$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: zGAojqmIUoH4GBJwhjT83ETksgfsywuoP1LAreqgBEU= Subject key identifier: 6A:09:46:9B:0C:14:D9:D9:34:7E:0E:FA:2F:5A:4A:CF:E3:06:C1:18 Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1B0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 18B1 Signing time: Mon 24 Aug 2026 16:44:40 +0000 Manifest this update: Mon 24 Aug 2026 16:44:39 +0000 Manifest next update: Mon 31 Aug 2026 16:44:39 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: VvFZV7pdfojYKUS8f9K6q1zIW5Z5xYMAhdVja/NcEms=) 2: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: T/IhfFqluucOcXwihP2EF0WhVb+uxLK2DoiXI1D9r8k=) 3: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: JWuyMD5PV7e0Rk1Lsc3w0a6kPng2XMWA35a3+b7eoNE=) 4: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: T5SY7nGUBq6N93Y2VQGjBjoMsDIFs9sEiYiybGCQJmM=) 5: D00F9A8643A511F1B04E115C93833773.roa (hash: /5V80aQjqcaZCKHTzBYZIdWUXDquWlftifjg1oCFJfI=) 6: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: JcJkzKIq/gkKNwsIztAnup4vUjn2mQMxupahQTcBoD0=) 7: A865A1925B1611F083088661C4F9AE02.roa (hash: UiRna1wKfppY3ae9ceGSJXnsVoB2Dthll1RwPbuAri8=) 8: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: P3TSLLO5OHId7p3ClxbnsjagxpNV/CjhrV4sIGmuZo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 16:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6926 (0x1b0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Aug 24 16:44:39 2026 GMT Not After : Aug 31 16:44:39 2026 GMT Subject: CN=6a8c74f8-c687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:90:32:73:ea:ad:f4:41:3b:74:1c:3b:d8: f0:00:c6:62:cc:ec:cc:0c:71:a7:8d:5d:12:a6:ea: 39:57:eb:b9:26:55:0e:7e:07:5c:31:0b:76:cb:e7: 4c:8e:2a:ea:9f:99:d8:39:32:fa:71:66:a8:dd:76: b9:45:5a:ce:64:c3:6c:c7:6b:4f:3b:0a:d6:ec:5a: fd:0d:97:12:07:6b:1d:22:43:9e:6d:d0:98:34:98: 6e:09:fe:a1:52:8c:5e:05:70:ba:3a:4a:c8:75:2f: 65:d6:29:4a:4a:51:3f:97:49:77:0b:22:57:05:86: b4:33:75:64:7c:7c:be:00:f8:4b:b6:3b:18:38:8f: 14:ec:7e:0e:35:d0:10:3e:f0:bd:f8:52:f9:9a:77: c5:b0:96:65:5c:f7:03:0c:df:15:04:83:b2:e9:44: be:9d:99:86:4a:0c:34:f8:b1:43:86:34:92:fd:ed: 6d:f8:a3:ce:4f:2a:ff:05:8a:3c:d8:f1:b1:d7:e6: 5f:68:e6:5d:bd:b5:b6:cf:52:4a:7c:9e:09:35:f8: 66:3f:85:4b:e4:22:f9:44:b0:a3:15:ec:b5:b9:d2: 61:3a:8c:d3:a5:4e:80:51:50:a1:8a:b4:76:90:05: 8f:ff:2c:52:2b:87:61:d5:f2:17:38:f4:d7:c0:70: 29:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:09:46:9B:0C:14:D9:D9:34:7E:0E:FA:2F:5A:4A:CF:E3:06:C1:18 X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ea:ea:cc:06:5d:b4:f7:3f:1f:6e:86:5d:39:3a:28:8a:4b: 72:37:8b:0a:0d:e9:3b:a6:e9:58:1c:d2:e5:60:d2:09:b9:45: 94:eb:84:6c:b5:43:0b:64:73:45:b6:61:52:07:6c:b1:2d:5b: 78:d5:58:b9:3b:ed:98:14:04:a7:03:8e:3d:f2:34:64:d1:45: 85:c6:51:97:a7:61:9b:97:1f:02:5e:f4:48:f9:df:bd:cd:92: c7:1e:ae:d2:4f:c6:5d:98:33:68:1b:53:5b:9c:43:f9:0d:0b: b1:d3:d6:b6:33:41:5c:3d:df:94:ed:00:56:5f:28:a1:59:5c: e6:58:ac:b3:98:66:88:07:47:d0:bc:a0:6c:b7:2d:a8:f2:d4: 03:71:d1:c7:2d:c3:61:a3:1a:59:9f:05:9a:26:42:e3:80:d7: 1c:8b:21:e4:90:c0:35:2a:07:dd:96:22:bb:5b:95:9e:15:d1: 7f:de:98:20:24:48:00:56:99:1f:a9:a1:8a:cd:e8:63:5b:56: 61:4d:8e:47:8f:99:49:30:5f:23:77:83:f2:31:e6:1d:bb:c9: 4c:3f:2f:19:6b:57:57:21:d4:40:05:a3:51:3f:b8:52:6d:27: 19:0b:36:17:b1:ed:6a:00:b4:4f:79:35:b7:d1:7d:dc:97:6f: 4b:3b:a7:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjYwODI0MTY0NDM5WhcNMjYwODMxMTY0NDM5WjAYMRYwFAYD VQQDEw02YThjNzRmOC1jNjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3SQMnPqrfRBO3QcO9jwAMZizOzMDHGnjV0Spuo5V+u5JlUOfgdcMQt2y+dM jirqn5nYOTL6cWao3Xa5RVrOZMNsx2tPOwrW7Fr9DZcSB2sdIkOebdCYNJhuCf6h UoxeBXC6OkrIdS9l1ilKSlE/l0l3CyJXBYa0M3VkfHy+APhLtjsYOI8U7H4ONdAQ PvC9+FL5mnfFsJZlXPcDDN8VBIOy6US+nZmGSgw0+LFDhjSS/e1t+KPOTyr/BYo8 2PGx1+ZfaOZdvbW2z1JKfJ4JNfhmP4VL5CL5RLCjFey1udJhOozTpU6AUVChirR2 kAWP/yxSK4dh1fIXOPTXwHApeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGoJRpsM FNnZNH4O+i9aSs/jBsEYMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADurqzAZdtPc/H26GXTk6KIpLcjeLCg3pO6bpWBzS5WDSCblFlOuEbLVDC2Rz RbZhUgdssS1beNVYuTvtmBQEpwOOPfI0ZNFFhcZRl6dhm5cfAl70SPnfvc2Sxx6u 0k/GXZgzaBtTW5xD+Q0LsdPWtjNBXD3flO0AVl8ooVlc5liss5hmiAdH0LygbLct qPLUA3HRxy3DYaMaWZ8FmiZC44DXHIsh5JDANSoH3ZYiu1uVnhXRf96YICRIAFaZ H6mhis3oY1tWYU2OR4+ZSTBfI3eD8jHmHbvJTD8vGWtXVyHUQAWjUT+4Um0nGQs2 F7HtagC0T3k1t9F93JdvSzunJA== -----END CERTIFICATE-----Generated at Mon Aug 24 23:42:39 2026 by rpki-client