$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft File: BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft (raw, json) Hash identifier: 7dEUy4NVtA1hRRE1I2r+zEBNSHqXKVkYXZBJ6vjnirA= Subject key identifier: 59:AC:A3:E8:04:95:61:31:FE:AC:D8:68:20:D9:DF:30:70:22:7B:CD Authority key identifier: 05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB Certificate issuer: /CN=A915E77C/serialNumber=05037E4CDE44EC6642C4169FA851372D78FBFCAB Certificate serial: 02D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft Manifest number: 02CB Signing time: Wed 23 Sep 2026 01:06:00 +0000 Manifest this update: Wed 23 Sep 2026 01:06:00 +0000 Manifest next update: Wed 30 Sep 2026 01:06:00 +0000 Files and hashes: 1: BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl (hash: 5yHUiznn/hGkn6UC1Mp8kG18BDr03t0HAlrgcx73nSw=) 2: A20DDFE2725911ED8CB4D763C4F9AE02.roa (hash: a5rkQCdGd6WLgCsLjH9k9RC6TMcBTGsLeQcwPsfq9Ws=) 3: A7DDB8A23E6611F19FA73FF6CD833773.roa (hash: sE7hyGMb+RZELa0prUkJH8bGHJ/zMp5lIGg2bRbPuWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 722 (0x2d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E77C, serialNumber=05037E4CDE44EC6642C4169FA851372D78FBFCAB Validity Not Before: Sep 23 01:06:00 2026 GMT Not After : Sep 30 01:06:00 2026 GMT Subject: CN=6ab325f8-48fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:66:fe:82:15:0a:27:d1:41:1e:1b:7e:22:cc: 4a:eb:51:8c:e1:9e:d5:57:3f:50:d1:21:1c:74:ce: b0:58:a6:8c:4f:ef:1d:e9:da:5d:dc:ae:85:29:b1: 39:0b:55:dc:ec:10:a0:48:e2:d4:f3:dc:f3:09:78: 53:81:2c:9a:85:08:cf:ec:f4:20:1f:c0:51:9b:6c: fb:35:f1:2b:4c:c6:84:6c:e5:46:31:44:17:9a:e3: fa:89:65:ee:0e:19:74:3e:27:b6:65:c1:88:c3:b0: 66:40:5c:96:7e:09:82:d5:16:7c:78:cc:10:8e:b0: de:ca:bb:8a:35:37:32:10:e7:d3:96:f2:1f:bd:95: 38:fa:d1:e9:c6:53:ba:1f:9f:cf:49:3f:0a:c2:bb: c3:c8:d5:83:8b:36:d7:6e:7a:1d:2f:f2:17:d1:f9: a0:2e:41:a7:60:93:6e:ff:f9:06:a9:50:cf:64:d7: b2:b7:0c:20:00:15:2e:c1:a6:49:01:09:7d:b4:96: 82:06:b6:d9:b9:77:3d:58:74:ce:68:e6:d4:8c:d5: 14:b8:90:93:3b:e9:dc:34:7b:e2:c5:88:8e:a3:25: 14:64:c7:6c:ff:da:bb:13:af:06:46:74:6b:7c:0a: 05:12:91:12:e3:04:7d:16:fa:83:f5:81:7f:6d:9f: 6e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AC:A3:E8:04:95:61:31:FE:AC:D8:68:20:D9:DF:30:70:22:7B:CD X509v3 Authority Key Identifier: keyid:05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:7f:c1:e8:53:4e:39:d6:4e:c3:0f:e4:26:54:13:4a:7a:ed: 