$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft File: bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft (raw, json) Hash identifier: d9Cf7t+ou8oUOP8Ofcj6PX9ClFwoWH6MQ4paNzEdWSg= Subject key identifier: 24:E6:3D:10:CD:E2:78:AB:A1:F9:86:E6:A9:C7:94:1E:D7:B1:CE:BE Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 38BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft Manifest number: 36E7 Signing time: Sat 14 Nov 2026 14:17:43 +0000 Manifest this update: Sat 14 Nov 2026 14:17:42 +0000 Manifest next update: Sat 21 Nov 2026 14:17:42 +0000 Files and hashes: 1: bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl (hash: hHnAgY/gsW6rJ4Sob4shKnn08V0agCSVFk0oBIFTiKg=) 2: 89A73D46772311EBB972032EC4F9AE02.roa (hash: KZTQifNdbOoW1bgJWBoHYe/C0a+EDDHLB8A7l1ocT1U=) 3: 318FB51A383611E6B2282B5DC4F9AE02.roa (hash: WDZYMLvjIxmaTIN1cWOLTwaBbyvtc0QrdVaCozFRfgY=) 4: 331F345A383611E6B2282B5DC4F9AE02.roa (hash: l4K3CEIv+4bw+apZjndWsLaVGjLhVRyEclBqP3WfSzI=) 5: 5eKisZzz0FsF-lz0Pibil8pyUJY.asa (hash: pGKk6R7RpeC/SWMfoHlw2K5XSqVpoL0u7VsXkl6rLfk=) 6: BFB4B7B2EB5C11F0BDF448C8486F56BC.roa (hash: vPye/RmWxWKXD2LNbbGGjlf5LVFjVkFNNFXrs2viwDY=) 7: 328EDB76383611E6B2282B5DC4F9AE02.roa (hash: d0P5p4oX8im36/N+h8kMcCwT7hhTw9Ri9fxk4s2ketc=) 8: 3204348A383611E6B2282B5DC4F9AE02.roa (hash: rkgynETWbH+xovLMb4c9KwlU4CwHSukjT1B2LogXa2U=) 9: 88978730772311EBB972032EC4F9AE02.roa (hash: 0elY5CKBuKEP4Gk2N4idQ0RIcUiU5mZ/koZC9fr1n3s=) 10: 05BF31A412A111F19F0D7733B3EE528E.roa (hash: PgaNKuOiI6tu8kD9qhYNDbqdddbHaFNoXX9+BgYUOfI=) 11: FCBF1666677C11EBB2A3F00CC4F9AE02.roa (hash: TkZVstrP/3//9pUIiEWiY5twOxc9IZLRbKZzH2FKBbg=) 12: 181D46FCEE5611F0B0ABEB00546F56BC.roa (hash: pyM3aP4ZhZzlOKjl0z6Si9kl1eKBCspLQnkwnIXR3P8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 14:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14524 (0x38bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: Nov 14 14:17:42 2026 GMT Not After : Nov 21 14:17:42 2026 GMT Subject: CN=6af86d87-d178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:86:9c:8c:a0:13:62:6f:5d:01:92:4b:6c:4c: 25:c3:2c:ac:60:f8:78:48:ba:c1:10:09:74:cd:b7: e0:21:6a:9a:9e:0b:65:19:fe:10:a0:12:df:35:a1: d9:32:ed:ae:53:21:af:3e:10:3f:f1:3c:70:3a:7d: 02:37:34:d9:bb:79:19:16:e2:54:25:a0:e0:85:1c: 0c:71:c5:9c:18:a8:3a:51:be:32:34:82:ef:2a:51: ef:59:7c:90:89:9f:69:2c:5a:e4:3a:85:b1:a6:19: 26:2b:27:36:6e:ce:8c:60:a5:5a:53:ff:6f:9e:70: 77:25:0d:60:81:f4:98:81:c9:88:1f:f9:c8:2c:b2: 1f:e5:8d:97:3a:ba:87:e9:63:ed:56:c2:6d:e4:8d: ca:32:71:04:36:47:87:85:b5:44:22:c1:93:b1:cb: 