$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft File: bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft (raw, json) Hash identifier: bHYt8JXyRCaKREexZniQivlrsJoeLdkaEYYyZSTsTeE= Subject key identifier: BC:46:16:B8:3A:3A:D9:D8:DC:55:EC:25:C2:C5:62:3C:C0:03:C1:FC Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 3828 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft Manifest number: 3671 Signing time: Mon 04 May 2026 14:17:51 +0000 Manifest this update: Mon 04 May 2026 14:17:51 +0000 Manifest next update: Mon 11 May 2026 14:17:51 +0000 Files and hashes: 1: bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl (hash: uuki2tkx/eeSfTZEj2Jeh2DfsVFZoZeHrdrwbDKzxKQ=) 2: 318FB51A383611E6B2282B5DC4F9AE02.roa (hash: D9hmvA6dDXSOuTlZ3qbzZ4eSbUShWWWPmR9njY7G+Ic=) 3: 328EDB76383611E6B2282B5DC4F9AE02.roa (hash: +nqzlPuV0MHTJ+4S2S0Nu+k/HevxF1u4cYkYwAyCCHg=) 4: 181D46FCEE5611F0B0ABEB00546F56BC.roa (hash: 0v/XMQ2d8xTna5t6oAMoofbfgmP+DjOOYOL6BBl6lZc=) 5: BFB4B7B2EB5C11F0BDF448C8486F56BC.roa (hash: uE/rnhwB3ME5JOA1z9OMjoAfdFiu/bbfu+6j3t7mLB8=) 6: 88978730772311EBB972032EC4F9AE02.roa (hash: H9kR7aKKfkWFeCcbwIuFh1k6Ox63w9qdIWH7tbADEBs=) 7: 331F345A383611E6B2282B5DC4F9AE02.roa (hash: Rfvf6Vj64V/DcT+xX9bZ8JiVA8egzGFFRJ+JQllzS44=) 8: 89A73D46772311EBB972032EC4F9AE02.roa (hash: OmCcAoJqaG+VM4I0xGI0MWEjDCQ4puKtwGSlsV9t2PI=) 9: 05BF31A412A111F19F0D7733B3EE528E.roa (hash: DDHyAiyJR9qzEXBGbIoi4qHLBw3ZayKontdEM6TL8tc=) 10: FCBF1666677C11EBB2A3F00CC4F9AE02.roa (hash: UUODOJY5+5q5pcm8Nr35HeyzWAGOprJTcgD1liIBbik=) 11: 3204348A383611E6B2282B5DC4F9AE02.roa (hash: SOQcp2o/vipjBiaInCM2WE18Os9teruHe/tKBdXo2pM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14376 (0x3828) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: May 4 14:17:51 2026 GMT Not After : May 11 14:17:51 2026 GMT Subject: CN=69f8aa8f-a212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:66:9f:d0:dc:4d:92:b4:fe:34:a0:70:84:9d: 36:8e:3a:ec:a7:1c:14:28:01:04:20:db:87:b6:24: 23:a8:1f:5d:1f:12:d5:c9:f1:5b:18:31:2b:f5:db: f7:99:ad:77:6d:69:8d:96:d3:c6:ec:ff:d0:52:b7: 63:31:54:65:61:27:b3:30:a3:c2:dd:b8:0f:d3:cd: 9d:99:61:a5:4e:e0:d9:09:4d:90:a0:ea:2c:13:4e: 37:bf:7e:6a:3d:f3:2a:80:e7:9c:02:88:ec:b0:8e: 72:1d:0d:93:7b:06:bf:ec:c7:e4:fe:5e:a7:27:54: 6e:a0:e8:3d:f0:e2:ff:64:d4:ac:55:49:96:6e:72: f1:5e:10:65:87:1d:e8:34:f3:f6:7d:ee:d6:a2:0c: cd:a2:0a:75:48:94:f9:ac:4c:82:f8:d4:70:e2:96: 12:20:65:f6:78:53:1b:16:34:23:d0:96:43:e7:49: 