$ rpki-client -vvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft File: BQIPvxAg_WO-V9oblwSwqoEDREo.mft (raw, json) Hash identifier: EDiNkB+sp/ldcSojk4MEDxZFXQ6MHyVCDUqFrJn36bc= Subject key identifier: 47:45:80:85:9C:91:24:99:F9:60:21:DC:9C:9F:BD:F6:17:87:C1:58 Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A Certificate issuer: /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A Certificate serial: 1DAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft Manifest number: 1D90 Signing time: Tue 12 May 2026 16:07:41 +0000 Manifest this update: Tue 12 May 2026 16:07:40 +0000 Manifest next update: Tue 19 May 2026 16:07:40 +0000 Files and hashes: 1: BQIPvxAg_WO-V9oblwSwqoEDREo.crl (hash: odOcLHitdAndUUatnzW0IZKP3vofxPB5xf1aXhL02+8=) 2: 8E652A7AC77611E68B1CDE6AC4F9AE02.roa (hash: HRZCFiI8waPHBtIDiuVXCKRbNp4ZHUWwRgIvIZoEOO4=) 3: 4CBDBA5E3F0011F18130B663C8833773.roa (hash: MYIZdYIrRMX8GOTnK8Yq+Fr2Q47kM6T/tbwrjmOwZ2A=) 4: 6C2E2E523E6311F18F888BA6CC833773.roa (hash: k6TV0drglGkeepv/SOoKqxe07dXcAT0h3N9k3dOCIkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:07:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7594 (0x1daa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A140, serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A Validity Not Before: May 12 16:07:40 2026 GMT Not After : May 19 16:07:40 2026 GMT Subject: CN=6a03504c-0a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:29:be:d0:c2:ae:94:1e:6a:fe:6d:35:57:57: 71:9b:2d:39:dc:84:91:e0:68:c9:9f:83:9d:7e:b7: c9:3a:49:98:e1:d9:29:0e:23:18:20:ce:d6:9e:00: ea:8d:25:53:ef:48:f3:f7:47:2d:f7:20:98:1f:ac: 6d:d3:8d:21:f0:9a:ce:75:db:90:e8:63:da:6e:6e: 9c:af:6c:3b:16:00:1c:2f:09:4d:29:2a:91:40:53: af:fe:24:d4:6a:d6:c2:0a:64:6b:2b:8e:2b:7c:11: df:2e:de:40:f1:29:95:1a:5c:6f:e8:49:95:f8:43: 6c:d5:37:9f:94:78:4c:0b:dc:98:f5:b0:74:8b:c9: ac:e3:13:99:6c:1c:da:ea:ff:83:38:a8:c7:dc:1a: 13:52:94:32:36:ed:84:16:7b:a5:45:79:23:9d:d0: 96:89:1c:02:bc:6e:7a:f7:1a:36:d7:a2:2c:26:d7: dc:de:c2:7f:63:50:7a:63:60:37:10:c1:bd:3a:2a: e3:ee:0a:02:88:ed:f5:8c:43:53:68:e4:f0:0f:8f: 8e:9e:57:6e:c9:07:e6:cf:3a:ca:39:99:7b:31:7d: d7:92:3d:f6:f1:ce:d1:4c:78:d1:ae:b0:86:46:bc: 1c:ee:2b:30:0e:fc:cb:df:c2:e2:10:98:09:28:38: ae:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:45:80:85:9C:91:24:99:F9:60:21:DC:9C:9F:BD:F6:17:87:C1:58 X509v3 Authority Key Identifier: keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ef:b4:4b:88:cc:a6:19:6c:f0:a9:5d:6f:91:dd:a3:4a:17:e7: a6:d4:c8:2b:00:9d:33:05:8d:15:6d:93:56:27:93:85:a5:45: 27:b9:b9:9e:96:cb:67:60:c5:6d:75:c1:6b:83:20:f8:88:5b: ac:70:62:46:d6:8f:44:53:5c:cc:1a:b6:4c:5a:95:c2:f8:11: b3:e3:da:e3:e0:62:51:2b:b9:30:75:fe:e8:91:6a:bb:0c:a5: c5:b4:71:93:e6:ad:64:71:a9:a2:ef:e8:94:2b:cf:4e:40:7a: c5:65:ef:5c:da:0e:0d:0f:9a:48:b2:d1:1a:4a:88:c6:2c:91: da:e9:95:af:98:a8:85:78:2f:7b:ac:97:12:ee:3f:a3:72:4b: bf:32:8e:a2:8b:96:05:8e:0f:14:3f:ce:77:b6:5e:46:17:bc: f7:c5:bb:b6:35:7c:77:e8:e5:1c:a9:d9:b0:4d:33:e0:81:23: dc:87:0f:7a:f3:8a:24:0d:46:d0:6b:9e:13:43:1f:79:06:67: 5b:86:7a:ca:50:ce:ef:44:b1:8c:c6:87:76:07:86:ed:35:9f: 60:48:f3:5a:5c:18:81:be:21:db:69:94:7a:f6:f6:31:4c:f8: 5d:18:83:4a:3a:80:0c:ab:43:56:e3:a6:40:5c:4f:09:41:b2: 57:08:5c:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExNDAxMTAvBgNVBAUTKDA1MDIwRkJGMTAyMEZENjNCRTU3REExQjk3MDRCMEFB ODEwMzQ0NEEwHhcNMjYwNTEyMTYwNzQwWhcNMjYwNTE5MTYwNzQwWjAYMRYwFAYD VQQDEw02YTAzNTA0Yy0wYTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCm+0MKulB5q/m01V1dxmy053ISR4GjJn4OdfrfJOkmY4dkpDiMYIM7WngDq jSVT70jz90ct9yCYH6xt040h8JrOdduQ6GPabm6cr2w7FgAcLwlNKSqRQFOv/iTU atbCCmRrK44rfBHfLt5A8SmVGlxv6EmV+ENs1TeflHhMC9yY9bB0i8ms4xOZbBza 6v+DOKjH3BoTUpQyNu2EFnulRXkjndCWiRwCvG569xo216IsJtfc3sJ/Y1B6Y2A3 EMG9Oirj7goCiO31jENTaOTwD4+OnlduyQfmzzrKOZl7MX3Xkj328c7RTHjRrrCG Rrwc7iswDvzL38LiEJgJKDiugQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEdFgIWc kSSZ+WAh3JyfvfYXh8FYMB8GA1UdIwQYMBaAFAUCD78QIP1jvlfaG5cEsKqBA0RK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTE0MC9DQzFEQ0NFOEM3 NzQxMUU2OTgxNkIwNjhDNEY5QUUwMi9CUUlQdnhBZ19XTy1WOW9ibHdTd3FvRURS RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRSVB2eEFnX1dPLVY5b2Jsd1N3cW9FRFJFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTE0MC9DQzFEQ0NFOEM3NzQxMUU2OTgxNkIwNjhDNEY5QUUwMi9CUUlQdnhBZ19X Ty1WOW9ibHdTd3FvRURSRW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA77RLiMymGWzwqV1vkd2jShfnptTIKwCdMwWNFW2TVieThaVFJ7m5npbLZ2DF bXXBa4Mg+IhbrHBiRtaPRFNczBq2TFqVwvgRs+Pa4+BiUSu5MHX+6JFquwylxbRx k+atZHGpou/olCvPTkB6xWXvXNoODQ+aSLLRGkqIxiyR2umVr5iohXgve6yXEu4/ o3JLvzKOoouWBY4PFD/Od7ZeRhe898W7tjV8d+jlHKnZsE0z4IEj3IcPevOKJA1G 0GueE0MfeQZnW4Z6ylDO70SxjMaHdgeG7TWfYEjzWlwYgb4h22mUevb2MUz4XRiD SjqADKtDVuOmQFxPCUGyVwhcaw== -----END CERTIFICATE-----Generated at Wed May 13 00:56:06 2026 by rpki-client