$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft File: bsuJSMsSdC3GH2RUECvzGsaoT9U.mft (raw, json) Hash identifier: ts96LN04YvxprnqzPEbkjr8ZMw7wZXb/IgRGuFoPP7E= Subject key identifier: A5:6D:09:90:2E:FC:69:F8:65:8A:E1:B1:EC:2B:83:B3:09:FC:D4:2B Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 Certificate issuer: /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Certificate serial: 1B28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft Manifest number: 1B21 Signing time: Fri 30 May 2025 16:28:11 +0000 Manifest this update: Fri 30 May 2025 16:28:10 +0000 Manifest next update: Fri 06 Jun 2025 16:28:10 +0000 Files and hashes: 1: bsuJSMsSdC3GH2RUECvzGsaoT9U.crl (hash: sa6BmV2x7R5GvwEShfffzK3EhNz0VEW1rdyTcoYGrxc=) 2: DCDCF87AE17511E8886B1878C4F9AE02.roa (hash: KsLGHi4+kHYjw5B+CT+5OlCyjuOYeOPXd/7bbATaIPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6952 (0x1b28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B14, serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Validity Not Before: May 30 16:28:10 2025 GMT Not After : Jun 6 16:28:10 2025 GMT Subject: CN=6839dc9b-7607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:91:4e:a3:6c:79:c9:f4:eb:3f:2c:4c:fc:42: d6:af:7a:1e:59:6f:98:23:1c:90:67:8c:0f:b4:9c: d9:06:12:ee:7a:09:36:70:44:00:23:3d:0d:b0:1b: dd:c0:1a:63:b5:f3:33:ea:ef:e8:3b:44:fc:71:20: 38:33:24:d5:2b:df:8b:e1:29:95:91:7b:1c:4d:8e: bc:be:65:64:5e:87:e5:df:16:5e:5a:67:72:d3:3a: 7c:bd:0e:ee:72:68:6a:e2:fd:47:19:9a:33:42:6b: d5:b8:c9:82:82:8a:e9:35:31:ba:12:6e:6f:bf:d8: 52:ba:27:c5:f7:15:28:94:9c:3e:2b:27:33:8a:00: d7:a4:a7:97:8f:31:03:7c:90:2a:5f:27:fd:54:81: 4f:f0:b4:1a:df:37:74:99:18:ce:01:bf:a0:e0:7f: 87:dd:b0:72:d9:80:21:6b:b1:99:db:35:7d:68:f4: 5f:8a:b7:fe:9e:d8:f3:45:50:0c:6d:4f:77:f7:3a: 5d:82:96:4e:96:eb:e2:94:ac:0d:3a:8e:c3:79:79: 00:01:3e:7f:23:1b:30:72:10:87:95:00:bb:90:ca: f0:51:49:5a:cd:5d:83:8e:13:36:97:d7:ab:7e:8f: 70:0b:cb:9c:ca:31:1b:43:77:86:ed:a7:8f:f9:87: 2f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6D:09:90:2E:FC:69:F8:65:8A:E1:B1:EC:2B:83:B3:09:FC:D4:2B X509v3 Authority Key Identifier: keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:6d:46:4f:3b:e1:06:d1:99:4e:c3:71:db:ec:e4:5a:cf:f8: 10:98:81:05:9f:27:12:f6:d7:ff:39:ed:86:55:e1:1c:be:25: 30:ce:41:93:6f:ee:d4:16:08:b8:ce:68:a3:31:0d:f9:7c:c2: 00:be:d4:b1:9c:ad:4e:be:dc:94:3b:7e:76:bb:83:d8:e2:ee: 14:76:6d:f1:49:31:50:8b:9c:d8:bc:de:29:c2:4f:6e:e5:04: ea:5a:2f:c5:28:29:76:8e:48:81:a0:d0:13:c4:2c:96:36:a0: 03:ad:fa:e8:35:8e:64:69:dc:95:f7:9a:0b:61:91:ee:74:4c: 84:86:fe:ef:f1:b1:fc:f8:43:43:f2:ca:61:c7:3b:74:76:54: f9:6a:63:51:36:f7:87:42:7d:39:e2:cf:52:fc:d4:1c:3f:a0: 09:b8:b5:02:0a:45:15:12:26:80:b6:18:6f:39:81:84:7f:10: 84:9c:cf:f1:84:2e:d8:a3:89:ac:05:dc:81:d2:8e:79:a6:62: 41:f2:71:f4:58:e2:7a:96:84:ca:8f:54:a4:5c:e3:01:79:bc: 50:9e:f2:d2:4c:08:b2:00:12:9c:93:22:49:e8:65:cd:c2:ca: 5b:91:da:9a:4c:f3:11:17:90:55:ee:fc:de:21:99:a4:61:bd: 27:58:3e:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMTQxMTAvBgNVBAUTKDZFQ0I4OTQ4Q0IxMjc0MkRDNjFGNjQ1NDEwMkJGMzFB QzZBODRGRDUwHhcNMjUwNTMwMTYyODEwWhcNMjUwNjA2MTYyODEwWjAYMRYwFAYD VQQDEw02ODM5ZGM5Yi03NjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJFOo2x5yfTrPyxM/ELWr3oeWW+YIxyQZ4wPtJzZBhLuegk2cEQAIz0NsBvd wBpjtfMz6u/oO0T8cSA4MyTVK9+L4SmVkXscTY68vmVkXofl3xZeWmdy0zp8vQ7u cmhq4v1HGZozQmvVuMmCgorpNTG6Em5vv9hSuifF9xUolJw+KyczigDXpKeXjzED fJAqXyf9VIFP8LQa3zd0mRjOAb+g4H+H3bBy2YAha7GZ2zV9aPRfirf+ntjzRVAM bU939zpdgpZOluvilKwNOo7DeXkAAT5/IxswchCHlQC7kMrwUUlazV2DjhM2l9er fo9wC8ucyjEbQ3eG7aeP+Ycv1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVtCZAu /Gn4ZYrhsewrg7MJ/NQrMB8GA1UdIwQYMBaAFG7LiUjLEnQtxh9kVBAr8xrGqE/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIxNC9CNDFBNTgzODE4 RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RDM0dIMlJVRUN2ekdzYW9U OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JzdUpTTXNTZEMzR0gyUlVFQ3Z6R3Nhb1Q5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIxNC9CNDFBNTgzODE4RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RD M0dIMlJVRUN2ekdzYW9UOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUbUZPO+EG0ZlOw3Hb7ORaz/gQmIEFnycS9tf/Oe2GVeEcviUwzkGT b+7UFgi4zmijMQ35fMIAvtSxnK1OvtyUO352u4PY4u4Udm3xSTFQi5zYvN4pwk9u 5QTqWi/FKCl2jkiBoNATxCyWNqADrfroNY5kadyV95oLYZHudEyEhv7v8bH8+END 8sphxzt0dlT5amNRNveHQn054s9S/NQcP6AJuLUCCkUVEiaAthhvOYGEfxCEnM/x hC7Yo4msBdyB0o55pmJB8nH0WOJ6loTKj1SkXOMBebxQnvLSTAiyABKckyJJ6GXN wspbkdqaTPMRF5BV7vzeIZmkYb0nWD4G -----END CERTIFICATE-----Generated at Sat May 31 16:32:10 2025 by rpki-client