$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft File: BQIPvxAg_WO-V9oblwSwqoEDREo.mft (raw, json) Hash identifier: Ny+TnZOqQUvTGOZ+n0y7olu2ZnGYsx1nFc013l5HSuk= Subject key identifier: 13:AB:32:D3:15:6F:40:CA:98:18:48:D2:E4:DB:01:09:E3:C0:E4:AC Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A Certificate issuer: /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A Certificate serial: 1E00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft Manifest number: 1DDD Signing time: Thu 24 Sep 2026 16:04:44 +0000 Manifest this update: Thu 24 Sep 2026 16:04:43 +0000 Manifest next update: Thu 01 Oct 2026 16:04:43 +0000 Files and hashes: 1: BQIPvxAg_WO-V9oblwSwqoEDREo.crl (hash: SlXm+mqdcPW1MjWyfIwl1+gNc62fzVh/ztC0guteFZw=) 2: 4CBDBA5E3F0011F18130B663C8833773.roa (hash: Fj+bRfSzcCaCjFqPxjs4ZGVm3cIIfQYKMPXbwmtBTf8=) 3: 6C2E2E523E6311F18F888BA6CC833773.roa (hash: 2AL1mCcZDO9+FxQroyY8lnW+LSs0R3w8lh7IwUkJ1+M=) 4: 52F3327C86FF11F194514C90ABEE528E.roa (hash: /IVngDfy+n15uFsKjLEQiuYoVw+4Q06X5acY7hxk1W0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7680 (0x1e00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A140, serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A Validity Not Before: Sep 24 16:04:43 2026 GMT Not After : Oct 1 16:04:43 2026 GMT Subject: CN=6ab54a1c-e466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f9:d0:ec:d7:23:19:e6:34:5d:47:8e:e7:b2: 6a:71:0f:2e:92:32:39:72:98:f0:e5:5c:00:27:aa: 19:88:59:82:38:d5:dc:06:e0:ab:0b:35:28:b9:9b: 52:22:6f:c9:da:e3:d0:f2:fb:a2:af:fe:19:f7:17: a0:b7:43:9e:54:91:97:4f:43:fc:e9:97:6c:1e:78: d6:4b:dc:64:9b:f1:ed:7a:db:97:7e:3b:4b:cc:ae: 83:68:ac:73:60:2d:9a:c4:44:58:ad:94:ad:1e:fb: e8:98:ca:63:6c:03:75:e7:7a:53:8d:63:c5:52:4f: 70:49:9a:72:fc:d2:10:c8:2b:ea:38:24:ce:6c:a5: be:2c:08:d9:94:5b:20:74:6b:9d:1b:7d:3e:6c:a2: 43:e1:a6:56:c0:36:22:84:88:b7:e7:5d:52:ff:d7: b2:6b:8a:9d:f7:c9:ac:5d:36:97:ff:c1:64:f6:cb: b7:fe:fe:7b:9a:72:da:1f:6d:56:8a:39:6d:7a:21: e4:e8:70:a6:cd:74:41:1e:05:b6:ed:c1:6d:e8:f1: ec:42:59:74:d1:21:b8:3d:a8:5a:88:18:40:30:aa: 37:81:32:75:3c:dd:9e:73:a8:b1:f4:55:8c:12:12: 70:d0:8e:44:cd:ac:90:eb:5e:70:f3:6c:4f:66:c0: 4d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AB:32:D3:15:6F:40:CA:98:18:48:D2:E4:DB:01:09:E3:C0:E4:AC X509v3 Authority Key Identifier: keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:0f:87:77:e1:06:36:0e:fd:9e:83:74:c4:14:a5:60:de:9b: