$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: XcLnxQt1D0IT7byJggbw/rXJcbge85SUTHZdKx0puf8= Subject key identifier: CC:8B:40:05:F8:D8:51:CF:C7:D6:53:40:AC:A5:09:8F:27:1D:5F:29 Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1B1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 18BF Signing time: Sun 20 Sep 2026 16:45:26 +0000 Manifest this update: Sun 20 Sep 2026 16:45:25 +0000 Manifest next update: Sun 27 Sep 2026 16:45:25 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: ilKVbZnQr0QtQxJsAfLF3vM6CVV4p/9rT4JAD7a6LgU=) 2: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: T/IhfFqluucOcXwihP2EF0WhVb+uxLK2DoiXI1D9r8k=) 3: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: JWuyMD5PV7e0Rk1Lsc3w0a6kPng2XMWA35a3+b7eoNE=) 4: D00F9A8643A511F1B04E115C93833773.roa (hash: /5V80aQjqcaZCKHTzBYZIdWUXDquWlftifjg1oCFJfI=) 5: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: P3TSLLO5OHId7p3ClxbnsjagxpNV/CjhrV4sIGmuZo8=) 6: A865A1925B1611F083088661C4F9AE02.roa (hash: UiRna1wKfppY3ae9ceGSJXnsVoB2Dthll1RwPbuAri8=) 7: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: JcJkzKIq/gkKNwsIztAnup4vUjn2mQMxupahQTcBoD0=) 8: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: T5SY7nGUBq6N93Y2VQGjBjoMsDIFs9sEiYiybGCQJmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 16:45:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6940 (0x1b1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Sep 20 16:45:25 2026 GMT Not After : Sep 27 16:45:25 2026 GMT Subject: CN=6ab00da6-5b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dc:15:53:73:1e:c4:3f:f9:a3:ab:59:d1:ad: 53:38:43:37:2f:7b:b1:9e:03:16:8f:5e:58:c5:2a: 0b:db:e2:71:19:47:d3:21:5e:a6:ef:8d:08:9d:b7: b5:14:9b:11:e3:e8:63:f6:fb:37:c6:08:78:28:9c: 7e:d7:eb:0b:0b:0f:fb:26:9f:2c:b7:7d:bb:bb:11: 50:5c:42:73:84:41:43:72:74:fe:88:3c:3c:0a:ab: 8a:38:5f:35:4d:45:82:0b:64:78:b3:12:f3:06:5f: 78:f9:82:9f:eb:bc:2f:9a:8a:42:2d:8d:f5:e8:bf: 03:25:d8:4c:58:c5:42:cc:36:b7:c5:8a:2a:88:6f: ee:81:d6:92:1c:2c:10:f4:70:9a:fe:85:1c:b7:41: 51:35:e9:24:01:3d:2f:07:24:52:f3:96:09:b4:f8: 60:15:5b:41:79:29:8b:42:af:21:63:e4:97:63:14: cf:3d:9b:13:06:32:0f:ec:56:3c:b9:a5:59:60:c4: 8b:59:08:d7:4d:5c:bb:cb:49:ee:9a:64:30:79:84: e1:03:64:26:cb:7e:90:f2:66:8b:ba:fb:c7:a2:04: d6:02:60:90:f9:16:3a:ab:3a:76:f8:8d:ad:4f:45: 41:9b:b6:83:8b:29:fc:6b:79:f7:82:b2:2e:13:ed: f5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:8B:40:05:F8:D8:51:CF:C7:D6:53:40:AC:A5:09:8F:27:1D:5F:29 X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:70:0b:a9:7b:15:f9:56:74:c7:a7:17:05:00:57:15:f8:a1: cd:19:fb:b8:f0:3a:02:d0:f2:47:71:a2:d1:18:7a:62:a0:b5: b6:36:0c:89:5c:15:3f:5c:0c:0d:5c:13:80:fb:63:d8:fb:58: aa:20:fb:0f:42:98:60:54:49:34:7d:87:45:51:4f:f4:81:92: dd:b7:b0:75:86:bc:22:bc:88:04:84:41:47:cf:be:bb:c1:6f: 7c:b2:81:35:fa:e1:ba:ac:c2:f6:60:17:12:a2:91:15:fb:3f: e7:b9:91:b3:a9:bb:c1:7a:b2:0a:39:10:5a:50:e9:c9:97:ef: b5:d6:e1:f9:99:33:06:c8:f5:09:cd:7c:11:ee:7d:2a:93:5a: 74:d8:5c:2b:24:14:bf:dd:24:90:52:bf:39:45:5b:87:6b:aa: fa:21:41:ab:44:96:86:5b:5a:3a:44:ce:67:7d:c2:ad:7e:1c: 0c:01:22:ba:c7:1a:ec:1d:82:39:d9:77:b0:96:38:1e:74:37: 80:57:0f:ee:46:b0:90:4a:64:52:b0:37:74:69:b3:80:48:2f: ad:5d:0b:e0:5a:6f:92:57:64:db:7f:5f:ee:8b:ac:9a:c9:ad: 6c:88:3a:ff:a6:8a:68:40:a9:6f:2d:22:ea:2a:ef:c4:a6:28: e2:e1:e8:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjYwOTIwMTY0NTI1WhcNMjYwOTI3MTY0NTI1WjAYMRYwFAYD VQQDEw02YWIwMGRhNi01YjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNwVU3MexD/5o6tZ0a1TOEM3L3uxngMWj15YxSoL2+JxGUfTIV6m740Inbe1 FJsR4+hj9vs3xgh4KJx+1+sLCw/7Jp8st327uxFQXEJzhEFDcnT+iDw8CquKOF81 TUWCC2R4sxLzBl94+YKf67wvmopCLY316L8DJdhMWMVCzDa3xYoqiG/ugdaSHCwQ 9HCa/oUct0FRNekkAT0vByRS85YJtPhgFVtBeSmLQq8hY+SXYxTPPZsTBjIP7FY8 uaVZYMSLWQjXTVy7y0nummQweYThA2Qmy36Q8maLuvvHogTWAmCQ+RY6qzp2+I2t T0VBm7aDiyn8a3n3grIuE+31xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMyLQAX4 2FHPx9ZTQKylCY8nHV8pMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZXALqXsV+VZ0x6cXBQBXFfihzRn7uPA6AtDyR3Gi0Rh6YqC1tjYMiVwVP1wM DVwTgPtj2PtYqiD7D0KYYFRJNH2HRVFP9IGS3bewdYa8IryIBIRBR8++u8FvfLKB NfrhuqzC9mAXEqKRFfs/57mRs6m7wXqyCjkQWlDpyZfvtdbh+ZkzBsj1Cc18Ee59 KpNadNhcKyQUv90kkFK/OUVbh2uq+iFBq0SWhltaOkTOZ33CrX4cDAEiusca7B2C Odl3sJY4HnQ3gFcP7kawkEpkUrA3dGmzgEgvrV0L4Fpvkldk239f7ousmsmtbIg6 /6aKaECpby0i6irvxKYo4uHoVA== -----END CERTIFICATE-----Generated at Tue Sep 22 03:12:04 2026 by rpki-client