$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json) Hash identifier: +AqwvjP2PtNRu1EHgsvMWcRPrqXLnrXS8GhLX+0IvR8= Subject key identifier: CF:CF:52:13:BA:AE:D7:84:C6:D6:16:8C:67:DF:59:2A:18:02:1A:A7 Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Certificate serial: 1A80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft Manifest number: 183D Signing time: Mon 02 Mar 2026 02:36:35 +0000 Manifest this update: Mon 02 Mar 2026 02:36:34 +0000 Manifest next update: Mon 09 Mar 2026 02:36:34 +0000 Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: byL4gs0fgY7AzyLaFdmH1DyFQcXzioakBckUC26oEPE=) 2: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: mAI+w5MJltTPoLHCV1t34FNAjUXQLcbk8DhNQ3Alegw=) 3: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: cWhKsGGtwm24L2b24qEiOJQYknotmIIZJa7i5F5KPHg=) 4: A865A1925B1611F083088661C4F9AE02.roa (hash: 2IUNVUDvVcfHXyE54Zp6qTjDmEVqUm9kf4i2mX6/zX4=) 5: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: Br+Yh3Miw3+3u+15blKMFIN8mMQA+4yr6RfTrCX61aY=) 6: 11E8BC20FFE611F0A90394AA756F56BC.roa (hash: p9ksmtHHVSYaljBwVhsvsYUa9PkpSJENVH2dxyWdYsg=) 7: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: JtaNsAVPLe7G1DcQvRskSfK/91+ur/u1SIY8DTdFa1o=) 8: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 4OyLgz5MRwPAxGcF1j5OxwWLAe68/1HWOj58azhiKRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6784 (0x1a80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8 Validity Not Before: Mar 2 02:36:34 2026 GMT Not After : Mar 9 02:36:34 2026 GMT Subject: CN=69a4f7b3-6535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a3:9c:34:92:a9:9d:65:7b:6b:06:b5:39:35: bb:70:a2:9a:5a:96:1a:08:44:4c:f2:a6:a3:4c:ff: cd:5e:4e:58:63:b6:35:dc:b7:2e:f9:cb:36:d8:5e: a4:08:89:e5:c9:92:7a:8f:b6:f1:dd:3c:fb:b9:78: b7:a3:b7:29:46:15:96:35:35:65:d6:84:e7:bc:2d: 45:4a:58:50:f4:a3:a3:0d:4d:4c:75:af:cb:62:43: 72:5c:27:37:fc:31:8b:f5:a5:d2:2a:26:38:d8:a9: 70:79:c4:2e:d9:fe:30:f1:b0:d6:b5:62:70:8f:cb: 78:59:88:0c:96:87:be:07:a2:2b:5e:5e:2d:d2:ec: 97:63:35:ab:0b:70:d0:c4:28:31:c9:f0:c7:bb:f5: 64:41:b6:b7:49:3c:fe:26:43:f4:ea:f7:93:b3:89: 16:c3:8e:db:b3:33:ac:cf:38:c1:44:96:d5:38:f2: bd:6a:f8:ea:48:ad:63:a6:0b:80:5b:f5:d3:2c:b3: 25:80:13:4a:a6:1b:e2:e4:41:5e:a0:3f:23:ef:a4: 3e:3f:76:17:47:cc:af:a5:6f:2a:f3:49:42:db:dc: a9:9b:94:67:f7:67:6f:1c:0f:47:be:36:93:bb:09: 41:95:fb:74:b4:9b:43:43:b5:5c:5d:74:8c:6a:c5: 16:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CF:52:13:BA:AE:D7:84:C6:D6:16:8C:67:DF:59:2A:18:02:1A:A7 