$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft File: BQcL-a2TBEn7O2m4aRzyDAEnebk.mft (raw, json) Hash identifier: Q9T1pm1GpYsTo3kUp6153digPXMToh/K/Ggk6W2CgTY= Subject key identifier: FD:AB:DB:B8:B5:E8:AE:95:BD:EE:B1:C4:6E:0A:9D:6E:47:89:46:D9 Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Certificate serial: 0C81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft Manifest number: 0C64 Signing time: Sat 18 Oct 2025 19:21:20 +0000 Manifest this update: Sat 18 Oct 2025 19:21:19 +0000 Manifest next update: Sat 25 Oct 2025 19:21:19 +0000 Files and hashes: 1: BQcL-a2TBEn7O2m4aRzyDAEnebk.crl (hash: U1MSlFvaTDCKHvqOcEGCdDwJnJs6745IDAEMzaiaeyE=) 2: A766D10CF86B11EF86A73884C4F9AE02.roa (hash: YvJPp5TLJmmNMFrXdStXJanbJJfuz5ICtmKerDM4nQo=) 3: A87393C8F86B11EF86A73884C4F9AE02.roa (hash: 6O0VKauTuWTfzmPjcovFKdSm/+YMqCBqWG3p+BX8OSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3201 (0xc81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC12, serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Validity Not Before: Oct 18 19:21:19 2025 GMT Not After : Oct 25 19:21:19 2025 GMT Subject: CN=68f3e8af-46b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:74:75:94:7b:ab:de:a5:37:a7:5e:a6:a3:70: 1e:10:b7:01:31:71:02:1c:8f:1c:76:50:06:e8:a5: b9:2c:38:3e:b7:4b:35:ae:c8:c8:48:c7:04:8c:00: 2b:15:02:4c:71:11:09:63:ec:60:a4:a3:08:45:13: 85:f0:df:7f:3f:6a:d2:2c:5b:e0:3a:1e:40:47:3a: dd:fb:29:93:51:18:67:c8:7e:b0:42:53:06:1a:16: 29:3a:fb:bd:24:c6:23:84:33:93:39:7d:72:27:34: db:86:0d:c6:70:bb:44:82:a7:99:a7:26:da:48:a1: 50:d6:cf:93:81:19:89:19:1f:98:e8:15:95:2b:5f: 91:14:d3:41:dc:b7:33:6a:e9:e0:73:18:cd:12:51: 96:97:fe:78:30:d1:2d:3e:6f:bd:54:fa:a3:7f:3b: 84:f5:71:9a:9a:07:2d:70:fd:f4:dd:33:e4:44:c6: 50:52:41:31:8c:0d:67:7b:b6:a8:b3:d6:e3:9d:cb: aa:04:1f:84:d6:4a:27:a6:b1:de:87:cf:b4:e6:cc: a3:97:46:7b:04:7e:12:db:a0:76:2d:a1:77:63:45: 5e:a5:ea:1a:93:0d:84:3c:bf:6b:97:44:12:79:c6: 22:ee:22:9d:31:8e:64:dc:d5:98:36:2f:67:c1:74: ac:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AB:DB:B8:B5:E8:AE:95:BD:EE:B1:C4:6E:0A:9D:6E:47:89:46:D9 X509v3 Authority Key Identifier: keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:a2:8a:c0:ec:cc:c4:a2:77:b5:78:24:3b:f8:31:82:52:a2: e5:05:10:3f:b9:20:60:e9:42:9c:30:e0:99:66:9d:1f:e9:d3: ee:d3:94:01:dc:51:dc:f4:ed:39:27:81:01:71:f0:1f:12:e3: 26:35:c5:45:e3:1b:d1:b1:f4:86:0e:92:67:ae:35:ea:4e:ef: f9:ca:79:6a:b2:12:6a:fb:27:b7:69:f3:f5:b3:01:18:05:5f: 1a:15:3d:3e:cb:c1:35:3f:d0:0b:7e:37:3b:d3:74:75:ab:07: 0b:09:eb:a3:51:f8:2c:f7:72:65:6b:63:64:4e:8f:12:77:f9: 60:e4:c0:07:99:42:b4:a9:b8:c6:8c:53:1a:f5:7d:74:80:e4: 30:0b:d2:f1:8e:20:bf:1a:d6:98:d0:81:e3:a8:3a:96:02:2c: 06:ec:ed:fd:8d:5c:b8:90:21:60:3c:0e:f4:ec:fc:55:2d:2f: 61:69:26:80:cf:b1:2a:86:31:ba:7b:f2:a2:e5:fd:ca:66:87: 1c:0b:99:98:a2:71:4c:55:e9:c7:e7:61:a0:93:62:bf:3f:2d: f0:28:b2:bb:f3:b1:89:56:46:6d:92:10:8f:c5:2b:aa:7c:5d: 32:82:35:31:b6:74:94:ba:3b:f5:39:3e:43:f6:64:b9:1d:fb: 78:f5:bd:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDMTIxMTAvBgNVBAUTKDA1MDcwQkY5QUQ5MzA0NDlGQjNCNjlCODY5MUNGMjBD MDEyNzc5QjkwHhcNMjUxMDE4MTkyMTE5WhcNMjUxMDI1MTkyMTE5WjAYMRYwFAYD VQQDEw02OGYzZThhZi00NmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4XR1lHur3qU3p16mo3AeELcBMXECHI8cdlAG6KW5LDg+t0s1rsjISMcEjAAr FQJMcREJY+xgpKMIRROF8N9/P2rSLFvgOh5ARzrd+ymTURhnyH6wQlMGGhYpOvu9 JMYjhDOTOX1yJzTbhg3GcLtEgqeZpybaSKFQ1s+TgRmJGR+Y6BWVK1+RFNNB3Lcz aungcxjNElGWl/54MNEtPm+9VPqjfzuE9XGamgctcP303TPkRMZQUkExjA1ne7ao s9bjncuqBB+E1konprHeh8+05syjl0Z7BH4S26B2LaF3Y0Vepeoakw2EPL9rl0QS ecYi7iKdMY5k3NWYNi9nwXSsTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2r27i1 6K6Vve6xxG4KnW5HiUbZMB8GA1UdIwQYMBaAFAUHC/mtkwRJ+ztpuGkc8gwBJ3m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMxMi84NTkyRTQ4ODBG NjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJFbjdPMm00YVJ6eURBRW5l YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRY0wtYTJUQkVuN08ybTRhUnp5REFFbmViay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUMxMi84NTkyRTQ4ODBGNjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJF bjdPMm00YVJ6eURBRW5lYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1oorA7MzEone1eCQ7+DGCUqLlBRA/uSBg6UKcMOCZZp0f6dPu05QB 3FHc9O05J4EBcfAfEuMmNcVF4xvRsfSGDpJnrjXqTu/5ynlqshJq+ye3afP1swEY BV8aFT0+y8E1P9ALfjc703R1qwcLCeujUfgs93Jla2NkTo8Sd/lg5MAHmUK0qbjG jFMa9X10gOQwC9LxjiC/GtaY0IHjqDqWAiwG7O39jVy4kCFgPA707PxVLS9haSaA z7EqhjG6e/Ki5f3KZoccC5mYonFMVenH52Ggk2K/Py3wKLK787GJVkZtkhCPxSuq fF0ygjUxtnSUujv1OT5D9mS5Hft49b2X -----END CERTIFICATE-----Generated at Mon Oct 20 07:47:18 2025 by rpki-client