$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: mL3S7gBBWZx0TScJUA33xo286iSCOzBs1a5Dax95gnI= Subject key identifier: 35:F0:7B:F5:13:21:81:0F:B9:90:51:73:36:6D:B7:79:0A:9D:F3:21 Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1AC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 187B Signing time: Sun 14 Jun 2026 16:47:24 +0000 Manifest this update: Sun 14 Jun 2026 16:47:24 +0000 Manifest next update: Sun 21 Jun 2026 16:47:24 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: fUgFx6lVwaKt/lmUZd4JUaNW9uY4eaCpzlYBAxTRd5c=) 2: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: cWhKsGGtwm24L2b24qEiOJQYknotmIIZJa7i5F5KPHg=) 3: D00F9A8643A511F1B04E115C93833773.roa (hash: rionXwpXZ+/YYBbbDrBSeSCU1qvo6PxZ4O4oo+eeuvE=) 4: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 4OyLgz5MRwPAxGcF1j5OxwWLAe68/1HWOj58azhiKRQ=) 5: A865A1925B1611F083088661C4F9AE02.roa (hash: 2IUNVUDvVcfHXyE54Zp6qTjDmEVqUm9kf4i2mX6/zX4=) 6: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: JtaNsAVPLe7G1DcQvRskSfK/91+ur/u1SIY8DTdFa1o=) 7: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: mAI+w5MJltTPoLHCV1t34FNAjUXQLcbk8DhNQ3Alegw=) 8: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: Br+Yh3Miw3+3u+15blKMFIN8mMQA+4yr6RfTrCX61aY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 16:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6849 (0x1ac1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Jun 14 16:47:24 2026 GMT Not After : Jun 21 16:47:24 2026 GMT Subject: CN=6a2edb1c-2078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c3:8b:4e:18:e9:e8:48:7c:62:6c:fa:2d:f2: 01:2c:fd:f1:35:45:d4:aa:ee:93:de:51:7d:b7:ec: cc:80:2f:1f:2f:4b:f4:ab:9c:27:32:53:2c:10:a3: 37:b9:35:40:5f:3f:0a:0b:7d:35:4c:8a:17:c6:78: a3:e4:95:c4:df:f2:95:e8:7d:30:29:22:6b:7b:93: e2:22:de:f3:fb:b3:92:88:a9:19:1b:bb:4a:49:0b: 92:1f:b5:22:27:dc:b1:4c:57:64:27:d8:f3:dd:b2: 0c:80:ed:07:75:c5:26:b7:12:06:0b:3c:4c:f8:75: 49:f9:f5:58:63:d3:e7:aa:6c:6b:fd:d9:7f:7e:b7: b4:e4:49:df:4a:b2:4d:a6:64:a1:8a:4c:0f:52:54: ea:ba:ea:fc:2e:70:8c:bc:f8:81:fd:3f:a7:34:5c: ee:e8:27:be:03:e7:65:60:7b:2c:23:ec:e8:f5:92: 5c:c3:b8:9b:12:f8:fc:a8:c7:93:6a:bd:a7:28:eb: b4:d5:d9:fa:bd:84:b9:4f:82:7d:1e:68:8b:ca:98: 28:22:60:2a:9a:34:45:f1:b4:05:bd:d2:ff:cf:a0: 0c:ee:c7:54:c5:5c:db:41:4c:a3:c8:20:1d:96:54: 20:c5:29:ec:7c:1b:6f:69:c1:e2:a5:65:d2:65:f3: ee:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F0:7B:F5:13:21:81:0F:B9:90:51:73:36:6D:B7:79:0A:9D:F3:21 X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:f0:c0:7c:64:67:77:54:e1:58:81:9f:ca:20:45:27:50:2e: 1c:28:59:1b:be:49:56:1d:e2:93:51:cd:97:83:ff:62:5e:dd: d0:63:c0:76:a4:70:18:00:a4:20:15:46:23:ed:ef:80:c6:d7: a4:66:78:15:d4:d3:bc:9e:7a:a7:85:67:73:58:4b:87:21:3b: 6c:14:31:2d:66:7c:74:b5:81:84:93:60:75:a7:14:5a:57:2b: 32:27:b9:98:c5:c7:01:3c:96:cf:24:18:0d:c3:38:0f:f3:e5: 26:1f:b1:a0:8e:ee:5e:df:f8:a7:f4:59:57:10:0d:9c:5b:6f: 64:6a:cc:76:74:c7:eb:a5:d8:cc:36:93:8d:2d:dd:ba:88:4a: b8:e8:38:e2:31:d5:d4:74:b0:d4:da:c1:f7:7c:0d:a2:58:cb: c8:66:f7:2e:cd:b3:f7:08:c9:3c:e8:2f:97:75:59:37:29:85: a3:5b:1a:d4:3b:8f:d0:8d:80:8a:38:f9:c1:64:1c:50:ab:05: 8e:82:bb:d4:af:86:35:42:2a:8d:66:83:8e:c8:ee:8b:e4:31: 0c:4b:53:fe:7a:47:1a:9f:84:7c:b2:62:07:df:a1:fb:f8:5f: 38:af:b6:f2:96:9b:a9:98:70:dc:f0:32:68:b6:c4:e2:98:46: 65:73:32:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjYwNjE0MTY0NzI0WhcNMjYwNjIxMTY0NzI0WjAYMRYwFAYD VQQDEw02YTJlZGIxYy0yMDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1sOLThjp6Eh8Ymz6LfIBLP3xNUXUqu6T3lF9t+zMgC8fL0v0q5wnMlMsEKM3 uTVAXz8KC301TIoXxnij5JXE3/KV6H0wKSJre5PiIt7z+7OSiKkZG7tKSQuSH7Ui J9yxTFdkJ9jz3bIMgO0HdcUmtxIGCzxM+HVJ+fVYY9Pnqmxr/dl/fre05EnfSrJN pmShikwPUlTquur8LnCMvPiB/T+nNFzu6Ce+A+dlYHssI+zo9ZJcw7ibEvj8qMeT ar2nKOu01dn6vYS5T4J9HmiLypgoImAqmjRF8bQFvdL/z6AM7sdUxVzbQUyjyCAd llQgxSnsfBtvacHipWXSZfPuVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDXwe/UT IYEPuZBRczZtt3kKnfMhMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh/DAfGRnd1ThWIGfyiBFJ1AuHChZG75JVh3ik1HNl4P/Yl7d0GPAdqRwGACk IBVGI+3vgMbXpGZ4FdTTvJ56p4Vnc1hLhyE7bBQxLWZ8dLWBhJNgdacUWlcrMie5 mMXHATyWzyQYDcM4D/PlJh+xoI7uXt/4p/RZVxANnFtvZGrMdnTH66XYzDaTjS3d uohKuOg44jHV1HSw1NrB93wNoljLyGb3Ls2z9wjJPOgvl3VZNymFo1sa1DuP0I2A ijj5wWQcUKsFjoK71K+GNUIqjWaDjsjui+QxDEtT/npHGp+EfLJiB9+h+/hfOK+2 8pabqZhw3PAyaLbE4phGZXMysg== -----END CERTIFICATE-----Generated at Mon Jun 15 14:51:19 2026 by rpki-client