$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft File: BQcL-a2TBEn7O2m4aRzyDAEnebk.mft (raw, json) Hash identifier: eG2QttwDjOB4EOubvTeIc427ESj+msizQXZlTeNz9Jo= Subject key identifier: D9:7B:3A:C6:6E:0A:14:E2:DB:C5:62:6B:2B:16:A5:91:A4:FC:A3:AF Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Certificate serial: 0D37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft Manifest number: 0D16 Signing time: Tue 22 Sep 2026 18:14:40 +0000 Manifest this update: Tue 22 Sep 2026 18:14:40 +0000 Manifest next update: Tue 29 Sep 2026 18:14:40 +0000 Files and hashes: 1: BQcL-a2TBEn7O2m4aRzyDAEnebk.crl (hash: 6xtBNslQsJjvdlv5GFACPdZCoDGmKE0tVIPNZIh8B1E=) 2: A87393C8F86B11EF86A73884C4F9AE02.roa (hash: nj+oib/V31McsWuRSdIo8ebXzbzd0Aai1WTDOvqOntk=) 3: A766D10CF86B11EF86A73884C4F9AE02.roa (hash: XzUEcWrFObnHhypJzqr40j9vQlCZVakmt78JschNZdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 18:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3383 (0xd37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC12, serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Validity Not Before: Sep 22 18:14:40 2026 GMT Not After : Sep 29 18:14:40 2026 GMT Subject: CN=6ab2c590-bbd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ec:f0:1d:ae:21:3e:df:da:59:9f:da:a2:cd: d1:3e:4d:4b:89:af:a1:42:d0:73:7f:88:6e:a1:6a: 06:6b:49:a6:be:47:cd:9e:e9:6b:d6:94:15:80:46: 8d:72:59:f9:d2:85:35:d8:dc:5c:1b:47:d4:e5:cd: 86:d8:d3:8f:0e:6c:8e:95:7c:be:be:13:de:d4:ae: 79:b0:5c:f0:c8:35:25:fc:cb:15:a6:ec:84:fe:3d: a7:55:94:53:ac:80:91:e8:9a:c8:ff:4a:7e:19:28: 3e:31:83:59:bb:4c:a5:f4:a4:33:54:62:31:57:7d: a9:08:51:f3:d5:04:f6:73:0c:05:f3:30:10:16:83: b3:ba:d6:d8:2e:65:79:b8:97:8d:8a:a9:b2:6b:97: 6f:ef:81:3c:9e:00:7f:fc:5f:95:e6:92:97:57:45: 31:2f:bd:96:1d:63:33:3e:d7:6d:e4:9c:87:0e:f2: 0c:68:ca:22:6d:6f:33:18:00:06:47:9d:e2:b6:12: 31:24:c7:be:66:8f:7b:e0:32:28:e4:27:0f:cf:f7: 83:88:0d:3d:6f:da:51:f1:ac:48:e0:b4:41:60:2e: a3:b7:e8:d5:27:48:56:27:c3:08:8a:32:5d:38:84: d3:86:07:fd:72:a8:a3:c8:30:ef:00:a4:b3:d1:90: 7c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7B:3A:C6:6E:0A:14:E2:DB:C5:62:6B:2B:16:A5:91:A4:FC:A3:AF X509v3 Authority Key Identifier: keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:4f:43:58:97:ad:38:4c:0f:c5:6b:9e:7a:58:f5:b4:d6:0d: bd:a7:c0:2c:48:f0:de:2c:dc:09:a1:27:9c:7d:31:77:1f:f0: ac:13:cb:c8:43:cb:20:23:b1:d1:a2:06:a5:47:d8:93:30:64: 51:4f:18:6c:f6:37:89:ec:ec:6f:e2:2a:02:f5:c4:88:29:4b: e8:6b:54:5c:af:2b:9c:74:0b:ae:c7:55:92:99:1e:ae:6b:a9: f2:2d:25:fc:23:5e:79:7a:1e:fa:00:b4:00:4b:ad:1d:e2:b1: 11:c8:9f:38:21:ae:2d:f4:e0:73:5d:66:63:ad:ca:55:b1:43: eb:70:5f:56:bc:61:53:cc:2c:b2:0d:4e:d3:50:d0:db:77:52: 71:44:67:18:73:0c:da:ff:d9:3f:3a:15:1f:b1:c9:08:84:c4: 39:e0:47:c0:cd:ff:03:ff:40:16:9e:4a:41:09:4b:ad:c7:03: 4d:8b:fe:4a:e4:18:3e:75:d6:57:d9:5d:ae:15:6d:06:49:50: 97:78:3e:10:52:e2:da:89:39:48:07:8d:ce:12:9b:30:9d:a5: 60:63:3f:9d:0b:ff:d9:6f:68:ee:22:ba:3a:54:da:21:9e:50: 66:9d:54:e6:5f:62:36:77:5a:48:12:13:a3:99:5e:dc:f8:90: 8d:b5:3c:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDMTIxMTAvBgNVBAUTKDA1MDcwQkY5QUQ5MzA0NDlGQjNCNjlCODY5MUNGMjBD MDEyNzc5QjkwHhcNMjYwOTIyMTgxNDQwWhcNMjYwOTI5MTgxNDQwWjAYMRYwFAYD VQQDEw02YWIyYzU5MC1iYmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl+zwHa4hPt/aWZ/aos3RPk1Lia+hQtBzf4huoWoGa0mmvkfNnulr1pQVgEaN cln50oU12NxcG0fU5c2G2NOPDmyOlXy+vhPe1K55sFzwyDUl/MsVpuyE/j2nVZRT rICR6JrI/0p+GSg+MYNZu0yl9KQzVGIxV32pCFHz1QT2cwwF8zAQFoOzutbYLmV5 uJeNiqmya5dv74E8ngB//F+V5pKXV0UxL72WHWMzPtdt5JyHDvIMaMoibW8zGAAG R53ithIxJMe+Zo974DIo5CcPz/eDiA09b9pR8axI4LRBYC6jt+jVJ0hWJ8MIijJd OITThgf9cqijyDDvAKSz0ZB8fwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNl7OsZu ChTi28ViaysWpZGk/KOvMB8GA1UdIwQYMBaAFAUHC/mtkwRJ+ztpuGkc8gwBJ3m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMxMi84NTkyRTQ4ODBG NjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJFbjdPMm00YVJ6eURBRW5l YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRY0wtYTJUQkVuN08ybTRhUnp5REFFbmViay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUMxMi84NTkyRTQ4ODBGNjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJF bjdPMm00YVJ6eURBRW5lYmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABE9DWJetOEwPxWueelj1tNYNvafALEjw3izcCaEnnH0xdx/wrBPLyEPLICOx 0aIGpUfYkzBkUU8YbPY3iezsb+IqAvXEiClL6GtUXK8rnHQLrsdVkpkermup8i0l /CNeeXoe+gC0AEutHeKxEcifOCGuLfTgc11mY63KVbFD63BfVrxhU8wssg1O01DQ 23dScURnGHMM2v/ZPzoVH7HJCITEOeBHwM3/A/9AFp5KQQlLrccDTYv+SuQYPnXW V9ldrhVtBklQl3g+EFLi2ok5SAeNzhKbMJ2lYGM/nQv/2W9o7iK6OlTaIZ5QZp1U 5l9iNndaSBITo5le3PiQjbU8/w== -----END CERTIFICATE-----Generated at Wed Sep 23 17:45:15 2026 by rpki-client