$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft File: tgxHDTEgWHLntvv9aE83B01-nXM.mft (raw, json) Hash identifier: r+HVrZ39IkXi0tqxzGKoenh2MUvNgc//DATNgE7/w28= Subject key identifier: F4:60:2F:59:F0:C9:24:0D:87:A0:6B:3F:14:B4:BC:9D:F9:66:95:C3 Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 Certificate issuer: /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Certificate serial: 34F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft Manifest number: 34E8 Signing time: Thu 06 Nov 2025 14:46:45 +0000 Manifest this update: Thu 06 Nov 2025 14:46:44 +0000 Manifest next update: Thu 13 Nov 2025 14:46:44 +0000 Files and hashes: 1: tgxHDTEgWHLntvv9aE83B01-nXM.crl (hash: toeKpTgrvll8l9s4M6/N04cnoSPYm4VtM1gZ4B0kyNE=) 2: 4625A21A68B511EA9EF7951AC4F9AE02.roa (hash: jnjl28FUTY22XdJzPEZKhv2fC9E15M9c14yjgyQaqxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 14:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13561 (0x34f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F, serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Validity Not Before: Nov 6 14:46:44 2025 GMT Not After : Nov 13 14:46:44 2025 GMT Subject: CN=690cb4d5-81af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:eb:f2:1e:89:5a:7b:6b:85:bf:0e:c6:79:9a: be:60:0c:d0:00:0f:13:30:f2:9e:8e:3e:85:4f:f9: 0a:ad:cb:61:fa:29:1b:0e:2b:22:1a:9e:f7:99:35: a5:f1:f2:d4:bf:ed:e7:9c:b0:0d:6f:87:f1:49:5f: c0:ea:e0:d7:88:cf:38:97:c5:eb:de:33:72:68:6f: 77:4e:9a:e3:76:49:3f:ec:32:04:0d:4b:a3:5b:62: ab:c4:c9:cc:e1:01:b6:17:72:69:45:be:00:45:21: 4c:07:a2:d7:aa:2f:4b:35:10:d3:d3:a6:62:0e:67: 46:da:44:c7:8e:3d:5d:db:b4:8a:aa:d1:81:a9:d8: cf:c3:5a:4f:27:8f:f5:91:39:19:dd:a5:61:b1:2e: a9:1a:88:af:44:59:14:7e:75:d6:15:52:73:18:cf: 85:23:a7:3b:49:a3:6d:bb:28:df:3b:d9:a9:77:13: 6a:10:e3:11:3f:8b:35:b9:10:aa:38:d1:20:43:9e: 07:23:45:eb:35:3a:e5:1d:f0:de:41:c9:2c:58:99: 81:14:36:a2:ff:d3:a4:d3:a9:85:7f:36:50:f1:e4: 02:5b:e2:fd:6e:f2:89:1d:69:de:97:ee:3a:81:59: 71:ff:4a:9d:62:ac:76:62:c0:6f:49:71:87:dc:fd: 38:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:60:2F:59:F0:C9:24:0D:87:A0:6B:3F:14:B4:BC:9D:F9:66:95:C3 X509v3 Authority Key Identifier: keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5e:a7:0c:2b:70:f3:ac:c4:ef:f1:74:95:8e:30:04:49:4d: a2:e2:0b:f8:a1:98:ee:ba:db:e5:eb:bd:92:a5:44:99:ec:60: af:4a:cc:65:e2:2c:ad:aa:3a:69:1d:92:b0:74:d0:f9:ed:3e: 5d:1e:e4:43:3f:25:10:43:f0:82:c3:48:f7:9c:53:83:4c:8a: 77:14:ff:68:b7:45:2b:39:79:aa:95:8d:64:43:48:d2:d0:c2: f9:e6:c7:3f:9b:46:fd:fb:b0:7d:98:0c:e6:9c:65:f2:2a:6a: 94:5d:91:e5:c7:f3:38:d3:20:79:c1:2d:29:c9:fa:e5:32:26: 58:58:a7:f8:b6:65:f0:4b:de:37:7b:90:99:6a:14:ae:b6:d3: 59:65:84:0e:4f:0e:27:ce:21:9b:e2:d7:60:9b:ce:16:14:22: 90:c3:21:f5:db:20:fb:b0:2d:b9:2f:19:1f:2c:c0:97:44:45: 78:e9:c9:52:95:85:7d:63:ac:02:d6:23:80:a0:79:c4:9c:fd: 3b:c5:57:bf:0c:61:79:97:7f:ea:6c:83:e1:0f:be:7b:c2:2b: 2a:54:24:ea:84:ca:58:c6:ba:c6:22:15:6d:b9:20:b4:78:18: b3:e5:b5:01:ee:f1:b0:0d:81:8f:d6:8b:82:55:c9:8e:ff:ca: 04:c3:1d:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDMkYxMTAvBgNVBAUTKEI2MEM0NzBEMzEyMDU4NzJFN0I2RkJGRDY4NEYzNzA3 NEQ3RTlENzMwHhcNMjUxMTA2MTQ0NjQ0WhcNMjUxMTEzMTQ0NjQ0WjAYMRYwFAYD VQQDEw02OTBjYjRkNS04MWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApevyHolae2uFvw7GeZq+YAzQAA8TMPKejj6FT/kKrcth+ikbDisiGp73mTWl 8fLUv+3nnLANb4fxSV/A6uDXiM84l8Xr3jNyaG93Tprjdkk/7DIEDUujW2KrxMnM 4QG2F3JpRb4ARSFMB6LXqi9LNRDT06ZiDmdG2kTHjj1d27SKqtGBqdjPw1pPJ4/1 kTkZ3aVhsS6pGoivRFkUfnXWFVJzGM+FI6c7SaNtuyjfO9mpdxNqEOMRP4s1uRCq ONEgQ54HI0XrNTrlHfDeQcksWJmBFDai/9Ok06mFfzZQ8eQCW+L9bvKJHWnel+46 gVlx/0qdYqx2YsBvSXGH3P04BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRgL1nw ySQNh6BrPxS0vJ35ZpXDMB8GA1UdIwQYMBaAFLYMRw0xIFhy57b7/WhPNwdNfp1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEMyRi83MDVGNTJGQzFE OTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dITG50dnY5YUU4M0IwMS1u WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RneEhEVEVnV0hMbnR2djlhRTgzQjAxLW5YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEMyRi83MDVGNTJGQzFEOTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dI TG50dnY5YUU4M0IwMS1uWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdXqcMK3DzrMTv8XSVjjAESU2i4gv4oZjuutvl672SpUSZ7GCvSsxl 4iytqjppHZKwdND57T5dHuRDPyUQQ/CCw0j3nFODTIp3FP9ot0UrOXmqlY1kQ0jS 0ML55sc/m0b9+7B9mAzmnGXyKmqUXZHlx/M40yB5wS0pyfrlMiZYWKf4tmXwS943 e5CZahSuttNZZYQOTw4nziGb4tdgm84WFCKQwyH12yD7sC25LxkfLMCXREV46clS lYV9Y6wC1iOAoHnEnP07xVe/DGF5l3/qbIPhD757wisqVCTqhMpYxrrGIhVtuSC0 eBiz5bUB7vGwDYGP1ouCVcmO/8oEwx0c -----END CERTIFICATE-----Generated at Fri Nov 7 14:21:51 2025 by rpki-client