$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft File: tgxHDTEgWHLntvv9aE83B01-nXM.mft (raw, json) Hash identifier: PjLCvsapOefeUvrFDFyDeCnQbyVm6kSoeaFqlQJUJoM= Subject key identifier: A0:30:8B:84:5E:E4:68:C8:9E:11:EB:7B:AC:45:DE:68:2A:E0:FB:4C Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 Certificate issuer: /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Certificate serial: 3492 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft Manifest number: 3482 Signing time: Thu 24 Apr 2025 14:54:34 +0000 Manifest this update: Thu 24 Apr 2025 14:54:33 +0000 Manifest next update: Thu 01 May 2025 14:54:33 +0000 Files and hashes: 1: tgxHDTEgWHLntvv9aE83B01-nXM.crl (hash: m1/XT3JOrQ7P0m//lZuedR2BZJkmrJ8qLwGF2gU7Hfw=) 2: 4625A21A68B511EA9EF7951AC4F9AE02.roa (hash: RwfQrmvNnRQyIUXieZHGYDJzOJ942Gv6AiVFyJelDe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13458 (0x3492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F, serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Validity Not Before: Apr 24 14:54:33 2025 GMT Not After : May 1 14:54:33 2025 GMT Subject: CN=680a50a9-de45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f0:82:dd:fa:f3:10:b3:48:0a:bc:55:e1:04: 50:a6:f8:24:1a:f6:41:5e:2f:83:fb:d3:43:e2:94: b2:94:07:e8:7c:64:8f:ce:33:03:59:f2:9f:53:3e: 9a:22:a0:bc:e7:41:10:77:b3:d2:6c:bd:76:ce:9a: b7:ca:31:62:8f:83:6d:2d:aa:ae:57:54:3f:53:75: 95:33:22:e9:1a:40:e6:27:a4:c4:e4:18:e7:d4:47: 46:f1:79:41:c0:eb:1c:eb:79:8d:d2:22:e8:44:bc: 99:87:33:30:d0:00:bb:3f:f4:13:d9:36:c7:45:63: f0:c2:6d:49:71:b3:2a:e7:a6:1e:21:9a:94:14:0b: 70:f0:c2:5a:25:c0:63:70:66:a1:1a:8e:6b:e1:72: 0b:8d:8d:6b:00:c1:0d:f4:6d:8f:05:7d:4c:9a:d3: 82:c9:8f:16:37:97:14:8d:9f:89:3d:75:c3:e9:6e: 63:74:ec:9a:84:7e:2d:99:7a:de:b9:95:f4:ba:d9: 38:58:ea:19:97:4d:18:c2:97:4f:08:e7:78:66:03: 69:1a:6d:b5:90:73:cf:55:e0:e7:cb:43:1e:8b:70: 8c:1f:92:1d:69:27:90:88:9d:c4:a1:65:c3:3b:d8: c8:5d:d1:61:d4:0b:d5:36:1c:a8:cd:9f:09:57:b1: 13:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:30:8B:84:5E:E4:68:C8:9E:11:EB:7B:AC:45:DE:68:2A:E0:FB:4C X509v3 Authority Key Identifier: keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:20:9a:51:5a:c0:90:b5:4f:dc:43:28:cc:4d:70:74:f1:0d: 7e:f2:46:44:d3:4a:fc:2b:80:7e:ea:f1:6c:1a:5a:ea:31:02: 4f:7c:a9:50:f0:39:cb:2b:cc:e8:5e:8f:d6:57:ee:81:20:b0: fe:4c:53:06:41:82:c1:a1:fc:b2:6b:91:7c:ff:08:15:c8:a7: e3:4c:8c:98:c7:99:bb:50:86:32:e9:b5:22:49:53:2f:66:01: 82:bd:76:6c:bb:25:d1:ce:33:22:39:fd:ce:30:20:96:51:97: 20:95:29:c1:d0:76:f4:99:d1:a7:07:4e:80:55:ac:62:6d:7b: 2d:ca:e4:42:99:5e:b1:c2:59:2e:bf:8e:1a:9f:2d:c5:44:ac: e3:89:9d:52:0b:fb:0a:a8:bf:35:aa:8e:aa:17:43:f0:25:b5: 44:9b:e8:ae:4e:6b:aa:17:c8:79:5f:0b:ed:3d:c5:8b:15:0a: 78:cd:06:05:72:f3:67:81:16:86:73:b7:25:18:f0:1d:ec:e8: 9a:e8:3d:c7:a5:f8:af:5e:71:18:50:78:d6:0a:3d:cc:08:a5: b2:d9:c9:f4:d7:51:d2:c0:a8:3d:f2:3b:2c:50:1d:c5:4a:48: c3:31:01:9a:57:16:48:04:71:7e:66:fe:d2:51:81:fe:ac:cc: 47:da:90:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDMkYxMTAvBgNVBAUTKEI2MEM0NzBEMzEyMDU4NzJFN0I2RkJGRDY4NEYzNzA3 NEQ3RTlENzMwHhcNMjUwNDI0MTQ1NDMzWhcNMjUwNTAxMTQ1NDMzWjAYMRYwFAYD VQQDEw02ODBhNTBhOS1kZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PCC3frzELNICrxV4QRQpvgkGvZBXi+D+9ND4pSylAfofGSPzjMDWfKfUz6a IqC850EQd7PSbL12zpq3yjFij4NtLaquV1Q/U3WVMyLpGkDmJ6TE5Bjn1EdG8XlB wOsc63mN0iLoRLyZhzMw0AC7P/QT2TbHRWPwwm1JcbMq56YeIZqUFAtw8MJaJcBj cGahGo5r4XILjY1rAMEN9G2PBX1MmtOCyY8WN5cUjZ+JPXXD6W5jdOyahH4tmXre uZX0utk4WOoZl00YwpdPCOd4ZgNpGm21kHPPVeDny0Mei3CMH5IdaSeQiJ3EoWXD O9jIXdFh1AvVNhyozZ8JV7ETHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAwi4Re 5GjInhHre6xF3mgq4PtMMB8GA1UdIwQYMBaAFLYMRw0xIFhy57b7/WhPNwdNfp1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEMyRi83MDVGNTJGQzFE OTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dITG50dnY5YUU4M0IwMS1u WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RneEhEVEVnV0hMbnR2djlhRTgzQjAxLW5YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEMyRi83MDVGNTJGQzFEOTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dI TG50dnY5YUU4M0IwMS1uWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDIJpRWsCQtU/cQyjMTXB08Q1+8kZE00r8K4B+6vFsGlrqMQJPfKlQ 8DnLK8zoXo/WV+6BILD+TFMGQYLBofyya5F8/wgVyKfjTIyYx5m7UIYy6bUiSVMv ZgGCvXZsuyXRzjMiOf3OMCCWUZcglSnB0Hb0mdGnB06AVaxibXstyuRCmV6xwlku v44any3FRKzjiZ1SC/sKqL81qo6qF0PwJbVEm+iuTmuqF8h5XwvtPcWLFQp4zQYF cvNngRaGc7clGPAd7Oia6D3HpfivXnEYUHjWCj3MCKWy2cn011HSwKg98jssUB3F SkjDMQGaVxZIBHF+Zv7SUYH+rMxH2pDu -----END CERTIFICATE-----Generated at Sat Apr 26 13:36:13 2025 by rpki-client