$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft File: BQcL-a2TBEn7O2m4aRzyDAEnebk.mft (raw, json) Hash identifier: PDrxgpnoEUfHxrG0dOEyXkGiqoEwkqyGu5SZASSl4oc= Subject key identifier: 3B:A5:7B:9C:87:B8:F2:CC:00:F5:F9:12:02:57:C1:01:FA:02:97:5C Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Certificate serial: 0CD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft Manifest number: 0CB7 Signing time: Tue 24 Mar 2026 18:19:11 +0000 Manifest this update: Tue 24 Mar 2026 18:19:10 +0000 Manifest next update: Tue 31 Mar 2026 18:19:10 +0000 Files and hashes: 1: BQcL-a2TBEn7O2m4aRzyDAEnebk.crl (hash: 0uclS3ue+BCXoY1WxNPYT/EvYpT7tIRqJeKKcNWRCKo=) 2: A766D10CF86B11EF86A73884C4F9AE02.roa (hash: 84HSU/b3Ji+23l8vXYY4ngi5sLo8HjrYKnYa+FFKrMA=) 3: A87393C8F86B11EF86A73884C4F9AE02.roa (hash: H223H2o9dk5m/ZWR7SfR3uoyBy9MoGjlgT832ixhTqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3286 (0xcd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC12, serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Validity Not Before: Mar 24 18:19:10 2026 GMT Not After : Mar 31 18:19:10 2026 GMT Subject: CN=69c2d59f-3030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:21:f2:dd:9b:b1:d8:b8:91:5e:aa:56:5d:cf: 90:f6:46:08:25:f3:2b:39:b4:3f:c1:a4:d9:83:24: d4:14:7c:48:0d:df:90:0a:23:b3:d1:54:ce:90:92: 4c:a2:2b:fa:18:61:8b:5b:53:a7:e9:f5:02:2b:16: 34:48:75:fc:0f:6a:65:95:fe:26:33:c3:68:18:f5: 09:aa:b8:b0:c9:4a:df:41:5a:d9:e7:e0:11:b4:bc: ba:30:d9:12:4f:7e:63:61:d8:b7:44:72:51:c8:d0: bc:a4:9b:5c:9e:2e:72:eb:37:e0:b3:52:eb:53:87: 33:22:8c:be:f4:f5:7f:87:46:3c:b7:eb:87:83:dc: 55:da:18:57:2c:09:6a:9f:48:26:b2:22:ba:03:a0: cd:b0:32:20:96:fe:da:68:a2:b1:74:9d:42:df:d1: 4e:38:af:9a:93:e0:5a:28:ab:4d:75:65:fd:11:7f: 74:ed:17:52:48:7e:3e:e4:e2:a8:70:fa:b6:c1:b0: 72:30:0d:41:9a:9f:2c:00:7a:70:2b:86:19:a7:27: c2:9e:ed:9e:07:aa:ca:7e:8d:a9:bb:06:69:68:81: 8f:0d:b7:4b:63:8e:dd:3e:27:92:b1:08:4b:4d:d0: 39:f1:39:29:4a:64:f9:1c:ef:5a:25:c4:dd:45:c2: a3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A5:7B:9C:87:B8:F2:CC:00:F5:F9:12:02:57:C1:01:FA:02:97:5C X509v3 Authority Key Identifier: keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:86:ed:0b:f7:bf:0f:a0:ba:a5:a4:9c:3f:e9:3c:24:62:32: 3c:05:9a:a9:65:07:02:c2:63:54:f4:70:aa:37:b3:69:a8:6b: bf:70:7a:ed:fc:c8:8b:d8:24:e6:c8:b4:96:6a:4e:5d:6f:c1: 0f:55:fe:cf:67:18:d9:0d:96:0c:f8:e6:ca:d6:4d:3f:f4:50: 76:e1:1a:15:ec:9d:8b:cb:85:f4:25:65:9e:fa:fc:3f:a6:86: 2b:ac:33:0e:bd:fa:de:30:7c:a2:5c:89:18:88:1a:8b:c9:af: 1c:8c:5b:77:20:d4:69:e1:bb:e4:02:61:73:ef:19:12:26:cc: 9b:f7:89:69:13:21:41:8a:0c:7b:b4:4e:0e:68:a3:99:bd:5f: cd:5e:47:d2:39:02:5c:6c:5f:63:a5:05:8a:da:b9:c3:24:53: 60:bc:00:d9:a9:fa:f7:89:eb:71:c3:5c:a3:13:bd:2c:af:77: dc:da:ff:f6:4d:f7:e7:f9:9d:c1:f5:c7:a5:20:c3:c0:49:d1: d4:7d:de:8f:76:e6:42:76:d2:4d:26:00:0a:c0:c2:01:7e:01: 3a:46:8e:d4:1e:cb:c5:f9:88:11:3a:a2:e9:a7:a2:77:4b:6b: 14:8e:4f:a9:2e:28:87:6f:61:7c:bf:9a:d5:35:b6:55:f5:e2: 6b:40:8f:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDMTIxMTAvBgNVBAUTKDA1MDcwQkY5QUQ5MzA0NDlGQjNCNjlCODY5MUNGMjBD MDEyNzc5QjkwHhcNMjYwMzI0MTgxOTEwWhcNMjYwMzMxMTgxOTEwWjAYMRYwFAYD VQQDEw02OWMyZDU5Zi0zMDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkSHy3Zux2LiRXqpWXc+Q9kYIJfMrObQ/waTZgyTUFHxIDd+QCiOz0VTOkJJM oiv6GGGLW1On6fUCKxY0SHX8D2pllf4mM8NoGPUJqriwyUrfQVrZ5+ARtLy6MNkS T35jYdi3RHJRyNC8pJtcni5y6zfgs1LrU4czIoy+9PV/h0Y8t+uHg9xV2hhXLAlq n0gmsiK6A6DNsDIglv7aaKKxdJ1C39FOOK+ak+BaKKtNdWX9EX907RdSSH4+5OKo cPq2wbByMA1Bmp8sAHpwK4YZpyfCnu2eB6rKfo2puwZpaIGPDbdLY47dPieSsQhL TdA58TkpSmT5HO9aJcTdRcKjkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDule5yH uPLMAPX5EgJXwQH6ApdcMB8GA1UdIwQYMBaAFAUHC/mtkwRJ+ztpuGkc8gwBJ3m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMxMi84NTkyRTQ4ODBG NjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJFbjdPMm00YVJ6eURBRW5l YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRY0wtYTJUQkVuN08ybTRhUnp5REFFbmViay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUMxMi84NTkyRTQ4ODBGNjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJF bjdPMm00YVJ6eURBRW5lYmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI4btC/e/D6C6paScP+k8JGIyPAWaqWUHAsJjVPRwqjezaahrv3B67fzIi9gk 5si0lmpOXW/BD1X+z2cY2Q2WDPjmytZNP/RQduEaFeydi8uF9CVlnvr8P6aGK6wz Dr363jB8olyJGIgai8mvHIxbdyDUaeG75AJhc+8ZEibMm/eJaRMhQYoMe7RODmij mb1fzV5H0jkCXGxfY6UFitq5wyRTYLwA2an694nrccNcoxO9LK933Nr/9k335/md wfXHpSDDwEnR1H3ej3bmQnbSTSYACsDCAX4BOkaO1B7LxfmIETqi6aeid0trFI5P qS4oh29hfL+a1TW2VfXia0CPiA== -----END CERTIFICATE-----Generated at Thu Mar 26 10:44:16 2026 by rpki-client