$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft File: BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft (raw, json) Hash identifier: 1SXREm8n+pBYomzXnZogllL6k8ZtKTUxvb+6LFyssPs= Subject key identifier: B1:F3:97:8A:3E:20:83:96:49:24:13:F8:DE:C1:C6:78:17:35:AD:D0 Authority key identifier: 05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB Certificate issuer: /CN=A915E77C/serialNumber=05037E4CDE44EC6642C4169FA851372D78FBFCAB Certificate serial: 02D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft Manifest number: 02CC Signing time: Fri 25 Sep 2026 01:16:56 +0000 Manifest this update: Fri 25 Sep 2026 01:16:56 +0000 Manifest next update: Fri 02 Oct 2026 01:16:56 +0000 Files and hashes: 1: BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl (hash: WNb41wLPds8PE5CjVnQHxhrbUqci0pHqPntksIqMlYg=) 2: A7DDB8A23E6611F19FA73FF6CD833773.roa (hash: sE7hyGMb+RZELa0prUkJH8bGHJ/zMp5lIGg2bRbPuWY=) 3: A20DDFE2725911ED8CB4D763C4F9AE02.roa (hash: a5rkQCdGd6WLgCsLjH9k9RC6TMcBTGsLeQcwPsfq9Ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 723 (0x2d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E77C, serialNumber=05037E4CDE44EC6642C4169FA851372D78FBFCAB Validity Not Before: Sep 25 01:16:56 2026 GMT Not After : Oct 2 01:16:56 2026 GMT Subject: CN=6ab5cb88-caa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:93:0a:ff:b8:74:cd:b4:65:40:f3:32:f8:c4: b0:6a:54:8f:50:f4:6f:7d:0e:8a:b0:6e:ae:5c:16: 6d:2c:68:cf:21:50:f8:c4:31:79:c5:3f:dd:23:b3: 07:4d:11:2b:fb:92:be:8b:63:9c:7b:34:97:13:a7: 83:4b:7f:3e:2a:d0:37:85:f9:20:16:58:14:60:00: da:e8:81:13:ce:3b:13:ba:75:44:19:0e:f0:b4:aa: 6d:e9:f4:4a:ac:7f:34:d0:f2:b4:af:96:89:04:2c: 27:2b:fd:1b:aa:70:eb:fb:d9:d6:98:3b:d0:4c:d0: 74:de:f4:75:21:8f:ba:8e:ac:c8:4b:86:9d:e2:6f: 3b:85:49:19:ac:13:da:21:1d:91:a7:0b:9a:46:5d: 4b:97:1d:0f:1e:44:b7:71:66:d7:c8:ba:d3:24:25: 7e:6b:62:a2:0c:bb:ab:5e:35:28:65:18:13:7d:af: 66:83:f3:0c:ed:29:37:36:41:d2:b2:7e:43:41:6f: e1:a4:51:33:ca:9f:47:05:d7:81:60:93:23:b0:ac: 33:c6:6a:33:de:96:e9:22:3b:84:c9:28:40:a7:c7: 76:07:94:3d:45:ae:b1:d4:0b:ac:cc:1c:32:bd:60: 25:b2:5f:9d:ef:a2:5f:7b:eb:1a:14:55:9d:d9:14: ca:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F3:97:8A:3E:20:83:96:49:24:13:F8:DE:C1:C6:78:17:35:AD:D0 X509v3 Authority Key Identifier: keyid:05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:67:ce:de:cf:5c:d7:58:f2:65:e8:c6:ba:56:ed:77:80:2f: 