
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft
File: bsuJSMsSdC3GH2RUECvzGsaoT9U.mft (raw, json)
Hash identifier: xImng4Zz7D0+lWqB2zquHaOXNZqwwV8qbvGZz00uhmA=
Subject key identifier: F0:44:94:C0:22:84:14:3D:F4:69:81:3D:D8:9D:66:E0:A8:31:20:03
Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5
Certificate issuer: /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5
Certificate serial: 1C2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft
Manifest number: 1C1F
Signing time: Sun 20 Sep 2026 16:10:52 +0000
Manifest this update: Sun 20 Sep 2026 16:10:52 +0000
Manifest next update: Sun 27 Sep 2026 16:10:52 +0000
Files and hashes: 1: bsuJSMsSdC3GH2RUECvzGsaoT9U.crl (hash: v5JQWLGrZuqeUdqACDmUZ0LfF5cudFmSI2WK8mh7F84=)
2: FB50E18695EA11F1B92F63745111F970.roa (hash: t3w9O4Dfu7AG8dbAGYPwX/t7iXEjVhcERJqD/yrmEzo=)
3: DCDCF87AE17511E8886B1878C4F9AE02.roa (hash: dbhJBJJgQitq2uubCQdkkeqRrY/kLqfV4bkZFvMv73k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl
rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7211 (0x1c2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161B14, serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5
Validity
Not Before: Sep 20 16:10:52 2026 GMT
Not After : Sep 27 16:10:52 2026 GMT
Subject: CN=6ab0058c-45a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:77:48:3a:74:01:63:85:5e:e3:37:f1:b6:d9:
01:f4:2a:33:29:66:ef:ce:b9:87:8f:92:90:ab:41:
8c:2a:91:bb:a9:de:2a:14:b3:46:6c:15:c0:61:2b:
55:34:c6:31:b0:84:db:40:ee:ed:35:aa:a6:0e:a5:
de:22:01:33:46:ea:50:fa:93:63:1b:66:3d:07:2e:
d9:8c:94:31:43:66:79:d2:c6:17:33:20:a9:d4:40:
a3:dd:6a:5f:97:1a:54:43:2a:d2:64:10:48:cd:14:
31:17:96:89:e8:62:20:7d:19:e6:1b:ea:fb:a7:2f:
11:3e:d2:58:75:8d:2f:e7:70:ae:8e:d9:7f:80:4e:
cc:ef:29:28:fa:f4:62:07:e9:33:b8:63:45:5f:8c:
f2:f3:7b:b1:a0:0d:5a:64:00:df:d0:37:7a:03:bc:
4d:c4:78:04:b4:87:d5:ee:49:30:38:f6:61:b6:d5:
68:c3:1f:e3:77:4d:4c:a0:ce:c2:1f:ee:78:34:15:
4e:1d:38:ab:12:2c:97:9a:d7:db:fa:05:93:10:fe:
f4:84:2a:48:2b:d3:44:f8:87:7c:50:25:d4:a2:18:
5e:31:33:5d:85:b1:86:74:74:47:7a:71:79:64:ca:
36:4a:70:63:4e:a6:dc:d7:17:14:74:ed:88:e9:d8:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:44:94:C0:22:84:14:3D:F4:69:81:3D:D8:9D:66:E0:A8:31:20:03
X509v3 Authority Key Identifier:
keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:f2:ec:bd:f7:69:b5:93:63:0e:d2:48:b0:10:b7:bf:33:ca:
ca:ec:2d:ad:8e:20:e0:1b:c3:33:19:ba:b8:4c:7d:72:6c:1e:
07:28:81:86:ac:2c:57:15:f4:99:74:58:4d:4c:72:c9:b2:b3:
c5:8c:1a:ce:95:b0:31:24:d4:74:fd:29:7f:7d:d1:2f:78:91:
15:ba:cc:e9:e0:73:bb:87:87:94:e3:cf:fa:c6:e2:ce:d2:1c:
9d:78:f1:da:99:b8:d3:7f:76:ec:08:aa:eb:23:f0:c1:e2:39:
68:14:e9:e1:85:98:09:8f:4f:5b:39:40:c6:73:24:5d:3d:53:
85:88:4d:f9:50:60:9b:85:5a:8c:5c:71:e5:59:b7:8f:39:e5:
d8:7a:3e:3f:e7:85:85:ad:ec:36:d3:94:c4:77:f1:17:3d:5f:
29:d6:c8:92:9d:e6:a0:f9:8f:63:79:6a:dc:74:b2:3c:0c:88:
47:7e:47:ea:4c:e2:3b:4a:77:d9:4c:09:c4:bb:1d:9d:91:af:
6b:5e:8d:53:7d:7d:49:11:91:32:00:aa:5f:28:a1:9d:ea:66:
b3:9e:90:7d:7b:54:09:4e:92:98:05:02:5f:1c:3b:15:87:a9:
9e:08:38:a8:23:d3:0b:f8:05:7e:96:9b:d2:21:2a:59:f5:ab:
d7:7f:b2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:47:06 2026 by rpki-client