$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft File: bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft (raw, json) Hash identifier: Msb8ZIiRdlqSB8X1VKNv+qEYllqdiXpTwQs9kS5X3Wo= Subject key identifier: 08:87:49:1C:C2:C6:A2:25:3B:EC:20:4E:51:2C:57:1F:EC:DE:D8:57 Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 3840 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft Manifest number: 3689 Signing time: Sat 20 Jun 2026 14:17:53 +0000 Manifest this update: Sat 20 Jun 2026 14:17:52 +0000 Manifest next update: Sat 27 Jun 2026 14:17:52 +0000 Files and hashes: 1: bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl (hash: cs2qRZy/2H7q4c/y8+Fi6cfSJYd7O3+z46mm35zyIkU=) 2: BFB4B7B2EB5C11F0BDF448C8486F56BC.roa (hash: uE/rnhwB3ME5JOA1z9OMjoAfdFiu/bbfu+6j3t7mLB8=) 3: 181D46FCEE5611F0B0ABEB00546F56BC.roa (hash: 0v/XMQ2d8xTna5t6oAMoofbfgmP+DjOOYOL6BBl6lZc=) 4: 318FB51A383611E6B2282B5DC4F9AE02.roa (hash: D9hmvA6dDXSOuTlZ3qbzZ4eSbUShWWWPmR9njY7G+Ic=) 5: FCBF1666677C11EBB2A3F00CC4F9AE02.roa (hash: UUODOJY5+5q5pcm8Nr35HeyzWAGOprJTcgD1liIBbik=) 6: 328EDB76383611E6B2282B5DC4F9AE02.roa (hash: +nqzlPuV0MHTJ+4S2S0Nu+k/HevxF1u4cYkYwAyCCHg=) 7: 331F345A383611E6B2282B5DC4F9AE02.roa (hash: Rfvf6Vj64V/DcT+xX9bZ8JiVA8egzGFFRJ+JQllzS44=) 8: 05BF31A412A111F19F0D7733B3EE528E.roa (hash: DDHyAiyJR9qzEXBGbIoi4qHLBw3ZayKontdEM6TL8tc=) 9: 3204348A383611E6B2282B5DC4F9AE02.roa (hash: SOQcp2o/vipjBiaInCM2WE18Os9teruHe/tKBdXo2pM=) 10: 89A73D46772311EBB972032EC4F9AE02.roa (hash: OmCcAoJqaG+VM4I0xGI0MWEjDCQ4puKtwGSlsV9t2PI=) 11: 88978730772311EBB972032EC4F9AE02.roa (hash: H9kR7aKKfkWFeCcbwIuFh1k6Ox63w9qdIWH7tbADEBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Jun 2026 14:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14400 (0x3840) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: Jun 20 14:17:52 2026 GMT Not After : Jun 27 14:17:52 2026 GMT Subject: CN=6a36a111-08a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:79:94:f5:49:72:68:b8:cc:03:59:c7:3b:98: ff:e7:95:27:39:83:92:83:b7:92:ce:c1:25:b7:06: 3c:a3:84:4c:8a:0f:10:79:35:c9:42:13:dc:34:b5: 70:c0:5a:67:e1:c6:0b:50:a7:7a:00:0f:6b:e3:b3: 9c:43:b3:17:e7:61:96:03:5f:58:80:1f:cd:19:b8: 61:13:cc:90:0f:7f:4c:e0:ce:31:ce:71:d6:b4:ec: 43:b5:b1:37:43:fa:4c:11:cd:fa:c2:65:1c:aa:f1: e9:be:e5:86:fe:cd:4d:39:2b:19:5e:3f:71:5f:c0: 89:f9:12:7a:8a:01:45:ab:91:d4:66:36:d9:4d:eb: 41:f9:59:d3:f2:09:23:54:18:96:30:5f:d7:23:cf: 5a:f1:d8:92:d1:c8:a6:3f:66:19:e3:84:ef:6a:43: fe:37:d5:e2:d4:d0:dd:30:a6:8a:69:60:7d:88:27: