$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft File: BQcL-a2TBEn7O2m4aRzyDAEnebk.mft (raw, json) Hash identifier: C1dh2eUhHFyVJNxpNNPcv0ZgpjHfl7K/MOw38YQayKQ= Subject key identifier: 9D:DC:FF:D7:F1:BA:5E:8D:49:11:76:E1:2E:5D:1E:70:68:0C:A4:87 Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Certificate serial: 0D25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft Manifest number: 0D04 Signing time: Tue 18 Aug 2026 18:38:35 +0000 Manifest this update: Tue 18 Aug 2026 18:38:34 +0000 Manifest next update: Tue 25 Aug 2026 18:38:34 +0000 Files and hashes: 1: BQcL-a2TBEn7O2m4aRzyDAEnebk.crl (hash: Xy3xQrCyb3zAcXo8wy/Sq5w1o6LM/LvzmV4u6lKMBfA=) 2: A87393C8F86B11EF86A73884C4F9AE02.roa (hash: nj+oib/V31McsWuRSdIo8ebXzbzd0Aai1WTDOvqOntk=) 3: A766D10CF86B11EF86A73884C4F9AE02.roa (hash: XzUEcWrFObnHhypJzqr40j9vQlCZVakmt78JschNZdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 18:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3365 (0xd25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC12, serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Validity Not Before: Aug 18 18:38:34 2026 GMT Not After : Aug 25 18:38:34 2026 GMT Subject: CN=6a84a6ab-bea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b7:c4:cb:9c:61:bd:6b:49:b4:0b:60:fc:09: 36:c9:cf:47:4c:8c:2a:14:69:5b:08:b5:92:87:b3: aa:38:e2:e1:5d:c1:c8:7d:a0:62:33:8d:59:4b:3f: 82:0e:a4:e5:bf:8c:35:a1:18:03:12:6a:84:11:e0: 65:07:9c:d9:35:fd:96:c9:7f:c3:01:36:09:48:96: aa:13:13:14:ba:a8:dd:3e:98:4b:8e:23:81:53:61: 44:c4:34:61:44:e9:6c:c1:e0:d6:4e:03:eb:19:0e: db:91:8c:13:fc:aa:53:4f:d6:b7:34:10:6c:b9:f8: 59:96:d1:ef:1c:f9:7b:96:a5:5b:0b:e7:6d:7d:15: 1d:e7:6c:ef:57:6f:fa:c0:e5:07:aa:90:16:53:55: 3f:86:58:7d:0e:ad:37:07:f7:92:56:ce:87:28:21: d1:ad:70:60:79:81:e4:b2:7e:7b:e8:0b:b4:21:b9: e2:a6:49:1d:c1:5b:e7:5e:67:6e:20:97:db:4a:b4: b0:bc:5a:9c:20:f7:c2:bd:18:91:00:72:64:38:95: 2b:fe:34:2d:09:7c:3a:90:6c:41:bc:c9:d5:c4:2e: f0:d0:c1:55:e2:ad:b7:4a:cc:d5:d9:01:f3:da:27: 9e:41:0a:67:b9:d5:f9:ed:c6:c2:c2:1a:26:25:46: 97:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DC:FF:D7:F1:BA:5E:8D:49:11:76:E1:2E:5D:1E:70:68:0C:A4:87 X509v3 Authority Key Identifier: keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:4d:1f:fa:ac:a1:3e:50:8b:86:3a:8e:24:10:c0:71:10:32: 0e:13:04:e1:34:ce:86:1a:a4:0e:f0:b2:fe:23:f7:c1:a9:40: 82:b1:26:9d:a2:67:f0:97:6b:88:e5:0e:fc:36:13:37:6c:88: 85:91:c7:fa:ab:4d:8c:72:38:9e:3b:c0:17:19:dc:d2:96:6b: be:45:3f:4e:85:a8:4d:ff:6c:0f:49:2f:31:c9:9e:c0:34:da: f6:06:48:44:77:b4:ea:2c:12:e2:a4:f7:bd:3f:a9:2e:83:35: 7b:72:8e:44:47:b4:eb:8e:30:48:65:e7:7f:cb:15:9b:cd:d9: 82:cd:20:53:c7:f8:95:43:3b:0f:1e:81:8f:80:ed:34:9c:5e: 6b:c5:76:f4:1f:99:49:aa:ee:cb:2d:82:42:c7:b7:42:78:97: b8:f2:66:45:ff:98:38:4b:e3:c1:46:fe:17:12:d5:a7:4c:de: d9:5f:ef:5a:85:4f:79:3b:ba:3d:68:a1:c9:fc:f7:d7:b4:8b: bf:fd:d6:71:e3:4f:bc:db:91:95:ef:be:3a:d1:96:57:50:be: 6d:93:fb:51:69:92:22:d4:ea:b5:d5:08:19:7b:8b:87:56:e9: 2e:17:e0:ba:48:cf:4e:69:4b:89:c8:01:a7:8e:2f:e7:52:74: d1:7a:63:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDMTIxMTAvBgNVBAUTKDA1MDcwQkY5QUQ5MzA0NDlGQjNCNjlCODY5MUNGMjBD MDEyNzc5QjkwHhcNMjYwODE4MTgzODM0WhcNMjYwODI1MTgzODM0WjAYMRYwFAYD VQQDEw02YTg0YTZhYi1iZWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7fEy5xhvWtJtAtg/Ak2yc9HTIwqFGlbCLWSh7OqOOLhXcHIfaBiM41ZSz+C DqTlv4w1oRgDEmqEEeBlB5zZNf2WyX/DATYJSJaqExMUuqjdPphLjiOBU2FExDRh ROlsweDWTgPrGQ7bkYwT/KpTT9a3NBBsufhZltHvHPl7lqVbC+dtfRUd52zvV2/6 wOUHqpAWU1U/hlh9Dq03B/eSVs6HKCHRrXBgeYHksn576Au0IbnipkkdwVvnXmdu IJfbSrSwvFqcIPfCvRiRAHJkOJUr/jQtCXw6kGxBvMnVxC7w0MFV4q23SszV2QHz 2ieeQQpnudX57cbCwhomJUaXrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ3c/9fx ul6NSRF24S5dHnBoDKSHMB8GA1UdIwQYMBaAFAUHC/mtkwRJ+ztpuGkc8gwBJ3m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMxMi84NTkyRTQ4ODBG NjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJFbjdPMm00YVJ6eURBRW5l YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRY0wtYTJUQkVuN08ybTRhUnp5REFFbmViay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUMxMi84NTkyRTQ4ODBGNjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJF bjdPMm00YVJ6eURBRW5lYmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkk0f+qyhPlCLhjqOJBDAcRAyDhME4TTOhhqkDvCy/iP3walAgrEmnaJn8Jdr iOUO/DYTN2yIhZHH+qtNjHI4njvAFxnc0pZrvkU/ToWoTf9sD0kvMcmewDTa9gZI RHe06iwS4qT3vT+pLoM1e3KOREe0644wSGXnf8sVm83Zgs0gU8f4lUM7Dx6Bj4Dt NJxea8V29B+ZSaruyy2CQse3QniXuPJmRf+YOEvjwUb+FxLVp0ze2V/vWoVPeTu6 PWihyfz317SLv/3WceNPvNuRle++OtGWV1C+bZP7UWmSItTqtdUIGXuLh1bpLhfg ukjPTmlLicgBp44v51J00XpjvA== -----END CERTIFICATE-----Generated at Wed Aug 19 12:46:35 2026 by rpki-client