$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: IdiyWqO2WLbJfWqXKJwLEBO5gKYmp+ty1/WehAVLaGI= Subject key identifier: 5B:1C:80:5A:FC:60:E6:D9:85:C8:4C:96:D4:68:4B:E6:E5:9D:CB:44 Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1B0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 18AE Signing time: Tue 18 Aug 2026 16:58:15 +0000 Manifest this update: Tue 18 Aug 2026 16:58:14 +0000 Manifest next update: Tue 25 Aug 2026 16:58:14 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: OcLjHHz4m5GtV3gtwu8+1sLj6yP+zTH3B/eyGOetNWM=) 2: A865A1925B1611F083088661C4F9AE02.roa (hash: UiRna1wKfppY3ae9ceGSJXnsVoB2Dthll1RwPbuAri8=) 3: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: T5SY7nGUBq6N93Y2VQGjBjoMsDIFs9sEiYiybGCQJmM=) 4: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: JcJkzKIq/gkKNwsIztAnup4vUjn2mQMxupahQTcBoD0=) 5: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: P3TSLLO5OHId7p3ClxbnsjagxpNV/CjhrV4sIGmuZo8=) 6: D00F9A8643A511F1B04E115C93833773.roa (hash: /5V80aQjqcaZCKHTzBYZIdWUXDquWlftifjg1oCFJfI=) 7: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: JWuyMD5PV7e0Rk1Lsc3w0a6kPng2XMWA35a3+b7eoNE=) 8: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: T/IhfFqluucOcXwihP2EF0WhVb+uxLK2DoiXI1D9r8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 16:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6923 (0x1b0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Aug 18 16:58:14 2026 GMT Not After : Aug 25 16:58:14 2026 GMT Subject: CN=6a848f27-5256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e4:a6:d4:c9:53:c0:f7:85:7c:76:ae:6b:98: e0:0c:29:5f:de:25:4d:f4:e0:4c:d1:21:52:f4:8a: 28:0b:89:a6:4a:ed:b4:7c:29:73:48:4c:c5:09:c9: 53:b6:9f:1d:cc:b5:ca:70:c4:36:28:ae:5f:66:a8: 98:a2:19:66:5d:72:ca:b9:12:aa:f3:ac:ba:7c:47: dd:38:a9:44:cf:81:68:83:52:ec:cc:64:cc:6c:cd: ef:31:e5:e6:88:e3:eb:2d:91:88:25:7c:3d:b6:1f: bc:ce:63:f4:25:91:f9:7b:43:1f:4b:08:cd:e5:ce: 6e:7a:c4:d7:96:5a:ff:73:b6:05:eb:b7:61:ce:7c: 30:0c:ca:29:72:5d:bf:79:62:af:6f:32:22:2f:63: 99:d4:36:f7:fc:42:a4:f6:6f:37:48:29:8a:15:46: fd:bb:8a:d6:06:38:ed:2d:bf:2a:41:5e:63:43:28: a8:f5:e3:2a:b3:a6:1e:1a:a7:31:4b:91:41:d8:17: 6c:79:4d:13:b8:bb:7e:7b:17:68:79:34:43:25:fa: cd:fd:21:ba:9b:1a:4a:ca:80:94:7c:57:9e:20:9f: 1f:f0:2d:c6:c3:bb:fc:9f:bf:4a:01:c9:00:5e:22: 5c:f0:f9:c6:5f:58:51:47:3e:e0:fe:a0:80:1e:2a: 0f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1C:80:5A:FC:60:E6:D9:85:C8:4C:96:D4:68:4B:E6:E5:9D:CB:44 X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:06:da:29:81:ed:83:9c:03:af:d3:9b:bb:c1:46:97:69:8d: b5:a1:1a:c3:fa:9f:a0:f8:1b:48:2a:87:ab:50:26:4a:92:79: 74:b2:15:2c:14:be:7e:be:45:15:40:8b:76:0e:a6:cb:94:e3: 47:8f:b0:73:05:34:4e:99:55:56:82:10:74:36:b0:cb:45:08: b4:7f:61:dd:a1:41:95:bf:35:60:c7:94:72:28:66:3b:59:f8: f4:0d:b0:18:29:ea:bf:d5:4d:43:4b:82:ed:cb:33:57:7d:ac: 1f:0d:4b:34:e1:43:48:c0:fb:14:fa:d3:de:6b:b2:f7:e0:ae: 76:c4:47:c4:5b:7d:8b:36:08:c3:93:85:df:ba:e9:f6:25:9b: c8:b2:f4:db:01:96:54:7e:12:b6:16:06:0f:c9:a1:fe:71:29: e8:20:c3:f6:df:f8:2c:74:3d:11:a4:97:f5:89:40:87:70:be: 8f:bf:b5:f6:97:1a:a4:65:6a:88:5b:0b:ea:2a:55:17:19:02: d3:ba:f7:54:43:e8:e5:50:9c:64:56:ae:00:fe:e7:bb:3b:13: b8:62:11:9c:b6:ed:cc:59:05:98:b5:09:dc:6d:22:50:95:64: 11:9d:7e:e3:32:cf:1f:fc:c6:64:93:85:47:91:5a:08:79:20: f7:fd:bd:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjYwODE4MTY1ODE0WhcNMjYwODI1MTY1ODE0WjAYMRYwFAYD VQQDEw02YTg0OGYyNy01MjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoeSm1MlTwPeFfHaua5jgDClf3iVN9OBM0SFS9IooC4mmSu20fClzSEzFCclT tp8dzLXKcMQ2KK5fZqiYohlmXXLKuRKq86y6fEfdOKlEz4Fog1LszGTMbM3vMeXm iOPrLZGIJXw9th+8zmP0JZH5e0MfSwjN5c5uesTXllr/c7YF67dhznwwDMopcl2/ eWKvbzIiL2OZ1Db3/EKk9m83SCmKFUb9u4rWBjjtLb8qQV5jQyio9eMqs6YeGqcx S5FB2BdseU0TuLt+exdoeTRDJfrN/SG6mxpKyoCUfFeeIJ8f8C3Gw7v8n79KAckA XiJc8PnGX1hRRz7g/qCAHioPhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFscgFr8 YObZhchMltRoS+blnctEMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZAbaKYHtg5wDr9Obu8FGl2mNtaEaw/qfoPgbSCqHq1AmSpJ5dLIVLBS+fr5F FUCLdg6my5TjR4+wcwU0TplVVoIQdDawy0UItH9h3aFBlb81YMeUcihmO1n49A2w GCnqv9VNQ0uC7cszV32sHw1LNOFDSMD7FPrT3muy9+CudsRHxFt9izYIw5OF37rp 9iWbyLL02wGWVH4SthYGD8mh/nEp6CDD9t/4LHQ9EaSX9YlAh3C+j7+19pcapGVq iFsL6ipVFxkC07r3VEPo5VCcZFauAP7nuzsTuGIRnLbtzFkFmLUJ3G0iUJVkEZ1+ 4zLPH/zGZJOFR5FaCHkg9/29NA== -----END CERTIFICATE-----Generated at Wed Aug 19 13:21:44 2026 by rpki-client