$ rpki-client -vvf rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft File: BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft (raw, json) Hash identifier: mDLvAYxnL8iRxgRIFdm1bE3gCR3Bbo0htbAEur6/1cw= Subject key identifier: 97:BE:02:14:40:ED:1B:14:16:C0:CF:4E:28:AE:A7:0D:84:F9:C4:DB Authority key identifier: 05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB Certificate issuer: /CN=A915E77C/serialNumber=05037E4CDE44EC6642C4169FA851372D78FBFCAB Certificate serial: 02B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft Manifest number: 02AB Signing time: Thu 23 Jul 2026 02:36:29 +0000 Manifest this update: Thu 23 Jul 2026 02:36:28 +0000 Manifest next update: Thu 30 Jul 2026 02:36:28 +0000 Files and hashes: 1: BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl (hash: pKO3XD48fNL6bh2rUC1c7eK9MNuvL65rBbmpZ837rxM=) 2: A7DDB8A23E6611F19FA73FF6CD833773.roa (hash: sE7hyGMb+RZELa0prUkJH8bGHJ/zMp5lIGg2bRbPuWY=) 3: A20DDFE2725911ED8CB4D763C4F9AE02.roa (hash: a5rkQCdGd6WLgCsLjH9k9RC6TMcBTGsLeQcwPsfq9Ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 690 (0x2b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E77C, serialNumber=05037E4CDE44EC6642C4169FA851372D78FBFCAB Validity Not Before: Jul 23 02:36:28 2026 GMT Not After : Jul 30 02:36:28 2026 GMT Subject: CN=6a617e2d-d5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:12:e7:0a:0c:cf:c8:99:79:8e:5a:a3:a1:e0: 22:13:f4:e8:88:46:6c:46:b1:c6:ae:cc:b7:67:50: 7c:51:31:a5:11:e2:a1:15:df:8b:92:11:08:5a:be: 70:1f:1a:2d:73:98:19:2f:aa:99:27:28:bc:3a:2e: 3c:b9:f6:13:7f:26:9b:10:d7:f5:63:45:97:ab:eb: d5:24:40:1d:a3:80:b2:fa:05:88:e1:a8:f7:c3:80: 13:18:9d:70:5b:10:31:f6:4e:a2:25:c2:ce:44:a4: 47:85:bb:f3:3b:89:cc:a1:23:9a:1f:f9:0a:5c:62: 27:68:4c:58:61:06:63:53:82:7b:4c:b3:34:48:c6: 75:55:78:94:21:89:f3:68:0b:2b:35:a5:2a:a4:4f: 1a:1c:5a:82:6f:ae:dd:78:2c:57:f8:c4:f5:88:ec: 67:a2:e1:2b:bc:d8:3b:74:b3:9e:a4:85:e7:98:a7: bf:f9:4b:7f:4b:a1:41:41:47:36:74:f8:da:3e:42: 1c:e2:0d:34:ed:39:70:0c:d0:c7:27:33:ed:0c:fe: e8:5a:dc:a7:8d:ff:8e:fc:49:03:67:d3:55:ed:9d: 28:55:d4:7b:f3:26:5c:73:9d:56:dd:6b:34:e1:e4: 3b:1b:0e:10:9b:6e:2b:90:99:7a:91:ea:0e:d4:d9: 76:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:BE:02:14:40:ED:1B:14:16:C0:CF:4E:28:AE:A7:0D:84:F9:C4:DB X509v3 Authority Key Identifier: keyid:05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:c1:db:ba:2c:67:07:1d:db:34:4b:0c:6c:f4:15:7b:9d:f6: 