$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft File: bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft (raw, json) Hash identifier: 8DKu+q4U4gzSzxvULaCUVNpxGmC8kd2XbEFe7v9NF2Y= Subject key identifier: 2A:B1:00:C2:01:E8:60:A0:31:96:63:C2:80:F5:C7:D9:A8:5E:18:AD Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 388D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft Manifest number: 36C6 Signing time: Tue 22 Sep 2026 14:18:01 +0000 Manifest this update: Tue 22 Sep 2026 14:18:01 +0000 Manifest next update: Tue 29 Sep 2026 14:18:01 +0000 Files and hashes: 1: bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl (hash: T1DzxmUV2rY2kud9EIzgE+1xXF6Rkp82WT8o5ck4wcc=) 2: BFB4B7B2EB5C11F0BDF448C8486F56BC.roa (hash: wG7b3Z0ho6SrOGKFgzP2mEwfhihA1VC5C8sAnk6BBjc=) 3: 2HN2DqzzZQ8qfz_0CQYQHp7fzH8.asa (hash: 6dUdbNQB8ye7nA3A0bmLn3/knMmdudFU+gX78ZN6c+g=) 4: FCBF1666677C11EBB2A3F00CC4F9AE02.roa (hash: 0iD1tqR2QJ8fz19EynrYV9CYES81mpV0yTPTczOdyPA=) 5: 328EDB76383611E6B2282B5DC4F9AE02.roa (hash: 7WD0rxusumdkjqFR1GtAWnLENPD7bOV8YBlX7yMSo9c=) 6: 331F345A383611E6B2282B5DC4F9AE02.roa (hash: GcEl4TsoGi5NS6wuxb81i9vhnARHI3pK0QqdYDeI0Xo=) 7: 88978730772311EBB972032EC4F9AE02.roa (hash: 9TVjQ38xCwazY1bMPEtKgrRo9kVFlqkK6Noa8Q400lE=) 8: 318FB51A383611E6B2282B5DC4F9AE02.roa (hash: yaorPh4VrqY9sKXfI0fuCpzkwD4NZvNSICyagXnbW3A=) 9: 3204348A383611E6B2282B5DC4F9AE02.roa (hash: iFuOgI2hNJnbpJ1dk6CCrwS9Ybm5+7KFbmRcIgyHcAU=) 10: 05BF31A412A111F19F0D7733B3EE528E.roa (hash: u0mR0BBsnvEnoYj/eS9qEAD0dwrm+KdGfWI0LcJUSMo=) 11: 89A73D46772311EBB972032EC4F9AE02.roa (hash: JfhzVq/e/tDeRVv2XI7V7GA9Ql0uL8Bzexb3NfT69YE=) 12: 181D46FCEE5611F0B0ABEB00546F56BC.roa (hash: mBp7rOQoogZqxxYLbCFoaus93SPSHgQg66CBxO3Z1Y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14477 (0x388d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: Sep 22 14:18:01 2026 GMT Not After : Sep 29 14:18:01 2026 GMT Subject: CN=6ab28e19-3c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fe:72:80:6d:5c:12:e1:f7:0f:1f:d3:96:43: 10:27:76:06:5e:0b:09:1d:1a:42:99:0a:1c:f9:ea: 31:d9:0e:31:75:9b:0d:dc:9a:81:0b:be:8e:28:19: 1f:d0:e0:f6:02:41:5f:e4:ee:09:75:b5:55:d9:8f: f4:9e:29:55:e9:15:ca:a0:5c:3c:77:90:09:5c:33: 86:c1:96:78:19:15:aa:2c:82:af:4c:13:de:4a:0c: 3e:fb:1a:5f:a0:33:17:73:3c:0e:ae:7c:5f:fd:00: 24:19:ea:bb:f8:d4:8e:e6:40:c8:94:7b:d9:f7:da: c4:4f:70:2d:aa:17:7d:d7:08:31:f0:ac:84:2e:45: 79:96:b1:a0:72:4e:0e:59:42:03:e0:36:1a:1f:1e: 2d:dc:cb:c8:7d:b3:e8:a0:b3:13:5f:1e:e7:49:81: 