$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft File: bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft (raw, json) Hash identifier: 2WjMYSC/elgerwdKSp/b82z+MjBGlYXyDZC1StyfTSY= Subject key identifier: 1F:8F:9B:00:EA:B2:98:7D:4F:5F:F0:B6:3F:65:B4:C7:6D:60:B8:99 Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 388E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft Manifest number: 36C7 Signing time: Thu 24 Sep 2026 14:17:59 +0000 Manifest this update: Thu 24 Sep 2026 14:17:58 +0000 Manifest next update: Thu 01 Oct 2026 14:17:58 +0000 Files and hashes: 1: bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl (hash: mgZUSmO7LYKtIDnRlHC+fujD2IHvBdMCNLYr44783bw=) 2: 181D46FCEE5611F0B0ABEB00546F56BC.roa (hash: mBp7rOQoogZqxxYLbCFoaus93SPSHgQg66CBxO3Z1Y4=) 3: 318FB51A383611E6B2282B5DC4F9AE02.roa (hash: yaorPh4VrqY9sKXfI0fuCpzkwD4NZvNSICyagXnbW3A=) 4: BFB4B7B2EB5C11F0BDF448C8486F56BC.roa (hash: wG7b3Z0ho6SrOGKFgzP2mEwfhihA1VC5C8sAnk6BBjc=) 5: 88978730772311EBB972032EC4F9AE02.roa (hash: 9TVjQ38xCwazY1bMPEtKgrRo9kVFlqkK6Noa8Q400lE=) 6: 3204348A383611E6B2282B5DC4F9AE02.roa (hash: iFuOgI2hNJnbpJ1dk6CCrwS9Ybm5+7KFbmRcIgyHcAU=) 7: FCBF1666677C11EBB2A3F00CC4F9AE02.roa (hash: 0iD1tqR2QJ8fz19EynrYV9CYES81mpV0yTPTczOdyPA=) 8: 05BF31A412A111F19F0D7733B3EE528E.roa (hash: u0mR0BBsnvEnoYj/eS9qEAD0dwrm+KdGfWI0LcJUSMo=) 9: 331F345A383611E6B2282B5DC4F9AE02.roa (hash: GcEl4TsoGi5NS6wuxb81i9vhnARHI3pK0QqdYDeI0Xo=) 10: 328EDB76383611E6B2282B5DC4F9AE02.roa (hash: 7WD0rxusumdkjqFR1GtAWnLENPD7bOV8YBlX7yMSo9c=) 11: 2HN2DqzzZQ8qfz_0CQYQHp7fzH8.asa (hash: 6dUdbNQB8ye7nA3A0bmLn3/knMmdudFU+gX78ZN6c+g=) 12: 89A73D46772311EBB972032EC4F9AE02.roa (hash: JfhzVq/e/tDeRVv2XI7V7GA9Ql0uL8Bzexb3NfT69YE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14478 (0x388e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: Sep 24 14:17:58 2026 GMT Not After : Oct 1 14:17:58 2026 GMT Subject: CN=6ab53117-9315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:93:1c:b0:77:29:39:ed:82:d6:65:16:1b:e0: 90:23:f6:90:59:bc:a7:55:96:9f:88:9e:37:fa:2f: b2:85:d6:46:83:16:38:25:49:25:2f:8a:8c:18:67: 27:40:0b:5f:66:1b:74:4f:ad:6e:50:5e:e3:0f:8e: 4c:ba:dd:65:42:dc:8c:be:4a:e1:fd:41:85:46:08: 2d:f4:9f:ef:06:89:a4:aa:b0:8c:3f:82:7a:a0:64: b1:08:63:24:37:72:69:5b:64:6b:a3:41:5c:59:e2: be:d8:ec:6f:08:6a:24:86:f7:85:06:7d:55:7b:d4: 69:99:dc:f8:74:76:75:74:3d:23:96:ab:b1:9f:94: 46:23:7d:47:f0:75:34:8b:1e:08:bd:91:91:29:e8: d1:73:60:41:d4:92:16:e8:5a:b9:21:4f:32:bb:a8: