$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft File: BQIPvxAg_WO-V9oblwSwqoEDREo.mft (raw, json) Hash identifier: w21jBhL8A8MlT0pNFIOtphP4xMj2j0Isjb9OdRWIcgU= Subject key identifier: 34:6A:39:E1:7B:DC:70:85:BE:60:AA:75:DC:03:E1:EF:38:03:A2:2B Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A Certificate issuer: /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A Certificate serial: 1E11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft Manifest number: 1DEE Signing time: Wed 28 Oct 2026 16:08:02 +0000 Manifest this update: Wed 28 Oct 2026 16:08:01 +0000 Manifest next update: Wed 04 Nov 2026 16:08:01 +0000 Files and hashes: 1: BQIPvxAg_WO-V9oblwSwqoEDREo.crl (hash: occqSkLNMz0jovtA8WXG9hLf7HLnr5bJUZ0e8W5Wh3c=) 2: 52F3327C86FF11F194514C90ABEE528E.roa (hash: /IVngDfy+n15uFsKjLEQiuYoVw+4Q06X5acY7hxk1W0=) 3: 4CBDBA5E3F0011F18130B663C8833773.roa (hash: Fj+bRfSzcCaCjFqPxjs4ZGVm3cIIfQYKMPXbwmtBTf8=) 4: 6C2E2E523E6311F18F888BA6CC833773.roa (hash: 2AL1mCcZDO9+FxQroyY8lnW+LSs0R3w8lh7IwUkJ1+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 16:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7697 (0x1e11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A140, serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A Validity Not Before: Oct 28 16:08:01 2026 GMT Not After : Nov 4 16:08:01 2026 GMT Subject: CN=6ae21de2-5d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:26:2d:c9:ad:ce:23:79:5a:85:b3:a9:75:f2: a0:56:b8:5f:ab:b1:e7:5c:c8:16:d0:8f:dd:26:76: 65:ca:a5:54:ac:d3:d1:f5:ed:07:7f:b2:40:ed:06: af:cd:ab:96:e1:31:4a:33:99:51:16:5b:45:6f:b3: 9c:b5:26:67:f8:ef:f2:52:0f:c1:35:db:ee:74:70: 92:ee:c9:96:7b:21:60:97:f6:17:34:78:f9:d8:39: 1b:e6:78:de:0d:74:bf:1d:37:3b:02:c8:e7:c6:8d: 51:16:7b:2e:28:b1:f7:40:28:57:35:4d:b0:3b:35: aa:da:0a:f2:e6:84:cd:30:ab:8b:05:7e:6a:18:ea: 46:03:ba:5f:84:74:63:cd:10:1d:0b:b5:6e:90:fa: 06:0d:15:9a:b7:5a:95:f6:3d:71:39:9c:dc:52:36: 0d:76:2d:e3:1c:97:21:67:c7:69:3b:99:11:3e:2e: 0a:87:d7:bc:2d:dd:c9:ad:8f:4a:6e:fb:83:48:a0: fe:3f:54:92:79:46:17:c3:6e:57:4f:f3:74:1f:18: 4c:e1:c6:90:18:34:51:62:c6:e3:3c:e6:31:32:32: 0c:00:75:e8:d0:78:18:aa:7a:2e:84:2f:90:21:18: 3f:9b:3f:21:64:34:9b:da:7c:88:b1:ec:58:f7:d7: c4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6A:39:E1:7B:DC:70:85:BE:60:AA:75:DC:03:E1:EF:38:03:A2:2B X509v3 Authority Key Identifier: keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:42:86:04:cd:ee:23:b5:37:18:6b:76:a1:bc:9c:b0:95:be: 07:d1:f6:04:25:d0:82:60:fb:46:3f:06:c6:22:b4:b3:fa:62: b7:ff:99:06:24:7e:4f:8a:35:6c:53:30:32:27:3a:36:ef:dd: 35:4b:66:c0:7b:54:4e:ec:b1:b6:2b:7a:6e:e6:d3:a6:16:d2: cd:e0:d0:06:fc:e7:3a:ae:ef:7d:ae:37:a9:65:f0:30:39:c2: 5f:5e:27:e1:36:3a:34:7a:13:f4:d1:64:66:06:09:7e:a1:45: 17:b1:85:42:9a:48:60:d3:d2:97:13:dc:66:3f:e7:e8:89:3b: 8c:7a:64:5b:be:1f:19:80:b2:f9:88:8d:ff:01:38:08:3f:31: 21:4a:d6:58:75:62:4c:1f:7d:47:b2:54:7b:8d:f2:92:e7:5a: e9:b3:6f:3b:b8:98:d4:b0:2d:75:c8:4c:e9:19:8f:4b:dd:8f: 9d:2a:38:bb:ba:98:9e:bb:0e:76:2d:c3:26:f4:4f:16:26:42: 2e:c7:fc:0b:89:42:37:0c:cd:43:91:b3:a8:0e:17:c1:5b:1a: 4b:49:d3:8f:6f:74:59:56:f0:e0:b9:35:71:ca:86:fc:40:81: 11:1e:41:5e:11:89:2c:99:6d:25:ab:50:5b:49:53:18:1a:b8: 7c:10:3c:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExNDAxMTAvBgNVBAUTKDA1MDIwRkJGMTAyMEZENjNCRTU3REExQjk3MDRCMEFB ODEwMzQ0NEEwHhcNMjYxMDI4MTYwODAxWhcNMjYxMTA0MTYwODAxWjAYMRYwFAYD VQQDEw02YWUyMWRlMi01ZDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSYtya3OI3lahbOpdfKgVrhfq7HnXMgW0I/dJnZlyqVUrNPR9e0Hf7JA7Qav zauW4TFKM5lRFltFb7OctSZn+O/yUg/BNdvudHCS7smWeyFgl/YXNHj52Dkb5nje DXS/HTc7Asjnxo1RFnsuKLH3QChXNU2wOzWq2gry5oTNMKuLBX5qGOpGA7pfhHRj zRAdC7VukPoGDRWat1qV9j1xOZzcUjYNdi3jHJchZ8dpO5kRPi4Kh9e8Ld3JrY9K bvuDSKD+P1SSeUYXw25XT/N0HxhM4caQGDRRYsbjPOYxMjIMAHXo0HgYqnouhC+Q IRg/mz8hZDSb2nyIsexY99fE8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDRqOeF7 3HCFvmCqddwD4e84A6IrMB8GA1UdIwQYMBaAFAUCD78QIP1jvlfaG5cEsKqBA0RK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTE0MC9DQzFEQ0NFOEM3 NzQxMUU2OTgxNkIwNjhDNEY5QUUwMi9CUUlQdnhBZ19XTy1WOW9ibHdTd3FvRURS RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRSVB2eEFnX1dPLVY5b2Jsd1N3cW9FRFJFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTE0MC9DQzFEQ0NFOEM3NzQxMUU2OTgxNkIwNjhDNEY5QUUwMi9CUUlQdnhBZ19X Ty1WOW9ibHdTd3FvRURSRW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKkKGBM3uI7U3GGt2obycsJW+B9H2BCXQgmD7Rj8GxiK0s/pit/+ZBiR+T4o1 bFMwMic6Nu/dNUtmwHtUTuyxtit6bubTphbSzeDQBvznOq7vfa43qWXwMDnCX14n 4TY6NHoT9NFkZgYJfqFFF7GFQppIYNPSlxPcZj/n6Ik7jHpkW74fGYCy+YiN/wE4 CD8xIUrWWHViTB99R7JUe43ykuda6bNvO7iY1LAtdchM6RmPS92PnSo4u7qYnrsO di3DJvRPFiZCLsf8C4lCNwzNQ5GzqA4XwVsaS0nTj290WVbw4Lk1ccqG/ECBER5B XhGJLJltJatQW0lTGBq4fBA84w== -----END CERTIFICATE-----Generated at Fri Oct 30 05:08:56 2026 by rpki-client