8c:43:7b:63:87:78:e1:0f:ca:bb:40:ae:e8:0a:29: 3e:27:20:9b:4b:31:40:a1:5e:ac:c5:2f:c5:6f:3a: 60:a8:9b:3a:1c:19:51:a4:77:16:3f:39:f3:e0:8e: 66:31:7f:91:f6:95:d6:54:9f:31:2c:05:57:e8:4a: c3:31:b0:87:19:6a:c5:d9:1c:8b:8a:a5:76:ac:1e: f7:b8:5e:27:09:95:59:ca:c6:bb:0f:e5:2f:ea:a7: 74:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B1:00:C2:01:E8:60:A0:31:96:63:C2:80:F5:C7:D9:A8:5E:18:AD X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:9d:b8:70:e4:78:22:26:87:be:91:b2:49:1d:70:4d:ab:21: 2c:3f:34:50:d4:6b:e6:29:d3:ad:64:2a:ad:b6:92:42:8c:b6: 68:40:65:70:4d:74:59:70:b5:08:d6:c6:d2:b4:d9:bc:0b:da: 0e:93:2f:ca:a9:34:ef:8c:5e:79:ad:63:5f:68:18:a5:e5:aa: 4a:49:7c:29:e8:ab:ee:2f:20:c2:a9:1b:bd:ba:8d:13:13:9a: 98:7d:3e:69:3c:2c:98:2f:c8:9b:da:72:03:31:70:5f:62:52: b4:ab:4e:14:e5:90:02:f7:50:a2:1d:6b:cd:79:fa:45:73:51: 6d:6e:30:8b:69:83:d5:89:26:0f:d2:8c:ad:40:fe:c9:e8:0d: 34:74:05:e8:39:17:68:4f:46:9d:cf:09:f4:5e:07:69:25:82: 90:c7:f0:52:7a:c6:ba:58:47:1b:9d:3a:cb:66:eb:b3:70:ad: 6c:dd:c5:61:b6:df:a0:25:09:1a:1c:79:30:3b:29:10:d0:97: ab:81:ff:98:c1:4d:87:d5:8f:ea:17:2d:a4:bc:87:46:eb:4c: 25:9f:52:81:4f:1c:b0:a4:71:21:f9:ba:3e:61:69:43:8f:7a: 73:e4:9e:13:7a:d3:20:31:f3:17:41:c4:a4:da:3f:19:7e:c7: a3:35:9f:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICOI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjYwOTIyMTQxODAxWhcNMjYwOTI5MTQxODAxWjAYMRYwFAYD VQQDEw02YWIyOGUxOS0zYzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAif5ygG1cEuH3Dx/TlkMQJ3YGXgsJHRpCmQoc+eox2Q4xdZsN3JqBC76OKBkf 0OD2AkFf5O4JdbVV2Y/0nilV6RXKoFw8d5AJXDOGwZZ4GRWqLIKvTBPeSgw++xpf oDMXczwOrnxf/QAkGeq7+NSO5kDIlHvZ99rET3Atqhd91wgx8KyELkV5lrGgck4O WUID4DYaHx4t3MvIfbPooLMTXx7nSYGMQ3tjh3jhD8q7QK7oCik+JyCbSzFAoV6s xS/FbzpgqJs6HBlRpHcWPznz4I5mMX+R9pXWVJ8xLAVX6ErDMbCHGWrF2RyLiqV2 rB73uF4nCZVZysa7D+Uv6qd0LwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCqxAMIB 6GCgMZZjwoD1x9moXhitMB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTcwQi85N0FGNkRGMDFENkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJU MllTSEduTWhxZEZwWUw0bWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAZ24cOR4IiaHvpGySR1wTashLD80UNRr5inTrWQqrbaSQoy2aEBlcE10WXC1 CNbG0rTZvAvaDpMvyqk074xeea1jX2gYpeWqSkl8Keir7i8gwqkbvbqNExOamH0+ aTwsmC/Im9pyAzFwX2JStKtOFOWQAvdQoh1rzXn6RXNRbW4wi2mD1YkmD9KMrUD+ yegNNHQF6DkXaE9Gnc8J9F4HaSWCkMfwUnrGulhHG506y2brs3CtbN3FYbbfoCUJ Ghx5MDspENCXq4H/mMFNh9WP6hctpLyHRutMJZ9SgU8csKRxIfm6PmFpQ496c+Se E3rTIDHzF0HEpNo/GX7HozWfvw== -----END CERTIFICATE-----Generated at Tue Sep 22 19:33:30 2026 by rpki-client