5b:88:7a:83:7e:47:5f:56:96:64:7c:5b:30:48:ee:db:51:cc: 14:26:5f:c0:08:c1:16:a5:4e:f9:5d:c6:b0:a6:4e:b0:78:16: ba:3e:42:a0:f8:ae:74:29:27:85:a7:06:70:0f:cd:58:b2:bf: 99:b2:00:0d:d8:9b:bc:9d:ce:6a:a1:c0:5c:8b:74:aa:b6:b0: 4c:42:6c:dc:69:2c:40:ce:a5:7b:8a:58:c4:a7:60:42:c3:bb: a1:6c:97:db:ac:78:02:94:70:f6:20:d3:15:8b:5d:7a:44:20: 80:98:03:6d:e6:ba:d6:5a:f2:0c:90:71:26:5e:3e:5d:a0:4f: 21:9b:80:f8:e6:01:20:c0:9e:0e:e6:1f:4a:a7:27:13:54:21: e7:b0:65:ff:99:f8:1d:97:f4:6e:72:36:b1:ef:63:12:09:c4: e1:e2:1e:77:59:59:ab:34:6b:d2:94:dd:3a:4c:9d:90:78:b9: b1:fb:a6:62:f5:56:1b:6e:6f:a9:76:72:6c:74:dd:01:2c:30: 55:86:de:d5:1d:5d:25:a0:fe:a5:c7:df:8a:f7:80:41:98:fc: 7b:db:db:72:d7:fc:da:2e:28:a1:a3:1e:a3:06:00:8a:45:a6: 20:36:d9:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU3N0MxMTAvBgNVBAUTKDA1MDM3RTRDREU0NEVDNjY0MkM0MTY5RkE4NTEzNzJE NzhGQkZDQUIwHhcNMjYwNzIzMDIzNjI4WhcNMjYwNzMwMDIzNjI4WjAYMRYwFAYD VQQDEw02YTYxN2UyZC1kNWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xLnCgzPyJl5jlqjoeAiE/ToiEZsRrHGrsy3Z1B8UTGlEeKhFd+LkhEIWr5w Hxotc5gZL6qZJyi8Oi48ufYTfyabENf1Y0WXq+vVJEAdo4Cy+gWI4aj3w4ATGJ1w WxAx9k6iJcLORKRHhbvzO4nMoSOaH/kKXGInaExYYQZjU4J7TLM0SMZ1VXiUIYnz aAsrNaUqpE8aHFqCb67deCxX+MT1iOxnouErvNg7dLOepIXnmKe/+Ut/S6FBQUc2 dPjaPkIc4g007TlwDNDHJzPtDP7oWtynjf+O/EkDZ9NV7Z0oVdR78yZcc51W3Ws0 4eQ7Gw4Qm24rkJl6keoO1Nl2jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJe+AhRA 7RsUFsDPTiiupw2E+cTbMB8GA1UdIwQYMBaAFAUDfkzeROxmQsQWn6hRNy14+/yr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTc3Qy9GNzAwQTlFQzcy NTYxMUVEOTAyMTE1NjJDNEY5QUUwMi9CUU4tVE41RTdHWkN4QmFmcUZFM0xYajdf S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRTi1UTjVFN0daQ3hCYWZxRkUzTFhqN19Lcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTc3Qy9GNzAwQTlFQzcyNTYxMUVEOTAyMTE1NjJDNEY5QUUwMi9CUU4tVE41RTdH WkN4QmFmcUZFM0xYajdfS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp8HbuixnBx3bNEsMbPQVe532W4h6g35HX1aWZHxbMEju21HMFCZfwAjBFqVO +V3GsKZOsHgWuj5CoPiudCknhacGcA/NWLK/mbIADdibvJ3OaqHAXIt0qrawTEJs 3GksQM6le4pYxKdgQsO7oWyX26x4ApRw9iDTFYtdekQggJgDbea61lryDJBxJl4+ XaBPIZuA+OYBIMCeDuYfSqcnE1Qh57Bl/5n4HZf0bnI2se9jEgnE4eIed1lZqzRr 0pTdOkydkHi5sfumYvVWG25vqXZybHTdASwwVYbe1R1dJaD+pcffiveAQZj8e9vb ctf82i4ooaMeowYAikWmIDbZZQ== -----END CERTIFICATE-----Generated at Fri Jul 24 06:04:02 2026 by rpki-client