$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: iMvyBjyW4j3zqHaLRmT5xsNcHLIYrIJ2go2/tiaazy4= Subject key identifier: 9B:57:A7:2A:5E:67:83:6D:BF:6A:F6:B3:03:79:E6:31:49:50:93:4C Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1B30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 18D2 Signing time: Mon 26 Oct 2026 16:47:02 +0000 Manifest this update: Mon 26 Oct 2026 16:47:01 +0000 Manifest next update: Mon 02 Nov 2026 16:47:01 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: ByNDcP2QwHByD5ECya4cmv66cr+r8cFl44rIEt4t8F0=) 2: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: JcJkzKIq/gkKNwsIztAnup4vUjn2mQMxupahQTcBoD0=) 3: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: P3TSLLO5OHId7p3ClxbnsjagxpNV/CjhrV4sIGmuZo8=) 4: D00F9A8643A511F1B04E115C93833773.roa (hash: FH2vfxKCvBSnd3AiGM9xjlDUdLumNRqDqvbQz6AZcvY=) 5: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: T/IhfFqluucOcXwihP2EF0WhVb+uxLK2DoiXI1D9r8k=) 6: A865A1925B1611F083088661C4F9AE02.roa (hash: UiRna1wKfppY3ae9ceGSJXnsVoB2Dthll1RwPbuAri8=) 7: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: T5SY7nGUBq6N93Y2VQGjBjoMsDIFs9sEiYiybGCQJmM=) 8: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: JWuyMD5PV7e0Rk1Lsc3w0a6kPng2XMWA35a3+b7eoNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 14:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6960 (0x1b30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Oct 26 16:47:01 2026 GMT Not After : Nov 2 16:47:01 2026 GMT Subject: CN=6adf8405-d76a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4b:73:24:ac:81:30:89:c1:d0:23:b3:39:de: 63:54:01:84:58:e1:ff:39:f5:a5:b2:10:04:a8:fe: 7d:14:21:6c:be:2a:71:7d:55:e8:01:79:04:4e:b6: 90:5c:5f:40:44:73:2b:1b:d6:9c:c4:0e:d4:1b:5a: 03:d6:e6:b6:ae:b9:9c:80:c2:ab:c2:cf:85:35:2e: 4a:eb:29:ad:ef:73:f3:df:eb:15:59:a9:79:b2:82: a5:ef:f6:96:1f:2f:e3:16:fb:46:3f:5f:47:44:f5: 76:a6:9b:bd:f1:46:7f:4d:0f:b2:4e:60:95:37:98: 84:d6:1e:9b:e7:f1:29:34:a6:e7:c9:ac:39:00:b6: b2:28:33:83:dc:15:94:93:1b:d7:aa:04:5e:00:e7: 97:59:7a:de:80:94:21:26:86:47:90:70:25:88:64: 51:56:a6:61:2e:9f:be:51:9f:14:84:b0:c9:26:bb: f6:dc:1b:c5:2e:f3:ff:e3:bf:ce:84:77:86:f5:2c: 89:f3:87:f9:35:41:73:ce:5f:d8:51:52:f8:0a:da: 47:6d:a4:20:2f:94:45:37:aa:99:e3:e6:14:f2:34: 2f:b9:2a:9a:f4:9a:d9:8c:72:cd:2e:9f:11:1d:e1: 5e:88:9d:58:36:82:40:20:83:cf:86:14:5e:79:ed: a8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:57:A7:2A:5E:67:83:6D:BF:6A:F6:B3:03:79:E6:31:49:50:93:4C X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:97:ca:b1:0f:1d:0d:f9:46:fd:4e:42:f3:82:c6:08:fd:f3: 1f:84:0b:69:de:a0:32:42:d1:35:87:a5:55:ba:46:76:32:b4: d9:25:91:2d:6b:9c:8a:38:e1:df:de:e0:f1:6f:cc:1d:7e:b4: c6:e5:c4:f8:09:9d:d4:58:d5:d0:9f:2e:db:dc:d2:34:ff:5f: 5b:79:96:b2:54:13:5e:41:cb:8d:a5:85:6f:65:aa:78:8d:52: 6a:4a:26:97:df:d2:b9:46:d5:d2:25:14:12:b5:f8:a0:e5:00: d7:21:e7:fc:b8:83:fb:12:a1:59:0b:8b:9e:63:db:dc:d7:96: 52:27:ec:ae:f2:e1:58:27:40:94:88:3e:8b:da:aa:b9:8f:73: 11:c9:dc:3f:1b:15:b0:9a:54:24:69:49:cc:b7:ac:0a:20:47: 3e:27:32:20:f8:90:ce:3e:ad:80:f0:60:a7:ee:6b:1c:d8:27: e4:0f:26:7b:d2:01:b1:8b:36:f0:84:48:a0:78:03:fe:d1:71: a4:28:8a:a6:b7:39:19:0f:b6:f8:4c:cd:80:2d:d4:f8:1e:7f: 91:04:3b:ec:b0:d9:3f:a5:d5:d6:0e:09:db:d1:3e:f0:84:e5: 85:09:6b:ec:62:13:94:10:66:b2:ca:70:5a:bc:dc:53:ba:82: af:a1:f7:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjYxMDI2MTY0NzAxWhcNMjYxMTAyMTY0NzAxWjAYMRYwFAYD VQQDEw02YWRmODQwNS1kNzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUtzJKyBMInB0COzOd5jVAGEWOH/OfWlshAEqP59FCFsvipxfVXoAXkETraQ XF9ARHMrG9acxA7UG1oD1ua2rrmcgMKrws+FNS5K6ymt73Pz3+sVWal5soKl7/aW Hy/jFvtGP19HRPV2ppu98UZ/TQ+yTmCVN5iE1h6b5/EpNKbnyaw5ALayKDOD3BWU kxvXqgReAOeXWXregJQhJoZHkHAliGRRVqZhLp++UZ8UhLDJJrv23BvFLvP/47/O hHeG9SyJ84f5NUFzzl/YUVL4CtpHbaQgL5RFN6qZ4+YU8jQvuSqa9JrZjHLNLp8R HeFeiJ1YNoJAIIPPhhReee2o/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJtXpype Z4Ntv2r2swN55jFJUJNMMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvJfKsQ8dDflG/U5C84LGCP3zH4QLad6gMkLRNYelVbpGdjK02SWRLWucijjh 397g8W/MHX60xuXE+Amd1FjV0J8u29zSNP9fW3mWslQTXkHLjaWFb2WqeI1Sakom l9/SuUbV0iUUErX4oOUA1yHn/LiD+xKhWQuLnmPb3NeWUifsrvLhWCdAlIg+i9qq uY9zEcncPxsVsJpUJGlJzLesCiBHPicyIPiQzj6tgPBgp+5rHNgn5A8me9IBsYs2 8IRIoHgD/tFxpCiKprc5GQ+2+EzNgC3U+B5/kQQ77LDZP6XV1g4J29E+8ITlhQlr 7GITlBBmsspwWrzcU7qCr6H3Rg== -----END CERTIFICATE-----Generated at Mon Oct 26 21:08:41 2026 by rpki-client