$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: JrCIsDbd9G/64xXrlkavrz57JseTA71nl9wZk3E+ZXE= Subject key identifier: B2:AF:72:A1:FF:0C:E4:54:65:C6:FA:49:E8:24:37:F0:B4:DD:F6:EF Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1AEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 1899 Signing time: Tue 14 Jul 2026 16:51:16 +0000 Manifest this update: Tue 14 Jul 2026 16:51:15 +0000 Manifest next update: Tue 21 Jul 2026 16:51:15 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: qg4YA/1DxwMJ6Fk0TvjXhEVepxOBOJPIn7nzzT16Qjk=) 2: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 4OyLgz5MRwPAxGcF1j5OxwWLAe68/1HWOj58azhiKRQ=) 3: D00F9A8643A511F1B04E115C93833773.roa (hash: QPdt4fsCL2XWpqN3V1Gtq0d4gMm1PZ100Z5/4Fr7hyA=) 4: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: JtaNsAVPLe7G1DcQvRskSfK/91+ur/u1SIY8DTdFa1o=) 5: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: cWhKsGGtwm24L2b24qEiOJQYknotmIIZJa7i5F5KPHg=) 6: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: mAI+w5MJltTPoLHCV1t34FNAjUXQLcbk8DhNQ3Alegw=) 7: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: Br+Yh3Miw3+3u+15blKMFIN8mMQA+4yr6RfTrCX61aY=) 8: A865A1925B1611F083088661C4F9AE02.roa (hash: 2IUNVUDvVcfHXyE54Zp6qTjDmEVqUm9kf4i2mX6/zX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 16:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6894 (0x1aee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Jul 14 16:51:15 2026 GMT Not After : Jul 21 16:51:15 2026 GMT Subject: CN=6a566904-b8ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:17:1a:9d:cb:6b:f9:a8:92:df:72:76:f2:59: b8:a7:a2:92:f6:eb:1e:5d:59:92:d4:0f:96:fc:ef: 0e:10:86:44:e1:00:94:ac:75:14:3d:47:68:03:59: ff:03:72:91:ae:6b:8c:bd:9c:2d:fb:ef:27:1e:6f: 6b:8c:a1:2a:65:2e:fd:49:45:98:96:85:da:0d:c7: 61:b8:f2:1c:cb:9c:a4:17:db:48:bd:a4:30:f9:ef: a9:30:0e:4d:a2:5d:71:1a:26:e0:34:6f:a6:41:3f: 9d:96:59:b2:ce:0c:4d:41:5b:99:2d:0f:21:87:56: 11:78:e5:83:78:7a:94:c4:eb:a9:53:d8:d5:d2:be: 1b:3d:e5:16:3b:d8:6d:79:c3:fe:29:b2:46:34:aa: 65:0c:ea:06:e9:03:bd:a4:3f:80:24:b3:c3:04:87: f5:7d:ab:f9:2b:e4:bc:e1:b9:1e:60:f5:01:aa:dd: 0f:7d:65:5f:86:6d:20:78:4b:89:90:87:63:ff:60: 21:0e:71:c8:2f:27:a0:54:fd:44:c8:c5:16:5e:d1: 3f:5c:a5:52:4c:b3:ea:ed:be:e7:f7:64:2f:13:27: 77:a3:ee:54:a4:3d:fd:cd:66:76:1a:dd:4e:5c:a6: 3f:fa:d9:c8:c8:28:35:6e:c9:6f:9c:b5:46:bc:74: bc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AF:72:A1:FF:0C:E4:54:65:C6:FA:49:E8:24:37:F0:B4:DD:F6:EF X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:3c:09:20:2d:83:33:9b:9c:71:ca:0e:08:6d:21:8d:cd:d0: 64:a3:90:f4:9c:9a:6e:1a:ef:d8:2a:0e:a5:f8:99:b0:b4:3a: d4:30:dd:17:35:7d:57:a5:7b:ea:86:7a:c8:6d:bb:ab:3d:3b: ab:b2:a2:e8:ae:f0:c4:4f:e7:0b:a6:0b:f6:04:f1:76:47:79: c1:6d:fb:7c:1f:60:c8:db:f7:d0:14:16:18:3f:e6:ed:a0:8d: 27:1f:bd:0c:01:8e:64:20:e0:85:fd:20:fb:29:85:6b:a0:6f: 4a:da:fd:6b:db:33:98:0b:24:4d:06:13:f3:d8:4a:f4:f6:29: 87:4f:1b:ae:69:a6:b9:c9:b5:49:7b:c1:26:29:12:70:d0:7c: a1:1e:e9:b2:33:0d:fa:f3:c2:02:65:5a:dc:99:4e:f5:2f:fd: db:da:94:12:1b:b9:bb:d7:7e:30:18:4b:1f:e5:60:24:9f:4f: b6:dd:f3:b4:26:d5:e3:a0:18:30:39:8f:73:2b:db:60:ce:c3: bd:d7:8f:a6:06:aa:b5:00:1d:a6:fb:67:e5:4d:53:bb:9f:d2: b8:8a:08:c6:fb:8a:48:95:df:49:8c:ef:af:66:e9:3f:11:f7: 3c:53:2a:1f:dc:8d:08:8c:a3:e1:ec:d9:ae:4a:53:35:5e:4a: 91:7a:a9:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjYwNzE0MTY1MTE1WhcNMjYwNzIxMTY1MTE1WjAYMRYwFAYD VQQDEw02YTU2NjkwNC1iOGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxcanctr+aiS33J28lm4p6KS9useXVmS1A+W/O8OEIZE4QCUrHUUPUdoA1n/ A3KRrmuMvZwt++8nHm9rjKEqZS79SUWYloXaDcdhuPIcy5ykF9tIvaQw+e+pMA5N ol1xGibgNG+mQT+dllmyzgxNQVuZLQ8hh1YReOWDeHqUxOupU9jV0r4bPeUWO9ht ecP+KbJGNKplDOoG6QO9pD+AJLPDBIf1fav5K+S84bkeYPUBqt0PfWVfhm0geEuJ kIdj/2AhDnHILyegVP1EyMUWXtE/XKVSTLPq7b7n92QvEyd3o+5UpD39zWZ2Gt1O XKY/+tnIyCg1bslvnLVGvHS82QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLKvcqH/ DORUZcb6SegkN/C03fbvMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyzwJIC2DM5ucccoOCG0hjc3QZKOQ9Jyabhrv2CoOpfiZsLQ61DDdFzV9V6V7 6oZ6yG27qz07q7Ki6K7wxE/nC6YL9gTxdkd5wW37fB9gyNv30BQWGD/m7aCNJx+9 DAGOZCDghf0g+ymFa6BvStr9a9szmAskTQYT89hK9PYph08brmmmucm1SXvBJikS cNB8oR7psjMN+vPCAmVa3JlO9S/929qUEhu5u9d+MBhLH+VgJJ9Ptt3ztCbV46AY MDmPcyvbYM7DvdePpgaqtQAdpvtn5U1Tu5/SuIoIxvuKSJXfSYzvr2bpPxH3PFMq H9yNCIyj4ezZrkpTNV5KkXqpsQ== -----END CERTIFICATE-----Generated at Wed Jul 15 07:06:19 2026 by rpki-client