e8:f0:2a:9c:18:90:b8:92:13:84:b5:d0:ba:78:0f: cc:f4:18:4e:07:65:4e:80:97:ca:80:c5:c1:0e:25: 34:d2:74:f1:40:98:ff:f9:cd:c1:68:9d:a4:68:08: 9c:45:30:68:79:6a:c5:61:b7:df:5a:08:31:d6:b7: 27:27:ff:5e:f2:70:63:ff:19:44:40:c1:40:49:bd: 2a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:87:49:1C:C2:C6:A2:25:3B:EC:20:4E:51:2C:57:1F:EC:DE:D8:57 X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:d8:f5:11:ad:3d:b0:12:08:0d:e7:f6:f2:57:61:42:c0:21: 66:14:ae:0a:cb:11:7b:2a:21:6e:15:9b:81:f9:1c:88:7e:49: 57:20:d4:56:aa:25:b8:e5:55:98:33:fb:10:3a:85:ae:27:28: ee:0c:be:40:05:74:08:17:29:50:2b:d8:38:4a:e7:e0:5b:76: 0d:ff:ff:a3:c2:a8:55:87:9d:b6:ed:bd:97:74:0f:e7:30:4a: 23:03:09:1b:ec:2c:4a:62:70:cb:37:5e:88:61:3b:67:79:28: b3:3e:5c:b1:23:79:8c:04:c5:1c:89:34:28:f1:3c:50:77:e4: e9:99:19:7c:cd:78:62:72:36:88:07:73:7c:47:96:34:3e:38: a1:2c:0f:b5:b1:aa:6c:d2:c7:2b:db:f5:29:6f:86:00:c9:e8: b2:1e:8d:3c:2e:8b:85:74:64:df:f0:c4:fd:94:5f:5f:79:be: b8:fa:78:12:f6:41:fe:44:3a:4b:65:38:02:8d:36:66:da:cf: b8:d0:2d:9a:eb:dd:f0:01:2c:02:7a:86:23:2c:14:49:9d:c1: 76:66:84:c2:40:7f:db:ef:7e:11:97:83:97:ff:45:dc:33:34: c2:ad:91:30:30:50:15:62:a0:f2:70:2d:db:64:cc:b4:90:b8: 86:13:43:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICOEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjYwNjIwMTQxNzUyWhcNMjYwNjI3MTQxNzUyWjAYMRYwFAYD VQQDEw02YTM2YTExMS0wOGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3mU9UlyaLjMA1nHO5j/55UnOYOSg7eSzsEltwY8o4RMig8QeTXJQhPcNLVw wFpn4cYLUKd6AA9r47OcQ7MX52GWA19YgB/NGbhhE8yQD39M4M4xznHWtOxDtbE3 Q/pMEc36wmUcqvHpvuWG/s1NOSsZXj9xX8CJ+RJ6igFFq5HUZjbZTetB+VnT8gkj VBiWMF/XI89a8diS0cimP2YZ44TvakP+N9Xi1NDdMKaKaWB9iCfo8CqcGJC4khOE tdC6eA/M9BhOB2VOgJfKgMXBDiU00nTxQJj/+c3BaJ2kaAicRTBoeWrFYbffWggx 1rcnJ/9e8nBj/xlEQMFASb0qAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAiHSRzC xqIlO+wgTlEsVx/s3thXMB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTcwQi85N0FGNkRGMDFENkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJU MllTSEduTWhxZEZwWUw0bWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWNj1Ea09sBIIDef28ldhQsAhZhSuCssReyohbhWbgfkciH5JVyDUVqoluOVV mDP7EDqFrico7gy+QAV0CBcpUCvYOErn4Ft2Df//o8KoVYedtu29l3QP5zBKIwMJ G+wsSmJwyzdeiGE7Z3kosz5csSN5jATFHIk0KPE8UHfk6ZkZfM14YnI2iAdzfEeW ND44oSwPtbGqbNLHK9v1KW+GAMnosh6NPC6LhXRk3/DE/ZRfX3m+uPp4EvZB/kQ6 S2U4Ao02ZtrPuNAtmuvd8AEsAnqGIywUSZ3BdmaEwkB/2+9+EZeDl/9F3DM0wq2R MDBQFWKg8nAt22TMtJC4hhNDyA== -----END CERTIFICATE-----Generated at Sun Jun 21 12:33:41 2026 by rpki-client