$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft File: tgxHDTEgWHLntvv9aE83B01-nXM.mft (raw, json) Hash identifier: 29YubOQXjLdAqXDcQNJ3idUB1+76PZIXQjPSjJ4rvtA= Subject key identifier: 3E:CB:6F:EB:F7:63:90:E4:90:88:AC:42:1A:36:B9:62:D1:07:7E:87 Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 Certificate issuer: /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Certificate serial: 35AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft Manifest number: 3595 Signing time: Sun 20 Sep 2026 14:52:40 +0000 Manifest this update: Sun 20 Sep 2026 14:52:40 +0000 Manifest next update: Sun 27 Sep 2026 14:52:40 +0000 Files and hashes: 1: tgxHDTEgWHLntvv9aE83B01-nXM.crl (hash: AFPeiT7estmFVXvdP4a8Xy5KDocqAysW8F9B8rLfE1U=) 2: 02E51B981EC611F19DFCC36D263D8C67.roa (hash: 3UnVZTaINOUt0RI2EU+GTPI4vVuMr3RqINBZbK3LeNs=) 3: 4625A21A68B511EA9EF7951AC4F9AE02.roa (hash: 0siYH+ngb9Vw3waf4JZmEzwqdvrjCQEL3iCYs6nr71s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13742 (0x35ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F, serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Validity Not Before: Sep 20 14:52:40 2026 GMT Not After : Sep 27 14:52:40 2026 GMT Subject: CN=6aaff338-1c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:55:e5:d8:b3:5c:fd:b0:17:6b:40:81:cb:a9: ba:19:8c:84:73:2f:c4:62:2b:61:22:8e:dc:d1:27: 3a:36:dc:8c:7b:99:17:96:95:7e:d3:23:98:a5:a9: d1:ae:1a:4e:b5:f3:94:d0:d5:1d:b8:61:a4:d7:f0: de:ef:4f:6f:45:ac:02:cd:79:71:f3:c5:26:9a:4c: db:16:40:e8:c9:2d:78:b8:55:84:9c:0a:6c:e8:f2: e0:02:78:fa:c6:93:50:93:d5:55:d3:fd:23:84:2f: 59:6e:fe:7e:99:a9:42:37:a0:89:e4:8d:0a:78:e4: ae:b0:96:ae:77:28:b0:21:cf:8f:b4:40:40:f9:bc: 24:ae:86:30:7c:74:e4:3a:9b:a4:01:4b:03:71:40: 3d:51:2d:e0:f9:7e:7d:f9:d8:0a:88:e7:b6:7f:0f: bd:21:33:be:9e:c8:29:f4:79:a6:4f:9a:22:15:bd: 00:84:33:e4:f9:ce:1f:72:10:80:ff:c4:7b:e7:a2: b6:6d:05:2e:cd:56:10:54:64:8f:af:5c:cc:98:e9: fa:6f:a8:18:6e:7b:e8:0f:b0:d5:c6:3b:8b:fe:5a: 17:d6:a4:05:cc:c7:1a:a5:54:cf:8b:98:0c:2c:43: 78:38:61:b8:8f:eb:bf:31:56:1d:84:8f:06:b9:fa: f7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CB:6F:EB:F7:63:90:E4:90:88:AC:42:1A:36:B9:62:D1:07:7E:87 X509v3 Authority Key Identifier: keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:bc:3e:b7:07:e9:22:3b:58:d9:fa:7a:32:0a:bc:74:e4:d5: eb:3f:a7:e3:4b:0f:30:54:c6:91:95:c0:41:93:f1:3f:ae:79: f5:03:8c:03:e1:c8:da:e6:81:67:ca:d9:19:db:27:10:78:ba: d5:d2:49:c6:33:08:5f:71:4d:9c:99:17:6b:13:ae:0b:11:e1: 82:52:c6:ca:f7:47:57:e6:a1:13:74:82:90:00:52:8e:e3:a3: 63:17:94:85:09:f3:46:61:a9:bf:b1:df:11:01:ef:98:44:16: ea:7d:d2:18:90:1d:60:86:2c:a8:66:ff:c7:ee:93:b2:c7:95: b5:71:37:95:10:c3:27:3c:be:c3:ec:ab:24:f9:ba:8c:01:74: 68:f9:9e:79:cf:d6:0a:e4:b9:1b:4e:0f:30:b1:4f:3d:70:59: 25:c3:53:37:9e:27:6b:63:c6:92:4e:e1:b3:e4:ab:1d:a9:c9: e8:3b:62:92:d0:03:55:21:a6:db:23:d4:83:4d:17:2b:8c:27: 94:f7:1c:35:af:9b:56:ec:7c:a0:fe:50:d6:32:6b:25:f8:ef: 31:94:bf:25:53:a7:22:1b:92:20:82:99:f6:b2:1d:0b:37:50: a2:cf:1e:9e:7f:c9:27:38:de:ce:f6:a9:59:68:67:f1:8e:a7: 28:89:0c:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDMkYxMTAvBgNVBAUTKEI2MEM0NzBEMzEyMDU4NzJFN0I2RkJGRDY4NEYzNzA3 NEQ3RTlENzMwHhcNMjYwOTIwMTQ1MjQwWhcNMjYwOTI3MTQ1MjQwWjAYMRYwFAYD VQQDEw02YWFmZjMzOC0xYzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1Xl2LNc/bAXa0CBy6m6GYyEcy/EYithIo7c0Sc6NtyMe5kXlpV+0yOYpanR rhpOtfOU0NUduGGk1/De709vRawCzXlx88UmmkzbFkDoyS14uFWEnAps6PLgAnj6 xpNQk9VV0/0jhC9Zbv5+malCN6CJ5I0KeOSusJaudyiwIc+PtEBA+bwkroYwfHTk OpukAUsDcUA9US3g+X59+dgKiOe2fw+9ITO+nsgp9HmmT5oiFb0AhDPk+c4fchCA /8R756K2bQUuzVYQVGSPr1zMmOn6b6gYbnvoD7DVxjuL/loX1qQFzMcapVTPi5gM LEN4OGG4j+u/MVYdhI8Gufr3LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD7Lb+v3 Y5DkkIisQho2uWLRB36HMB8GA1UdIwQYMBaAFLYMRw0xIFhy57b7/WhPNwdNfp1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEMyRi83MDVGNTJGQzFE OTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dITG50dnY5YUU4M0IwMS1u WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RneEhEVEVnV0hMbnR2djlhRTgzQjAxLW5YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEMyRi83MDVGNTJGQzFEOTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dI TG50dnY5YUU4M0IwMS1uWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkbw+twfpIjtY2fp6Mgq8dOTV6z+n40sPMFTGkZXAQZPxP6559QOMA+HI2uaB Z8rZGdsnEHi61dJJxjMIX3FNnJkXaxOuCxHhglLGyvdHV+ahE3SCkABSjuOjYxeU hQnzRmGpv7HfEQHvmEQW6n3SGJAdYIYsqGb/x+6TsseVtXE3lRDDJzy+w+yrJPm6 jAF0aPmeec/WCuS5G04PMLFPPXBZJcNTN54na2PGkk7hs+SrHanJ6DtiktADVSGm 2yPUg00XK4wnlPccNa+bVux8oP5Q1jJrJfjvMZS/JVOnIhuSIIKZ9rIdCzdQos8e nn/JJzjezvapWWhn8Y6nKIkMTA== -----END CERTIFICATE-----Generated at Mon Sep 21 23:47:59 2026 by rpki-client