$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft File: bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft (raw, json) Hash identifier: 4sFBPw8PkdlafqCuY7NXT0va2lwvsn3yO/5QLC6DaEA= Subject key identifier: 9B:9E:B7:2B:77:A8:D8:44:44:48:23:51:58:7F:6D:FF:98:3E:6B:AA Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 3690 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft Manifest number: 35C6 Signing time: Mon 27 Oct 2025 00:46:38 +0000 Manifest this update: Mon 27 Oct 2025 00:46:37 +0000 Manifest next update: Mon 03 Nov 2025 00:46:37 +0000 Files and hashes: 1: bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl (hash: qzgbT9BOb9sZ6uAGkRIiLvp0f/NLqYKQW2XT7ftYf9A=) 2: 119B023E80A111EFAC559545C4F9AE02.roa (hash: zYkOqurzCzToKjFWw1JFREq9sP5L0Ox+j8SjAIM1s0g=) 3: 4703352E2BC311EEA3EEFA66C4F9AE02.roa (hash: QIkAoP/By0cGmSZKZV7Us1AkVMW2odFekLlf+/kQhNs=) 4: FCBF1666677C11EBB2A3F00CC4F9AE02.roa (hash: mbhuy04A8zuqh2VQYoyVQz/nubKm5uM/LXn3ihnguHc=) 5: 88978730772311EBB972032EC4F9AE02.roa (hash: HjKqHMfxVfYxTOl9WdJ4/LY87H7R42UxSxjcHgvm5bI=) 6: 331F345A383611E6B2282B5DC4F9AE02.roa (hash: BOms9OY6+UIB6aMBGACYroj4QGSk/YT0f0983Woe8qE=) 7: 7EF4796CA7DF11F0B8B8DF33C4F9AE02.roa (hash: gBzIoTcl0pF/I9Mogf5bYnX80PYd1Prm+6rq6teZd8w=) 8: 318FB51A383611E6B2282B5DC4F9AE02.roa (hash: I6jxZTqpjwiUfJAwpZoNi2Gm52AIuuh+evMbf0QauW8=) 9: 328EDB76383611E6B2282B5DC4F9AE02.roa (hash: LVPfSpZ0kKMp22v4SWIIQyCCry6IBJmlcWqFISdxj5A=) 10: 3204348A383611E6B2282B5DC4F9AE02.roa (hash: aOSpyI8MZjB7JifoHMKo83Bhs4V52OgvV8PHhV/cS3k=) 11: 89A73D46772311EBB972032EC4F9AE02.roa (hash: ENYLfShbh18F4DkP0j/X7mK87WIoKIhUNMFfz+VNeYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 00:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13968 (0x3690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: Oct 27 00:46:37 2025 GMT Not After : Nov 3 00:46:37 2025 GMT Subject: CN=68fec0ee-1219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:35:93:3e:3d:e3:32:2b:8c:09:3c:74:70:2b: d7:6a:af:dc:22:7d:b7:e9:4a:a6:08:08:ef:25:cc: f4:38:e6:73:07:4a:4f:12:b9:13:f3:b3:a8:d7:dc: 48:eb:2f:aa:49:37:a1:d2:de:d3:b2:59:be:35:49: 05:55:74:2f:d0:ea:ba:16:53:f7:ba:4a:b4:d2:b2: 5f:dc:01:8a:6d:a9:9a:0e:68:a4:f7:3a:74:91:5e: 02:69:b3:83:d2:ab:4b:71:1c:70:51:c7:39:d9:29: f5:87:53:f7:72:6d:1b:da:fc:0b:a9:f1:25:e7:33: b7:61:44:8e:7c:35:be:c6:88:b5:de:6e:89:c4:35: e0:21:65:68:50:2f:4d:cd:4e:61:dc:eb:0b:fe:fe: ae:5b:6c:d4:cf:34:bf:21:5e:5e:1a:37:31:fc:96: