$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft File: bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft (raw, json) Hash identifier: mnpKev4PiTiLNWZdQuZw/qLHZppDW0arUzWQ+qM9DsU= Subject key identifier: 28:B9:51:42:47:FD:6F:F7:29:A8:39:06:37:47:91:6B:02:E3:27:43 Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 37FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft Manifest number: 364E Signing time: Wed 18 Mar 2026 14:17:49 +0000 Manifest this update: Wed 18 Mar 2026 14:17:48 +0000 Manifest next update: Wed 25 Mar 2026 14:17:48 +0000 Files and hashes: 1: bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl (hash: 1D+3NbeWoCnILMVtEWPp3sRU7txXXVbuwDHhi4erDqA=) 2: 3204348A383611E6B2282B5DC4F9AE02.roa (hash: MSV3LxUccxEzwztjgTuOrU079DQ34EyY8pN67xZnvTc=) 3: FCBF1666677C11EBB2A3F00CC4F9AE02.roa (hash: lNSC8rdkBxjyp085lXkDwdvTFqJ+tB8eBzlWgZ/qk94=) 4: BFB4B7B2EB5C11F0BDF448C8486F56BC.roa (hash: TnFkXkrgb6uY+cje61k6b1fm9LrdQ6tZs/xq1L4y8kA=) 5: 331F345A383611E6B2282B5DC4F9AE02.roa (hash: 18CzF+FfvoWx8Hrenl2IiwrCZmVCmyHlLMEt6QpP+N0=) 6: 318FB51A383611E6B2282B5DC4F9AE02.roa (hash: oj2Kxdn6Bq3a+F+RORHkucT1LvSOhks0RntqHfeINjA=) 7: 328EDB76383611E6B2282B5DC4F9AE02.roa (hash: /OHY5sp1sBAjqbNUDfbLE232C2zLovbSjzEt0F1Micw=) 8: 05BF31A412A111F19F0D7733B3EE528E.roa (hash: dNUeaCpQBusPUqCQy2BQEB8UODj9dHvDmxV7wy/zNJQ=) 9: 181D46FCEE5611F0B0ABEB00546F56BC.roa (hash: VPguaapMpC2iqgjuPkraLSUj5XiZiNuM5bwDK/2ZizA=) 10: 89A73D46772311EBB972032EC4F9AE02.roa (hash: tvA8+V4GQkLamLpmb5eSD+CKg/E2pjiWjtgwaAZGMrs=) 11: 88978730772311EBB972032EC4F9AE02.roa (hash: t0raZshTu4K8enUk+kAnoqOM91ToCNd9ORf76S6SXeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 14:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14330 (0x37fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: Mar 18 14:17:48 2026 GMT Not After : Mar 25 14:17:48 2026 GMT Subject: CN=69bab40d-8d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c5:63:06:1c:51:c4:67:ec:d0:cc:f7:26:73: 2a:9a:fd:60:ee:c0:e4:79:1e:21:d4:51:e0:75:f7: a9:a4:7c:07:4a:6c:95:10:1a:4f:46:aa:06:61:fa: 7f:dd:12:9d:5c:2a:e9:b3:02:70:12:eb:da:49:85: f5:3a:87:7c:ee:44:20:ce:88:6f:c6:55:22:49:0c: cd:33:64:2d:b2:86:ab:46:c9:2f:c8:71:f3:80:22: 56:3a:5f:d7:ae:8e:b8:e3:25:70:ae:ae:77:5f:82: 7c:78:f2:22:ad:1e:a1:e6:ee:d1:60:80:45:c7:e3: f5:b8:c7:c0:66:b4:42:78:36:38:f3:02:f0:55:04: 37:a0:1d:31:63:38:20:9d:19:f2:e1:b0:8e:fc:de: 95:f6:8b:07:17:d7:14:60:5b:b3:b3:ae:ea:b7:9c: e6:f7:f9:11:5b:59:64:0d:05:05:54:10:be:10:ff: 