$ rpki-client -vvf rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft File: BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft (raw, json) Hash identifier: 6f8x9TczevDSVtcivE4kflkkBwkxqEl5PS4u4ay7bRE= Subject key identifier: FB:9C:BC:14:92:A6:24:C1:D0:C7:B0:C5:83:39:C8:8A:54:8C:A7:5E Authority key identifier: 05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB Certificate issuer: /CN=A915E77C/serialNumber=05037E4CDE44EC6642C4169FA851372D78FBFCAB Certificate serial: 02B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft Manifest number: 02AD Signing time: Mon 27 Jul 2026 02:49:37 +0000 Manifest this update: Mon 27 Jul 2026 02:49:37 +0000 Manifest next update: Mon 03 Aug 2026 02:49:37 +0000 Files and hashes: 1: BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl (hash: WzzzCfddTZ2S96nnlaKsPPjVMTk2Wi+L1xEzkskCK/Y=) 2: A20DDFE2725911ED8CB4D763C4F9AE02.roa (hash: a5rkQCdGd6WLgCsLjH9k9RC6TMcBTGsLeQcwPsfq9Ws=) 3: A7DDB8A23E6611F19FA73FF6CD833773.roa (hash: sE7hyGMb+RZELa0prUkJH8bGHJ/zMp5lIGg2bRbPuWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 692 (0x2b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E77C, serialNumber=05037E4CDE44EC6642C4169FA851372D78FBFCAB Validity Not Before: Jul 27 02:49:37 2026 GMT Not After : Aug 3 02:49:37 2026 GMT Subject: CN=6a66c741-9d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d8:4e:c9:1f:b3:26:f1:ae:87:03:35:04:66: 1e:5d:51:04:6b:40:1f:68:b0:19:fb:b0:f6:d3:83: a2:c7:fa:92:69:c6:68:db:f9:53:2b:42:9a:d7:c4: 65:67:69:05:de:c0:2d:30:aa:83:16:db:cb:31:fb: f3:dd:a7:98:45:a8:8e:64:1b:8a:d7:e5:55:10:99: 7c:bd:ab:7d:1b:5d:2f:5a:e3:f3:a9:31:a1:75:14: bf:e9:81:4b:1f:2a:70:df:0e:8e:e1:fb:ff:62:d4: f1:cc:7b:b2:f4:32:6a:c1:6e:3e:c1:ab:62:7e:57: 49:02:ee:c1:df:af:f7:71:b0:be:b7:ad:be:60:86: fa:0d:90:a4:4b:7e:81:29:c6:b5:3e:99:21:41:7b: fc:64:81:f4:9e:bf:9e:3a:7e:03:2b:13:f4:4e:80: 1c:45:cf:06:42:ca:c1:cc:b4:fd:e1:31:1b:e1:85: 12:c6:4e:96:35:fa:61:85:7f:b5:fd:c2:82:63:3d: ed:2e:55:9d:70:b3:52:36:44:87:23:62:f5:08:7b: 41:c9:0b:35:39:59:45:4e:f0:7a:50:04:48:14:20: 86:49:8e:eb:c9:ad:53:4e:cd:00:51:11:6b:46:78: 44:b1:c7:30:de:a1:45:57:bb:38:4c:69:fd:1c:f4: 7c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9C:BC:14:92:A6:24:C1:D0:C7:B0:C5:83:39:C8:8A:54:8C:A7:5E X509v3 Authority Key Identifier: keyid:05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e1:ab:bd:31:f6:22:9b:b6:f9:4b:64:1b:01:0a:cd:1c:25: 