e2:55:0b:87:bb:27:97:1b:62:88:10:45:24:67:15: 93:a9:b3:11:f3:9f:ab:f5:a0:10:02:ea:79:79:f2: a8:25:9c:c0:7e:fd:32:f3:34:22:15:9d:58:1c:8f: cb:e1:2b:37:f1:68:07:e8:4c:0d:0a:c4:7a:98:55: 71:47:e9:8c:f4:c8:cc:bb:1f:93:76:47:5a:a3:fa: 2a:50:39:8f:ba:37:d8:6e:18:2d:36:53:0e:88:ce: 36:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9E:B7:2B:77:A8:D8:44:44:48:23:51:58:7F:6D:FF:98:3E:6B:AA X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:1a:22:82:e6:bd:b9:6c:10:53:d0:9a:97:4e:4f:70:9c:e6: 22:9f:1d:f2:81:11:fe:c1:f5:6b:50:c8:47:cf:b2:21:c9:1f: 31:52:52:aa:3b:ee:7d:f0:80:72:22:4f:e2:06:45:89:6c:2f: 45:94:cf:2d:59:0b:1b:74:2b:47:e3:c1:b1:a5:27:67:32:ae: 6a:22:31:07:8a:c2:b6:c2:ff:2e:cc:b8:79:00:ad:6d:cd:e3: eb:8c:4b:16:12:de:c6:b7:a7:ff:d6:a6:68:3c:8c:c0:26:ee: 05:8a:e2:28:74:48:d0:b3:28:70:fe:07:53:c5:45:fa:11:72: 16:c5:eb:85:3b:7b:04:29:58:34:de:8a:78:d9:a4:81:24:be: 1e:63:66:de:b3:ae:c7:20:fb:44:ce:88:6a:97:ce:d5:e8:92: af:42:80:a6:f7:d7:c2:56:d1:ed:eb:36:43:4d:fd:fd:af:98: 25:9e:e2:21:2f:f7:5a:57:3b:99:f2:4f:d5:6b:06:c3:ac:0a: 54:b6:c4:bb:ef:a1:29:ca:d1:cb:c1:a2:95:3a:86:ce:fe:24: 6b:d6:ec:35:a1:67:a9:e0:8b:e4:d9:8f:80:fd:06:e0:b7:3d: 70:aa:2e:41:4e:01:4f:29:ea:43:13:74:00:1c:6e:28:94:d0: 12:3e:67:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjUxMDI3MDA0NjM3WhcNMjUxMTAzMDA0NjM3WjAYMRYwFAYD VQQDEw02OGZlYzBlZS0xMjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjWTPj3jMiuMCTx0cCvXaq/cIn236UqmCAjvJcz0OOZzB0pPErkT87Oo19xI 6y+qSTeh0t7Tslm+NUkFVXQv0Oq6FlP3ukq00rJf3AGKbamaDmik9zp0kV4CabOD 0qtLcRxwUcc52Sn1h1P3cm0b2vwLqfEl5zO3YUSOfDW+xoi13m6JxDXgIWVoUC9N zU5h3OsL/v6uW2zUzzS/IV5eGjcx/JbiVQuHuyeXG2KIEEUkZxWTqbMR85+r9aAQ Aup5efKoJZzAfv0y8zQiFZ1YHI/L4Ss38WgH6EwNCsR6mFVxR+mM9MjMux+Tdkda o/oqUDmPujfYbhgtNlMOiM422wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuetyt3 qNhEREgjUVh/bf+YPmuqMB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTcwQi85N0FGNkRGMDFENkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJU MllTSEduTWhxZEZwWUw0bWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkGiKC5r25bBBT0JqXTk9wnOYinx3ygRH+wfVrUMhHz7IhyR8xUlKq O+598IByIk/iBkWJbC9FlM8tWQsbdCtH48GxpSdnMq5qIjEHisK2wv8uzLh5AK1t zePrjEsWEt7Gt6f/1qZoPIzAJu4FiuIodEjQsyhw/gdTxUX6EXIWxeuFO3sEKVg0 3op42aSBJL4eY2bes67HIPtEzohql87V6JKvQoCm99fCVtHt6zZDTf39r5glnuIh L/daVzuZ8k/VawbDrApUtsS776EpytHLwaKVOobO/iRr1uw1oWep4Ivk2Y+A/Qbg tz1wqi5BTgFPKepDE3QAHG4olNASPmft -----END CERTIFICATE-----Generated at Mon Oct 27 14:31:06 2025 by rpki-client