$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft File: bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft (raw, json) Hash identifier: Muqv3k+nN116mikiL87SaKDBIiLS+52CT4W+IgXaxAw= Subject key identifier: 41:A0:01:F2:D6:DB:0A:F9:FB:FD:84:5D:8D:FA:2C:A1:CD:DE:ED:5C Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 3870 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft Manifest number: 36A9 Signing time: Tue 28 Jul 2026 14:17:55 +0000 Manifest this update: Tue 28 Jul 2026 14:17:55 +0000 Manifest next update: Tue 04 Aug 2026 14:17:55 +0000 Files and hashes: 1: bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl (hash: 8Sj/4LPZr8rTStGr21J3O+V/+OmvUP35WpiV1YYQ1xs=) 2: 2HN2DqzzZQ8qfz_0CQYQHp7fzH8.asa (hash: 6dUdbNQB8ye7nA3A0bmLn3/knMmdudFU+gX78ZN6c+g=) 3: 331F345A383611E6B2282B5DC4F9AE02.roa (hash: GcEl4TsoGi5NS6wuxb81i9vhnARHI3pK0QqdYDeI0Xo=) 4: 3204348A383611E6B2282B5DC4F9AE02.roa (hash: iFuOgI2hNJnbpJ1dk6CCrwS9Ybm5+7KFbmRcIgyHcAU=) 5: 88978730772311EBB972032EC4F9AE02.roa (hash: 9TVjQ38xCwazY1bMPEtKgrRo9kVFlqkK6Noa8Q400lE=) 6: BFB4B7B2EB5C11F0BDF448C8486F56BC.roa (hash: wG7b3Z0ho6SrOGKFgzP2mEwfhihA1VC5C8sAnk6BBjc=) 7: 05BF31A412A111F19F0D7733B3EE528E.roa (hash: u0mR0BBsnvEnoYj/eS9qEAD0dwrm+KdGfWI0LcJUSMo=) 8: 328EDB76383611E6B2282B5DC4F9AE02.roa (hash: 7WD0rxusumdkjqFR1GtAWnLENPD7bOV8YBlX7yMSo9c=) 9: 181D46FCEE5611F0B0ABEB00546F56BC.roa (hash: mBp7rOQoogZqxxYLbCFoaus93SPSHgQg66CBxO3Z1Y4=) 10: 89A73D46772311EBB972032EC4F9AE02.roa (hash: JfhzVq/e/tDeRVv2XI7V7GA9Ql0uL8Bzexb3NfT69YE=) 11: FCBF1666677C11EBB2A3F00CC4F9AE02.roa (hash: 0iD1tqR2QJ8fz19EynrYV9CYES81mpV0yTPTczOdyPA=) 12: 318FB51A383611E6B2282B5DC4F9AE02.roa (hash: yaorPh4VrqY9sKXfI0fuCpzkwD4NZvNSICyagXnbW3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14448 (0x3870) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: Jul 28 14:17:55 2026 GMT Not After : Aug 4 14:17:55 2026 GMT Subject: CN=6a68ba13-eec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:17:f6:db:6d:80:6a:89:bd:14:18:e9:3e:4e: b6:6d:c2:f4:ca:94:02:19:c2:8f:f9:6e:a5:e3:7f: d8:6f:ee:3f:76:2b:a4:20:a8:62:d7:dc:05:24:1a: 5e:87:27:94:22:da:a4:0d:ec:b9:af:85:69:29:e0: a6:f1:06:f3:92:ef:1d:9e:63:a8:6a:5a:3e:ef:19: 3d:92:ab:9f:e3:0c:6f:9b:07:cc:d8:13:82:b6:7b: 61:3d:48:60:ee:44:f1:05:3c:13:a7:9f:44:9a:18: f8:58:df:6b:d7:2e:44:93:f7:c3:6a:c3:c2:75:ed: 03:d7:dc:ed:29:d2:05:8e:00:89:80:7e:eb:92:d0: 8c:1e:3c:85:00:fd:f7:54:25:f2:90:ae:be:1f:c5: b5:e1:f3:28:dc:32:23:81:81:fb:be:11:d7:a9:c2: 