$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: 1PZ6ltRVS0zgsXIC/O0Q6mEjVi96nCPigx4Km/9+ePk= Subject key identifier: B7:48:7F:4B:94:DF:F7:44:C5:31:B5:7E:3A:62:3B:41:92:82:04:DE Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1AF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 189F Signing time: Sun 26 Jul 2026 16:56:36 +0000 Manifest this update: Sun 26 Jul 2026 16:56:36 +0000 Manifest next update: Sun 02 Aug 2026 16:56:36 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: scloBLN1nntFmlx2ZE5Z8asaa1sR99WjlJwUgKIjp3E=) 2: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: mAI+w5MJltTPoLHCV1t34FNAjUXQLcbk8DhNQ3Alegw=) 3: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 4OyLgz5MRwPAxGcF1j5OxwWLAe68/1HWOj58azhiKRQ=) 4: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: cWhKsGGtwm24L2b24qEiOJQYknotmIIZJa7i5F5KPHg=) 5: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: JtaNsAVPLe7G1DcQvRskSfK/91+ur/u1SIY8DTdFa1o=) 6: D00F9A8643A511F1B04E115C93833773.roa (hash: QPdt4fsCL2XWpqN3V1Gtq0d4gMm1PZ100Z5/4Fr7hyA=) 7: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: Br+Yh3Miw3+3u+15blKMFIN8mMQA+4yr6RfTrCX61aY=) 8: A865A1925B1611F083088661C4F9AE02.roa (hash: 2IUNVUDvVcfHXyE54Zp6qTjDmEVqUm9kf4i2mX6/zX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 16:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6900 (0x1af4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Jul 26 16:56:36 2026 GMT Not After : Aug 2 16:56:36 2026 GMT Subject: CN=6a663c44-b79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fc:9d:56:62:7e:22:1e:4e:eb:e7:5e:13:2b: dc:eb:fc:03:ee:47:21:ff:02:07:2a:34:2b:06:0b: 6d:03:9b:f6:68:ce:68:e8:02:22:55:ca:c9:9f:8f: 87:98:50:c5:41:d9:d4:9a:3e:43:d2:e7:91:a0:00: 31:30:67:71:70:5b:f0:e2:81:c0:62:13:66:4f:a0: 8e:99:c6:f1:ad:1f:aa:64:4e:22:34:bc:05:fe:da: ed:06:78:24:4b:79:17:59:cc:ef:12:da:13:dd:6f: e6:9e:3e:03:0c:5d:bd:c4:06:3f:66:5f:b8:e6:1f: 8a:28:97:98:eb:da:16:b5:2a:f1:09:ce:03:c6:c1: 2b:0c:9e:96:b4:9b:8c:97:f7:95:12:f4:8e:28:bf: 9e:21:85:bc:83:36:b3:f5:9c:8b:a6:e7:31:b6:54: b1:ee:4f:a6:a2:d6:56:24:ce:87:10:35:bd:b8:d8: bd:ea:0f:2d:be:a3:d7:ce:2a:f7:40:81:70:87:9f: cf:7b:5a:d0:c8:1f:72:d5:a2:ac:50:1a:25:5a:c1: d3:55:b8:b2:66:fc:4c:e3:8e:9c:2e:5a:f5:96:c3: 27:e6:86:42:60:1f:67:54:3b:39:9f:74:0b:d1:d9: da:b0:18:29:9b:a6:58:42:82:4b:0c:e2:ca:f8:1c: 78:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:48:7F:4B:94:DF:F7:44:C5:31:B5:7E:3A:62:3B:41:92:82:04:DE X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:95:ea:80:a1:c4:f6:09:2d:ed:00:61:68:de:d1:31:bb:75: 67:01:72:30:8b:4d:6d:84:27:ff:29:3c:9f:e5:12:63:c1:c5: cc:70:c8:9d:f1:8e:f3:9f:f9:c5:9a:1e:34:d0:f4:2b:95:7d: 96:96:b1:bd:e0:67:18:60:31:6b:64:13:a7:1e:db:64:9b:63: 36:50:01:5c:2e:67:b2:f4:38:83:33:5f:67:f3:55:24:18:17: ec:4e:53:76:12:b3:6d:4b:3f:36:0a:44:71:58:38:77:3f:76: 8f:ed:06:82:01:05:2e:a4:44:7c:60:3d:f8:04:01:1c:b0:7f: 77:38:48:be:c2:34:2d:30:ed:27:bd:78:15:4d:0a:64:db:e2: dd:4f:86:02:4f:22:72:dd:d6:22:92:56:1f:14:7b:d8:e1:0b: e0:a6:7c:31:4d:bb:24:59:df:0c:72:8f:b5:94:cf:b7:d8:b5: e2:46:88:93:e3:0d:44:a2:17:4d:02:22:f2:86:e5:eb:57:b6: 1a:be:44:09:47:5b:dd:cc:da:85:3e:2e:fc:63:7d:25:e7:47: c9:e0:f0:e9:3f:ce:9a:4a:44:51:c8:88:8f:c6:57:bd:83:47: 41:91:d6:70:11:d0:d7:e7:f7:e2:c0:1f:35:4f:9b:cf:2b:e0: fd:fe:ce:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjYwNzI2MTY1NjM2WhcNMjYwODAyMTY1NjM2WjAYMRYwFAYD VQQDEw02YTY2M2M0NC1iNzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgfydVmJ+Ih5O6+deEyvc6/wD7kch/wIHKjQrBgttA5v2aM5o6AIiVcrJn4+H mFDFQdnUmj5D0ueRoAAxMGdxcFvw4oHAYhNmT6COmcbxrR+qZE4iNLwF/trtBngk S3kXWczvEtoT3W/mnj4DDF29xAY/Zl+45h+KKJeY69oWtSrxCc4DxsErDJ6WtJuM l/eVEvSOKL+eIYW8gzaz9ZyLpucxtlSx7k+motZWJM6HEDW9uNi96g8tvqPXzir3 QIFwh5/Pe1rQyB9y1aKsUBolWsHTVbiyZvxM446cLlr1lsMn5oZCYB9nVDs5n3QL 0dnasBgpm6ZYQoJLDOLK+Bx4oQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLdIf0uU 3/dExTG1fjpiO0GSggTeMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcJXqgKHE9gkt7QBhaN7RMbt1ZwFyMItNbYQn/yk8n+USY8HFzHDInfGO85/5 xZoeNND0K5V9lpaxveBnGGAxa2QTpx7bZJtjNlABXC5nsvQ4gzNfZ/NVJBgX7E5T dhKzbUs/NgpEcVg4dz92j+0GggEFLqREfGA9+AQBHLB/dzhIvsI0LTDtJ714FU0K ZNvi3U+GAk8ict3WIpJWHxR72OEL4KZ8MU27JFnfDHKPtZTPt9i14kaIk+MNRKIX TQIi8obl61e2Gr5ECUdb3czahT4u/GN9JedHyeDw6T/OmkpEUciIj8ZXvYNHQZHW cBHQ1+f34sAfNU+bzyvg/f7OBQ== -----END CERTIFICATE-----Generated at Mon Jul 27 18:49:20 2026 by rpki-client