$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: DqRce8FvMWGulhG2y+s6+ccPyUoC+ef2P+hlStGFglU= Subject key identifier: CC:3B:35:4F:43:04:D9:E5:E5:4A:55:C0:46:15:58:01:22:63:C6:1F Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1AB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 186B Signing time: Thu 14 May 2026 16:49:14 +0000 Manifest this update: Thu 14 May 2026 16:49:14 +0000 Manifest next update: Thu 21 May 2026 16:49:14 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: CFddry0fPBn/e0a6JmdhI1m1Hlckow8H/aKEHIPhQhw=) 2: A865A1925B1611F083088661C4F9AE02.roa (hash: 2IUNVUDvVcfHXyE54Zp6qTjDmEVqUm9kf4i2mX6/zX4=) 3: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: JtaNsAVPLe7G1DcQvRskSfK/91+ur/u1SIY8DTdFa1o=) 4: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: Br+Yh3Miw3+3u+15blKMFIN8mMQA+4yr6RfTrCX61aY=) 5: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: mAI+w5MJltTPoLHCV1t34FNAjUXQLcbk8DhNQ3Alegw=) 6: D00F9A8643A511F1B04E115C93833773.roa (hash: rionXwpXZ+/YYBbbDrBSeSCU1qvo6PxZ4O4oo+eeuvE=) 7: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 4OyLgz5MRwPAxGcF1j5OxwWLAe68/1HWOj58azhiKRQ=) 8: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: cWhKsGGtwm24L2b24qEiOJQYknotmIIZJa7i5F5KPHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 21 May 2026 16:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6833 (0x1ab1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: May 14 16:49:14 2026 GMT Not After : May 21 16:49:14 2026 GMT Subject: CN=6a05fd0a-a616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e6:55:8b:39:2e:ff:82:c1:2d:78:4a:23:b8: c7:4f:db:c9:05:86:a7:4a:79:2e:0b:82:4b:df:b3: 93:4e:1a:57:57:37:bc:80:fd:f4:2c:dd:f8:31:eb: 78:44:22:ea:2e:35:50:03:f7:18:2d:11:70:39:10: 84:e2:b2:15:1e:40:6d:e7:55:33:80:68:43:58:23: cf:14:17:4a:37:63:8d:07:64:6c:10:be:de:45:ee: 27:6e:b4:0c:73:5d:48:31:cb:25:b6:2c:43:9f:f7: 7b:0c:ba:fd:13:24:fd:0e:54:3e:9f:c8:30:67:f6: 42:b5:df:71:ed:94:40:ec:2d:ee:4e:af:0f:e1:0f: 29:04:79:c7:48:67:99:d4:85:62:7c:c3:13:37:9a: fa:dc:02:44:a2:61:2c:f6:e9:76:c6:c7:d3:69:79: db:67:47:be:ac:94:00:fc:06:95:00:35:26:33:0b: c1:8f:38:7b:83:e7:58:f2:9e:63:10:2c:4f:31:1a: b7:b8:e2:7a:36:7c:4d:49:c8:86:b5:09:f5:16:df: 67:bc:cc:5e:a9:81:73:9f:79:58:16:fb:e9:ad:6c: 12:18:53:ca:03:e0:b3:e5:4c:2c:0d:e7:77:1a:d6: 7d:0a:20:d1:f6:e9:83:96:0d:98:b1:e9:21:3b:12: a9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3B:35:4F:43:04:D9:E5:E5:4A:55:C0:46:15:58:01:22:63:C6:1F X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:05:98:f7:c0:a9:2a:32:66:cb:c4:2e:b5:9b:e3:10:71:7e: fa:bc:97:c2:d3:62:2a:0f:95:9b:a1:be:e1:c3:31:d3:1e:5f: 4d:c0:c3:11:98:3e:d0:73:56:6b:26:6b:4c:bf:d7:f6:de:27: 12:28:d7:c4:e5:8e:d5:f9:ca:f3:44:bf:2a:97:39:16:c1:02: 61:06:2f:cb:60:51:f2:2b:8c:82:d5:77:69:d0:45:6c:6f:b5: 63:9a:db:36:9a:f5:42:af:7e:6f:1a:48:46:d0:39:40:36:cd: 11:ff:f8:37:e4:a2:e6:a3:aa:9d:70:d3:42:ce:b3:b4:8e:61: 46:e7:a4:26:15:89:66:e2:42:7c:f8:04:c0:a9:d5:64:8b:c9: 04:bb:cd:59:2e:98:41:11:5b:a1:52:99:3b:38:6b:92:f8:82: 30:2a:a0:4e:dd:e5:91:66:8c:0f:b9:84:6a:9f:3e:08:a6:0c: a1:67:04:8e:b8:fa:60:8e:a7:f2:f3:8e:70:9d:53:a8:fc:f5: f9:47:54:9b:19:51:ab:de:46:f0:bd:ca:1e:de:e6:21:c4:f6: 1c:2e:46:dd:a9:c0:5d:93:c2:78:13:76:43:99:80:92:e9:0d: 92:c4:56:ca:a2:5a:50:cb:08:78:46:f8:30:c4:34:bb:f9:f4: 7d:3c:20:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjYwNTE0MTY0OTE0WhcNMjYwNTIxMTY0OTE0WjAYMRYwFAYD VQQDEw02YTA1ZmQwYS1hNjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmuZVizku/4LBLXhKI7jHT9vJBYanSnkuC4JL37OTThpXVze8gP30LN34Met4 RCLqLjVQA/cYLRFwORCE4rIVHkBt51UzgGhDWCPPFBdKN2ONB2RsEL7eRe4nbrQM c11IMcsltixDn/d7DLr9EyT9DlQ+n8gwZ/ZCtd9x7ZRA7C3uTq8P4Q8pBHnHSGeZ 1IVifMMTN5r63AJEomEs9ul2xsfTaXnbZ0e+rJQA/AaVADUmMwvBjzh7g+dY8p5j ECxPMRq3uOJ6NnxNSciGtQn1Ft9nvMxeqYFzn3lYFvvprWwSGFPKA+Cz5UwsDed3 GtZ9CiDR9umDlg2YsekhOxKpzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMw7NU9D BNnl5UpVwEYVWAEiY8YfMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgAWY98CpKjJmy8QutZvjEHF++ryXwtNiKg+Vm6G+4cMx0x5fTcDDEZg+0HNW ayZrTL/X9t4nEijXxOWO1fnK80S/Kpc5FsECYQYvy2BR8iuMgtV3adBFbG+1Y5rb Npr1Qq9+bxpIRtA5QDbNEf/4N+Si5qOqnXDTQs6ztI5hRuekJhWJZuJCfPgEwKnV ZIvJBLvNWS6YQRFboVKZOzhrkviCMCqgTt3lkWaMD7mEap8+CKYMoWcEjrj6YI6n 8vOOcJ1TqPz1+UdUmxlRq95G8L3KHt7mIcT2HC5G3anAXZPCeBN2Q5mAkukNksRW yqJaUMsIeEb4MMQ0u/n0fTwg2w== -----END CERTIFICATE-----Generated at Fri May 15 07:51:06 2026 by rpki-client