$ rpki-client -vvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft File: BQIPvxAg_WO-V9oblwSwqoEDREo.mft (raw, json) Hash identifier: jC73Hbc5d7jHk+EJ4cyQe8AciTEGuZ6PvZ2fUsCzqQE= Subject key identifier: 70:C8:5C:BB:A7:0E:03:97:90:9D:85:77:E5:AD:F5:A7:97:5E:C8:71 Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A Certificate issuer: /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A Certificate serial: 1DDA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft Manifest number: 1DBB Signing time: Sun 26 Jul 2026 16:12:26 +0000 Manifest this update: Sun 26 Jul 2026 16:12:25 +0000 Manifest next update: Sun 02 Aug 2026 16:12:25 +0000 Files and hashes: 1: BQIPvxAg_WO-V9oblwSwqoEDREo.crl (hash: 1B5KY0Tbp7Y7WSe1bV+Lcbj6EF3uJnO3b+VYldJ6k9k=) 2: 4CBDBA5E3F0011F18130B663C8833773.roa (hash: MYIZdYIrRMX8GOTnK8Yq+Fr2Q47kM6T/tbwrjmOwZ2A=) 3: 52F3327C86FF11F194514C90ABEE528E.roa (hash: 1w8W/4m7mLE7LxDR59hH2lCRVs2OIycHF+NjBW+Eagc=) 4: 6C2E2E523E6311F18F888BA6CC833773.roa (hash: in8CGxxlDGfml/aUO9WdoJzjfkkSWplEb1DnwBMfsmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 16:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7642 (0x1dda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A140, serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A Validity Not Before: Jul 26 16:12:25 2026 GMT Not After : Aug 2 16:12:25 2026 GMT Subject: CN=6a6631ea-94b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:19:bd:65:26:7d:98:02:b2:40:cd:98:f0:28: 78:7f:d4:67:c5:74:34:d2:3a:e9:79:3e:5a:e5:9b: d0:7e:3d:10:b3:36:70:68:46:4c:b6:c9:ab:93:32: 39:b0:01:65:92:91:23:d0:a6:33:fd:6a:07:07:b6: 7b:b7:b4:78:dd:b0:d2:c8:cb:5b:3b:f0:63:a0:56: 15:b8:5a:88:8c:a1:f3:d2:a1:2e:23:0c:5a:ac:4b: 65:13:3e:a5:9a:66:f6:76:35:44:a6:71:00:ff:2c: 08:09:80:c0:0e:bb:22:4e:52:99:a0:4f:3d:c9:10: d4:0a:8d:77:12:1b:8b:71:a6:69:3c:ff:86:7a:61: 21:63:1e:c3:26:49:ea:33:db:4b:d2:0f:10:b3:b8: b1:30:fd:86:a6:66:d5:51:0f:e2:a3:b7:31:40:66: 12:3c:44:60:39:e2:04:c7:ab:ec:39:e8:c3:ca:86: 55:70:6c:e6:93:9a:55:8a:c9:1e:aa:e0:78:ec:4a: 2d:72:c6:f7:41:70:95:7b:51:de:5c:86:1a:cb:53: 67:5b:81:bc:5b:a7:cb:0f:72:e5:6a:87:fa:d5:f0: f7:ad:ab:87:e7:1b:5b:6a:79:3f:52:b9:9d:99:24: e0:a7:8b:c3:e9:60:56:45:30:3e:89:a8:cc:13:96: 77:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C8:5C:BB:A7:0E:03:97:90:9D:85:77:E5:AD:F5:A7:97:5E:C8:71 X509v3 Authority Key Identifier: keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:17:20:c6:a4:6b:f1:28:0a:09:70:fe:1b:79:29:0a:60:a0: f2:6a:d4:af:44:c2:c5:2d:9c:ad:f1:39:05:1c:c2:72:74:67: 29:d1:91:56:8d:06:19:e3:14:95:79:e7:48:af:58:17:4b:4a: 1e:16:2a:ba:75:c5:9c:b1:c8:35:2e:04:78:e5:cf:0f:48:8a: c6:fe:fd:87:66:3d:f4:31:0d:2a:65:95:79:ce:3b:d6:90:5f: e3:c5:24:1c:aa:3b:f6:03:d2:b8:e4:29:f2:29:6d:30:bf:44: 73:3a:99:12:b4:3c:23:47:61:dd:9e:4a:5a:6a:34:e0:77:30: 56:ed:33:fa:eb:05:b3:b3:f8:b5:00:e0:e3:58:a9:f0:d7:15: 22:c1:65:56:fc:40:b4:c7:bd:26:7b:5b:c3:39:b5:7d:8d:27: 3f:9a:8a:c1:a1:8f:14:2b:eb:f5:56:c8:54:b9:a5:28:74:f3: 9b:8b:c1:a6:80:88:3f:ba:e0:53:43:f1:7e:1d:77:ce:79:39: 97:0d:1e:9d:cf:bb:93:55:e1:db:dd:3e:ab:4a:70:fd:17:3b: fa:50:f4:4e:20:3c:57:d5:4c:62:d7:b2:b0:7e:76:43:77:c8: ec:4f:02:52:23:dc:8f:81:41:d3:64:5e:db:e2:c8:3c:8c:49: 29:ef:90:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExNDAxMTAvBgNVBAUTKDA1MDIwRkJGMTAyMEZENjNCRTU3REExQjk3MDRCMEFB ODEwMzQ0NEEwHhcNMjYwNzI2MTYxMjI1WhcNMjYwODAyMTYxMjI1WjAYMRYwFAYD VQQDEw02YTY2MzFlYS05NGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Rm9ZSZ9mAKyQM2Y8Ch4f9RnxXQ00jrpeT5a5ZvQfj0QszZwaEZMtsmrkzI5 sAFlkpEj0KYz/WoHB7Z7t7R43bDSyMtbO/BjoFYVuFqIjKHz0qEuIwxarEtlEz6l mmb2djVEpnEA/ywICYDADrsiTlKZoE89yRDUCo13EhuLcaZpPP+GemEhYx7DJknq M9tL0g8Qs7ixMP2GpmbVUQ/io7cxQGYSPERgOeIEx6vsOejDyoZVcGzmk5pViske quB47Eotcsb3QXCVe1HeXIYay1NnW4G8W6fLD3Llaof61fD3rauH5xtbank/Urmd mSTgp4vD6WBWRTA+iajME5Z39wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHDIXLun DgOXkJ2Fd+Wt9aeXXshxMB8GA1UdIwQYMBaAFAUCD78QIP1jvlfaG5cEsKqBA0RK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTE0MC9DQzFEQ0NFOEM3 NzQxMUU2OTgxNkIwNjhDNEY5QUUwMi9CUUlQdnhBZ19XTy1WOW9ibHdTd3FvRURS RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRSVB2eEFnX1dPLVY5b2Jsd1N3cW9FRFJFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTE0MC9DQzFEQ0NFOEM3NzQxMUU2OTgxNkIwNjhDNEY5QUUwMi9CUUlQdnhBZ19X Ty1WOW9ibHdTd3FvRURSRW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATxcgxqRr8SgKCXD+G3kpCmCg8mrUr0TCxS2crfE5BRzCcnRnKdGRVo0GGeMU lXnnSK9YF0tKHhYqunXFnLHINS4EeOXPD0iKxv79h2Y99DENKmWVec471pBf48Uk HKo79gPSuOQp8iltML9EczqZErQ8I0dh3Z5KWmo04HcwVu0z+usFs7P4tQDg41ip 8NcVIsFlVvxAtMe9Jntbwzm1fY0nP5qKwaGPFCvr9VbIVLmlKHTzm4vBpoCIP7rg U0Pxfh13znk5lw0enc+7k1Xh290+q0pw/Rc7+lD0TiA8V9VMYteysH52Q3fI7E8C UiPcj4FB02Re2+LIPIxJKe+Q+A== -----END CERTIFICATE-----Generated at Mon Jul 27 22:55:30 2026 by rpki-client