f3:14:b7:0a:8f:82:d8:ee:3f:6c:c2:80:6a:de:7e:8a:f7:7c: 73:af:df:b7:ba:1b:9c:87:89:c4:7e:00:2a:6c:e5:b7:51:08: 38:2f:a9:8a:73:21:e6:d1:6c:03:49:5b:a5:b9:36:6e:81:aa: 86:a4:85:0c:4e:76:e0:6d:2a:76:59:4f:76:d8:80:93:74:c4: 7d:40:a9:0d:19:74:84:5a:de:68:9b:ea:ea:ba:8a:31:0c:f6: 30:16:7e:9f:df:e8:a8:a6:ae:ce:0f:9e:b2:3f:0c:a7:bf:9b: 4a:64:90:b6:7d:c7:bd:dd:d0:d0:fb:f6:b5:f1:6d:df:e2:7c: 40:dd:3f:cb:2a:9b:ff:08:f8:e2:88:94:31:5c:44:e2:ae:8f: b2:21:de:f9:fd:6e:aa:c0:20:fa:a2:1a:6a:db:30:66:f9:7f: 10:fa:63:ef:03:1f:c5:35:d6:bc:14:4b:0e:1b:c6:d4:5c:77: ed:73:3c:89:18:94:f9:e1:4c:14:0d:7e:a4:e3:81:84:84:c3: 6c:70:ff:07:14:bb:34:1b:aa:c5:b1:96:f0:e2:3b:08:49:ae: c8:b6:97:86:91:37:d5:a5:56:6f:07:aa:4f:a6:78:e4:eb:3f: ac:2e:0c:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExNDAxMTAvBgNVBAUTKDA1MDIwRkJGMTAyMEZENjNCRTU3REExQjk3MDRCMEFB ODEwMzQ0NEEwHhcNMjYwOTI0MTYwNDQzWhcNMjYxMDAxMTYwNDQzWjAYMRYwFAYD VQQDEw02YWI1NGExYy1lNDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvnQ7NcjGeY0XUeO57JqcQ8ukjI5cpjw5VwAJ6oZiFmCONXcBuCrCzUouZtS Im/J2uPQ8vuir/4Z9xegt0OeVJGXT0P86ZdsHnjWS9xkm/HtetuXfjtLzK6DaKxz YC2axERYrZStHvvomMpjbAN153pTjWPFUk9wSZpy/NIQyCvqOCTObKW+LAjZlFsg dGudG30+bKJD4aZWwDYihIi3511S/9eya4qd98msXTaX/8Fk9su3/v57mnLaH21W ijlteiHk6HCmzXRBHgW27cFt6PHsQll00SG4PahaiBhAMKo3gTJ1PN2ec6ix9FWM EhJw0I5EzayQ615w82xPZsBN5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBOrMtMV b0DKmBhI0uTbAQnjwOSsMB8GA1UdIwQYMBaAFAUCD78QIP1jvlfaG5cEsKqBA0RK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTE0MC9DQzFEQ0NFOEM3 NzQxMUU2OTgxNkIwNjhDNEY5QUUwMi9CUUlQdnhBZ19XTy1WOW9ibHdTd3FvRURS RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRSVB2eEFnX1dPLVY5b2Jsd1N3cW9FRFJFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTE0MC9DQzFEQ0NFOEM3NzQxMUU2OTgxNkIwNjhDNEY5QUUwMi9CUUlQdnhBZ19X Ty1WOW9ibHdTd3FvRURSRW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIA+Hd+EGNg79noN0xBSlYN6b8xS3Co+C2O4/bMKAat5+ivd8c6/ft7obnIeJ xH4AKmzlt1EIOC+pinMh5tFsA0lbpbk2boGqhqSFDE524G0qdllPdtiAk3TEfUCp DRl0hFreaJvq6rqKMQz2MBZ+n9/oqKauzg+esj8Mp7+bSmSQtn3Hvd3Q0Pv2tfFt 3+J8QN0/yyqb/wj44oiUMVxE4q6PsiHe+f1uqsAg+qIaatswZvl/EPpj7wMfxTXW vBRLDhvG1Fx37XM8iRiU+eFMFA1+pOOBhITDbHD/BxS7NBuqxbGW8OI7CEmuyLaX hpE31aVWbweqT6Z45Os/rC4MhA== -----END CERTIFICATE-----Generated at Thu Sep 24 22:06:34 2026 by rpki-client