$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: 1HGI9HUMMSjUcOn9TrZjkqFkqR7gX0O/HYOq4G3EVz4= Subject key identifier: E7:BD:8C:6C:11:3A:5F:92:36:E1:1B:EE:BD:D0:5E:C1:E0:2A:3D:40 Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1B04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 18A7 Signing time: Tue 04 Aug 2026 16:51:41 +0000 Manifest this update: Tue 04 Aug 2026 16:51:40 +0000 Manifest next update: Tue 11 Aug 2026 16:51:40 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: ilqSaV2cQDb8GPBtXxtbFpxAzvro1FvbuI2nVoHGFL0=) 2: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: T/IhfFqluucOcXwihP2EF0WhVb+uxLK2DoiXI1D9r8k=) 3: A865A1925B1611F083088661C4F9AE02.roa (hash: UiRna1wKfppY3ae9ceGSJXnsVoB2Dthll1RwPbuAri8=) 4: D00F9A8643A511F1B04E115C93833773.roa (hash: /5V80aQjqcaZCKHTzBYZIdWUXDquWlftifjg1oCFJfI=) 5: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: JcJkzKIq/gkKNwsIztAnup4vUjn2mQMxupahQTcBoD0=) 6: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: JWuyMD5PV7e0Rk1Lsc3w0a6kPng2XMWA35a3+b7eoNE=) 7: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: T5SY7nGUBq6N93Y2VQGjBjoMsDIFs9sEiYiybGCQJmM=) 8: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: P3TSLLO5OHId7p3ClxbnsjagxpNV/CjhrV4sIGmuZo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Aug 2026 16:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6916 (0x1b04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Aug 4 16:51:40 2026 GMT Not After : Aug 11 16:51:40 2026 GMT Subject: CN=6a72189d-4589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a9:b6:6b:10:1a:38:f1:39:e8:24:c2:e1:e7: 9a:ef:9c:23:33:82:bc:a5:11:b2:b1:5f:7e:09:d3: 9c:7f:20:21:a1:a1:d2:e2:ad:15:14:cc:42:b7:ec: 87:90:93:13:ca:b7:8c:dd:50:10:2b:cf:da:63:f1: f3:9a:81:2d:67:03:49:cb:02:ba:3c:2b:d1:ae:53: 91:92:2f:38:93:39:f1:73:0b:f1:66:25:17:14:0e: cb:f7:49:71:5a:85:09:38:f1:d4:03:42:f6:04:fe: 76:04:62:e2:82:a1:a7:5d:7e:ae:92:6c:61:eb:f8: 89:f9:82:e5:f3:88:94:7b:ec:98:ab:3a:3c:a1:32: ad:3b:5c:77:8c:9f:e0:eb:c8:2e:07:9e:80:9b:72: 58:8c:3e:9c:f0:1a:03:e1:54:53:20:68:d6:03:56: 36:e1:76:ca:c0:cf:12:23:45:aa:0c:db:d5:f8:cb: 5d:9d:76:9c:b0:38:32:7b:e9:35:63:d1:c7:c0:4b: ab:b3:df:6a:bc:af:ac:2e:71:7c:0b:1d:0e:23:15: 5c:2f:99:20:fd:d5:da:e3:a8:e8:57:71:a0:0b:1a: 50:85:f8:55:1b:94:32:6a:c8:64:ca:d9:ba:f3:21: 9e:5c:c5:e0:1b:12:7a:6b:31:37:7e:fc:cb:19:4d: 0d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BD:8C:6C:11:3A:5F:92:36:E1:1B:EE:BD:D0:5E:C1:E0:2A:3D:40 X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:a1:0c:9c:5e:a7:99:52:50:09:42:ec:b3:8c:d8:cf:bd:30: ed:b5:00:21:2d:59:b4:01:3a:64:20:2d:56:e1:7b:c7:bd:d6: 44:de:0a:8d:5a:d9:e5:a5:e6:88:58:61:37:bb:d8:7c:fe:db: e5:0a:09:14:f9:13:77:cb:b1:fe:61:9b:ff:89:69:d3:ea:86: e4:88:e2:68:32:8d:92:65:f5:e0:58:77:76:ee:bd:c0:f9:95: 03:96:b6:ff:65:b4:d2:9b:69:33:5e:3c:74:ec:8b:7e:6f:9d: 26:0a:88:92:2c:be:b2:68:1f:f6:92:34:17:c1:8b:38:db:0c: c0:0f:49:a2:13:51:ad:6e:fb:b7:3e:60:ef:75:3a:20:d7:b4: b2:0b:f6:fd:6d:c1:ca:4c:2a:7c:f1:8a:54:57:4a:ac:84:72: 08:00:85:8c:f9:7d:e0:97:ff:5a:c9:0d:74:e7:6d:e2:a4:b6: d5:61:fe:9d:02:28:ec:3d:d3:6b:ac:38:04:4f:c4:01:02:3e: 85:d1:13:aa:02:be:e1:4a:94:01:a0:d0:39:f0:48:f4:37:a2: 30:b8:9d:a7:d9:c1:e9:3f:36:f6:2a:ea:16:b2:81:17:d5:96: 28:65:11:ba:7d:e8:2e:32:ae:0d:a5:92:98:8d:c0:1f:d8:63: b2:47:ea:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjYwODA0MTY1MTQwWhcNMjYwODExMTY1MTQwWjAYMRYwFAYD VQQDEw02YTcyMTg5ZC00NTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsam2axAaOPE56CTC4eea75wjM4K8pRGysV9+CdOcfyAhoaHS4q0VFMxCt+yH kJMTyreM3VAQK8/aY/HzmoEtZwNJywK6PCvRrlORki84kznxcwvxZiUXFA7L90lx WoUJOPHUA0L2BP52BGLigqGnXX6ukmxh6/iJ+YLl84iUe+yYqzo8oTKtO1x3jJ/g 68guB56Am3JYjD6c8BoD4VRTIGjWA1Y24XbKwM8SI0WqDNvV+MtdnXacsDgye+k1 Y9HHwEurs99qvK+sLnF8Cx0OIxVcL5kg/dXa46joV3GgCxpQhfhVG5Qyashkytm6 8yGeXMXgGxJ6azE3fvzLGU0NtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOe9jGwR Ol+SNuEb7r3QXsHgKj1AMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABKEMnF6nmVJQCULss4zYz70w7bUAIS1ZtAE6ZCAtVuF7x73WRN4KjVrZ5aXm iFhhN7vYfP7b5QoJFPkTd8ux/mGb/4lp0+qG5IjiaDKNkmX14Fh3du69wPmVA5a2 /2W00ptpM148dOyLfm+dJgqIkiy+smgf9pI0F8GLONsMwA9JohNRrW77tz5g73U6 INe0sgv2/W3BykwqfPGKVFdKrIRyCACFjPl94Jf/WskNdOdt4qS21WH+nQIo7D3T a6w4BE/EAQI+hdETqgK+4UqUAaDQOfBI9DeiMLidp9nB6T829irqFrKBF9WWKGUR un3oLjKuDaWSmI3AH9hjskfqog== -----END CERTIFICATE-----Generated at Wed Aug 5 08:14:23 2026 by rpki-client