$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: 933VIjSgZ7uqq0g2dGyHdvXPj4WnFl1bxe2cxO9J9DI= Subject key identifier: B3:C5:B5:C8:62:E4:C1:D7:B0:FB:63:72:96:13:F9:10:5C:3E:70:1B Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1B19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 18BC Signing time: Mon 14 Sep 2026 16:44:34 +0000 Manifest this update: Mon 14 Sep 2026 16:44:34 +0000 Manifest next update: Mon 21 Sep 2026 16:44:34 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: ZnUgy84SNURRDILBA3UObStgZz7fzTvzzLZLkaTDi9E=) 2: D00F9A8643A511F1B04E115C93833773.roa (hash: /5V80aQjqcaZCKHTzBYZIdWUXDquWlftifjg1oCFJfI=) 3: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: P3TSLLO5OHId7p3ClxbnsjagxpNV/CjhrV4sIGmuZo8=) 4: A865A1925B1611F083088661C4F9AE02.roa (hash: UiRna1wKfppY3ae9ceGSJXnsVoB2Dthll1RwPbuAri8=) 5: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: T5SY7nGUBq6N93Y2VQGjBjoMsDIFs9sEiYiybGCQJmM=) 6: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: JcJkzKIq/gkKNwsIztAnup4vUjn2mQMxupahQTcBoD0=) 7: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: JWuyMD5PV7e0Rk1Lsc3w0a6kPng2XMWA35a3+b7eoNE=) 8: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: T/IhfFqluucOcXwihP2EF0WhVb+uxLK2DoiXI1D9r8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 16:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6937 (0x1b19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Sep 14 16:44:34 2026 GMT Not After : Sep 21 16:44:34 2026 GMT Subject: CN=6aa82472-cece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e3:f0:66:bd:e3:68:75:93:de:b7:f3:8b:5b: 44:6f:99:5f:13:63:87:fe:42:5f:cd:e0:36:63:f6: 02:7d:bc:bc:72:cb:1d:bc:6b:e6:f4:33:0e:69:42: 68:0f:f8:0a:eb:eb:b0:ad:57:da:46:a9:77:43:ff: 34:a1:88:8e:3a:55:16:67:57:ff:02:07:a1:2b:4f: 48:75:f6:d9:46:9e:aa:02:66:7e:dc:3b:62:fc:6b: b8:0a:c4:0b:35:2e:a6:cb:da:4d:d3:a8:f5:26:65: 3a:f9:5a:44:6e:7a:d6:ab:ec:e5:b1:0c:54:80:64: 77:4c:4b:93:aa:ed:22:cf:5a:fe:1b:80:76:ce:35: 9f:17:f8:dd:c1:bb:6c:cf:0c:be:03:09:5a:f6:e0: 54:39:c2:ad:98:63:09:2d:b6:a5:ba:40:aa:0c:72: 90:d0:fc:7b:81:af:9d:07:87:27:c2:c5:93:ba:c8: 05:23:06:ab:0a:e0:43:fb:c2:1c:bc:26:0b:92:ec: 74:f5:50:d1:13:1a:43:36:0b:6b:26:fe:04:00:90: 68:ad:c7:47:57:2c:be:ec:e0:e4:e4:69:a4:11:8e: 8b:12:f2:1c:ee:36:38:ba:60:8f:f5:1c:d9:86:06: 89:c8:ab:9a:31:8c:5e:f8:0f:62:db:a5:d5:c5:fb: 98:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C5:B5:C8:62:E4:C1:D7:B0:FB:63:72:96:13:F9:10:5C:3E:70:1B X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b1:60:c2:b2:9a:09:11:22:8e:82:3f:f1:36:8d:d6:00:8a: c1:07:e3:08:9a:f6:22:d8:ee:ae:88:11:94:5e:9e:49:9a:cd: a3:d7:c5:9a:fb:14:ec:94:ce:a7:07:78:0f:14:32:1e:af:af: 1a:5d:35:78:d1:25:93:cd:99:02:89:47:2e:a4:c3:75:15:d1: b0:0a:43:64:28:4f:da:be:ae:25:0c:94:9a:b2:42:3b:a1:36: 5e:79:83:a4:be:24:06:3e:58:85:67:a6:a2:9f:d7:b3:f6:53: e3:a6:2a:dd:2c:cd:d6:ef:ad:52:d4:c8:15:45:f1:63:12:18: 31:e1:ce:2e:f5:00:4b:ce:80:fc:83:ee:86:f6:0a:7b:ea:cb: ad:99:32:52:06:40:46:ce:22:a8:79:d5:a3:a9:45:63:be:c0: 3a:44:71:9a:36:17:f1:2f:d2:83:43:fa:48:4a:93:83:e1:1e: 67:54:0f:fd:7b:5e:5b:e2:02:cf:12:0c:a9:76:74:5b:16:2e: 49:b0:64:23:36:f1:1d:93:92:ec:d8:60:f3:3c:be:d0:21:ba: 04:ad:ad:98:03:30:19:19:39:15:93:c0:64:e2:07:39:b5:ca: e8:f2:ed:36:7f:9f:13:b6:15:d5:94:0b:01:0f:6d:71:8c:a3: d9:6f:56:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjYwOTE0MTY0NDM0WhcNMjYwOTIxMTY0NDM0WjAYMRYwFAYD VQQDEw02YWE4MjQ3Mi1jZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnePwZr3jaHWT3rfzi1tEb5lfE2OH/kJfzeA2Y/YCfby8cssdvGvm9DMOaUJo D/gK6+uwrVfaRql3Q/80oYiOOlUWZ1f/AgehK09IdfbZRp6qAmZ+3Dti/Gu4CsQL NS6my9pN06j1JmU6+VpEbnrWq+zlsQxUgGR3TEuTqu0iz1r+G4B2zjWfF/jdwbts zwy+Awla9uBUOcKtmGMJLbalukCqDHKQ0Px7ga+dB4cnwsWTusgFIwarCuBD+8Ic vCYLkux09VDRExpDNgtrJv4EAJBorcdHVyy+7ODk5GmkEY6LEvIc7jY4umCP9RzZ hgaJyKuaMYxe+A9i26XVxfuYSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLPFtchi 5MHXsPtjcpYT+RBcPnAbMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfLFgwrKaCREijoI/8TaN1gCKwQfjCJr2ItjurogRlF6eSZrNo9fFmvsU7JTO pwd4DxQyHq+vGl01eNElk82ZAolHLqTDdRXRsApDZChP2r6uJQyUmrJCO6E2XnmD pL4kBj5YhWemop/Xs/ZT46Yq3SzN1u+tUtTIFUXxYxIYMeHOLvUAS86A/IPuhvYK e+rLrZkyUgZARs4iqHnVo6lFY77AOkRxmjYX8S/Sg0P6SEqTg+EeZ1QP/XteW+IC zxIMqXZ0WxYuSbBkIzbxHZOS7Nhg8zy+0CG6BK2tmAMwGRk5FZPAZOIHObXK6PLt Nn+fE7YV1ZQLAQ9tcYyj2W9WnQ== -----END CERTIFICATE-----Generated at Mon Sep 14 22:20:05 2026 by rpki-client