3b:7f:7f:de:35:92:27:a1:bf:38:c0:1b:83:d1:2b: be:b1:37:11:f3:62:b1:eb:33:0d:70:48:cd:78:51: 9f:f4:73:4d:40:90:ee:5d:2b:c9:51:f5:40:1d:64: e0:f4:c2:ea:16:66:2d:05:c5:7c:11:4f:52:29:79: 4b:9c:24:74:81:cc:d3:cb:14:ac:58:23:e8:92:63: d2:a6:04:3e:ce:11:bd:60:35:c6:7c:48:b6:9e:c5: 1f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E6:3D:10:CD:E2:78:AB:A1:F9:86:E6:A9:C7:94:1E:D7:B1:CE:BE X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:f7:cc:74:5e:25:d9:35:81:97:3a:aa:44:20:05:da:59:92: 56:0f:1e:f2:5e:4c:79:56:2c:6b:24:c6:54:83:8b:16:bf:85: c5:c3:2d:0d:97:88:da:15:50:74:12:7a:63:f1:c9:cf:a4:50: 50:5d:84:47:6f:0d:52:39:fa:bf:62:57:8c:c5:8f:ef:64:5c: ed:73:a8:25:5a:76:4c:ca:84:9b:e0:0e:80:4b:95:e0:49:e5: 59:e9:aa:85:d3:39:79:b9:f1:8e:a3:fd:fb:43:09:87:0a:25: 39:c3:8f:aa:46:af:02:4f:03:77:5b:36:9b:eb:6c:d2:c9:8e: 6b:01:01:74:b0:f4:d6:b6:eb:fa:7e:d6:cd:71:5e:40:06:99: 5e:1f:e8:8a:4e:08:f8:e3:2d:fa:f1:28:5b:40:10:13:db:bc: 18:6e:c4:e2:21:a9:f0:a1:67:53:1f:1b:d6:cd:6a:3e:cb:40: 6c:3a:ab:6f:99:ee:d9:9e:19:ca:71:05:5f:f5:a5:83:f4:0a: 0a:d2:c2:73:f1:93:f0:f2:ae:89:5a:18:e4:ea:f3:f9:18:80: 5d:74:8c:a9:1e:87:81:73:f0:10:70:57:a5:5e:2d:ba:97:7d: 56:48:98:98:fa:b3:93:48:bf:5f:4a:58:b2:79:d5:e9:35:3c: 62:89:b7:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICOLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjYxMTE0MTQxNzQyWhcNMjYxMTIxMTQxNzQyWjAYMRYwFAYD VQQDEw02YWY4NmQ4Ny1kMTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4acjKATYm9dAZJLbEwlwyysYPh4SLrBEAl0zbfgIWqangtlGf4QoBLfNaHZ Mu2uUyGvPhA/8TxwOn0CNzTZu3kZFuJUJaDghRwMccWcGKg6Ub4yNILvKlHvWXyQ iZ9pLFrkOoWxphkmKyc2bs6MYKVaU/9vnnB3JQ1ggfSYgcmIH/nILLIf5Y2XOrqH 6WPtVsJt5I3KMnEENkeHhbVEIsGTscs7f3/eNZInob84wBuD0Su+sTcR82Kx6zMN cEjNeFGf9HNNQJDuXSvJUfVAHWTg9MLqFmYtBcV8EU9SKXlLnCR0gczTyxSsWCPo kmPSpgQ+zhG9YDXGfEi2nsUfVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCTmPRDN 4nirofmG5qnHlB7Xsc6+MB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTcwQi85N0FGNkRGMDFENkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJU MllTSEduTWhxZEZwWUw0bWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhPfMdF4l2TWBlzqqRCAF2lmSVg8e8l5MeVYsayTGVIOLFr+FxcMtDZeI2hVQ dBJ6Y/HJz6RQUF2ER28NUjn6v2JXjMWP72Rc7XOoJVp2TMqEm+AOgEuV4EnlWemq hdM5ebnxjqP9+0MJhwolOcOPqkavAk8Dd1s2m+ts0smOawEBdLD01rbr+n7WzXFe QAaZXh/oik4I+OMt+vEoW0AQE9u8GG7E4iGp8KFnUx8b1s1qPstAbDqrb5nu2Z4Z ynEFX/Wlg/QKCtLCc/GT8PKuiVoY5Orz+RiAXXSMqR6HgXPwEHBXpV4tupd9VkiY mPqzk0i/X0pYsnnV6TU8Yom3tw== -----END CERTIFICATE-----Generated at Sat Nov 14 20:53:31 2026 by rpki-client