$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: GrLqg8peTfWyrR80kBvMaJfDXHXq1IZT+wtmKVCeShQ= Subject key identifier: 19:EF:3B:40:E2:A2:28:64:62:17:82:82:CD:4F:7D:FB:7D:2E:14:45 Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1B29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 18CB Signing time: Wed 14 Oct 2026 09:15:55 +0000 Manifest this update: Wed 14 Oct 2026 09:15:54 +0000 Manifest next update: Wed 21 Oct 2026 09:15:54 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: mzki7ejNolrjNv3uq8dXWYOxlCTQcbgt42e+oFrrIcM=) 2: D00F9A8643A511F1B04E115C93833773.roa (hash: FH2vfxKCvBSnd3AiGM9xjlDUdLumNRqDqvbQz6AZcvY=) 3: A865A1925B1611F083088661C4F9AE02.roa (hash: UiRna1wKfppY3ae9ceGSJXnsVoB2Dthll1RwPbuAri8=) 4: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: JcJkzKIq/gkKNwsIztAnup4vUjn2mQMxupahQTcBoD0=) 5: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: T/IhfFqluucOcXwihP2EF0WhVb+uxLK2DoiXI1D9r8k=) 6: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: P3TSLLO5OHId7p3ClxbnsjagxpNV/CjhrV4sIGmuZo8=) 7: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: JWuyMD5PV7e0Rk1Lsc3w0a6kPng2XMWA35a3+b7eoNE=) 8: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: T5SY7nGUBq6N93Y2VQGjBjoMsDIFs9sEiYiybGCQJmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 09:15:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6953 (0x1b29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Oct 14 09:15:54 2026 GMT Not After : Oct 21 09:15:54 2026 GMT Subject: CN=6acf484b-ae6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cb:94:0b:82:0d:4a:80:8b:1b:83:aa:26:23: a8:c9:47:cd:d4:3d:d6:d0:e4:60:fa:e5:7e:71:ab: 50:0d:3c:cb:3d:26:15:ea:8e:67:77:1d:a9:52:79: 5d:4f:20:b4:b6:b7:21:b8:ec:84:1d:00:58:7b:25: d0:86:85:b9:b8:4a:1d:99:da:73:b7:1d:d6:98:45: ed:f8:dc:88:b3:62:a2:e8:cf:ba:b6:e0:a8:3b:2f: 84:3d:b8:ec:75:a6:58:ce:37:a6:3a:da:24:9b:f5: 69:6c:10:99:c1:4a:38:3a:b8:e0:0c:94:43:99:ca: de:94:eb:87:fe:85:8f:ab:84:a3:9e:91:52:ee:7b: 6f:eb:75:9c:c6:81:66:9d:6c:f3:87:19:ec:d5:3e: 63:dd:bf:e1:3d:bf:32:08:12:79:76:ac:a4:9c:93: e6:a5:f1:a7:5d:54:37:49:34:3f:93:46:bf:db:68: f4:54:56:14:94:6e:64:cc:b9:f4:12:01:10:7f:c3: aa:4f:70:b6:d3:a2:e3:66:db:b4:26:70:09:6a:84: 62:93:a9:a4:de:e7:7e:1d:a6:10:fd:dd:4b:dd:46: 1a:ab:bb:a0:c2:7b:53:7d:c9:9d:c3:48:ff:ae:9b: 9e:34:d1:a2:df:ec:3a:54:07:33:08:37:ea:9d:70: d2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EF:3B:40:E2:A2:28:64:62:17:82:82:CD:4F:7D:FB:7D:2E:14:45 X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:9d:67:66:d9:63:16:fe:db:83:a3:33:cd:af:59:d9:d5:f9: 65:6e:63:d1:0c:74:59:0f:e7:ab:5e:84:cf:b1:23:50:1c:31: 76:ca:1b:e7:ad:94:f7:73:cc:0e:26:60:9b:f2:85:66:2d:61: 25:c3:91:b8:89:41:a7:80:30:b8:58:e8:b8:9d:9b:aa:d3:45: 89:e1:7b:f8:50:9b:8c:94:8a:44:84:45:ce:cb:7e:4d:1b:3f: 8d:6e:3e:38:9a:e2:f4:e9:2d:3d:2e:38:e7:b9:2e:58:83:bb: 78:40:e3:4e:e8:71:18:de:93:46:24:64:28:99:3c:43:bd:64: b9:08:ef:50:d3:9c:24:9a:ba:bb:6e:79:4c:66:bf:d2:05:95: 3b:8d:34:4c:c5:ce:16:32:74:ae:4f:06:e9:39:27:b3:f6:72: 46:db:f5:30:c3:f0:0c:d0:67:9b:1a:81:00:87:64:3b:94:06: 80:ba:7a:3d:08:4b:f9:41:15:44:5a:3f:8c:2d:d9:a9:1b:52: 9b:d1:dc:7d:ed:1c:ff:ee:a6:98:bf:0f:c7:53:44:78:c6:77: 81:9b:ad:1a:c3:48:3a:94:b5:70:f7:b1:16:cd:07:8f:cc:dc: 68:25:a2:4a:53:17:79:b5:93:4b:a6:2a:74:71:de:c0:b9:f4: 21:0b:1d:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjYxMDE0MDkxNTU0WhcNMjYxMDIxMDkxNTU0WjAYMRYwFAYD VQQDEw02YWNmNDg0Yi1hZTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6cuUC4INSoCLG4OqJiOoyUfN1D3W0ORg+uV+catQDTzLPSYV6o5ndx2pUnld TyC0trchuOyEHQBYeyXQhoW5uEodmdpztx3WmEXt+NyIs2Ki6M+6tuCoOy+EPbjs daZYzjemOtokm/VpbBCZwUo4OrjgDJRDmcrelOuH/oWPq4SjnpFS7ntv63WcxoFm nWzzhxns1T5j3b/hPb8yCBJ5dqyknJPmpfGnXVQ3STQ/k0a/22j0VFYUlG5kzLn0 EgEQf8OqT3C206LjZtu0JnAJaoRik6mk3ud+HaYQ/d1L3UYaq7ugwntTfcmdw0j/ rpueNNGi3+w6VAczCDfqnXDSbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBnvO0Di oihkYheCgs1Pfft9LhRFMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN51nZtljFv7bg6Mzza9Z2dX5ZW5j0Qx0WQ/nq16Ez7EjUBwxdsob562U93PM DiZgm/KFZi1hJcORuIlBp4AwuFjouJ2bqtNFieF7+FCbjJSKRIRFzst+TRs/jW4+ OJri9OktPS4457kuWIO7eEDjTuhxGN6TRiRkKJk8Q71kuQjvUNOcJJq6u255TGa/ 0gWVO400TMXOFjJ0rk8G6Tkns/ZyRtv1MMPwDNBnmxqBAIdkO5QGgLp6PQhL+UEV RFo/jC3ZqRtSm9Hcfe0c/+6mmL8Px1NEeMZ3gZutGsNIOpS1cPexFs0Hj8zcaCWi SlMXebWTS6YqdHHewLn0IQsd+Q== -----END CERTIFICATE-----Generated at Wed Oct 14 15:35:30 2026 by rpki-client