$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: iAo0/0NAoy5ICuWslm7C2MvgkTCnSxgyTHJk/tuHu2o= Subject key identifier: 31:2E:AF:87:3F:E6:FC:7D:77:F3:8B:1D:77:D7:36:DF:1B:2D:1F:15 Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1B16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 18B9 Signing time: Tue 08 Sep 2026 16:50:50 +0000 Manifest this update: Tue 08 Sep 2026 16:50:50 +0000 Manifest next update: Tue 15 Sep 2026 16:50:50 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: TPrql6ZUwH1NEQDphiNuy0qWGQHkU/c90oDtMWoSidE=) 2: D00F9A8643A511F1B04E115C93833773.roa (hash: /5V80aQjqcaZCKHTzBYZIdWUXDquWlftifjg1oCFJfI=) 3: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: T5SY7nGUBq6N93Y2VQGjBjoMsDIFs9sEiYiybGCQJmM=) 4: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: P3TSLLO5OHId7p3ClxbnsjagxpNV/CjhrV4sIGmuZo8=) 5: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: T/IhfFqluucOcXwihP2EF0WhVb+uxLK2DoiXI1D9r8k=) 6: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: JcJkzKIq/gkKNwsIztAnup4vUjn2mQMxupahQTcBoD0=) 7: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: JWuyMD5PV7e0Rk1Lsc3w0a6kPng2XMWA35a3+b7eoNE=) 8: A865A1925B1611F083088661C4F9AE02.roa (hash: UiRna1wKfppY3ae9ceGSJXnsVoB2Dthll1RwPbuAri8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 16:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6934 (0x1b16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Sep 8 16:50:50 2026 GMT Not After : Sep 15 16:50:50 2026 GMT Subject: CN=6aa03cea-2cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8b:ef:c5:7c:64:b6:87:d4:99:d2:d4:17:b5: 8b:a4:98:70:bb:bf:e1:d0:ce:18:f2:f1:a6:cb:52: 37:fa:8f:f7:2d:9f:82:eb:a2:1f:d8:51:76:7e:cc: d1:bd:67:60:29:7e:34:07:17:2b:a2:99:9b:c7:b8: 68:58:91:99:dc:d4:5b:b7:cb:7f:06:7a:68:5f:ac: d8:3f:83:64:3b:a4:e4:91:4f:89:fe:bf:3d:23:79: 9b:f6:1d:d9:29:5d:4e:84:19:62:c8:f5:cb:eb:27: c1:1f:31:9e:62:ed:68:db:53:f4:db:06:df:be:2c: e6:89:06:e3:8a:27:47:6e:e9:7e:20:16:64:cb:49: e7:77:4a:db:85:a7:34:57:e3:fd:be:b1:e5:4c:3f: 30:bc:11:c2:5b:7d:7a:85:7a:45:8c:b2:6d:7c:f4: 6c:2d:a3:39:53:f7:73:3e:2b:00:6a:2d:e0:07:d0: 8d:8d:b5:75:82:17:a7:19:4c:26:5c:4e:48:9a:ca: 49:c3:fa:07:77:62:6e:62:3c:10:99:3d:e2:33:f9: b2:2a:95:d1:0a:39:09:77:90:4f:9e:d4:6f:34:a1: ec:a8:f5:f1:70:35:03:54:5b:85:d6:8d:11:29:80: 7c:d7:84:53:f6:94:c3:8a:46:77:59:81:29:4d:ec: 66:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2E:AF:87:3F:E6:FC:7D:77:F3:8B:1D:77:D7:36:DF:1B:2D:1F:15 X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:92:7f:d2:34:fe:fb:82:af:8d:f4:6a:4f:27:e9:e8:d2:67: 53:13:73:a1:ad:c9:1d:0b:09:c6:73:6a:9d:d5:ea:a8:19:58: 00:e3:e0:7e:14:94:b4:0a:7a:f7:b8:93:af:b7:6f:aa:92:01: 65:fa:d2:32:95:d4:5e:ce:6d:02:7c:b4:a0:27:73:3f:bf:09: d0:ef:33:b3:58:31:bb:c0:d1:f1:ad:f3:ed:13:35:35:01:80: 5b:e3:e8:37:52:c5:f4:69:d1:1e:3f:7b:1c:14:2f:ae:bb:9f: 4a:4b:25:84:d2:3a:0c:64:a0:75:ff:ef:31:6d:7f:68:eb:8a: e0:cc:5c:96:8a:f2:8d:37:66:d8:27:95:d7:19:28:88:72:c9: 36:b7:0b:54:bb:27:68:27:7b:bf:94:92:f2:ff:6e:60:eb:bd: 8a:e1:32:23:92:fa:5c:b5:94:56:5a:e2:b5:d5:73:ba:c0:c2: 53:87:ad:b2:87:58:82:a3:79:3b:4d:ab:75:72:45:e6:4f:9c: 68:0f:6c:3e:68:2d:03:5a:c2:3c:a6:ed:8a:cd:42:7f:1a:95: 96:84:94:40:d0:94:93:26:69:f5:21:f5:d1:94:30:68:d7:e7: 9e:7e:c0:60:81:17:a8:95:d5:75:4a:1f:f2:a2:09:34:be:42: fb:da:e8:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjYwOTA4MTY1MDUwWhcNMjYwOTE1MTY1MDUwWjAYMRYwFAYD VQQDEw02YWEwM2NlYS0yY2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqovvxXxktofUmdLUF7WLpJhwu7/h0M4Y8vGmy1I3+o/3LZ+C66If2FF2fszR vWdgKX40Bxcropmbx7hoWJGZ3NRbt8t/BnpoX6zYP4NkO6TkkU+J/r89I3mb9h3Z KV1OhBliyPXL6yfBHzGeYu1o21P02wbfvizmiQbjiidHbul+IBZky0nnd0rbhac0 V+P9vrHlTD8wvBHCW316hXpFjLJtfPRsLaM5U/dzPisAai3gB9CNjbV1ghenGUwm XE5ImspJw/oHd2JuYjwQmT3iM/myKpXRCjkJd5BPntRvNKHsqPXxcDUDVFuF1o0R KYB814RT9pTDikZ3WYEpTexmWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDEur4c/ 5vx9d/OLHXfXNt8bLR8VMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcJJ/0jT++4KvjfRqTyfp6NJnUxNzoa3JHQsJxnNqndXqqBlYAOPgfhSUtAp6 97iTr7dvqpIBZfrSMpXUXs5tAny0oCdzP78J0O8zs1gxu8DR8a3z7RM1NQGAW+Po N1LF9GnRHj97HBQvrrufSkslhNI6DGSgdf/vMW1/aOuK4MxcloryjTdm2CeV1xko iHLJNrcLVLsnaCd7v5SS8v9uYOu9iuEyI5L6XLWUVlritdVzusDCU4etsodYgqN5 O02rdXJF5k+caA9sPmgtA1rCPKbtis1CfxqVloSUQNCUkyZp9SH10ZQwaNfnnn7A YIEXqJXVdUof8qIJNL5C+9roYA== -----END CERTIFICATE-----Generated at Wed Sep 9 16:42:10 2026 by rpki-client