$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft File: bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft (raw, json) Hash identifier: LCix0Nvo09VkCuk4+Irf475gKAOCoxKQ3c+FKRZ5hOQ= Subject key identifier: 6B:B9:CE:A5:C1:19:B4:B3:AB:11:D0:ED:D2:1C:57:9A:98:88:A2:F0 Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 3651 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft Manifest number: 359B Signing time: Mon 08 Sep 2025 14:17:41 +0000 Manifest this update: Mon 08 Sep 2025 14:17:40 +0000 Manifest next update: Mon 15 Sep 2025 14:17:40 +0000 Files and hashes: 1: bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl (hash: 8quzbXY0odRkS3JQvh46Zbj43ey61QnnnUx/PWcMF80=) 2: 119B023E80A111EFAC559545C4F9AE02.roa (hash: 9LqedBh/T1Pn2Gl1dZnlyMno6hLUqevpcEI4W+No+WM=) 3: D06D852C0E8411EFB653657DC4F9AE02.roa (hash: YwwNNBiRN8WbU6nMfOYGjf/BEh8X+MeiEpmtw+179nA=) 4: 4703352E2BC311EEA3EEFA66C4F9AE02.roa (hash: vGmHulSbJNNSRKDRkCSlexuZ8gppAxWgoNUfgpqDDQo=) 5: 5E05FB54A8FE11E990A7E27FC4F9AE02.roa (hash: zMFCeCXoKrPrwTq+A2LXxPGmSZJf7zHnpagMrcSo0Pw=) 6: FCBF1666677C11EBB2A3F00CC4F9AE02.roa (hash: 8Dc8gjY40rl5/6Sh0h3/EDNd7vs6rm1lJULYeNiLj34=) 7: 88978730772311EBB972032EC4F9AE02.roa (hash: 9XGtZh3U+oKF1G7lH8KZbGLBHCLusn+PwSpTkwD9Utg=) 8: 331F345A383611E6B2282B5DC4F9AE02.roa (hash: ONbBKi5oc2lvv+jkklAdH08GL4vyG52+/DptD9K/oRU=) 9: 318FB51A383611E6B2282B5DC4F9AE02.roa (hash: TSVCxvcc+Sayf1kDVk4KAdOPfT663XPtMJq+qgnVb4Y=) 10: 328EDB76383611E6B2282B5DC4F9AE02.roa (hash: GzXfr4YWUVHSzpZQvdoC1TFhpGmAGgBOPMRMQ/ex3H4=) 11: 3204348A383611E6B2282B5DC4F9AE02.roa (hash: ls3D3B0qMoaDuK9w5uGgZ5eY+SJvp9CyLR4mx4nye6A=) 12: 89A73D46772311EBB972032EC4F9AE02.roa (hash: r21OVByQYNcBYjJc0J53OAidjOhKnEhsIuFLOBFbEzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 14:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13905 (0x3651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: Sep 8 14:17:40 2025 GMT Not After : Sep 15 14:17:40 2025 GMT Subject: CN=68bee585-a7ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:05:bc:7f:b8:02:1b:8e:6b:8f:27:68:6b:b1: af:be:b1:39:a8:52:ee:d5:4f:b2:6b:33:ec:0a:d9: 49:c4:0f:9c:9b:c5:3e:54:bd:c3:b5:28:7f:45:a7: d1:48:f2:8b:38:36:90:4d:64:2f:b3:2d:24:e0:80: 92:c5:71:d0:21:3d:7d:cf:8e:ea:1d:2b:46:d7:9c: c5:af:8f:b1:5b:05:bb:e9:75:c6:9a:83:26:4e:07: 36:6e:72:8f:17:ca:23:ee:f4:f8:93:46:57:1d:f6: b8:ec:0f:1d:62:f7:31:5d:8e:8b:66:8d:4d:7a:b1: 98:94:a0:0c:2b:eb:1b:ce:cb:f3:5a:bf:56:cf:f6: 06:bf:52:fa:f8:40:2c:ae:d5:08:e6:e8:43:0c:d0: 