGoZhQKJrj/mdmXCuHG7PPXGTAjd0IZ5evSfDAI lmtJjO0E/cvxynodJjprm1cn9Dz4Lg89DU8AgQzTsA6ITl9xoQ8WKuTLNSeiKd2I 6Z6BZj/db8uCOy+Y/RTOYgKY/4fFsBxcYYBDBNst9VyiPhfnaekTXYxJLNXBxbgY RxehCjNSWOOsWwe31mrto8qAV/lqbQMGnKOy96TPmqnKjxN2inx/UrGKs+HHUJz9 GydY1F8LW2vapxsV08hw+tj0TVMSZF/Y2Am7EoocQQiH95lX5voEjbis24am9fGg BcXVyP8B8kVOxCsrciWdn+89UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSNgGQ8 uE/zGscmXOa2uUVxftpQMB8GA1UdIwQYMBaAFG7LiUjLEnQtxh9kVBAr8xrGqE/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIxNC9CNDFBNTgzODE4 RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RDM0dIMlJVRUN2ekdzYW9U OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JzdUpTTXNTZEMzR0gyUlVFQ3Z6R3Nhb1Q5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIxNC9CNDFBNTgzODE4RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RD M0dIMlJVRUN2ekdzYW9UOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG2231e9tQC/9L3YKX06VOm69ylYA9xu8HlahT/LWRocXcDEaIpIXU JysLrIH9YlmKMBYQ6u0a3QLzGjSNVnLODKHDS9VC5mkQuW9XJa3ijbACuN6u7fxF 1iBNqg37j4P3/4VrZOMjakkErID18DrnnuJmobTwiQlxTzLrNzfalScdU0o2YkAh LwnVDwDk3WEOsan8mEfN4GpMhxhds9gLDuUwQyxKJMbvPptWVUbrWb1sNPoTKr1K x6ImvNIzJnNjwMuWps2xfIbQU+bg2895UiCf/HYh+cOrCYuJZN+JE7DlyQQirSYE Xj0uI4uFCl+EMu0NgMKWz2ryXx5q5qil -----END CERTIFICATE-----Generated at Sun Jul 20 07:31:22 2025 by rpki-client