22:37:57:d0:94:02:f0:a9:6f:2b:05:2b:43:68:2c:c4:7a:bb: 6e:bd:e5:fe:97:85:73:cc:01:57:55:d0:e1:cf:a7:65:3d:35: 7a:21:4f:15:2d:4f:f1:3d:09:44:9a:e5:f3:34:77:a2:31:86: 45:68:71:c1:52:1a:49:01:dc:36:92:7e:89:47:20:34:bd:41: 43:82:89:32:d3:a1:9b:33:13:ac:34:b0:fb:6a:f5:70:44:ea: 9f:41:7a:cb:7a:b9:5a:4d:9e:44:ee:4e:db:19:52:63:f4:67: 19:1b:21:e1:8f:bd:71:11:f5:97:84:33:29:c4:e4:11:c4:47: 84:67:e3:65:3d:0e:f7:b8:45:87:1e:cf:3f:f8:08:10:dc:98: 23:d0:eb:16:e7:a6:3a:94:8a:91:a4:6b:2a:74:0e:31:ed:2b: 97:db:89:cd:a5:87:5e:58:61:f2:db:5d:b3:ed:14:45:de:08: 36:87:47:b3:d5:36:a3:8d:e6:df:03:e1:c9:91:67:2b:88:27: c9:5c:de:f3:e5:0e:91:29:f9:25:95:f0:1b:70:b9:14:4f:19: e2:d4:c2:df:9b:5c:40:f3:7a:a6:cf:4d:83:49:19:c3:e8:0a: 4c:77:08:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU3N0MxMTAvBgNVBAUTKDA1MDM3RTRDREU0NEVDNjY0MkM0MTY5RkE4NTEzNzJE NzhGQkZDQUIwHhcNMjYwOTI1MDExNjU2WhcNMjYxMDAyMDExNjU2WjAYMRYwFAYD VQQDEw02YWI1Y2I4OC1jYWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJMK/7h0zbRlQPMy+MSwalSPUPRvfQ6KsG6uXBZtLGjPIVD4xDF5xT/dI7MH TREr+5K+i2OcezSXE6eDS38+KtA3hfkgFlgUYADa6IETzjsTunVEGQ7wtKpt6fRK rH800PK0r5aJBCwnK/0bqnDr+9nWmDvQTNB03vR1IY+6jqzIS4ad4m87hUkZrBPa IR2RpwuaRl1Llx0PHkS3cWbXyLrTJCV+a2KiDLurXjUoZRgTfa9mg/MM7Sk3NkHS sn5DQW/hpFEzyp9HBdeBYJMjsKwzxmoz3pbpIjuEyShAp8d2B5Q9Ra6x1AuszBwy vWAlsl+d76Jfe+saFFWd2RTK3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLHzl4o+ IIOWSSQT+N7BxngXNa3QMB8GA1UdIwQYMBaAFAUDfkzeROxmQsQWn6hRNy14+/yr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTc3Qy9GNzAwQTlFQzcy NTYxMUVEOTAyMTE1NjJDNEY5QUUwMi9CUU4tVE41RTdHWkN4QmFmcUZFM0xYajdf S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRTi1UTjVFN0daQ3hCYWZxRkUzTFhqN19Lcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTc3Qy9GNzAwQTlFQzcyNTYxMUVEOTAyMTE1NjJDNEY5QUUwMi9CUU4tVE41RTdH WkN4QmFmcUZFM0xYajdfS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV2fO3s9c11jyZejGulbtd4AvIjdX0JQC8KlvKwUrQ2gsxHq7br3l/peFc8wB V1XQ4c+nZT01eiFPFS1P8T0JRJrl8zR3ojGGRWhxwVIaSQHcNpJ+iUcgNL1BQ4KJ MtOhmzMTrDSw+2r1cETqn0F6y3q5Wk2eRO5O2xlSY/RnGRsh4Y+9cRH1l4QzKcTk EcRHhGfjZT0O97hFhx7PP/gIENyYI9DrFuemOpSKkaRrKnQOMe0rl9uJzaWHXlhh 8ttds+0URd4INodHs9U2o43m3wPhyZFnK4gnyVze8+UOkSn5JZXwG3C5FE8Z4tTC 35tcQPN6ps9Ng0kZw+gKTHcICg== -----END CERTIFICATE-----Generated at Sat Sep 26 02:52:07 2026 by rpki-client