5f:b3:24:0e:b2:55:6e:a2:c5:34:88:54:db:1d:da:a0:5d:40: a3:d3:14:9b:f2:ce:c1:f5:e9:e1:1e:e9:06:3c:8d:63:ec:21: 34:92:55:64:ed:b2:9c:d2:8b:d5:07:f2:c9:39:2b:45:cb:08: 87:4d:5c:ad:66:02:a6:ce:eb:e8:ec:84:96:38:fd:47:12:42: 14:ba:8d:1c:86:68:42:1e:ca:25:ec:67:79:0a:c5:dc:c1:f8: 01:5f:fe:55:57:b1:ed:c3:ea:de:9f:7d:03:57:dd:84:73:d6: 72:b6:ee:b8:5a:00:c0:0d:28:3c:08:c2:1f:77:82:2e:16:42: 49:48:42:d4:6a:7f:a4:d2:5e:db:e6:92:77:54:e4:30:76:f8: 80:7e:81:7a:dd:78:63:77:45:9a:98:66:af:45:c7:93:91:05: 7f:f3:3d:0d:bc:45:7d:cb:84:e1:2f:2a:42:5f:b9:03:7b:d4: 87:1e:ea:c7:f5:42:ef:40:2f:1c:06:2f:3c:0b:bf:f4:e0:e7: 7e:be:4a:b3:95:a4:8c:41:99:3e:38:94:70:29:be:08:df:67: 18:0c:df:db:fa:3a:78:71:38:72:05:0d:90:90:ef:46:04:f2: ad:18:f2:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU3N0MxMTAvBgNVBAUTKDA1MDM3RTRDREU0NEVDNjY0MkM0MTY5RkE4NTEzNzJE NzhGQkZDQUIwHhcNMjYwOTIzMDEwNjAwWhcNMjYwOTMwMDEwNjAwWjAYMRYwFAYD VQQDEw02YWIzMjVmOC00OGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmWb+ghUKJ9FBHht+IsxK61GM4Z7VVz9Q0SEcdM6wWKaMT+8d6dpd3K6FKbE5 C1Xc7BCgSOLU89zzCXhTgSyahQjP7PQgH8BRm2z7NfErTMaEbOVGMUQXmuP6iWXu Dhl0Pie2ZcGIw7BmQFyWfgmC1RZ8eMwQjrDeyruKNTcyEOfTlvIfvZU4+tHpxlO6 H5/PST8KwrvDyNWDizbXbnodL/IX0fmgLkGnYJNu//kGqVDPZNeytwwgABUuwaZJ AQl9tJaCBrbZuXc9WHTOaObUjNUUuJCTO+ncNHvixYiOoyUUZMds/9q7E68GRnRr fAoFEpES4wR9FvqD9YF/bZ9ugwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFmso+gE lWEx/qzYaCDZ3zBwInvNMB8GA1UdIwQYMBaAFAUDfkzeROxmQsQWn6hRNy14+/yr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTc3Qy9GNzAwQTlFQzcy NTYxMUVEOTAyMTE1NjJDNEY5QUUwMi9CUU4tVE41RTdHWkN4QmFmcUZFM0xYajdf S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRTi1UTjVFN0daQ3hCYWZxRkUzTFhqN19Lcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTc3Qy9GNzAwQTlFQzcyNTYxMUVEOTAyMTE1NjJDNEY5QUUwMi9CUU4tVE41RTdH WkN4QmFmcUZFM0xYajdfS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhH/B6FNOOdZOww/kJlQTSnrtX7MkDrJVbqLFNIhU2x3aoF1Ao9MUm/LOwfXp 4R7pBjyNY+whNJJVZO2ynNKL1QfyyTkrRcsIh01crWYCps7r6OyEljj9RxJCFLqN HIZoQh7KJexneQrF3MH4AV/+VVex7cPq3p99A1fdhHPWcrbuuFoAwA0oPAjCH3eC LhZCSUhC1Gp/pNJe2+aSd1TkMHb4gH6Bet14Y3dFmphmr0XHk5EFf/M9DbxFfcuE 4S8qQl+5A3vUhx7qx/VC70AvHAYvPAu/9ODnfr5Ks5WkjEGZPjiUcCm+CN9nGAzf 2/o6eHE4cgUNkJDvRgTyrRjyHA== -----END CERTIFICATE-----Generated at Wed Sep 23 10:56:04 2026 by rpki-client