$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft File: bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft (raw, json) Hash identifier: DJNEbba2KFJlLqt8ogT+WvPW1cIAZnmrILJ9w6elmnE= Subject key identifier: 18:F1:88:DA:6B:D1:68:B1:36:6B:3B:3A:C1:B0:F8:B9:71:26:00:FA Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 388C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft Manifest number: 36C5 Signing time: Sun 20 Sep 2026 14:17:45 +0000 Manifest this update: Sun 20 Sep 2026 14:17:44 +0000 Manifest next update: Sun 27 Sep 2026 14:17:44 +0000 Files and hashes: 1: bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl (hash: eRHzyJc0rvAZ1npkCsNxG6d5rb9auqVFuV4soyWlVA8=) 2: BFB4B7B2EB5C11F0BDF448C8486F56BC.roa (hash: wG7b3Z0ho6SrOGKFgzP2mEwfhihA1VC5C8sAnk6BBjc=) 3: 3204348A383611E6B2282B5DC4F9AE02.roa (hash: iFuOgI2hNJnbpJ1dk6CCrwS9Ybm5+7KFbmRcIgyHcAU=) 4: 2HN2DqzzZQ8qfz_0CQYQHp7fzH8.asa (hash: 6dUdbNQB8ye7nA3A0bmLn3/knMmdudFU+gX78ZN6c+g=) 5: 331F345A383611E6B2282B5DC4F9AE02.roa (hash: GcEl4TsoGi5NS6wuxb81i9vhnARHI3pK0QqdYDeI0Xo=) 6: FCBF1666677C11EBB2A3F00CC4F9AE02.roa (hash: 0iD1tqR2QJ8fz19EynrYV9CYES81mpV0yTPTczOdyPA=) 7: 88978730772311EBB972032EC4F9AE02.roa (hash: 9TVjQ38xCwazY1bMPEtKgrRo9kVFlqkK6Noa8Q400lE=) 8: 05BF31A412A111F19F0D7733B3EE528E.roa (hash: u0mR0BBsnvEnoYj/eS9qEAD0dwrm+KdGfWI0LcJUSMo=) 9: 181D46FCEE5611F0B0ABEB00546F56BC.roa (hash: mBp7rOQoogZqxxYLbCFoaus93SPSHgQg66CBxO3Z1Y4=) 10: 328EDB76383611E6B2282B5DC4F9AE02.roa (hash: 7WD0rxusumdkjqFR1GtAWnLENPD7bOV8YBlX7yMSo9c=) 11: 318FB51A383611E6B2282B5DC4F9AE02.roa (hash: yaorPh4VrqY9sKXfI0fuCpzkwD4NZvNSICyagXnbW3A=) 12: 89A73D46772311EBB972032EC4F9AE02.roa (hash: JfhzVq/e/tDeRVv2XI7V7GA9Ql0uL8Bzexb3NfT69YE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14476 (0x388c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: Sep 20 14:17:44 2026 GMT Not After : Sep 27 14:17:44 2026 GMT Subject: CN=6aafeb09-5551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ee:52:af:24:da:a9:da:8a:f4:8f:d1:67:59: 4b:c4:4b:3a:09:60:10:af:49:57:3e:a8:ff:3f:60: b7:74:58:54:ee:9f:86:3b:3e:e1:73:12:48:45:ac: af:70:68:da:11:24:eb:02:ff:cf:5c:13:a6:94:b8: da:25:3a:07:04:8d:d4:3f:66:32:65:cd:28:51:9d: 40:dc:2c:d0:3f:4e:77:47:1c:ff:5e:92:f1:75:42: 91:ac:1d:93:16:cf:11:7f:8d:e1:4e:5e:0e:73:ff: 01:13:6d:f4:cd:4e:ee:29:a0:6a:c7:38:cc:17:b9: 58:5e:99:40:3c:c1:67:d1:9c:8e:3e:8e:af:0d:5e: be:21:45:f3:7d:87:3c:56:a6:ae:80:f2:34:21:3a: 40:b4:d0:90:45:c4:f4:7f:8a:87:3d:3b:3c:d7:d6: