$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: DBpzhp8Twnv90/U6/ncT/T0CYJ3x3tbej6vTJi9LCOo= Subject key identifier: C4:5E:74:9C:44:A6:58:0C:E7:48:11:4B:0A:80:2D:12:CE:37:E0:C0 Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1B12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 18B5 Signing time: Mon 31 Aug 2026 16:46:30 +0000 Manifest this update: Mon 31 Aug 2026 16:46:29 +0000 Manifest next update: Mon 07 Sep 2026 16:46:29 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: OdrAQkffo4AqCTx6IaRe6GVZu/kXD9qe1xx6ClIxj6s=) 2: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: JcJkzKIq/gkKNwsIztAnup4vUjn2mQMxupahQTcBoD0=) 3: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: P3TSLLO5OHId7p3ClxbnsjagxpNV/CjhrV4sIGmuZo8=) 4: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: T/IhfFqluucOcXwihP2EF0WhVb+uxLK2DoiXI1D9r8k=) 5: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: T5SY7nGUBq6N93Y2VQGjBjoMsDIFs9sEiYiybGCQJmM=) 6: A865A1925B1611F083088661C4F9AE02.roa (hash: UiRna1wKfppY3ae9ceGSJXnsVoB2Dthll1RwPbuAri8=) 7: D00F9A8643A511F1B04E115C93833773.roa (hash: /5V80aQjqcaZCKHTzBYZIdWUXDquWlftifjg1oCFJfI=) 8: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: JWuyMD5PV7e0Rk1Lsc3w0a6kPng2XMWA35a3+b7eoNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 16:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6930 (0x1b12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Aug 31 16:46:29 2026 GMT Not After : Sep 7 16:46:29 2026 GMT Subject: CN=6a95afe6-3633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:22:b4:0b:3d:36:f6:92:8e:43:09:1e:84:b3: d2:0f:6e:24:2a:a4:87:e2:a5:b0:77:5d:e7:9d:5a: f0:0d:5c:8b:53:50:5f:72:da:6c:1b:cb:53:a5:b2: f1:4d:41:14:da:68:51:a7:9c:c2:e5:61:fa:3f:ee: da:09:a4:3f:ef:4c:dc:49:af:97:ca:21:1d:09:a0: f3:51:ab:0c:ca:32:a7:b5:39:5c:50:58:e2:3b:9c: 90:a7:aa:8f:90:61:19:48:b5:72:5c:df:2c:f7:7a: 6b:b9:2a:b7:a2:3e:2d:b2:86:87:e0:92:08:94:2a: 8e:e7:73:53:95:e9:43:0b:bf:a1:0f:fe:5e:ad:10: ae:ba:44:29:c5:e1:64:98:7c:4d:cc:52:25:1e:63: 8a:cd:fe:0a:4a:77:3e:d2:26:53:8b:10:18:60:03: d1:e8:f4:f0:a8:0a:fd:b0:c3:d7:f7:52:dd:f0:e2: 8b:f7:f1:6e:78:ae:50:69:9d:4d:3f:3b:7c:a3:66: 96:50:14:eb:cc:1b:c6:8c:1b:be:f6:c6:39:85:34: 5c:f5:15:ec:4a:d7:45:aa:93:2d:f5:6d:f8:cb:c9: d5:60:62:66:41:7f:e7:d7:d3:32:39:7c:6b:ae:23: 48:00:48:d0:b5:12:9a:c4:c5:6c:30:a7:83:1c:ac: f5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5E:74:9C:44:A6:58:0C:E7:48:11:4B:0A:80:2D:12:CE:37:E0:C0 X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:69:84:76:6d:2e:66:10:32:0d:d6:65:da:50:e4:01:ae:81: 93:c2:ed:a5:1a:f0:f0:7d:f0:0a:c4:70:52:fe:24:3b:8b:c9: 52:cd:da:a8:5e:b0:37:18:9e:9d:35:f0:49:fb:b6:47:42:db: 1f:db:bd:85:4d:0c:e6:c2:69:00:9c:66:e7:2d:5a:26:04:59: 08:6d:3a:33:0c:29:29:e6:75:d7:93:f7:3e:45:47:65:d9:fd: 73:ff:91:e1:b3:b5:4f:dd:2d:ed:34:1f:ce:33:f2:84:ef:a5: 82:18:9e:fa:06:b0:f5:24:c5:57:d4:2e:00:a5:af:c6:08:4e: 2c:c0:5e:6d:fa:e9:c3:fe:cd:7a:02:f0:d7:f4:c5:33:d3:27: e3:f3:5e:68:d9:c5:3e:50:b3:01:3e:fa:b3:73:af:82:39:05: f3:61:3e:0c:22:da:4f:e7:32:97:33:c5:70:69:1b:a2:13:15: 9e:31:6b:ff:57:6a:20:a7:6f:51:0e:3c:fb:5b:27:c2:ca:7a: 52:ac:54:6a:d1:a3:6c:e8:38:45:98:ee:0d:84:86:ca:3c:1c: b5:e7:c6:f3:ba:a5:b9:d4:eb:99:ff:d6:8e:fc:52:c3:57:eb: 47:d0:a8:cb:b8:bc:e6:62:ab:34:a4:ae:c3:6b:ee:6d:05:46: ef:86:24:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjYwODMxMTY0NjI5WhcNMjYwOTA3MTY0NjI5WjAYMRYwFAYD VQQDEw02YTk1YWZlNi0zNjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnyK0Cz029pKOQwkehLPSD24kKqSH4qWwd13nnVrwDVyLU1BfctpsG8tTpbLx TUEU2mhRp5zC5WH6P+7aCaQ/70zcSa+XyiEdCaDzUasMyjKntTlcUFjiO5yQp6qP kGEZSLVyXN8s93pruSq3oj4tsoaH4JIIlCqO53NTlelDC7+hD/5erRCuukQpxeFk mHxNzFIlHmOKzf4KSnc+0iZTixAYYAPR6PTwqAr9sMPX91Ld8OKL9/FueK5QaZ1N Pzt8o2aWUBTrzBvGjBu+9sY5hTRc9RXsStdFqpMt9W34y8nVYGJmQX/n19MyOXxr riNIAEjQtRKaxMVsMKeDHKz1bQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMRedJxE plgM50gRSwqALRLON+DAMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXGmEdm0uZhAyDdZl2lDkAa6Bk8LtpRrw8H3wCsRwUv4kO4vJUs3aqF6wNxie nTXwSfu2R0LbH9u9hU0M5sJpAJxm5y1aJgRZCG06MwwpKeZ115P3PkVHZdn9c/+R 4bO1T90t7TQfzjPyhO+lghie+gaw9STFV9QuAKWvxghOLMBebfrpw/7NegLw1/TF M9Mn4/NeaNnFPlCzAT76s3OvgjkF82E+DCLaT+cylzPFcGkbohMVnjFr/1dqIKdv UQ48+1snwsp6UqxUatGjbOg4RZjuDYSGyjwctefG87qludTrmf/WjvxSw1frR9Co y7i85mKrNKSuw2vubQVG74YkVg== -----END CERTIFICATE-----Generated at Mon Aug 31 19:46:59 2026 by rpki-client