$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: iKMumefOCp9DpD505WCBXi5G2kj2XY6jB+hRRThDP4M= Subject key identifier: 92:36:A8:36:82:3D:B6:53:FF:CE:E3:E8:D3:B2:0C:10:F0:0C:B9:5E Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1B15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 18B8 Signing time: Sun 06 Sep 2026 16:43:48 +0000 Manifest this update: Sun 06 Sep 2026 16:43:47 +0000 Manifest next update: Sun 13 Sep 2026 16:43:47 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: Us9bzlzIA5k629LlNToF2Vg05V3SPkZHxAF4UFYu9Ao=) 2: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: JWuyMD5PV7e0Rk1Lsc3w0a6kPng2XMWA35a3+b7eoNE=) 3: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: T5SY7nGUBq6N93Y2VQGjBjoMsDIFs9sEiYiybGCQJmM=) 4: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: T/IhfFqluucOcXwihP2EF0WhVb+uxLK2DoiXI1D9r8k=) 5: D00F9A8643A511F1B04E115C93833773.roa (hash: /5V80aQjqcaZCKHTzBYZIdWUXDquWlftifjg1oCFJfI=) 6: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: P3TSLLO5OHId7p3ClxbnsjagxpNV/CjhrV4sIGmuZo8=) 7: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: JcJkzKIq/gkKNwsIztAnup4vUjn2mQMxupahQTcBoD0=) 8: A865A1925B1611F083088661C4F9AE02.roa (hash: UiRna1wKfppY3ae9ceGSJXnsVoB2Dthll1RwPbuAri8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 16:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6933 (0x1b15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Sep 6 16:43:47 2026 GMT Not After : Sep 13 16:43:47 2026 GMT Subject: CN=6a9d9844-ca09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e0:37:74:f0:71:c9:02:7c:ff:8b:cc:7f:e2: c4:98:a9:21:94:a1:46:46:d4:26:6f:9b:ac:85:0c: e3:5d:e1:77:c3:f3:e2:14:91:6c:8f:31:3d:37:7d: 55:e2:b0:5a:90:f0:a3:c2:15:37:b9:9b:d6:75:c4: 93:bd:75:ab:a0:c8:36:8f:e5:5f:ec:ea:25:8d:eb: 2d:5a:c0:8a:9d:70:12:12:e9:b2:db:85:fa:38:02: 47:0e:8a:92:fe:67:d7:7e:c7:bb:cd:30:d6:7e:96: 5c:2a:c7:15:d4:d4:10:76:4b:21:9e:b7:17:98:32: 2b:8c:b9:04:0d:f2:c8:ea:6f:bd:9e:fb:6e:d1:84: 14:1a:47:d1:94:1e:0b:e2:32:50:75:34:67:0a:16: 94:2a:c6:16:d8:8b:0d:57:cc:ac:c7:bc:f9:ce:b2: e1:b9:8d:07:27:52:63:ef:0f:f3:e3:8e:94:c8:3f: 3e:e9:af:da:2d:66:62:c2:0a:67:9a:38:80:d3:71: 62:1e:0e:1f:8b:f0:0a:c0:14:23:ed:ab:ca:4c:cc: 5a:22:1d:eb:73:c0:70:e1:a5:b9:51:71:d8:ed:de: 2f:af:a6:fb:00:44:3f:c0:90:ee:7e:0c:76:ef:10: 4a:bb:d2:5b:b9:34:63:dd:6a:50:fd:db:07:7c:ea: 1b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:36:A8:36:82:3D:B6:53:FF:CE:E3:E8:D3:B2:0C:10:F0:0C:B9:5E X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:b8:82:22:a3:97:cc:46:b2:01:ee:84:0f:83:cd:02:03:f2: d3:30:2f:58:0f:18:2f:a3:d7:58:01:ac:b1:41:cd:4d:c7:af: 5f:30:b2:a2:1d:97:0b:82:20:ee:77:77:89:b6:bc:33:64:fe: bc:be:b0:6f:07:be:75:01:48:11:a6:44:75:b6:9d:39:b3:b5: ca:2d:19:7c:d2:76:73:29:43:e2:9b:a1:86:b2:cb:78:36:36: 9f:85:10:5c:bb:93:ba:b2:90:94:83:05:ed:f9:20:aa:1b:fd: 54:b4:b8:d7:f9:d6:a3:5f:72:8e:af:ef:72:b7:28:42:4d:97: 73:36:90:41:2e:da:06:bb:5d:1a:c3:11:8f:6a:70:c2:ff:f9: 3f:93:ab:72:60:8d:d0:59:ba:95:cd:f5:18:12:91:26:08:38: 3f:2c:df:8d:0d:0f:ea:f8:ce:0e:a9:0b:01:a8:a1:5b:1f:dc: fc:7a:98:6e:58:0f:bd:44:01:27:d8:21:f9:d3:eb:f5:cf:7f: 07:ab:cd:e6:d7:8a:33:c2:e1:37:9d:1a:46:5c:93:10:a5:5e: 20:52:9d:fd:ab:c7:ca:11:a7:a2:5d:c2:1e:11:1d:cf:df:6b: 7d:9f:e9:28:d9:77:d2:b4:2c:61:82:c3:e7:c5:92:2b:19:d4: 7a:c8:44:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjYwOTA2MTY0MzQ3WhcNMjYwOTEzMTY0MzQ3WjAYMRYwFAYD VQQDEw02YTlkOTg0NC1jYTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3uA3dPBxyQJ8/4vMf+LEmKkhlKFGRtQmb5ushQzjXeF3w/PiFJFsjzE9N31V 4rBakPCjwhU3uZvWdcSTvXWroMg2j+Vf7OoljestWsCKnXASEumy24X6OAJHDoqS /mfXfse7zTDWfpZcKscV1NQQdkshnrcXmDIrjLkEDfLI6m+9nvtu0YQUGkfRlB4L 4jJQdTRnChaUKsYW2IsNV8ysx7z5zrLhuY0HJ1Jj7w/z446UyD8+6a/aLWZiwgpn mjiA03FiHg4fi/AKwBQj7avKTMxaIh3rc8Bw4aW5UXHY7d4vr6b7AEQ/wJDufgx2 7xBKu9JbuTRj3WpQ/dsHfOobmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJI2qDaC PbZT/87j6NOyDBDwDLleMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEriCIqOXzEayAe6ED4PNAgPy0zAvWA8YL6PXWAGssUHNTcevXzCyoh2XC4Ig 7nd3iba8M2T+vL6wbwe+dQFIEaZEdbadObO1yi0ZfNJ2cylD4puhhrLLeDY2n4UQ XLuTurKQlIMF7fkgqhv9VLS41/nWo19yjq/vcrcoQk2XczaQQS7aBrtdGsMRj2pw wv/5P5OrcmCN0Fm6lc31GBKRJgg4PyzfjQ0P6vjODqkLAaihWx/c/HqYblgPvUQB J9gh+dPr9c9/B6vN5teKM8LhN50aRlyTEKVeIFKd/avHyhGnol3CHhEdz99rfZ/p KNl30rQsYYLD58WSKxnUeshENA== -----END CERTIFICATE-----Generated at Mon Sep 7 20:33:25 2026 by rpki-client