c9:65:b3:d9:8d:90:5f:a8:b6:35:f9:2e:10:9e:f3: ad:16:d3:e9:a8:b4:87:a8:2b:ee:20:b6:ad:c2:ed: ee:ca:78:78:05:13:0b:eb:3d:94:12:84:02:76:dc: 84:af:aa:dd:3e:af:00:b4:d5:6d:66:ef:2b:84:57: 00:f7:41:20:8c:2a:8c:8a:dc:37:24:a9:3a:14:d4: 07:9d:dc:80:65:a1:eb:26:fe:7f:41:a3:33:52:87: 6b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8F:9B:00:EA:B2:98:7D:4F:5F:F0:B6:3F:65:B4:C7:6D:60:B8:99 X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:4d:a8:01:2a:8e:ee:44:c7:d4:8b:32:d0:f6:73:66:9f:b3: 22:2e:e4:51:a4:76:83:e9:d7:fa:3a:a5:19:a4:5d:51:36:d7: 43:07:e4:c4:78:c9:bc:76:e6:d7:39:61:48:f5:c2:42:e1:94: 39:8c:05:90:a1:a4:4f:44:2f:4a:0d:f9:95:99:f3:11:ab:24: ad:a7:ad:24:01:91:15:11:dc:75:3a:d4:65:e7:8d:91:de:e4: fa:f6:b2:3f:78:19:f7:58:ac:15:d4:d8:18:5a:3b:f2:03:32: a0:c2:44:9c:df:bd:9e:81:57:85:e9:3a:41:56:54:6d:d8:72: 03:83:08:d6:59:0c:ac:b3:9d:b6:1e:88:f3:82:db:56:ae:4c: 4a:54:e6:36:45:41:b1:6b:6e:9a:a0:c7:d1:d9:4e:4e:d6:a3: 85:f4:56:7c:72:43:58:36:8c:3a:86:e1:f7:04:59:72:e0:d9: 93:5f:a5:3d:73:59:80:6a:8c:6e:43:4d:16:b5:d5:5e:05:44: db:b4:47:53:22:81:54:e1:71:84:e9:8d:5f:49:57:e9:b2:e4: 97:26:35:1e:00:8e:5f:6a:73:85:0d:2b:a7:fb:bc:f0:29:c0: c7:23:2b:62:c1:9b:71:cb:c5:8e:4c:29:ed:ed:9b:93:98:bb: 6f:de:56:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICOI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjYwOTI0MTQxNzU4WhcNMjYxMDAxMTQxNzU4WjAYMRYwFAYD VQQDEw02YWI1MzExNy05MzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiZMcsHcpOe2C1mUWG+CQI/aQWbynVZafiJ43+i+yhdZGgxY4JUklL4qMGGcn QAtfZht0T61uUF7jD45Mut1lQtyMvkrh/UGFRggt9J/vBomkqrCMP4J6oGSxCGMk N3JpW2Rro0FcWeK+2OxvCGokhveFBn1Ve9Rpmdz4dHZ1dD0jlquxn5RGI31H8HU0 ix4IvZGRKejRc2BB1JIW6Fq5IU8yu6jJZbPZjZBfqLY1+S4QnvOtFtPpqLSHqCvu ILatwu3uynh4BRML6z2UEoQCdtyEr6rdPq8AtNVtZu8rhFcA90EgjCqMitw3JKk6 FNQHndyAZaHrJv5/QaMzUodrmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB+PmwDq sph9T1/wtj9ltMdtYLiZMB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTcwQi85N0FGNkRGMDFENkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJU MllTSEduTWhxZEZwWUw0bWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ02oASqO7kTH1Isy0PZzZp+zIi7kUaR2g+nX+jqlGaRdUTbXQwfkxHjJvHbm 1zlhSPXCQuGUOYwFkKGkT0QvSg35lZnzEaskraetJAGRFRHcdTrUZeeNkd7k+vay P3gZ91isFdTYGFo78gMyoMJEnN+9noFXhek6QVZUbdhyA4MI1lkMrLOdth6I84Lb Vq5MSlTmNkVBsWtumqDH0dlOTtajhfRWfHJDWDaMOobh9wRZcuDZk1+lPXNZgGqM bkNNFrXVXgVE27RHUyKBVOFxhOmNX0lX6bLklyY1HgCOX2pzhQ0rp/u88CnAxyMr YsGbccvFjkwp7e2bk5i7b95WuA== -----END CERTIFICATE-----Generated at Sat Sep 26 16:15:08 2026 by rpki-client