44:f3:df:97:5e:be:cf:ea:b2:eb:66:38:2c:ed:a2: 06:00:10:53:71:b5:21:be:16:3e:0f:03:c4:46:cf: 1f:b1:19:73:f6:6b:a3:a4:a6:1f:94:15:d2:63:f0: 8b:b8:58:f4:a0:87:85:ca:2b:92:4a:c5:58:70:d0: db:91:5a:c7:2e:ad:6b:2c:22:6a:f6:32:b2:2c:af: 6c:70:79:f1:f6:c7:c0:f0:37:a9:64:1d:b2:d1:ce: ae:fc:ea:64:33:70:ac:fd:4f:6d:e6:63:e9:6c:cc: 69:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B9:CE:A5:C1:19:B4:B3:AB:11:D0:ED:D2:1C:57:9A:98:88:A2:F0 X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:4c:b6:4d:95:40:82:1e:88:91:d5:c0:90:65:7b:a8:c3:f3: f9:53:59:80:0d:9c:0c:a6:44:d0:e7:92:83:c3:26:3e:8d:ce: 62:08:2c:f7:c1:c5:1b:a3:0c:b3:67:75:36:0a:33:92:46:9c: ba:68:83:82:b1:55:d2:71:9a:df:e7:7e:1f:d0:f9:13:98:fb: 52:f5:c2:7d:0c:be:af:2d:f1:a8:58:64:87:c8:2f:d7:a3:4d: 71:d4:22:af:a4:40:58:ad:4a:d0:f8:80:43:14:1c:8a:5a:19: 0a:22:53:18:b1:2d:5e:22:8a:9f:4c:38:41:8e:f4:79:76:76: ac:39:04:85:1f:e8:82:e6:bf:da:1a:f5:36:1d:f3:b6:c2:15: 91:34:36:62:47:25:c3:dc:a5:09:b4:aa:2f:25:d2:ce:5d:21: b4:cd:81:b8:42:43:a3:bd:60:a8:df:fc:4e:f8:c0:be:0f:37: 8f:e1:69:d3:c2:df:1c:72:78:4d:18:fb:57:14:e8:95:fa:60: 39:ef:5d:17:bd:61:ed:db:35:b1:fc:90:91:b7:41:f5:15:eb: 92:e2:66:9a:70:02:8e:a6:10:e3:26:b5:88:37:c4:7e:e9:3c: 75:c0:c2:cc:64:bc:15:6d:66:3e:ac:99:45:cb:f0:9d:7b:4c: f7:ed:45:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjUwOTA4MTQxNzQwWhcNMjUwOTE1MTQxNzQwWjAYMRYwFAYD VQQDEw02OGJlZTU4NS1hN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAW8f7gCG45rjydoa7GvvrE5qFLu1U+yazPsCtlJxA+cm8U+VL3DtSh/RafR SPKLODaQTWQvsy0k4ICSxXHQIT19z47qHStG15zFr4+xWwW76XXGmoMmTgc2bnKP F8oj7vT4k0ZXHfa47A8dYvcxXY6LZo1NerGYlKAMK+sbzsvzWr9Wz/YGv1L6+EAs rtUI5uhDDNBE89+XXr7P6rLrZjgs7aIGABBTcbUhvhY+DwPERs8fsRlz9mujpKYf lBXSY/CLuFj0oIeFyiuSSsVYcNDbkVrHLq1rLCJq9jKyLK9scHnx9sfA8DepZB2y 0c6u/OpkM3Cs/U9t5mPpbMxpQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGu5zqXB GbSzqxHQ7dIcV5qYiKLwMB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTcwQi85N0FGNkRGMDFENkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJU MllTSEduTWhxZEZwWUw0bWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoTLZNlUCCHoiR1cCQZXuow/P5U1mADZwMpkTQ55KDwyY+jc5iCCz3 wcUbowyzZ3U2CjOSRpy6aIOCsVXScZrf534f0PkTmPtS9cJ9DL6vLfGoWGSHyC/X o01x1CKvpEBYrUrQ+IBDFByKWhkKIlMYsS1eIoqfTDhBjvR5dnasOQSFH+iC5r/a GvU2HfO2whWRNDZiRyXD3KUJtKovJdLOXSG0zYG4QkOjvWCo3/xO+MC+DzeP4WnT wt8ccnhNGPtXFOiV+mA5710XvWHt2zWx/JCRt0H1FeuS4maacAKOphDjJrWIN8R+ 6Tx1wMLMZLwVbWY+rJlFy/Cde0z37UVQ -----END CERTIFICATE-----Generated at Mon Sep 8 19:40:47 2025 by rpki-client