$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft File: BQcL-a2TBEn7O2m4aRzyDAEnebk.mft (raw, json) Hash identifier: cs18Y6Z1ZKRqao6DwlXif6GdJ6wYAOEQE9jjekRYF48= Subject key identifier: 6C:07:0E:5E:D5:75:EC:CB:B1:41:0C:24:86:72:B1:C4:0D:ED:3B:D6 Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Certificate serial: 0C89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft Manifest number: 0C6C Signing time: Sun 02 Nov 2025 18:33:03 +0000 Manifest this update: Sun 02 Nov 2025 18:33:02 +0000 Manifest next update: Sun 09 Nov 2025 18:33:02 +0000 Files and hashes: 1: BQcL-a2TBEn7O2m4aRzyDAEnebk.crl (hash: cPlqCH+Uge10yNebcxfFdT3VDGCqo0JuNAXz5TfqxmU=) 2: A766D10CF86B11EF86A73884C4F9AE02.roa (hash: YvJPp5TLJmmNMFrXdStXJanbJJfuz5ICtmKerDM4nQo=) 3: A87393C8F86B11EF86A73884C4F9AE02.roa (hash: 6O0VKauTuWTfzmPjcovFKdSm/+YMqCBqWG3p+BX8OSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3209 (0xc89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC12, serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Validity Not Before: Nov 2 18:33:02 2025 GMT Not After : Nov 9 18:33:02 2025 GMT Subject: CN=6907a3de-478a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a4:ea:8c:d0:c3:a9:51:aa:40:0e:5c:41:14: 4e:8f:a2:b7:47:aa:70:01:8e:2a:94:a3:07:eb:95: 81:09:f1:ee:de:10:7d:be:7d:3b:90:91:27:45:94: b3:5c:6e:c4:ed:87:a3:10:f7:27:e6:83:8e:8d:2a: 0f:eb:2f:85:5e:de:b1:ce:fc:ed:ab:ec:c9:ca:25: 13:a8:99:40:1d:c8:f7:f0:bf:85:1c:94:d9:53:bc: c7:36:c5:89:7b:78:e1:17:41:4c:89:e3:9c:01:e5: 05:0e:2c:d3:60:73:7a:1c:ed:ea:63:7d:de:c5:12: 23:57:3f:d8:6f:84:fd:cc:33:6b:1b:c8:fa:52:72: a7:1d:f0:78:d6:1b:0f:b4:c2:c1:87:c2:4b:12:40: 9b:bf:76:16:8e:d2:f4:c4:88:8b:b0:dd:ad:de:55: a3:9c:c5:7b:26:2f:99:f9:48:b1:36:f3:5d:36:17: ab:88:c5:3d:45:b1:84:63:2a:20:ed:83:7b:2d:fc: 6f:a0:ac:6a:73:47:3e:74:90:c2:31:92:64:7d:ed: c5:24:32:46:35:8a:27:fe:ae:d8:bf:c6:89:4d:5b: 5b:f5:34:b6:f4:36:74:2d:ca:46:37:eb:70:d6:ef: 3b:1c:62:42:5c:9b:20:89:5a:c7:45:dd:8f:98:8e: f0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:07:0E:5E:D5:75:EC:CB:B1:41:0C:24:86:72:B1:C4:0D:ED:3B:D6 X509v3 Authority Key Identifier: keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:77:5b:6f:83:3d:ad:e5:61:b2:dd:20:df:9a:4f:d1:8f:bd: 9c:a5:de:6b:f7:a8:d9:63:b5:34:c1:5f:24:b4:38:9c:c7:9b: 5e:55:d6:67:d9:b1:f1:d1:21:82:0e:11:f6:fe:8b:b0:d3:cb: 87:50:b5:56:69:54:e0:b3:49:5f:ab:14:30:16:80:10:67:a7: cf:fb:a0:d6:17:85:cb:69:d9:6c:db:b4:29:6c:ad:27:7f:f9: c5:81:73:01:51:41:d7:ea:da:df:4c:f7:e8:e4:23:69:f5:98: 72:9c:d2:01:dd:7f:ff:24:9f:13:ed:c1:64:99:ed:39:f9:67: a8:68:c5:87:76:91:ec:4d:27:53:0e:e3:2e:0d:bb:44:d7:b0: 82:68:9b:b3:51:d8:19:ed:1a:21:5e:3a:c9:da:f3:6d:f4:c6: 1c:12:68:81:41:13:b9:44:c7:7d:39:d6:24:46:a4:37:7e:68: 7a:7b:b2:bf:63:10:15:1d:39:a7:17:6a:21:a3:6a:c1:ff:5f: 51:19:2a:b8:38:5e:76:41:9d:0e:87:f6:d9:fd:01:cc:52:54: 31:87:87:da:92:96:9c:a9:73:cf:e9:26:60:4a:94:7c:e2:78: f6:1d:78:83:ca:c6:7a:be:9f:bf:ba:ad:d4:c6:16:85:c5:9c: 99:da:7c:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDMTIxMTAvBgNVBAUTKDA1MDcwQkY5QUQ5MzA0NDlGQjNCNjlCODY5MUNGMjBD MDEyNzc5QjkwHhcNMjUxMTAyMTgzMzAyWhcNMjUxMTA5MTgzMzAyWjAYMRYwFAYD VQQDEw02OTA3YTNkZS00NzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0aTqjNDDqVGqQA5cQRROj6K3R6pwAY4qlKMH65WBCfHu3hB9vn07kJEnRZSz XG7E7YejEPcn5oOOjSoP6y+FXt6xzvztq+zJyiUTqJlAHcj38L+FHJTZU7zHNsWJ e3jhF0FMieOcAeUFDizTYHN6HO3qY33exRIjVz/Yb4T9zDNrG8j6UnKnHfB41hsP tMLBh8JLEkCbv3YWjtL0xIiLsN2t3lWjnMV7Ji+Z+UixNvNdNheriMU9RbGEYyog 7YN7LfxvoKxqc0c+dJDCMZJkfe3FJDJGNYon/q7Yv8aJTVtb9TS29DZ0LcpGN+tw 1u87HGJCXJsgiVrHRd2PmI7wyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwHDl7V dezLsUEMJIZyscQN7TvWMB8GA1UdIwQYMBaAFAUHC/mtkwRJ+ztpuGkc8gwBJ3m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMxMi84NTkyRTQ4ODBG NjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJFbjdPMm00YVJ6eURBRW5l YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRY0wtYTJUQkVuN08ybTRhUnp5REFFbmViay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUMxMi84NTkyRTQ4ODBGNjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJF bjdPMm00YVJ6eURBRW5lYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1d1tvgz2t5WGy3SDfmk/Rj72cpd5r96jZY7U0wV8ktDicx5teVdZn 2bHx0SGCDhH2/ouw08uHULVWaVTgs0lfqxQwFoAQZ6fP+6DWF4XLadls27QpbK0n f/nFgXMBUUHX6trfTPfo5CNp9ZhynNIB3X//JJ8T7cFkme05+WeoaMWHdpHsTSdT DuMuDbtE17CCaJuzUdgZ7RohXjrJ2vNt9MYcEmiBQRO5RMd9OdYkRqQ3fmh6e7K/ YxAVHTmnF2oho2rB/19RGSq4OF52QZ0Oh/bZ/QHMUlQxh4fakpacqXPP6SZgSpR8 4nj2HXiDysZ6vp+/uq3UxhaFxZyZ2nzM -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:01 2025 by rpki-client