$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft File: bsuJSMsSdC3GH2RUECvzGsaoT9U.mft (raw, json) Hash identifier: dBZ5g8+5/bHuSnGij6KgabMiAMO7ozeq+s6rn+xLizo= Subject key identifier: F5:1B:FD:FA:6C:59:FB:92:5D:BB:02:A4:CF:5E:27:75:28:B0:7E:52 Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 Certificate issuer: /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Certificate serial: 1BCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft Manifest number: 1BC4 Signing time: Sat 04 Apr 2026 16:09:26 +0000 Manifest this update: Sat 04 Apr 2026 16:09:25 +0000 Manifest next update: Sat 11 Apr 2026 16:09:25 +0000 Files and hashes: 1: bsuJSMsSdC3GH2RUECvzGsaoT9U.crl (hash: 0/EhCbjrx6wzgaj54NtLSJq1ZUFFKubz1IC3Zm6jCLI=) 2: DCDCF87AE17511E8886B1878C4F9AE02.roa (hash: Beu7VbTQzdwJMvqmpcL7L0qoIs02xDsFIrO4v53qnZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7117 (0x1bcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B14, serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Validity Not Before: Apr 4 16:09:25 2026 GMT Not After : Apr 11 16:09:25 2026 GMT Subject: CN=69d137b6-2baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cb:ce:bb:e4:6d:e7:8f:a2:57:2e:06:9c:9b: 60:e7:d2:f8:a6:8a:65:7e:b0:4b:5c:45:fd:53:d9: fb:33:a2:20:8c:28:40:ae:b6:13:56:70:a4:b2:01: a5:26:69:33:15:fe:c5:10:00:8b:33:67:42:42:78: ac:cf:6f:28:97:88:8a:06:99:6c:88:20:f2:7c:d2: a5:9f:c1:8b:8e:97:6d:32:e4:61:6b:a0:60:76:9b: 1b:c2:e6:ad:ad:0e:0e:03:15:70:48:56:f1:93:9c: 50:5d:b5:24:e4:af:60:09:f4:53:f5:70:df:65:aa: 7c:22:7c:34:f7:87:5d:db:17:48:66:fb:9a:95:5e: 49:75:0d:ca:8f:9d:71:6b:be:05:17:37:1e:41:a8: a4:de:2d:18:79:d9:71:ec:ac:3c:16:ea:50:e3:74: 65:ff:a4:53:e0:0d:ed:1f:43:0e:0e:87:40:1c:20: b2:f7:89:cc:4c:b3:49:00:f9:09:dd:0c:77:50:01: ef:e1:ec:5f:33:b0:a3:91:b9:51:5e:81:0c:01:38: 3d:b5:fe:d8:1d:12:8c:53:b3:4a:85:be:ca:79:12: f1:b0:f3:e1:63:bf:d6:4e:cf:66:2a:ba:c6:ab:1e: 8e:99:bd:aa:77:db:b1:3c:83:5f:35:38:e0:ee:95: 33:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1B:FD:FA:6C:59:FB:92:5D:BB:02:A4:CF:5E:27:75:28:B0:7E:52 X509v3 Authority Key Identifier: keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:99:b2:2d:4b:9c:c6:73:91:7b:77:76:43:e6:8c:96:b1:b0: db:49:ed:32:69:a4:8d:f4:ed:06:45:94:7f:8b:8f:24:ca:d2: ab:70:55:b0:a9:85:45:7e:1f:93:6a:49:44:3f:5e:2a:c3:81: 72:ff:62:7f:77:5e:29:c7:d3:f6:00:c8:4d:d1:99:47:06:28: 26:af:7d:e3:01:cb:e8:2d:28:24:f5:23:eb:e1:c0:1f:30:f2: 82:b5:42:60:88:69:33:6b:0b:20:d0:76:2e:7f:e1:55:28:5a: f6:1e:f1:a2:bf:7c:9f:8b:e7:90:12:97:b5:7e:f6:9f:26:0d: 70:e9:0f:67:40:2c:62:9d:8a:1b:f9:58:ac:27:50:6f:2f:55: e2:89:a0:46:f6:76:71:73:91:9e:69:73:65:08:14:89:cd:d9: 68:08:84:a8:8c:60:9b:aa:93:06:22:a7:36:31:ed:35:65:13: 8f:6c:48:e5:3b:6b:39:26:2d:b3:7c:1e:42:36:ec:cc:c7:23: 95:2f:91:f8:90:e6:d5:49:5d:ac:c4:bd:0a:2c:72:6e:d9:92: 07:3a:86:d7:32:34:a6:df:71:6e:1e:fd:01:f4:e1:34:49:ea: 16:ae:66:a4:24:81:96:2e:79:38:98:55:3a:e6:59:7a:6a:07: 0b:dd:9f:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMTQxMTAvBgNVBAUTKDZFQ0I4OTQ4Q0IxMjc0MkRDNjFGNjQ1NDEwMkJGMzFB QzZBODRGRDUwHhcNMjYwNDA0MTYwOTI1WhcNMjYwNDExMTYwOTI1WjAYMRYwFAYD VQQDEw02OWQxMzdiNi0yYmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcvOu+Rt54+iVy4GnJtg59L4poplfrBLXEX9U9n7M6IgjChArrYTVnCksgGl JmkzFf7FEACLM2dCQnisz28ol4iKBplsiCDyfNKln8GLjpdtMuRha6Bgdpsbwuat rQ4OAxVwSFbxk5xQXbUk5K9gCfRT9XDfZap8Inw094dd2xdIZvualV5JdQ3Kj51x a74FFzceQaik3i0Yedlx7Kw8FupQ43Rl/6RT4A3tH0MODodAHCCy94nMTLNJAPkJ 3Qx3UAHv4exfM7CjkblRXoEMATg9tf7YHRKMU7NKhb7KeRLxsPPhY7/WTs9mKrrG qx6Omb2qd9uxPINfNTjg7pUz7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPUb/fps WfuSXbsCpM9eJ3UosH5SMB8GA1UdIwQYMBaAFG7LiUjLEnQtxh9kVBAr8xrGqE/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIxNC9CNDFBNTgzODE4 RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RDM0dIMlJVRUN2ekdzYW9U OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JzdUpTTXNTZEMzR0gyUlVFQ3Z6R3Nhb1Q5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIxNC9CNDFBNTgzODE4RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RD M0dIMlJVRUN2ekdzYW9UOVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfpmyLUucxnORe3d2Q+aMlrGw20ntMmmkjfTtBkWUf4uPJMrSq3BVsKmFRX4f k2pJRD9eKsOBcv9if3deKcfT9gDITdGZRwYoJq994wHL6C0oJPUj6+HAHzDygrVC YIhpM2sLINB2Ln/hVSha9h7xor98n4vnkBKXtX72nyYNcOkPZ0AsYp2KG/lYrCdQ by9V4omgRvZ2cXORnmlzZQgUic3ZaAiEqIxgm6qTBiKnNjHtNWUTj2xI5TtrOSYt s3weQjbszMcjlS+R+JDm1UldrMS9CixybtmSBzqG1zI0pt9xbh79AfThNEnqFq5m pCSBli55OJhVOuZZemoHC92fJw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:49:03 2026 by rpki-client