X509v3 Authority Key Identifier: keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:80:e8:69:2b:38:eb:51:bc:d3:7f:14:fa:05:da:0f:af:4a: fd:63:ae:dc:06:30:2c:a5:b3:54:48:8b:25:21:f4:ad:76:cd: 3c:b7:3d:11:3c:0e:82:a1:2c:a1:a2:22:c9:27:bf:8c:6f:d4: 3f:77:e3:c2:bf:f1:ea:04:67:9d:8a:b7:80:df:1d:5d:96:50: 82:5c:94:33:c7:e3:c1:23:ea:c8:70:55:3c:0b:47:cb:7b:e8: a9:5c:c5:fb:ff:c9:3d:20:69:df:ae:79:f1:1e:6d:9e:4a:67: 29:2a:1f:d0:a2:a3:4f:9f:60:89:50:f6:97:c4:4a:0b:aa:7d: ce:9e:c0:f3:b3:3a:3c:60:e8:2e:94:10:48:81:f6:04:9f:71: ba:25:ad:6f:60:80:78:bf:d5:b6:bd:d3:53:78:2e:46:b9:73: ac:29:0e:37:9b:32:ad:16:4c:62:a9:17:4a:52:31:aa:d8:0e: 77:d1:9c:07:b3:2c:75:15:b9:38:59:23:c9:74:0a:78:b5:be: fb:3f:3a:5f:e2:da:ae:db:31:2c:34:ed:43:8b:75:54:1e:c2: f1:8f:f9:a1:7e:cc:94:25:59:c0:2a:66:4a:03:d6:86:06:03: ad:d0:84:14:3f:44:f0:b7:a5:48:67:54:ed:f3:30:c1:66:80: e6:fb:dc:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKDREQjAzNUQzNzRDODQxMkNFNjgwRDlEQTBBREJFQzA2 NDI5RDg4QjgwHhcNMjYwMzAyMDIzNjM0WhcNMjYwMzA5MDIzNjM0WjAYMRYwFAYD VQQDEw02OWE0ZjdiMy02NTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKOcNJKpnWV7awa1OTW7cKKaWpYaCERM8qajTP/NXk5YY7Y13Lcu+cs22F6k CInlyZJ6j7bx3Tz7uXi3o7cpRhWWNTVl1oTnvC1FSlhQ9KOjDU1Mda/LYkNyXCc3 /DGL9aXSKiY42KlwecQu2f4w8bDWtWJwj8t4WYgMloe+B6IrXl4t0uyXYzWrC3DQ xCgxyfDHu/VkQba3STz+JkP06veTs4kWw47bszOszzjBRJbVOPK9avjqSK1jpguA W/XTLLMlgBNKphvi5EFeoD8j76Q+P3YXR8yvpW8q80lC29ypm5Rn92dvHA9HvjaT uwlBlft0tJtDQ7VcXXSMasUWswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM/PUhO6 rteExtYWjGffWSoYAhqnMB8GA1UdIwQYMBaAFE2wNdN0yEEs5oDZ2grb7AZCnYi4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC83MjU4M0FGQTY5 NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFTem1nTm5hQ3R2c0JrS2Rp TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiQTEwM1RJUVN6bWdObmFDdHZzQmtLZGlMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC83MjU4M0FGQTY5NTcxMUU4QTQyQkU2ODBDNEY5QUUwMi9UYkExMDNUSVFT em1nTm5hQ3R2c0JrS2RpTGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMIDoaSs461G8038U+gXaD69K/WOu3AYwLKWzVEiLJSH0rXbNPLc9ETwOgqEs oaIiySe/jG/UP3fjwr/x6gRnnYq3gN8dXZZQglyUM8fjwSPqyHBVPAtHy3voqVzF +//JPSBp36558R5tnkpnKSof0KKjT59giVD2l8RKC6p9zp7A87M6PGDoLpQQSIH2 BJ9xuiWtb2CAeL/Vtr3TU3guRrlzrCkON5syrRZMYqkXSlIxqtgOd9GcB7MsdRW5 OFkjyXQKeLW++z86X+LartsxLDTtQ4t1VB7C8Y/5oX7MlCVZwCpmSgPWhgYDrdCE FD9E8LelSGdU7fMwwWaA5vvcNA== -----END CERTIFICATE-----Generated at Mon Mar 2 18:30:23 2026 by rpki-client