$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: 5pLWusQwffauL2NvRdcWH96ofugRkSofS2e7aAeWOj0= Subject key identifier: 3E:A8:DA:80:34:BC:C8:44:AE:5E:DB:D1:2B:18:43:FB:05:4D:61:52 Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1AF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 189E Signing time: Fri 24 Jul 2026 16:57:37 +0000 Manifest this update: Fri 24 Jul 2026 16:57:37 +0000 Manifest next update: Fri 31 Jul 2026 16:57:37 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: c1Us7zMsIDAr6y+vyLFMHrJhdshOJXVelns4FZ+Hvcc=) 2: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: mAI+w5MJltTPoLHCV1t34FNAjUXQLcbk8DhNQ3Alegw=) 3: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: cWhKsGGtwm24L2b24qEiOJQYknotmIIZJa7i5F5KPHg=) 4: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 4OyLgz5MRwPAxGcF1j5OxwWLAe68/1HWOj58azhiKRQ=) 5: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: JtaNsAVPLe7G1DcQvRskSfK/91+ur/u1SIY8DTdFa1o=) 6: D00F9A8643A511F1B04E115C93833773.roa (hash: QPdt4fsCL2XWpqN3V1Gtq0d4gMm1PZ100Z5/4Fr7hyA=) 7: A865A1925B1611F083088661C4F9AE02.roa (hash: 2IUNVUDvVcfHXyE54Zp6qTjDmEVqUm9kf4i2mX6/zX4=) 8: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: Br+Yh3Miw3+3u+15blKMFIN8mMQA+4yr6RfTrCX61aY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 16:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6899 (0x1af3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Jul 24 16:57:37 2026 GMT Not After : Jul 31 16:57:37 2026 GMT Subject: CN=6a639981-f07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e1:d1:02:c1:74:a0:d5:97:df:46:c4:a7:00: 5c:9b:29:7b:61:a3:d9:f4:8a:20:8b:b4:f6:fb:e0: 2d:97:8b:3b:92:65:ad:db:9a:3d:7a:b6:bb:03:5a: bb:c2:df:c7:33:36:be:e7:47:33:3f:3e:34:14:bc: 73:5e:58:04:78:1c:a7:16:6c:4a:79:b6:fb:e0:e8: ba:22:ad:b5:15:d4:07:6b:f0:8d:d4:3e:e6:fb:86: e7:19:5f:d2:88:a7:7a:a3:01:5e:45:93:3f:b5:9d: 7a:11:af:02:5c:69:71:d0:57:ea:7c:54:71:30:27: 3e:1e:37:5a:90:a1:5f:b7:16:24:c7:af:76:2b:ff: eb:04:3d:18:e7:06:dc:e1:1e:08:aa:27:6c:22:e6: 6d:f4:b2:30:64:d4:db:5c:eb:92:11:51:70:49:5d: 91:0f:da:04:70:04:11:4f:8f:33:1e:3d:8a:29:d4: df:3c:30:5e:0a:cc:36:d6:b4:13:a8:3f:3f:31:7a: dd:25:e6:31:d7:fc:0e:a6:03:74:08:66:01:99:c8: f5:67:7f:e1:ea:37:d0:cc:42:0a:ec:8e:93:e1:e1: c9:1f:f9:4d:a6:0f:61:24:63:5d:f0:e2:cd:c4:6c: f1:a5:59:9d:8c:2e:06:45:6e:44:f3:9a:51:46:cd: 20:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A8:DA:80:34:BC:C8:44:AE:5E:DB:D1:2B:18:43:FB:05:4D:61:52 X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:f9:53:79:20:94:3b:d6:11:f1:c8:fa:30:57:57:6a:95:a3: ac:92:b8:37:46:30:3f:ef:d2:bc:d6:32:1d:2f:a3:a1:a1:c6: a1:99:07:15:8c:f0:18:71:19:4c:0f:71:e4:bc:a6:0f:ed:f0: de:85:23:d4:91:3b:f5:e3:ad:a5:8a:d7:78:d9:7c:5c:2b:b0: 73:11:d1:2e:73:1d:96:4e:36:60:22:84:fc:0b:b4:b0:68:0e: 78:3f:a8:6c:b7:33:79:73:c9:7b:77:fe:99:3d:4e:f0:9f:f5: 1a:df:a9:13:ed:00:2a:b7:8d:1d:0a:60:64:dd:ac:9f:97:0c: f5:1f:3c:5b:74:5c:ae:20:c0:a6:f3:33:32:cc:27:39:e3:86: 29:1f:55:b6:aa:e7:18:03:b6:d0:f8:36:66:4b:01:4c:75:78: 91:cc:07:e5:54:08:d0:d8:4b:0d:87:f6:ab:33:ec:8c:44:82: 0e:6e:af:85:19:15:0c:cf:be:d1:f3:3c:9d:27:b4:1a:16:f8: 4e:f6:f7:88:4e:06:4b:a9:07:60:47:b0:06:96:cf:4e:21:04: 16:61:21:87:0b:e5:4f:c1:20:e2:81:83:15:1e:cc:04:4a:9f: a2:04:03:a2:f3:09:fa:42:81:6e:08:9e:f0:a8:2c:0f:64:3d: 72:ec:dd:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjYwNzI0MTY1NzM3WhcNMjYwNzMxMTY1NzM3WjAYMRYwFAYD VQQDEw02YTYzOTk4MS1mMDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi+HRAsF0oNWX30bEpwBcmyl7YaPZ9Iogi7T2++Atl4s7kmWt25o9era7A1q7 wt/HMza+50czPz40FLxzXlgEeBynFmxKebb74Oi6Iq21FdQHa/CN1D7m+4bnGV/S iKd6owFeRZM/tZ16Ea8CXGlx0FfqfFRxMCc+HjdakKFftxYkx692K//rBD0Y5wbc 4R4IqidsIuZt9LIwZNTbXOuSEVFwSV2RD9oEcAQRT48zHj2KKdTfPDBeCsw21rQT qD8/MXrdJeYx1/wOpgN0CGYBmcj1Z3/h6jfQzEIK7I6T4eHJH/lNpg9hJGNd8OLN xGzxpVmdjC4GRW5E85pRRs0gawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD6o2oA0 vMhErl7b0SsYQ/sFTWFSMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE/lTeSCUO9YR8cj6MFdXapWjrJK4N0YwP+/SvNYyHS+joaHGoZkHFYzwGHEZ TA9x5LymD+3w3oUj1JE79eOtpYrXeNl8XCuwcxHRLnMdlk42YCKE/Au0sGgOeD+o bLczeXPJe3f+mT1O8J/1Gt+pE+0AKreNHQpgZN2sn5cM9R88W3RcriDApvMzMswn OeOGKR9VtqrnGAO20Pg2ZksBTHV4kcwH5VQI0NhLDYf2qzPsjESCDm6vhRkVDM++ 0fM8nSe0Ghb4Tvb3iE4GS6kHYEewBpbPTiEEFmEhhwvlT8Eg4oGDFR7MBEqfogQD ovMJ+kKBbgie8KgsD2Q9cuzdQw== -----END CERTIFICATE-----Generated at Fri Jul 24 21:08:52 2026 by rpki-client