$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: T+NJsqz3jky0bCC/8Y9ggJ38zFdTSUx1y0p1eGCP4+Y= Subject key identifier: 17:53:3F:C1:E9:48:E2:15:32:98:21:AC:92:46:5E:4C:2E:EF:41:99 Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1B31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 18D3 Signing time: Wed 28 Oct 2026 16:50:08 +0000 Manifest this update: Wed 28 Oct 2026 16:50:08 +0000 Manifest next update: Wed 04 Nov 2026 16:50:08 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: kLjNf0Jn+kG9oCYjWs14YHZ7vLSoOpaE/rACmn60pXA=) 2: A865A1925B1611F083088661C4F9AE02.roa (hash: UiRna1wKfppY3ae9ceGSJXnsVoB2Dthll1RwPbuAri8=) 3: D00F9A8643A511F1B04E115C93833773.roa (hash: FH2vfxKCvBSnd3AiGM9xjlDUdLumNRqDqvbQz6AZcvY=) 4: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: P3TSLLO5OHId7p3ClxbnsjagxpNV/CjhrV4sIGmuZo8=) 5: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: T5SY7nGUBq6N93Y2VQGjBjoMsDIFs9sEiYiybGCQJmM=) 6: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: JcJkzKIq/gkKNwsIztAnup4vUjn2mQMxupahQTcBoD0=) 7: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: JWuyMD5PV7e0Rk1Lsc3w0a6kPng2XMWA35a3+b7eoNE=) 8: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: T/IhfFqluucOcXwihP2EF0WhVb+uxLK2DoiXI1D9r8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 16:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6961 (0x1b31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Oct 28 16:50:08 2026 GMT Not After : Nov 4 16:50:08 2026 GMT Subject: CN=6ae227c0-88c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:97:13:73:45:42:c4:c5:5d:de:6e:9c:7b:32: 04:cc:14:7e:7c:7a:be:2f:26:9a:5a:fa:6b:7e:1e: c1:c7:97:8b:07:3f:e6:79:f7:97:a8:27:8b:7b:ad: c2:3d:9d:b2:5f:27:8f:25:53:59:c9:c2:b2:b1:26: a3:ca:ac:40:fa:ce:50:52:83:d5:b6:08:7a:38:ae: 40:2d:bb:3c:b9:b2:2b:cf:f3:e9:46:c5:23:41:8d: 1b:ca:d2:5a:13:b3:5d:e3:14:5e:f4:2f:b2:e1:db: 71:56:fc:a9:31:e6:a9:0b:9c:13:84:f1:5e:ea:50: ad:20:78:27:69:17:94:c3:ba:17:22:db:9b:0c:6c: 5f:53:72:25:75:c9:29:65:23:9d:ee:36:29:d7:dd: 99:9c:4f:06:cb:64:11:af:84:05:17:15:86:87:62: d6:f0:69:59:7e:00:95:5a:80:48:9b:0d:28:79:ed: 07:2f:f6:4b:6e:a7:52:06:84:60:27:04:9c:fc:e6: f0:71:76:fa:07:4e:27:37:ac:b8:89:11:2b:f3:83: d1:be:85:c1:c6:09:8a:71:02:b1:f9:d1:b1:2d:8d: 2b:15:55:7c:3f:0e:5d:df:84:9c:bb:f9:7f:33:96: f8:c6:10:87:6a:a5:5b:cf:26:22:38:15:dd:0d:4a: a4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:53:3F:C1:E9:48:E2:15:32:98:21:AC:92:46:5E:4C:2E:EF:41:99 X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:a1:20:87:7d:a6:b4:1a:41:ac:c8:b3:c4:f2:36:48:34:4a: c0:be:5b:50:6d:a0:9a:4d:b5:f3:e5:7e:21:16:5a:05:a4:85: 2d:7a:c8:29:6b:46:ce:86:b2:14:2c:9c:15:4a:61:5c:81:03: ca:86:41:ee:2a:d3:72:d8:1e:84:24:94:dd:15:11:5c:56:1e: a2:ba:18:2f:f4:dc:d7:02:c0:75:54:ae:2a:7b:31:5b:c4:f6: bb:e1:43:81:75:44:54:1b:ae:e5:a2:31:9e:5d:5c:45:6e:74: 41:9d:af:0b:0a:3c:38:30:3d:70:59:6a:41:fb:87:6e:fe:14: 0f:74:c4:98:ef:1a:38:0b:07:2b:01:7a:02:9b:92:3f:eb:32: 1b:be:2e:03:ff:4e:f2:bc:7c:10:65:64:75:c4:e6:97:64:2e: c4:b2:d2:7d:8c:12:30:22:b9:14:8b:4d:59:6e:3d:34:ba:4e: f1:83:9e:b6:c1:3d:cd:be:e7:9a:78:e6:da:94:5e:35:ee:29: b6:fb:e0:f5:e9:20:45:f1:2c:6b:67:c6:fc:45:0d:d2:09:49: 9b:89:ba:47:79:12:d3:99:02:28:15:5e:1d:27:53:76:46:3b: 01:4d:dc:bd:fb:19:6f:f7:95:a4:cc:d6:f9:b5:2a:23:f0:00: 1d:8b:31:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjYxMDI4MTY1MDA4WhcNMjYxMTA0MTY1MDA4WjAYMRYwFAYD VQQDEw02YWUyMjdjMC04OGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlZcTc0VCxMVd3m6cezIEzBR+fHq+LyaaWvprfh7Bx5eLBz/mefeXqCeLe63C PZ2yXyePJVNZycKysSajyqxA+s5QUoPVtgh6OK5ALbs8ubIrz/PpRsUjQY0bytJa E7Nd4xRe9C+y4dtxVvypMeapC5wThPFe6lCtIHgnaReUw7oXItubDGxfU3Ildckp ZSOd7jYp192ZnE8Gy2QRr4QFFxWGh2LW8GlZfgCVWoBImw0oee0HL/ZLbqdSBoRg JwSc/ObwcXb6B04nN6y4iREr84PRvoXBxgmKcQKx+dGxLY0rFVV8Pw5d34Scu/l/ M5b4xhCHaqVbzyYiOBXdDUqk7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBdTP8Hp SOIVMpghrJJGXkwu70GZMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUKEgh32mtBpBrMizxPI2SDRKwL5bUG2gmk218+V+IRZaBaSFLXrIKWtGzoay FCycFUphXIEDyoZB7irTctgehCSU3RURXFYeoroYL/Tc1wLAdVSuKnsxW8T2u+FD gXVEVBuu5aIxnl1cRW50QZ2vCwo8ODA9cFlqQfuHbv4UD3TEmO8aOAsHKwF6ApuS P+syG74uA/9O8rx8EGVkdcTml2QuxLLSfYwSMCK5FItNWW49NLpO8YOetsE9zb7n mnjm2pReNe4ptvvg9ekgRfEsa2fG/EUN0glJm4m6R3kS05kCKBVeHSdTdkY7AU3c vfsZb/eVpMzW+bUqI/AAHYsxRQ== -----END CERTIFICATE-----Generated at Thu Oct 29 18:29:26 2026 by rpki-client