ed:79:a3:ce:0d:74:41:94:ea:01:59:76:95:36:8d: 76:1d:bb:b4:51:2c:14:0c:e0:98:ee:ab:a7:ce:2d: bf:c0:84:fc:08:0e:45:ba:f3:69:e2:4d:55:fc:39: 24:e8:8c:4b:35:e1:3f:00:ef:c5:b9:49:6b:e1:67: 6a:a0:4f:41:7f:54:b9:79:2c:31:90:a4:d1:ea:1e: bf:49:3f:41:8a:8a:02:79:93:db:bf:e1:3f:20:5f: f9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F1:88:DA:6B:D1:68:B1:36:6B:3B:3A:C1:B0:F8:B9:71:26:00:FA X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:e9:82:b6:4a:e9:b5:1c:18:47:39:ca:6a:a1:bc:c7:ac:38: f0:43:f6:88:cf:7e:35:ca:5d:ba:42:40:f4:47:90:6c:56:4d: 91:80:54:fa:54:4a:e6:f7:a5:0c:87:4b:f6:d2:7a:15:ca:fc: 63:6a:8c:a5:14:a5:fa:76:97:e1:8b:b2:2b:67:3f:de:5e:6a: b0:5c:8a:4b:c8:93:81:e9:98:de:7b:cf:ab:7a:e6:d2:54:57: 51:38:de:80:d3:a6:47:3e:95:f8:19:1e:af:90:8d:26:0d:31: 21:6c:8d:8c:7b:b5:d1:7d:a8:78:ce:aa:fc:92:f3:f6:83:fb: b3:af:3b:3d:6d:5e:52:2a:64:c1:5b:50:88:9b:d3:07:6c:58: ad:28:90:bf:98:81:5e:a4:07:d6:d4:a4:1b:28:f8:2e:da:97: 2f:2b:84:fd:b9:52:45:dc:f0:20:74:4a:b2:3d:b5:ab:07:83: 73:e4:ad:2b:cf:54:41:b2:24:87:2e:90:8c:a7:db:01:b2:c6: 7c:8c:cc:10:6a:c8:1f:8f:40:df:35:88:18:1c:65:39:0a:bb: 81:55:57:0b:30:89:6f:ec:9c:a3:93:35:52:42:a7:f9:b1:46: 9b:71:82:1c:54:8f:55:2b:98:e8:b7:ae:7a:a7:8a:01:ac:31: f2:df:2a:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICOIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjYwOTIwMTQxNzQ0WhcNMjYwOTI3MTQxNzQ0WjAYMRYwFAYD VQQDEw02YWFmZWIwOS01NTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAle5SryTaqdqK9I/RZ1lLxEs6CWAQr0lXPqj/P2C3dFhU7p+GOz7hcxJIRayv cGjaESTrAv/PXBOmlLjaJToHBI3UP2YyZc0oUZ1A3CzQP053Rxz/XpLxdUKRrB2T Fs8Rf43hTl4Oc/8BE230zU7uKaBqxzjMF7lYXplAPMFn0ZyOPo6vDV6+IUXzfYc8 VqaugPI0ITpAtNCQRcT0f4qHPTs819bteaPODXRBlOoBWXaVNo12Hbu0USwUDOCY 7qunzi2/wIT8CA5FuvNp4k1V/Dkk6IxLNeE/AO/FuUlr4WdqoE9Bf1S5eSwxkKTR 6h6/ST9BiooCeZPbv+E/IF/5rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBjxiNpr 0WixNms7OsGw+LlxJgD6MB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTcwQi85N0FGNkRGMDFENkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJU MllTSEduTWhxZEZwWUw0bWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABOmCtkrptRwYRznKaqG8x6w48EP2iM9+NcpdukJA9EeQbFZNkYBU+lRK5vel DIdL9tJ6Fcr8Y2qMpRSl+naX4YuyK2c/3l5qsFyKS8iTgemY3nvPq3rm0lRXUTje gNOmRz6V+Bker5CNJg0xIWyNjHu10X2oeM6q/JLz9oP7s687PW1eUipkwVtQiJvT B2xYrSiQv5iBXqQH1tSkGyj4LtqXLyuE/blSRdzwIHRKsj21qweDc+StK89UQbIk hy6QjKfbAbLGfIzMEGrIH49A3zWIGBxlOQq7gVVXCzCJb+yco5M1UkKn+bFGm3GC HFSPVSuY6LeueqeKAawx8t8qSQ== -----END CERTIFICATE-----Generated at Mon Sep 21 14:49:05 2026 by rpki-client