84:93:dc:93:d2:69:64:76:58:2f:75:ff:cc:fa:b8: 4c:2b:35:f3:65:f1:3c:54:78:61:65:eb:fd:38:d9: b3:48:43:bf:c6:7d:28:2f:a0:91:bf:7e:26:43:53: 93:e4:ea:d8:b1:0a:01:cd:8b:df:58:8e:25:ea:34: 49:e3:73:6d:6f:a5:bb:5b:69:b5:c7:49:d3:8e:09: 5f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B9:51:42:47:FD:6F:F7:29:A8:39:06:37:47:91:6B:02:E3:27:43 X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:d4:9c:4b:0d:0a:02:e3:5f:70:a4:99:07:b7:a5:0d:db:bf: 7c:12:d2:a3:a8:62:c4:39:9d:db:f1:7f:f0:c5:99:77:06:12: 82:45:b7:c3:8c:1a:01:2a:4b:3b:41:d2:27:3e:02:93:7c:de: 30:35:d2:06:a8:99:3b:62:f7:2a:02:e0:8a:40:5a:81:c7:ab: 83:e4:ad:73:21:bd:8b:de:26:6b:a5:76:f8:d8:bb:2e:d9:7b: d0:4e:73:61:0e:ff:5b:4c:bf:f6:20:d3:f1:54:da:81:72:ce: c0:1a:bc:98:b3:8e:21:97:88:8a:ae:a4:03:22:b9:37:1b:bb: 72:da:03:30:1f:48:03:ea:db:a0:a1:74:53:9d:2a:d4:b6:2e: 17:76:9d:d0:cb:3a:37:c7:65:b2:4d:cb:fb:9e:64:5b:b7:0f: 82:e5:70:b9:6a:f8:d0:62:32:d1:5e:a9:21:a5:bf:4d:59:dd: 4d:70:1b:16:8b:e9:a2:f5:f1:eb:09:9f:83:cd:79:a3:c2:b2: 6e:0a:87:3c:97:35:75:eb:20:ce:75:68:86:69:0e:3a:e2:ea: 11:39:5c:77:d1:2d:b9:f8:e9:43:1c:34:e1:82:ee:09:f5:49: 5a:ce:bd:68:64:c1:45:75:40:fc:52:9b:5f:cf:ef:0f:7a:7c: b0:ac:68:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICN/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjYwMzE4MTQxNzQ4WhcNMjYwMzI1MTQxNzQ4WjAYMRYwFAYD VQQDEw02OWJhYjQwZC04ZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcVjBhxRxGfs0Mz3JnMqmv1g7sDkeR4h1FHgdfeppHwHSmyVEBpPRqoGYfp/ 3RKdXCrpswJwEuvaSYX1Ood87kQgzohvxlUiSQzNM2QtsoarRskvyHHzgCJWOl/X ro644yVwrq53X4J8ePIirR6h5u7RYIBFx+P1uMfAZrRCeDY48wLwVQQ3oB0xYzgg nRny4bCO/N6V9osHF9cUYFuzs67qt5zm9/kRW1lkDQUFVBC+EP+Ek9yT0mlkdlgv df/M+rhMKzXzZfE8VHhhZev9ONmzSEO/xn0oL6CRv34mQ1OT5OrYsQoBzYvfWI4l 6jRJ43Ntb6W7W2m1x0nTjglfeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCi5UUJH /W/3Kag5BjdHkWsC4ydDMB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTcwQi85N0FGNkRGMDFENkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJU MllTSEduTWhxZEZwWUw0bWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABdScSw0KAuNfcKSZB7elDdu/fBLSo6hixDmd2/F/8MWZdwYSgkW3w4waASpL O0HSJz4Ck3zeMDXSBqiZO2L3KgLgikBagcerg+StcyG9i94ma6V2+Ni7Ltl70E5z YQ7/W0y/9iDT8VTagXLOwBq8mLOOIZeIiq6kAyK5Nxu7ctoDMB9IA+rboKF0U50q 1LYuF3ad0Ms6N8dlsk3L+55kW7cPguVwuWr40GIy0V6pIaW/TVndTXAbFovpovXx 6wmfg815o8KybgqHPJc1desgznVohmkOOuLqETlcd9EtufjpQxw04YLuCfVJWs69 aGTBRXVA/FKbX8/vD3p8sKxoig== -----END CERTIFICATE-----Generated at Thu Mar 19 15:47:57 2026 by rpki-client