$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: Q8zUzQ5AsTpksgLps640x0kgT6ycOVsrKNmHbLXQHWg= Subject key identifier: 1D:D3:82:B4:78:A6:18:71:F9:B2:2E:AF:77:4B:E9:81:09:60:FF:2B Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1B20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 18C3 Signing time: Mon 28 Sep 2026 16:50:59 +0000 Manifest this update: Mon 28 Sep 2026 16:50:59 +0000 Manifest next update: Mon 05 Oct 2026 16:50:59 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: 7LXVBRC2BnBmb9fco3sYi9Y4fbjOUAKzOqOaaExAztQ=) 2: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: T/IhfFqluucOcXwihP2EF0WhVb+uxLK2DoiXI1D9r8k=) 3: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: T5SY7nGUBq6N93Y2VQGjBjoMsDIFs9sEiYiybGCQJmM=) 4: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: JWuyMD5PV7e0Rk1Lsc3w0a6kPng2XMWA35a3+b7eoNE=) 5: A865A1925B1611F083088661C4F9AE02.roa (hash: UiRna1wKfppY3ae9ceGSJXnsVoB2Dthll1RwPbuAri8=) 6: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: P3TSLLO5OHId7p3ClxbnsjagxpNV/CjhrV4sIGmuZo8=) 7: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: JcJkzKIq/gkKNwsIztAnup4vUjn2mQMxupahQTcBoD0=) 8: D00F9A8643A511F1B04E115C93833773.roa (hash: /5V80aQjqcaZCKHTzBYZIdWUXDquWlftifjg1oCFJfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 16:50:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6944 (0x1b20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Sep 28 16:50:59 2026 GMT Not After : Oct 5 16:50:59 2026 GMT Subject: CN=6aba9af3-4beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f6:77:7f:74:a2:57:ef:f9:e1:c8:0c:f1:95: 5f:e2:5a:f7:39:2f:44:d5:23:78:b6:83:15:5b:63: 12:5c:93:8d:29:03:8d:69:86:67:88:94:30:7b:70: e8:c2:62:ea:d8:af:76:17:7c:88:b4:a1:40:d2:05: ef:18:b1:be:01:8b:8f:d6:9b:68:b3:dc:9f:21:94: 05:fd:e6:e8:05:37:c6:d7:b7:3b:d7:6b:9b:db:de: b9:3a:12:ba:f3:39:5b:6a:bf:6e:ab:cf:6c:e9:67: eb:0f:ee:81:66:8e:9a:09:8e:34:7c:3c:41:eb:cb: 05:fb:b4:d3:b8:13:74:0f:4f:da:61:ba:84:f0:ea: f7:42:18:9a:ce:bc:e1:c5:87:af:74:f4:3c:f8:eb: 0e:13:6e:d0:53:82:1c:1e:3b:1a:9b:bf:49:03:69: 39:d9:e2:c4:d1:fa:62:6a:25:3d:9c:1f:5c:48:50: fd:e6:a4:10:89:af:3f:c5:3a:92:75:5a:16:fa:e2: ed:35:5a:a4:54:14:be:f8:0b:6f:e1:86:63:f1:6c: 0c:f6:59:9f:2f:de:5c:4c:d8:6d:f8:90:4e:cd:21: 6a:b4:ae:92:c9:24:5c:ca:df:09:b6:78:3d:89:8d: 61:ba:ba:e0:61:72:ab:61:8e:75:11:db:b3:e3:cd: cb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D3:82:B4:78:A6:18:71:F9:B2:2E:AF:77:4B:E9:81:09:60:FF:2B X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:8c:56:14:a7:12:36:75:4c:90:02:f2:8a:45:47:7b:42:3c: f6:75:80:df:1d:4b:ee:6c:ec:f8:da:5f:73:9c:7d:97:95:9d: fd:7d:6c:d1:6a:b0:56:99:98:99:c9:cb:02:2a:ea:b4:fd:37: cd:2a:28:25:2b:ea:25:21:83:c7:cf:86:dc:89:f4:7a:fa:34: 32:f2:b2:d6:df:f9:e0:5a:34:61:1f:be:b5:4a:a9:6d:10:89: 79:80:ad:89:6d:15:fd:ef:98:6a:35:00:a3:ec:f8:f0:80:03: df:8d:b7:8c:9f:4c:52:e1:81:98:fb:5d:b9:24:cf:f2:5a:d0: aa:8f:ec:16:fb:62:6a:53:9d:cb:76:00:d4:f7:f8:aa:4f:77: de:48:04:13:54:0c:20:bf:c3:ef:cf:94:e7:16:23:d5:ec:89: ad:09:b2:e4:cd:cc:d8:a1:4c:35:30:fe:a9:ee:fa:e3:5a:f3: 71:35:c2:75:2d:cd:9f:7c:85:62:1d:2b:99:7b:22:12:9a:66: 03:0f:1b:5e:b3:37:20:b0:12:e8:fd:e8:df:a6:41:72:0b:2e: 64:e2:07:6c:2e:5e:1d:ed:73:22:be:74:3e:1e:69:56:df:74: c6:03:c7:d8:ec:2f:a0:ed:5c:f8:5f:56:48:e5:93:49:8b:27: e9:3b:a6:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjYwOTI4MTY1MDU5WhcNMjYxMDA1MTY1MDU5WjAYMRYwFAYD VQQDEw02YWJhOWFmMy00YmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmvZ3f3SiV+/54cgM8ZVf4lr3OS9E1SN4toMVW2MSXJONKQONaYZniJQwe3Do wmLq2K92F3yItKFA0gXvGLG+AYuP1ptos9yfIZQF/eboBTfG17c712ub2965OhK6 8zlbar9uq89s6WfrD+6BZo6aCY40fDxB68sF+7TTuBN0D0/aYbqE8Or3Qhiazrzh xYevdPQ8+OsOE27QU4IcHjsam79JA2k52eLE0fpiaiU9nB9cSFD95qQQia8/xTqS dVoW+uLtNVqkVBS++Atv4YZj8WwM9lmfL95cTNht+JBOzSFqtK6SySRcyt8Jtng9 iY1hurrgYXKrYY51Eduz483LcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB3TgrR4 phhx+bIur3dL6YEJYP8rMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD4xWFKcSNnVMkALyikVHe0I89nWA3x1L7mzs+Npfc5x9l5Wd/X1s0WqwVpmY mcnLAirqtP03zSooJSvqJSGDx8+G3In0evo0MvKy1t/54Fo0YR++tUqpbRCJeYCt iW0V/e+YajUAo+z48IAD3423jJ9MUuGBmPtduSTP8lrQqo/sFvtialOdy3YA1Pf4 qk933kgEE1QMIL/D78+U5xYj1eyJrQmy5M3M2KFMNTD+qe7641rzcTXCdS3Nn3yF Yh0rmXsiEppmAw8bXrM3ILAS6P3o36ZBcgsuZOIHbC5eHe1zIr50Ph5pVt90xgPH 2OwvoO1c+F9WSOWTSYsn6Tum1A== -----END CERTIFICATE-----Generated at Tue Sep 29 02:47:08 2026 by rpki-client