$ rpki-client -vvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft File: BQIPvxAg_WO-V9oblwSwqoEDREo.mft (raw, json) Hash identifier: KGnQjh3ODzTEaHPTn7+ugscF70FMV2/39RMZgPVF1YE= Subject key identifier: FE:10:66:02:BC:0B:19:12:98:1E:BF:2A:23:43:DC:6C:A8:AA:D2:70 Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A Certificate issuer: /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A Certificate serial: 1D87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft Manifest number: 1D72 Signing time: Tue 24 Mar 2026 16:03:08 +0000 Manifest this update: Tue 24 Mar 2026 16:03:07 +0000 Manifest next update: Tue 31 Mar 2026 16:03:07 +0000 Files and hashes: 1: BQIPvxAg_WO-V9oblwSwqoEDREo.crl (hash: P9YqPcft5NrIhnWtiWj54bCSq69x2Mvrlzf05HjdyVY=) 2: 8E652A7AC77611E68B1CDE6AC4F9AE02.roa (hash: HRZCFiI8waPHBtIDiuVXCKRbNp4ZHUWwRgIvIZoEOO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7559 (0x1d87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A140, serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A Validity Not Before: Mar 24 16:03:07 2026 GMT Not After : Mar 31 16:03:07 2026 GMT Subject: CN=69c2b5bc-70d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:50:03:74:3b:20:58:36:59:7b:85:20:c2:2b: 2b:5a:12:db:ff:cd:0a:ca:b2:98:3a:c7:14:fe:bf: f2:59:5c:0b:ba:6a:8c:9e:83:14:84:03:89:38:f0: 70:04:ba:58:b3:29:75:5a:64:1b:d9:3c:97:fb:12: 11:1b:80:d0:7d:32:55:02:d0:f5:70:9e:07:59:77: 79:36:a2:1e:02:11:21:85:0c:00:9c:e2:5e:32:10: e4:51:50:db:d1:65:a2:62:93:16:58:c6:04:b4:9d: 51:67:ca:12:13:0c:3f:98:44:a9:01:36:8c:3c:0e: b5:42:f3:12:3c:83:dd:71:51:af:5e:8a:a6:99:aa: 15:45:2c:96:90:89:41:ac:d3:0f:0d:c8:04:08:1d: 43:0b:09:5c:df:01:42:8e:d7:93:c9:9f:5e:3a:1d: 24:4b:75:14:76:e7:14:9e:38:e1:c0:e6:b6:9d:9f: 71:b2:c8:f1:55:74:ea:ad:29:0f:62:10:2b:f8:79: 78:5a:7e:64:80:bd:83:26:b6:9f:25:5e:3c:06:d1: 0d:71:15:f7:62:30:a5:e8:ae:4c:ce:27:8a:8d:5d: 6f:c7:1e:5f:af:78:a0:cc:86:c0:5e:fe:e7:a8:1d: 66:25:2c:d5:f5:ba:ff:70:09:f7:c7:ec:77:af:a6: fe:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:10:66:02:BC:0B:19:12:98:1E:BF:2A:23:43:DC:6C:A8:AA:D2:70 X509v3 Authority Key Identifier: keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:ae:1a:f3:23:93:df:5d:40:ca:9c:e4:90:5c:c8:8c:dc:17: 94:00:52:01:09:23:4f:4d:15:c3:56:70:a1:52:24:7e:c7:29: ae:31:35:b6:14:79:73:2c:2d:23:3d:dd:1d:e0:58:08:1e:d7: fd:50:0d:14:34:ca:3e:0c:6a:46:e5:02:69:ad:77:3a:39:f9: 9a:ac:78:04:4e:1c:16:f4:b8:c3:00:6b:12:5f:2b:f8:b8:48: 28:b8:91:50:3a:74:51:c4:ab:60:54:8e:a2:a4:03:6b:f3:72: 1e:54:03:77:e3:6d:89:37:65:22:c9:77:29:9b:82:3e:ba:e2: 0e:25:71:d4:3c:3a:45:58:59:8a:e9:42:e2:a7:4b:39:da:c9: 5d:60:13:73:eb:06:c9:84:37:54:d5:bc:fe:b7:f3:80:2f:a5: 33:c4:2f:6c:ad:2c:df:20:de:ce:e2:c4:46:45:81:3f:94:99: 9b:7c:9b:b0:ac:75:32:bb:e6:95:37:6f:49:bb:65:21:f1:18: e4:c9:e9:4a:5f:5c:84:9a:0d:d7:d2:3d:ea:5d:ed:ba:ec:7f: 09:bb:98:1e:9d:81:5c:f4:f9:38:1b:9d:06:b1:d0:28:41:79: 3d:39:81:18:14:25:07:fa:8b:83:4a:25:17:a9:5b:02:03:48: c4:0c:68:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExNDAxMTAvBgNVBAUTKDA1MDIwRkJGMTAyMEZENjNCRTU3REExQjk3MDRCMEFB ODEwMzQ0NEEwHhcNMjYwMzI0MTYwMzA3WhcNMjYwMzMxMTYwMzA3WjAYMRYwFAYD VQQDEw02OWMyYjViYy03MGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA41ADdDsgWDZZe4UgwisrWhLb/80KyrKYOscU/r/yWVwLumqMnoMUhAOJOPBw BLpYsyl1WmQb2TyX+xIRG4DQfTJVAtD1cJ4HWXd5NqIeAhEhhQwAnOJeMhDkUVDb 0WWiYpMWWMYEtJ1RZ8oSEww/mESpATaMPA61QvMSPIPdcVGvXoqmmaoVRSyWkIlB rNMPDcgECB1DCwlc3wFCjteTyZ9eOh0kS3UUducUnjjhwOa2nZ9xssjxVXTqrSkP YhAr+Hl4Wn5kgL2DJrafJV48BtENcRX3YjCl6K5MzieKjV1vxx5fr3igzIbAXv7n qB1mJSzV9br/cAn3x+x3r6b+wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP4QZgK8 CxkSmB6/KiND3GyoqtJwMB8GA1UdIwQYMBaAFAUCD78QIP1jvlfaG5cEsKqBA0RK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTE0MC9DQzFEQ0NFOEM3 NzQxMUU2OTgxNkIwNjhDNEY5QUUwMi9CUUlQdnhBZ19XTy1WOW9ibHdTd3FvRURS RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRSVB2eEFnX1dPLVY5b2Jsd1N3cW9FRFJFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTE0MC9DQzFEQ0NFOEM3NzQxMUU2OTgxNkIwNjhDNEY5QUUwMi9CUUlQdnhBZ19X Ty1WOW9ibHdTd3FvRURSRW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAK4a8yOT311AypzkkFzIjNwXlABSAQkjT00Vw1ZwoVIkfscprjE1thR5cywt Iz3dHeBYCB7X/VANFDTKPgxqRuUCaa13Ojn5mqx4BE4cFvS4wwBrEl8r+LhIKLiR UDp0UcSrYFSOoqQDa/NyHlQDd+NtiTdlIsl3KZuCPrriDiVx1Dw6RVhZiulC4qdL OdrJXWATc+sGyYQ3VNW8/rfzgC+lM8QvbK0s3yDezuLERkWBP5SZm3ybsKx1Mrvm lTdvSbtlIfEY5MnpSl9chJoN19I96l3tuux/CbuYHp2BXPT5OBudBrHQKEF5PTmB GBQlB/qLg0olF6lbAgNIxAxoCg== -----END CERTIFICATE-----Generated at Thu Mar 26 07:14:06 2026 by rpki-client