$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft File: BQcL-a2TBEn7O2m4aRzyDAEnebk.mft (raw, json) Hash identifier: rAFdF+YV8xnu/Pl+i+KwBHEO9oa3hc08v5ChtfWY4zA= Subject key identifier: 0C:31:BF:C5:EE:EB:8D:C0:5F:AA:B0:70:E1:1C:49:19:C3:E3:BC:AD Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Certificate serial: 0D36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft Manifest number: 0D15 Signing time: Sun 20 Sep 2026 18:19:41 +0000 Manifest this update: Sun 20 Sep 2026 18:19:40 +0000 Manifest next update: Sun 27 Sep 2026 18:19:40 +0000 Files and hashes: 1: BQcL-a2TBEn7O2m4aRzyDAEnebk.crl (hash: T1J+3brnZXRQmq6PnxfLD2pNrTIMLYtvWvNe/oQ+5lU=) 2: A766D10CF86B11EF86A73884C4F9AE02.roa (hash: XzUEcWrFObnHhypJzqr40j9vQlCZVakmt78JschNZdU=) 3: A87393C8F86B11EF86A73884C4F9AE02.roa (hash: nj+oib/V31McsWuRSdIo8ebXzbzd0Aai1WTDOvqOntk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3382 (0xd36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC12, serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Validity Not Before: Sep 20 18:19:40 2026 GMT Not After : Sep 27 18:19:40 2026 GMT Subject: CN=6ab023bd-f4bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6e:8b:e8:58:43:dc:34:cf:5c:f6:2b:75:14: f0:a1:1e:60:97:1d:5a:a7:fb:49:e2:84:08:e9:f5: c1:f3:53:20:4e:6e:a6:7f:cb:f9:9c:70:27:25:a0: df:70:b7:6b:23:22:a5:b0:4e:fb:fb:c9:f5:7a:4b: e7:96:a8:b3:ea:4b:3e:38:d8:8b:93:14:d6:9d:15: 73:e8:d2:48:7c:1e:7a:81:2a:fd:70:f3:d3:7a:8e: 28:71:99:68:45:dc:bf:5f:74:8b:5a:01:cc:e9:94: 94:3b:50:87:c5:ae:68:05:78:09:c4:6c:d9:13:48: 98:26:b7:ea:81:bf:ba:e7:dc:68:70:1b:4a:4f:78: c6:a1:64:6f:aa:c9:73:72:2b:92:1d:57:dc:42:4c: 0a:4e:e6:67:a4:b8:48:93:cf:c7:c9:83:b5:1a:91: 59:64:4c:26:ca:04:10:a7:93:17:0b:c1:48:c5:9c: 62:7f:22:21:a0:58:78:b8:c0:d1:22:5c:dc:23:55: 99:73:dc:d2:ae:01:5b:67:9f:02:26:50:dc:95:d9: 4a:79:95:4a:84:28:eb:b9:77:fd:b8:e3:1c:f0:bb: ff:75:19:51:ea:ac:f3:19:da:0a:e3:b9:67:72:e5: 06:dc:18:87:ea:fb:3e:f8:37:d0:29:17:05:f0:82: 4e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:31:BF:C5:EE:EB:8D:C0:5F:AA:B0:70:E1:1C:49:19:C3:E3:BC:AD X509v3 Authority Key Identifier: keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:cd:31:40:19:ea:c6:75:b0:36:df:33:80:a3:9f:1a:7f:ab: a0:91:c6:b0:49:4b:8a:1c:16:0b:c3:51:c5:eb:0b:f1:39:e9: f6:88:ca:51:f0:c3:46:9d:44:7b:fb:50:f5:79:35:ec:59:4d: 51:29:14:ab:b3:5c:dc:1a:85:16:b4:0b:ae:0e:8e:e8:88:dd: 99:58:22:ee:67:b9:9b:ac:b3:26:c2:80:c9:73:1c:11:ed:3d: 96:e0:11:dd:3c:6b:ff:59:55:da:b7:12:a3:06:15:75:22:e4: 1b:35:db:ca:45:b9:16:2c:45:19:e0:98:66:70:b9:11:c8:95: 84:e2:b1:f9:32:4d:39:f6:fd:0e:9b:20:a6:ed:e9:a4:f1:02: b7:a9:dd:8c:34:5c:4b:1a:40:5d:68:30:55:50:a2:77:ae:89: 3b:50:3e:d0:6c:51:9f:f4:08:8a:dd:52:39:5a:97:67:d2:0a: c4:8c:5a:f5:4b:05:ea:d8:ba:9a:f9:e7:d1:2a:3e:63:f0:93: b3:6e:98:9c:1d:09:b5:f5:e5:cd:d1:eb:2f:6a:23:ac:34:8f: f3:e7:f5:d3:e1:2d:0d:ba:a5:8a:2e:5a:2e:73:f7:95:bd:fd: 34:c3:d0:05:d6:a5:e7:16:25:e9:e8:eb:55:ef:bd:8c:7a:8b: 27:18:b9:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDMTIxMTAvBgNVBAUTKDA1MDcwQkY5QUQ5MzA0NDlGQjNCNjlCODY5MUNGMjBD MDEyNzc5QjkwHhcNMjYwOTIwMTgxOTQwWhcNMjYwOTI3MTgxOTQwWjAYMRYwFAYD VQQDEw02YWIwMjNiZC1mNGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjW6L6FhD3DTPXPYrdRTwoR5glx1ap/tJ4oQI6fXB81MgTm6mf8v5nHAnJaDf cLdrIyKlsE77+8n1ekvnlqiz6ks+ONiLkxTWnRVz6NJIfB56gSr9cPPTeo4ocZlo Rdy/X3SLWgHM6ZSUO1CHxa5oBXgJxGzZE0iYJrfqgb+659xocBtKT3jGoWRvqslz ciuSHVfcQkwKTuZnpLhIk8/HyYO1GpFZZEwmygQQp5MXC8FIxZxifyIhoFh4uMDR IlzcI1WZc9zSrgFbZ58CJlDcldlKeZVKhCjruXf9uOMc8Lv/dRlR6qzzGdoK47ln cuUG3BiH6vs++DfQKRcF8IJOmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAwxv8Xu 643AX6qwcOEcSRnD47ytMB8GA1UdIwQYMBaAFAUHC/mtkwRJ+ztpuGkc8gwBJ3m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMxMi84NTkyRTQ4ODBG NjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJFbjdPMm00YVJ6eURBRW5l YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRY0wtYTJUQkVuN08ybTRhUnp5REFFbmViay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUMxMi84NTkyRTQ4ODBGNjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJF bjdPMm00YVJ6eURBRW5lYmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa80xQBnqxnWwNt8zgKOfGn+roJHGsElLihwWC8NRxesL8Tnp9ojKUfDDRp1E e/tQ9Xk17FlNUSkUq7Nc3BqFFrQLrg6O6IjdmVgi7me5m6yzJsKAyXMcEe09luAR 3Txr/1lV2rcSowYVdSLkGzXbykW5FixFGeCYZnC5EciVhOKx+TJNOfb9Dpsgpu3p pPECt6ndjDRcSxpAXWgwVVCid66JO1A+0GxRn/QIit1SOVqXZ9IKxIxa9UsF6ti6 mvnn0So+Y/CTs26YnB0JtfXlzdHrL2ojrDSP8+f10+EtDbqlii5aLnP3lb39NMPQ Bdal5xYl6ejrVe+9jHqLJxi5fQ== -----END CERTIFICATE-----Generated at Mon Sep 21 02:44:15 2026 by rpki-client