$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: DYYdgzpk6hx0KSwysPIZYwzUP95lD1fiB6fygdaILz4= Subject key identifier: BA:41:47:2D:F8:D2:98:57:BF:54:E4:AD:4C:6E:3F:4B:6A:7E:29:08 Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1B0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 18B2 Signing time: Wed 26 Aug 2026 16:45:28 +0000 Manifest this update: Wed 26 Aug 2026 16:45:28 +0000 Manifest next update: Wed 02 Sep 2026 16:45:28 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: QRoAPVTr8h01dXBIZO0NulYCTn718djowdLVr99iRJw=) 2: D00F9A8643A511F1B04E115C93833773.roa (hash: /5V80aQjqcaZCKHTzBYZIdWUXDquWlftifjg1oCFJfI=) 3: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: T/IhfFqluucOcXwihP2EF0WhVb+uxLK2DoiXI1D9r8k=) 4: A865A1925B1611F083088661C4F9AE02.roa (hash: UiRna1wKfppY3ae9ceGSJXnsVoB2Dthll1RwPbuAri8=) 5: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: T5SY7nGUBq6N93Y2VQGjBjoMsDIFs9sEiYiybGCQJmM=) 6: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: JWuyMD5PV7e0Rk1Lsc3w0a6kPng2XMWA35a3+b7eoNE=) 7: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: P3TSLLO5OHId7p3ClxbnsjagxpNV/CjhrV4sIGmuZo8=) 8: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: JcJkzKIq/gkKNwsIztAnup4vUjn2mQMxupahQTcBoD0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 15:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6927 (0x1b0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Aug 26 16:45:28 2026 GMT Not After : Sep 2 16:45:28 2026 GMT Subject: CN=6a8f1828-daa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e2:96:cc:6d:c2:76:b7:a1:ab:55:af:50:4b: ec:20:31:2f:32:e6:b5:38:91:17:45:f2:36:0d:f4: de:ed:e7:89:d0:06:c3:a5:19:0f:3a:b7:2c:dc:7c: 04:f4:36:27:43:e3:9f:6c:2b:75:4c:98:7e:1c:ee: 46:ca:68:b4:a1:a8:c7:1d:ba:06:19:39:20:fd:87: 84:a1:c6:f5:46:3b:d3:6b:dd:28:7c:0f:36:9d:1e: b8:90:ad:db:07:d4:72:35:12:87:4c:20:4e:ae:a2: ee:1a:07:85:c0:63:62:3f:07:83:3d:80:13:34:07: ad:f6:cb:36:3c:e3:b6:2b:d4:3b:be:84:09:8a:c8: 8a:db:66:4a:57:04:df:ff:f8:e3:34:5a:40:fc:d0: 0a:2c:24:0b:7e:c3:4a:1d:ab:a4:48:d7:53:23:63: f4:41:82:d9:cc:17:bb:1a:e2:c1:21:e9:4e:45:fd: 8b:d1:84:c1:81:7e:13:f1:a0:89:12:09:a8:49:9a: 8d:60:e2:8b:b1:59:14:1a:1f:db:58:b2:3e:72:7a: 81:60:ad:30:2f:32:0b:5a:b6:23:42:fe:99:8d:a9: 38:1d:37:2f:71:20:f3:d2:80:0f:88:89:27:f7:f9: da:3b:15:6a:93:79:23:06:bd:80:97:ac:8f:32:4e: 35:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:41:47:2D:F8:D2:98:57:BF:54:E4:AD:4C:6E:3F:4B:6A:7E:29:08 X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:07:05:2d:cd:ce:61:13:b3:59:72:34:9e:15:40:89:b0:4c: 06:5f:c9:97:d4:e8:e8:c2:97:e3:e1:db:2d:a0:80:d0:fc:21: de:ed:7f:61:e2:ff:17:ea:3c:0d:e0:f6:ae:5f:8c:7d:24:9f: dd:4d:69:50:44:65:64:27:9d:34:ed:7f:66:22:65:03:55:69: c0:16:d9:1e:21:9d:f2:e8:c9:5f:3d:14:e5:dc:86:f7:17:17: 28:a8:ff:b7:9c:30:9d:4d:ca:57:fb:4f:0f:6f:b0:c4:7d:48: 7d:06:61:31:c4:c2:b5:18:ba:71:f9:fe:43:54:d9:62:e4:dc: 67:23:27:a6:53:b8:62:c0:31:9b:6b:3f:9a:07:d3:9f:06:74: 15:e5:ec:fd:b0:a1:6f:67:96:79:61:b3:dc:f8:76:54:e5:e0: 14:33:a5:a6:c9:21:1f:6d:8e:62:c4:3f:fa:98:db:63:83:f6: 6d:64:e7:5d:12:67:cd:7e:65:72:db:45:12:31:b4:89:fc:cc: 6b:3e:72:e1:cb:f1:30:d5:42:70:d1:bd:a8:c7:9e:a0:78:aa: 27:e1:4c:d7:da:f7:01:06:0e:a4:b2:5d:94:23:24:15:c2:17: d8:20:77:c9:c6:d5:64:16:85:b4:74:06:b5:2b:dd:3b:06:10: 92:db:23:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjYwODI2MTY0NTI4WhcNMjYwOTAyMTY0NTI4WjAYMRYwFAYD VQQDEw02YThmMTgyOC1kYWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+KWzG3Cdrehq1WvUEvsIDEvMua1OJEXRfI2DfTe7eeJ0AbDpRkPOrcs3HwE 9DYnQ+OfbCt1TJh+HO5Gymi0oajHHboGGTkg/YeEocb1RjvTa90ofA82nR64kK3b B9RyNRKHTCBOrqLuGgeFwGNiPweDPYATNAet9ss2POO2K9Q7voQJisiK22ZKVwTf //jjNFpA/NAKLCQLfsNKHaukSNdTI2P0QYLZzBe7GuLBIelORf2L0YTBgX4T8aCJ EgmoSZqNYOKLsVkUGh/bWLI+cnqBYK0wLzILWrYjQv6Zjak4HTcvcSDz0oAPiIkn 9/naOxVqk3kjBr2Al6yPMk41TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLpBRy34 0phXv1TkrUxuP0tqfikIMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVQcFLc3OYROzWXI0nhVAibBMBl/Jl9To6MKX4+HbLaCA0Pwh3u1/YeL/F+o8 DeD2rl+MfSSf3U1pUERlZCedNO1/ZiJlA1VpwBbZHiGd8ujJXz0U5dyG9xcXKKj/ t5wwnU3KV/tPD2+wxH1IfQZhMcTCtRi6cfn+Q1TZYuTcZyMnplO4YsAxm2s/mgfT nwZ0FeXs/bChb2eWeWGz3Ph2VOXgFDOlpskhH22OYsQ/+pjbY4P2bWTnXRJnzX5l cttFEjG0ifzMaz5y4cvxMNVCcNG9qMeeoHiqJ+FM19r3AQYOpLJdlCMkFcIX2CB3 ycbVZBaFtHQGtSvdOwYQktsj9A== -----END CERTIFICATE-----Generated at Wed Aug 26 18:58:37 2026 by rpki-client