5f:d0:67:06:32:d9:5a:0b:19:fb:30:15:17:3f:52:3c:1e:c6: 42:4e:71:e3:1f:16:c9:92:2e:9c:9a:fd:bd:b4:c4:f5:65:5d: a5:2f:8f:40:54:c7:ef:a1:ae:37:2a:b7:6f:3d:18:83:06:48: 5a:1b:21:a6:64:58:eb:35:db:58:53:25:46:0b:1a:6d:66:25: 09:85:f3:e1:ed:7e:ef:83:f0:a0:15:52:9d:16:e4:cc:3c:13: 33:22:18:cb:01:5c:27:4a:6b:d2:5f:c5:d9:64:42:c2:17:69: 51:ee:4e:3a:24:79:15:5c:19:31:ce:7c:6f:dc:b1:5a:1b:9d: 0b:39:f2:09:2c:82:e9:e9:ad:cf:bd:91:f7:d1:be:cd:f7:da: 8b:7a:bd:02:57:f2:bb:5b:91:fc:1e:62:91:75:e9:70:7f:bf: b3:2f:70:0c:a3:af:43:35:f3:6c:0b:8a:20:58:6c:65:6a:57: c2:e7:7f:a4:3e:d4:ce:0f:9a:00:0b:1f:61:6a:16:4e:c4:d8: 94:c1:bb:05:b1:7b:d6:9e:f1:7c:ac:50:c8:ea:84:cd:c0:93: 8d:ba:50:55:72:da:b7:72:e3:dc:41:c7:15:bf:b5:7a:46:0d: 9f:85:e1:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU3N0MxMTAvBgNVBAUTKDA1MDM3RTRDREU0NEVDNjY0MkM0MTY5RkE4NTEzNzJE NzhGQkZDQUIwHhcNMjYwNzI3MDI0OTM3WhcNMjYwODAzMDI0OTM3WjAYMRYwFAYD VQQDEw02YTY2Yzc0MS05ZDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7NhOyR+zJvGuhwM1BGYeXVEEa0AfaLAZ+7D204Oix/qSacZo2/lTK0Ka18Rl Z2kF3sAtMKqDFtvLMfvz3aeYRaiOZBuK1+VVEJl8vat9G10vWuPzqTGhdRS/6YFL Hypw3w6O4fv/YtTxzHuy9DJqwW4+watifldJAu7B36/3cbC+t62+YIb6DZCkS36B Kca1PpkhQXv8ZIH0nr+eOn4DKxP0ToAcRc8GQsrBzLT94TEb4YUSxk6WNfphhX+1 /cKCYz3tLlWdcLNSNkSHI2L1CHtByQs1OVlFTvB6UARIFCCGSY7rya1TTs0AURFr RnhEsccw3qFFV7s4TGn9HPR8BwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPucvBSS piTB0MewxYM5yIpUjKdeMB8GA1UdIwQYMBaAFAUDfkzeROxmQsQWn6hRNy14+/yr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTc3Qy9GNzAwQTlFQzcy NTYxMUVEOTAyMTE1NjJDNEY5QUUwMi9CUU4tVE41RTdHWkN4QmFmcUZFM0xYajdf S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRTi1UTjVFN0daQ3hCYWZxRkUzTFhqN19Lcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTc3Qy9GNzAwQTlFQzcyNTYxMUVEOTAyMTE1NjJDNEY5QUUwMi9CUU4tVE41RTdH WkN4QmFmcUZFM0xYajdfS3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjOGrvTH2Ipu2+UtkGwEKzRwlX9BnBjLZWgsZ+zAVFz9SPB7GQk5x4x8WyZIu nJr9vbTE9WVdpS+PQFTH76GuNyq3bz0YgwZIWhshpmRY6zXbWFMlRgsabWYlCYXz 4e1+74PwoBVSnRbkzDwTMyIYywFcJ0pr0l/F2WRCwhdpUe5OOiR5FVwZMc58b9yx WhudCznyCSyC6emtz72R99G+zffai3q9Alfyu1uR/B5ikXXpcH+/sy9wDKOvQzXz bAuKIFhsZWpXwud/pD7Uzg+aAAsfYWoWTsTYlMG7BbF71p7xfKxQyOqEzcCTjbpQ VXLat3Lj3EHHFb+1ekYNn4XhRA== -----END CERTIFICATE-----Generated at Mon Jul 27 22:57:03 2026 by rpki-client