7e:1c:c4:b2:6f:bb:0f:ec:50:bb:51:54:81:a2:43: fe:ca:a7:bc:f0:93:86:49:6a:2a:6e:c4:f3:de:4c: fd:8a:24:49:9d:1d:37:96:12:5e:2e:aa:40:61:da: 1a:a4:f4:fe:8b:20:c1:0d:49:7c:02:cd:78:4f:47: ea:ae:a7:d2:d6:ae:ab:40:fd:b7:cb:a4:a9:d9:73: 01:c3:7d:e4:fc:96:14:e2:fe:17:f3:98:a1:0f:98: 53:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A0:01:F2:D6:DB:0A:F9:FB:FD:84:5D:8D:FA:2C:A1:CD:DE:ED:5C X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:b0:98:b6:83:b8:72:b8:33:a5:8a:6e:a2:64:ec:74:bf:88: 09:ad:02:32:6b:ff:49:bf:50:28:83:58:26:52:fa:41:f4:0c: 6f:ab:8a:e0:73:b9:62:25:12:d4:45:db:63:5a:dc:62:17:40: f7:9f:2f:96:70:8e:12:be:85:8b:d7:f1:e7:b4:6c:9e:2e:55: 6a:5a:fb:5e:51:c0:af:3d:2c:87:03:e4:19:4d:a7:29:2b:75: 23:64:91:b1:ae:3e:90:c7:a4:99:53:90:63:a2:71:11:de:8c: 16:9e:76:9d:30:c6:3e:fe:56:41:c5:a0:0b:9f:5b:bf:6c:69: e7:96:cc:fd:08:81:01:eb:38:18:9f:f4:97:10:15:85:5f:64: 8f:a6:c7:b2:21:ea:ff:71:f0:9f:1f:c3:b7:3a:4c:08:6e:7f: b9:93:04:72:3d:e4:d4:17:3c:4b:7d:e1:df:a1:51:7e:68:bb: 62:39:b1:66:4a:b1:65:bd:03:39:fe:d9:fe:93:53:f5:56:a9: 2c:ad:70:ad:59:97:e1:8a:e4:83:2c:b4:cf:be:5a:83:f9:2b: 3f:1e:d6:f1:00:02:77:cb:57:90:43:fe:fd:b7:4f:e1:67:04: b7:bf:81:aa:0f:91:70:71:54:c9:d9:1c:82:6e:48:5a:a1:ad: dc:b0:58:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICOHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjYwNzI4MTQxNzU1WhcNMjYwODA0MTQxNzU1WjAYMRYwFAYD VQQDEw02YTY4YmExMy1lZWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xf2222Aaom9FBjpPk62bcL0ypQCGcKP+W6l43/Yb+4/diukIKhi19wFJBpe hyeUItqkDey5r4VpKeCm8Qbzku8dnmOoalo+7xk9kquf4wxvmwfM2BOCtnthPUhg 7kTxBTwTp59Emhj4WN9r1y5Ek/fDasPCde0D19ztKdIFjgCJgH7rktCMHjyFAP33 VCXykK6+H8W14fMo3DIjgYH7vhHXqcJ+HMSyb7sP7FC7UVSBokP+yqe88JOGSWoq bsTz3kz9iiRJnR03lhJeLqpAYdoapPT+iyDBDUl8As14T0fqrqfS1q6rQP23y6Sp 2XMBw33k/JYU4v4X85ihD5hTbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEGgAfLW 2wr5+/2EXY36LKHN3u1cMB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTcwQi85N0FGNkRGMDFENkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJU MllTSEduTWhxZEZwWUw0bWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKbCYtoO4crgzpYpuomTsdL+ICa0CMmv/Sb9QKINYJlL6QfQMb6uK4HO5YiUS 1EXbY1rcYhdA958vlnCOEr6Fi9fx57Rsni5Valr7XlHArz0shwPkGU2nKSt1I2SR sa4+kMekmVOQY6JxEd6MFp52nTDGPv5WQcWgC59bv2xp55bM/QiBAes4GJ/0lxAV hV9kj6bHsiHq/3Hwnx/DtzpMCG5/uZMEcj3k1Bc8S33h36FRfmi7YjmxZkqxZb0D Of7Z/pNT9VapLK1wrVmX4Yrkgyy0z75ag/krPx7W8QACd8tXkEP+/bdP4WcEt7+B qg+RcHFUydkcgm5IWqGt3LBYGQ== -----END CERTIFICATE-----Generated at Tue Jul 28 23:29:09 2026 by rpki-client