$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft File: BQcL-a2TBEn7O2m4aRzyDAEnebk.mft (raw, json) Hash identifier: 2EDfFYK9rMOy1dp25haZwSTypLKpXixXMj1u/KNEhkc= Subject key identifier: C0:E5:75:03:D2:44:3C:C8:16:E4:01:5B:BD:9A:C8:E6:D1:BA:73:4D Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Certificate serial: 0D3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft Manifest number: 0D1C Signing time: Sun 04 Oct 2026 18:24:35 +0000 Manifest this update: Sun 04 Oct 2026 18:24:34 +0000 Manifest next update: Sun 11 Oct 2026 18:24:34 +0000 Files and hashes: 1: BQcL-a2TBEn7O2m4aRzyDAEnebk.crl (hash: OQYT3I4EtyUzTcZoI/c9TFWMU7O0ZHQ6dJfY4vUrT/g=) 2: A766D10CF86B11EF86A73884C4F9AE02.roa (hash: XzUEcWrFObnHhypJzqr40j9vQlCZVakmt78JschNZdU=) 3: A87393C8F86B11EF86A73884C4F9AE02.roa (hash: nj+oib/V31McsWuRSdIo8ebXzbzd0Aai1WTDOvqOntk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 18:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3389 (0xd3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC12, serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Validity Not Before: Oct 4 18:24:34 2026 GMT Not After : Oct 11 18:24:34 2026 GMT Subject: CN=6ac299e3-0011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f4:fc:37:d4:52:04:b8:38:b4:f0:c4:f7:d8: 92:3f:82:76:6c:f3:ae:e2:48:6a:24:95:32:b4:33: 88:3a:3d:c3:97:69:3e:36:25:2d:00:68:d4:28:c5: 37:d2:56:df:c2:7a:08:a4:bf:c5:32:92:9c:e6:32: 66:45:b0:49:b5:8b:25:6a:23:40:be:41:e9:e0:a1: 0c:9c:2e:aa:f4:d0:3d:b3:88:1b:6d:00:f3:4a:10: 3c:58:27:9c:af:72:e6:d0:02:37:5a:38:88:f8:e1: 63:2c:32:5f:34:dd:f3:40:53:3d:e4:ba:29:4c:b8: ba:f3:fe:91:e2:b6:5f:65:50:fd:de:59:81:25:61: 37:fb:e9:1c:36:eb:f9:16:9f:ce:b3:e1:d7:28:90: ed:7b:03:28:72:8d:a8:b3:d1:ca:c0:42:b2:1d:a4: 57:1f:48:c3:b4:ef:98:0f:89:62:65:d1:a0:13:11: 97:40:d8:1e:7b:e4:14:b0:4d:d6:54:d5:62:fe:b6: 78:aa:c1:6e:e8:a9:f5:b0:e8:02:70:f3:b1:83:6b: cb:c2:06:89:ca:1b:d3:b7:c2:b6:0c:0f:8d:d7:37: 2c:a0:f0:dd:a1:da:7b:f1:98:39:2b:31:f7:5b:bf: 67:d9:a1:2e:10:7a:55:59:59:11:57:16:04:a6:58: f1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E5:75:03:D2:44:3C:C8:16:E4:01:5B:BD:9A:C8:E6:D1:BA:73:4D X509v3 Authority Key Identifier: keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:da:ca:bf:37:8a:2c:53:08:65:eb:db:46:19:98:fd:a3:c0: 48:00:05:2c:62:5f:68:4d:19:20:29:60:c9:ac:86:12:02:28: 3e:43:1f:5f:22:05:c2:21:7f:a9:41:74:26:c4:9b:b7:81:76: fc:01:75:f0:f4:50:ec:23:9c:c8:47:ae:8e:43:30:d0:bd:a8: 09:ee:e1:c2:a8:d1:c1:78:b5:b6:aa:7e:2e:d0:e6:56:fc:b5: 7a:83:4c:d8:de:9f:75:95:c7:09:cf:12:9b:e8:be:eb:6e:3f: f0:67:78:c6:c6:36:7f:9c:2a:91:fd:07:69:e9:e2:e0:b1:bb: b5:c6:9f:8d:30:7a:e0:67:35:00:a3:43:c9:0d:0b:fa:93:67: 29:81:03:92:ad:9e:4b:e4:23:4c:ba:85:a3:8f:2d:5a:ae:7b: 1a:b1:a3:b0:12:55:81:b9:ba:1a:84:4b:22:79:67:ce:55:c4: 28:fb:01:df:95:e4:52:ed:2e:d6:ed:60:03:56:1a:d8:29:dc: 9a:33:b0:fa:11:d2:26:77:62:f1:2f:f3:89:7e:d4:b7:ee:ab: a8:3b:08:f2:08:38:69:75:1e:a0:8f:6a:24:3d:ac:4b:b7:2f: a3:43:74:d0:bb:e7:6b:9a:76:12:d6:0b:62:24:ac:16:20:c2: fe:77:e2:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDMTIxMTAvBgNVBAUTKDA1MDcwQkY5QUQ5MzA0NDlGQjNCNjlCODY5MUNGMjBD MDEyNzc5QjkwHhcNMjYxMDA0MTgyNDM0WhcNMjYxMDExMTgyNDM0WjAYMRYwFAYD VQQDEw02YWMyOTllMy0wMDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPT8N9RSBLg4tPDE99iSP4J2bPOu4khqJJUytDOIOj3Dl2k+NiUtAGjUKMU3 0lbfwnoIpL/FMpKc5jJmRbBJtYslaiNAvkHp4KEMnC6q9NA9s4gbbQDzShA8WCec r3Lm0AI3WjiI+OFjLDJfNN3zQFM95LopTLi68/6R4rZfZVD93lmBJWE3++kcNuv5 Fp/Os+HXKJDtewMoco2os9HKwEKyHaRXH0jDtO+YD4liZdGgExGXQNgee+QUsE3W VNVi/rZ4qsFu6Kn1sOgCcPOxg2vLwgaJyhvTt8K2DA+N1zcsoPDdodp78Zg5KzH3 W79n2aEuEHpVWVkRVxYEpljxYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMDldQPS RDzIFuQBW72ayObRunNNMB8GA1UdIwQYMBaAFAUHC/mtkwRJ+ztpuGkc8gwBJ3m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMxMi84NTkyRTQ4ODBG NjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJFbjdPMm00YVJ6eURBRW5l YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRY0wtYTJUQkVuN08ybTRhUnp5REFFbmViay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUMxMi84NTkyRTQ4ODBGNjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJF bjdPMm00YVJ6eURBRW5lYmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ9rKvzeKLFMIZevbRhmY/aPASAAFLGJfaE0ZIClgyayGEgIoPkMfXyIFwiF/ qUF0JsSbt4F2/AF18PRQ7COcyEeujkMw0L2oCe7hwqjRwXi1tqp+LtDmVvy1eoNM 2N6fdZXHCc8Sm+i+624/8Gd4xsY2f5wqkf0Haeni4LG7tcafjTB64Gc1AKNDyQ0L +pNnKYEDkq2eS+QjTLqFo48tWq57GrGjsBJVgbm6GoRLInlnzlXEKPsB35XkUu0u 1u1gA1Ya2CncmjOw+hHSJndi8S/ziX7Ut+6rqDsI8gg4aXUeoI9qJD2sS7cvo0N0 0Lvna5p2EtYLYiSsFiDC/nfibg== -----END CERTIFICATE-----Generated at Mon Oct 5 13:01:05 2026 by rpki-client