$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft File: BQcL-a2TBEn7O2m4aRzyDAEnebk.mft (raw, json) Hash identifier: sninHp682uN+IPp+/ssfXwRmUIcIyoj/kjbJPyTirh8= Subject key identifier: 76:8A:CD:31:02:4B:93:35:23:B4:B4:79:97:D3:7F:A7:81:0F:8A:01 Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Certificate serial: 0CE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft Manifest number: 0CC3 Signing time: Thu 16 Apr 2026 18:23:10 +0000 Manifest this update: Thu 16 Apr 2026 18:23:09 +0000 Manifest next update: Thu 23 Apr 2026 18:23:09 +0000 Files and hashes: 1: BQcL-a2TBEn7O2m4aRzyDAEnebk.crl (hash: YkAmmaUAhFhq4FzvOvnxfNeNzllAZKa+Eq9N9myDAvs=) 2: A87393C8F86B11EF86A73884C4F9AE02.roa (hash: H223H2o9dk5m/ZWR7SfR3uoyBy9MoGjlgT832ixhTqA=) 3: A766D10CF86B11EF86A73884C4F9AE02.roa (hash: 84HSU/b3Ji+23l8vXYY4ngi5sLo8HjrYKnYa+FFKrMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3298 (0xce2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC12, serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Validity Not Before: Apr 16 18:23:09 2026 GMT Not After : Apr 23 18:23:09 2026 GMT Subject: CN=69e1290d-ecb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:91:62:7d:e6:3c:36:39:8f:90:f4:5f:e3:7e: 7c:96:19:8e:ee:f9:fc:30:fc:b4:9f:70:0c:19:c7: c8:94:0b:b9:4a:ca:4b:1f:37:4a:c2:47:28:7a:a8: 1b:ad:22:0e:97:c2:6a:88:1c:e5:bc:58:40:dc:63: 24:27:60:5b:af:e6:8e:dc:a9:a6:0b:bd:a0:2f:9f: b5:34:d6:fc:d8:86:9a:94:bb:4d:cb:7a:97:9f:4e: b4:aa:27:ae:e3:25:0e:24:06:f0:be:4d:ad:ea:5f: 7d:75:08:8b:65:58:14:92:9f:9a:81:69:98:c6:63: d1:a5:10:ef:be:72:6b:b4:5d:46:fa:72:d2:10:9d: 86:92:57:0e:18:d4:8c:2b:1b:18:49:7b:22:58:8c: a2:ec:29:72:25:11:87:af:1f:2b:93:f9:ea:bf:24: 27:65:6f:ce:b7:b4:35:ef:77:58:4e:c1:77:ac:d5: 4b:d4:3a:9e:94:0d:1b:c4:4d:77:af:30:53:8c:64: 54:eb:66:33:bd:bf:3c:a3:9b:87:c1:4a:14:74:72: 41:12:11:fd:5c:ae:62:48:aa:eb:69:a7:b0:59:09: 7e:39:e0:37:7b:ba:62:f4:51:c1:74:7d:f2:f5:a5: e2:c2:07:80:2e:32:ad:dd:34:dc:cc:56:7f:b5:e6: 97:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8A:CD:31:02:4B:93:35:23:B4:B4:79:97:D3:7F:A7:81:0F:8A:01 X509v3 Authority Key Identifier: keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:df:bf:c2:4f:bc:be:bb:1a:8f:fc:4b:6a:53:69:3a:3c:a6: 77:a6:d4:33:f7:92:27:61:bd:c8:87:08:a6:a3:f5:88:c1:4d: e8:10:de:5e:05:00:11:d0:30:0e:4f:5c:15:30:c4:f4:5c:80: ff:a8:85:5c:37:21:8e:64:4c:70:4c:c9:98:cb:43:3c:33:46: 1a:ab:80:88:18:15:fb:8e:e9:79:0b:f1:77:ea:d0:24:1b:d3: fc:be:39:b4:53:80:2e:86:09:ce:71:e5:28:e9:65:55:b7:d0: ab:07:ae:45:00:ad:3f:2c:d1:b1:0b:a9:e7:0b:8d:8f:81:ea: 08:cb:5b:dd:4c:2b:eb:d5:df:f4:53:d6:3e:9f:22:0f:50:ea: c4:a0:a4:1b:b1:f8:01:3f:80:5d:84:de:a0:85:bb:67:dd:b3: 94:35:85:cb:2b:52:83:6b:ff:a6:f3:47:83:e6:22:3b:5e:d2: 05:39:32:f5:08:c0:3e:fb:3f:dc:70:c2:69:bf:d1:de:b1:47: e5:5c:f8:39:39:fd:c4:45:94:e4:cc:d5:4b:57:8c:68:3e:9b: cb:b0:d7:a5:eb:e8:d4:dd:e3:d4:ff:b0:88:5a:59:d4:60:45: 40:c7:03:52:e7:07:7f:48:d2:82:20:55:dc:a5:61:ba:53:4c: 72:cf:a1:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDMTIxMTAvBgNVBAUTKDA1MDcwQkY5QUQ5MzA0NDlGQjNCNjlCODY5MUNGMjBD MDEyNzc5QjkwHhcNMjYwNDE2MTgyMzA5WhcNMjYwNDIzMTgyMzA5WjAYMRYwFAYD VQQDEw02OWUxMjkwZC1lY2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpFifeY8NjmPkPRf4358lhmO7vn8MPy0n3AMGcfIlAu5SspLHzdKwkcoeqgb rSIOl8JqiBzlvFhA3GMkJ2Bbr+aO3KmmC72gL5+1NNb82IaalLtNy3qXn060qieu 4yUOJAbwvk2t6l99dQiLZVgUkp+agWmYxmPRpRDvvnJrtF1G+nLSEJ2GklcOGNSM KxsYSXsiWIyi7ClyJRGHrx8rk/nqvyQnZW/Ot7Q173dYTsF3rNVL1DqelA0bxE13 rzBTjGRU62Yzvb88o5uHwUoUdHJBEhH9XK5iSKrraaewWQl+OeA3e7pi9FHBdH3y 9aXiwgeALjKt3TTczFZ/teaXgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHaKzTEC S5M1I7S0eZfTf6eBD4oBMB8GA1UdIwQYMBaAFAUHC/mtkwRJ+ztpuGkc8gwBJ3m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMxMi84NTkyRTQ4ODBG NjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJFbjdPMm00YVJ6eURBRW5l YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRY0wtYTJUQkVuN08ybTRhUnp5REFFbmViay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUMxMi84NTkyRTQ4ODBGNjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJF bjdPMm00YVJ6eURBRW5lYmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbd+/wk+8vrsaj/xLalNpOjymd6bUM/eSJ2G9yIcIpqP1iMFN6BDeXgUAEdAw Dk9cFTDE9FyA/6iFXDchjmRMcEzJmMtDPDNGGquAiBgV+47peQvxd+rQJBvT/L45 tFOALoYJznHlKOllVbfQqweuRQCtPyzRsQup5wuNj4HqCMtb3Uwr69Xf9FPWPp8i D1DqxKCkG7H4AT+AXYTeoIW7Z92zlDWFyytSg2v/pvNHg+YiO17SBTky9QjAPvs/ 3HDCab/R3rFH5Vz4OTn9xEWU5MzVS1eMaD6by7DXpevo1N3j1P+wiFpZ1GBFQMcD UucHf0jSgiBV3KVhulNMcs+hwg== -----END CERTIFICATE-----Generated at Fri Apr 17 05:49:28 2026 by rpki-client