$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: njPDTO5onjBVTa83Fz6iGi04/XrxcAtEQiK4sPpiWq4= Subject key identifier: 5D:97:8E:40:18:3F:BF:A9:1C:2C:F9:D0:AA:93:C2:3A:64:A5:4C:2D Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1A55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 1836 Signing time: Fri 20 Feb 2026 16:36:51 +0000 Manifest this update: Fri 20 Feb 2026 16:36:51 +0000 Manifest next update: Fri 27 Feb 2026 16:36:51 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: 4Yrvh092PyrRvuODd0m/CkX5icRlW9e7PZVsFhWx6BQ=) 2: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: lNqOJJYDQvLu7DRWfBEiDCTTNbz1juAgLIKu2ZnWJwo=) 3: A865A1925B1611F083088661C4F9AE02.roa (hash: Rw9T99RuNwJAGQR3ACNuRpkBbGAU9I1LWh2/O8OeLqs=) 4: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 5uITBc+pZTop6KZh3NhbY8ifInIc97Y2n3CHN/qqt94=) 5: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: dqGvsBo+O3A3ECQgQGmvroXEzldwim2Z97cn9HnwO7I=) 6: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: H2LNVWI/4SBtnLIxC+HsKb0Sn6SPu235wjCIk/88N90=) 7: 11E8BC20FFE611F0A90394AA756F56BC.roa (hash: vppnJfYJe6zVwO+h6lFIzWjo2MRbQB2VJ2ft+A/VSmc=) 8: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: Y+I6xs+Ghxp/nManyHpMLzBR6d+9ACgxr4bM9Tk/9sc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Feb 2026 16:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6741 (0x1a55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Feb 20 16:36:51 2026 GMT Not After : Feb 27 16:36:51 2026 GMT Subject: CN=69988da3-77f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a6:fd:f3:73:9a:4a:7c:72:b0:c2:41:09:3d: eb:7b:4f:70:8e:18:01:cb:ef:7b:4d:c3:b3:73:a1: 4a:17:2f:2e:41:67:2d:3d:02:42:db:0d:2a:01:52: b1:d0:df:8e:c2:7a:0a:de:f4:b5:cb:ed:c2:61:04: b3:4e:e4:5b:48:ab:2c:07:04:38:c2:2b:d3:c6:9b: 41:ac:96:f1:79:34:2d:db:5a:2d:3b:2c:cc:03:42: b9:2c:85:d9:cc:36:5f:db:4f:ae:60:30:2a:a3:a7: ca:7d:0d:e4:97:9b:fd:ba:7c:24:13:a2:19:1e:62: 9a:20:20:1f:9c:24:62:90:2a:5f:40:7b:28:8c:67: 51:8e:a2:40:d7:0a:95:5a:2c:04:71:18:60:62:0a: 6a:64:27:11:b2:00:f5:c3:37:18:4c:14:74:7b:dd: 74:e2:10:37:78:a6:e4:1e:14:dc:77:fb:f5:63:65: c9:91:02:31:7f:2d:f1:6c:4a:c6:96:17:21:76:c9: a8:60:2e:14:6d:c9:c4:3b:e9:38:f2:f4:cc:0a:62: 06:e4:e7:f8:c8:97:ea:47:ae:a4:b6:02:34:73:16: d0:fb:be:19:ca:1f:40:a1:1d:1e:0a:98:46:21:61: 0e:cd:8d:7c:de:da:70:f1:aa:e7:1b:04:8b:8f:92: 76:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:97:8E:40:18:3F:BF:A9:1C:2C:F9:D0:AA:93:C2:3A:64:A5:4C:2D X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:28:c4:aa:d7:c2:3f:1d:ba:12:e6:3e:75:1d:9d:4d:64:74: 10:6c:8a:6a:d2:aa:c4:ae:b9:59:e8:4b:f6:f8:b3:bf:72:83: 0c:62:4b:91:89:ef:96:aa:d0:65:c7:25:6c:97:63:89:21:94: 08:8e:94:08:8c:c3:06:d9:92:2c:c1:18:5e:e8:9a:0e:cd:97: b9:3a:6f:b8:ef:5f:e5:85:25:55:02:a0:8c:0a:57:f0:36:73: 1d:e9:a0:56:52:93:b5:19:e5:97:05:e5:67:4c:29:7c:2c:ea: a0:1e:15:f9:eb:0a:5d:3e:58:3d:d0:0e:dc:73:f3:2e:62:42: 9a:55:81:b6:e7:bc:8c:85:8d:8e:b2:8a:84:54:0e:02:54:c9: 8c:2f:0f:f7:27:50:b4:29:7d:ae:88:ab:51:7d:e1:d9:39:4f: d2:10:5a:4b:48:9a:16:79:08:ad:63:f1:8c:0e:34:59:b2:a8: 01:61:6b:83:d7:27:bd:9c:e5:28:48:14:e8:1d:eb:cb:41:db: 23:ef:3d:06:d9:54:8c:ba:76:98:84:90:a0:32:39:8f:6b:1f: 32:82:00:8d:e8:b8:48:e7:f9:9e:d5:f1:3e:f2:9e:95:f4:ab: f3:20:1f:c2:ef:b2:ec:75:2f:03:22:6a:9d:b6:10:2b:8c:91: 08:b0:f3:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjYwMjIwMTYzNjUxWhcNMjYwMjI3MTYzNjUxWjAYMRYwFAYD VQQDDA02OTk4OGRhMy03N2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmKb983OaSnxysMJBCT3re09wjhgBy+97TcOzc6FKFy8uQWctPQJC2w0qAVKx 0N+OwnoK3vS1y+3CYQSzTuRbSKssBwQ4wivTxptBrJbxeTQt21otOyzMA0K5LIXZ zDZf20+uYDAqo6fKfQ3kl5v9unwkE6IZHmKaICAfnCRikCpfQHsojGdRjqJA1wqV WiwEcRhgYgpqZCcRsgD1wzcYTBR0e9104hA3eKbkHhTcd/v1Y2XJkQIxfy3xbErG lhchdsmoYC4UbcnEO+k48vTMCmIG5Of4yJfqR66ktgI0cxbQ+74Zyh9AoR0eCphG IWEOzY183tpw8arnGwSLj5J2twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2XjkAY P7+pHCz50KqTwjpkpUwtMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5KMSq18I/HboS5j51HZ1NZHQQbIpq0qrErrlZ6Ev2+LO/coMMYkuR ie+WqtBlxyVsl2OJIZQIjpQIjMMG2ZIswRhe6JoOzZe5Om+471/lhSVVAqCMClfw NnMd6aBWUpO1GeWXBeVnTCl8LOqgHhX56wpdPlg90A7cc/MuYkKaVYG257yMhY2O soqEVA4CVMmMLw/3J1C0KX2uiKtRfeHZOU/SEFpLSJoWeQitY/GMDjRZsqgBYWuD 1ye9nOUoSBToHevLQdsj7z0G2VSMunaYhJCgMjmPax8yggCN6LhI5/me1fE+8p6V 9KvzIB/C77LsdS8DImqdthArjJEIsPNe -----END CERTIFICATE-----Generated at Sun Feb 22 11:34:17 2026 by rpki-client