$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft File: bsuJSMsSdC3GH2RUECvzGsaoT9U.mft (raw, json) Hash identifier: nF1l3/7JMXh/W6w1hHW3eHfm+8Cz2HuJB1TN+ypvDYk= Subject key identifier: 3E:BC:19:FE:1F:CC:47:C9:4B:03:25:9F:9A:2C:AC:FC:75:FD:5A:C0 Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 Certificate issuer: /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Certificate serial: 1B7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft Manifest number: 1B73 Signing time: Sun 02 Nov 2025 16:16:38 +0000 Manifest this update: Sun 02 Nov 2025 16:16:37 +0000 Manifest next update: Sun 09 Nov 2025 16:16:37 +0000 Files and hashes: 1: bsuJSMsSdC3GH2RUECvzGsaoT9U.crl (hash: LgOZg45+UzlW27OAqPT8EQ7iGMLrLJeU6ZMcyK/Z9Bo=) 2: DCDCF87AE17511E8886B1878C4F9AE02.roa (hash: IqZZVcS21ii5zkxWPYMuKQR1NOi0O+Hj+XB33t8u/K8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7035 (0x1b7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B14, serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5 Validity Not Before: Nov 2 16:16:37 2025 GMT Not After : Nov 9 16:16:37 2025 GMT Subject: CN=690783e6-331d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:70:b7:8b:92:0f:04:df:49:73:1b:f6:e4:ee: ef:5d:c7:fc:46:cd:80:ca:dd:9d:56:fe:55:e5:71: 81:11:09:3a:d9:69:7f:ce:46:90:ad:64:7b:2e:0c: b7:f9:e2:38:fd:e7:85:68:27:51:a2:a3:8b:6f:b1: e2:78:84:a1:88:be:4e:70:23:dc:6f:3d:f6:e8:72: db:ad:31:92:4e:94:60:73:33:e5:59:38:49:4d:65: c3:16:55:8e:f9:14:ca:8a:f9:c7:26:b1:89:29:40: 11:67:f1:63:fc:4a:fa:1c:7a:0e:88:79:01:f8:85: f3:f6:54:62:75:dd:00:7a:40:6d:ce:f2:6d:9a:84: 0f:2a:49:66:84:20:ec:b2:61:f4:3b:8b:6c:17:14: 44:a5:1b:7c:80:72:82:dd:63:b0:31:0d:28:3d:ed: ea:17:98:82:af:d2:21:b0:26:a7:01:6b:74:91:aa: db:9a:2d:f1:29:4e:84:3d:4f:ae:14:23:75:12:0a: e0:48:12:16:7b:3f:45:14:96:cd:43:a3:d1:1e:76: 54:8a:92:57:86:65:e7:84:70:28:65:98:3c:72:55: e8:dc:55:72:d5:a3:78:6c:e5:21:b9:28:cf:55:d5: 73:1f:69:1f:dd:e2:da:54:c8:99:78:b7:f0:1a:86: bb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BC:19:FE:1F:CC:47:C9:4B:03:25:9F:9A:2C:AC:FC:75:FD:5A:C0 X509v3 Authority Key Identifier: keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:76:0a:d4:4f:00:7b:78:9e:55:20:14:c2:fb:29:71:db:25: c7:17:71:cc:74:bf:12:d7:16:37:96:f1:a0:e7:08:12:7b:5f: f7:a8:8a:80:28:cb:71:21:6a:66:86:6c:70:d3:76:1b:05:bb: e9:f5:11:48:7b:36:8e:98:e5:85:61:01:3c:fa:17:de:60:ef: 7f:41:ab:d6:1f:da:56:9d:6d:d8:d3:c2:b7:2d:32:2a:c9:d1: 1d:e6:1f:85:19:b5:29:b3:3a:c4:b6:37:c2:75:56:cd:84:ed: 1d:fa:66:03:32:91:e1:ff:7a:3b:81:4d:d0:5d:7d:e4:dc:b4: 4d:6c:81:69:a2:97:52:5f:20:52:54:c4:b2:94:b4:27:2d:46: 31:bc:c6:2b:e8:fd:c9:7d:b7:68:ca:0b:95:ff:df:63:36:bd: 4a:cf:b7:46:9a:28:97:ac:1d:a9:e9:e6:b7:e5:b1:9e:ff:cb: 7f:46:2a:7f:2e:0e:2b:e6:78:de:36:58:89:04:f7:82:2d:3d: 8e:26:ea:80:25:e8:9a:0d:78:01:3d:21:61:6d:18:48:b7:a1: 04:e5:65:a9:e6:8f:16:cc:25:e7:1b:c4:de:91:63:67:5c:9d: 63:4b:08:1b:7d:c7:42:74:75:33:4b:d9:aa:24:04:36:70:36: a0:ad:51:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFCMTQxMTAvBgNVBAUTKDZFQ0I4OTQ4Q0IxMjc0MkRDNjFGNjQ1NDEwMkJGMzFB QzZBODRGRDUwHhcNMjUxMTAyMTYxNjM3WhcNMjUxMTA5MTYxNjM3WjAYMRYwFAYD VQQDEw02OTA3ODNlNi0zMzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHC3i5IPBN9Jcxv25O7vXcf8Rs2Ayt2dVv5V5XGBEQk62Wl/zkaQrWR7Lgy3 +eI4/eeFaCdRoqOLb7HieIShiL5OcCPcbz326HLbrTGSTpRgczPlWThJTWXDFlWO +RTKivnHJrGJKUARZ/Fj/Er6HHoOiHkB+IXz9lRidd0AekBtzvJtmoQPKklmhCDs smH0O4tsFxREpRt8gHKC3WOwMQ0oPe3qF5iCr9IhsCanAWt0karbmi3xKU6EPU+u FCN1EgrgSBIWez9FFJbNQ6PRHnZUipJXhmXnhHAoZZg8clXo3FVy1aN4bOUhuSjP VdVzH2kf3eLaVMiZeLfwGoa7qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD68Gf4f zEfJSwMln5osrPx1/VrAMB8GA1UdIwQYMBaAFG7LiUjLEnQtxh9kVBAr8xrGqE/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUIxNC9CNDFBNTgzODE4 RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RDM0dIMlJVRUN2ekdzYW9U OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JzdUpTTXNTZEMzR0gyUlVFQ3Z6R3Nhb1Q5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIxNC9CNDFBNTgzODE4RDExMUU3OTcwQ0VDMTdDNEY5QUUwMi9ic3VKU01zU2RD M0dIMlJVRUN2ekdzYW9UOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8dgrUTwB7eJ5VIBTC+ylx2yXHF3HMdL8S1xY3lvGg5wgSe1/3qIqA KMtxIWpmhmxw03YbBbvp9RFIezaOmOWFYQE8+hfeYO9/QavWH9pWnW3Y08K3LTIq ydEd5h+FGbUpszrEtjfCdVbNhO0d+mYDMpHh/3o7gU3QXX3k3LRNbIFpopdSXyBS VMSylLQnLUYxvMYr6P3JfbdoyguV/99jNr1Kz7dGmiiXrB2p6ea35bGe/8t/Rip/ Lg4r5njeNliJBPeCLT2OJuqAJeiaDXgBPSFhbRhIt6EE5WWp5o8WzCXnG8TekWNn XJ1jSwgbfcdCdHUzS9mqJAQ2cDagrVFU -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:08 2025 by rpki-client