4e:df:90:d7:6c:5d:39:69:16:47:0b:21:4b:1d:52: 89:30:26:c7:43:53:72:b8:54:b9:b1:00:67:dd:aa: 12:b9:f0:b9:cd:ae:ac:91:d5:3d:5c:26:0a:38:a3: 28:9c:a2:ac:91:cc:22:f0:e8:a9:58:31:46:33:a2: d8:e3:aa:9e:29:b5:26:f0:a4:66:f6:9a:87:1a:00: 7a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:46:16:B8:3A:3A:D9:D8:DC:55:EC:25:C2:C5:62:3C:C0:03:C1:FC X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c3:eb:ec:07:a0:ec:fd:b8:5f:f4:b8:eb:f1:60:ef:61:d4: 31:6b:ae:d3:1b:7c:07:15:22:5d:a9:49:a1:e1:1a:cc:9e:7b: 6e:4e:22:6d:35:51:b8:fc:d4:84:37:d9:b9:5f:3a:8b:fa:0e: d2:f1:ab:06:f9:76:af:b6:94:65:2d:c2:2e:36:63:3b:3e:b3: 30:ee:ac:60:0a:eb:33:6f:05:d0:33:b0:94:77:29:84:f0:ab: 27:26:11:cb:77:00:d1:be:b0:fb:93:5b:0d:a7:a6:42:5b:59: b5:99:14:4e:1a:69:a8:49:10:72:c0:f9:04:04:b6:ad:1b:1c: c6:4a:93:f6:fb:2c:ce:c3:bc:00:41:30:85:35:59:e5:6e:ab: a3:7a:60:cd:ee:dc:63:7f:c7:8b:85:fc:30:4f:31:08:99:69: 41:47:2a:0b:91:a7:17:8a:b8:c5:3d:97:b2:27:f3:62:8a:e9: d7:28:e2:76:7b:39:54:a9:43:8c:1f:94:4a:cc:e2:0c:7d:e1: 25:e9:d8:d7:80:dc:0b:ea:b0:76:fb:79:b7:95:7c:6e:25:29: ed:51:6b:71:9a:a8:97:d7:fd:73:96:c7:ba:44:34:11:0d:80: 10:c9:47:ed:2e:87:1a:81:64:8a:df:72:a3:a6:8f:fc:1b:f1: 37:c5:8f:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICOCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjYwNTA0MTQxNzUxWhcNMjYwNTExMTQxNzUxWjAYMRYwFAYD VQQDEw02OWY4YWE4Zi1hMjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWaf0NxNkrT+NKBwhJ02jjrspxwUKAEEINuHtiQjqB9dHxLVyfFbGDEr9dv3 ma13bWmNltPG7P/QUrdjMVRlYSezMKPC3bgP082dmWGlTuDZCU2QoOosE043v35q PfMqgOecAojssI5yHQ2Tewa/7Mfk/l6nJ1RuoOg98OL/ZNSsVUmWbnLxXhBlhx3o NPP2fe7WogzNogp1SJT5rEyC+NRw4pYSIGX2eFMbFjQj0JZD50lO35DXbF05aRZH CyFLHVKJMCbHQ1NyuFS5sQBn3aoSufC5za6skdU9XCYKOKMonKKskcwi8OipWDFG M6LY46qeKbUm8KRm9pqHGgB6TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLxGFrg6 OtnY3FXsJcLFYjzAA8H8MB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTcwQi85N0FGNkRGMDFENkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJU MllTSEduTWhxZEZwWUw0bWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG8Pr7Aeg7P24X/S46/Fg72HUMWuu0xt8BxUiXalJoeEazJ57bk4ibTVRuPzU hDfZuV86i/oO0vGrBvl2r7aUZS3CLjZjOz6zMO6sYArrM28F0DOwlHcphPCrJyYR y3cA0b6w+5NbDaemQltZtZkUThppqEkQcsD5BAS2rRscxkqT9vsszsO8AEEwhTVZ 5W6ro3pgze7cY3/Hi4X8ME8xCJlpQUcqC5GnF4q4xT2XsifzYorp1yjidns5VKlD jB+USsziDH3hJenY14DcC+qwdvt5t5V8biUp7VFrcZqol9f9c5bHukQ0EQ2AEMlH 7S6HGoFkit9yo6aP/BvxN8WPZQ== -----END CERTIFICATE-----Generated at Tue May 5 06:14:30 2026 by rpki-client