$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft File: tgxHDTEgWHLntvv9aE83B01-nXM.mft (raw, json) Hash identifier: kTu/NJIcbkbaWLbqhzbYA/bWIMQUf6T7wUtuoUc687g= Subject key identifier: 5F:A2:7F:D4:A6:81:38:37:7D:9F:6B:3D:17:B8:35:D5:B4:9F:FA:CF Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 Certificate issuer: /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Certificate serial: 34C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft Manifest number: 34B9 Signing time: Sun 10 Aug 2025 14:53:12 +0000 Manifest this update: Sun 10 Aug 2025 14:53:11 +0000 Manifest next update: Sun 17 Aug 2025 14:53:11 +0000 Files and hashes: 1: tgxHDTEgWHLntvv9aE83B01-nXM.crl (hash: xav2xBGyVpAWcJ61DHy5CBflSwG/RY+9bm7GjXV2jQc=) 2: 4625A21A68B511EA9EF7951AC4F9AE02.roa (hash: RwfQrmvNnRQyIUXieZHGYDJzOJ942Gv6AiVFyJelDe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13513 (0x34c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F, serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Validity Not Before: Aug 10 14:53:11 2025 GMT Not After : Aug 17 14:53:11 2025 GMT Subject: CN=6898b257-6851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a4:ef:b2:09:18:b5:70:e3:ca:6f:8b:12:33: a4:7e:f8:98:9a:3f:56:91:d8:fc:19:2a:4e:84:ce: 85:19:b3:13:22:fb:21:24:a2:de:d7:4b:4e:a4:bf: c6:e3:bb:ec:c5:bb:a7:6d:80:8c:06:e6:0d:f2:9f: 66:c8:38:76:df:8e:2b:4e:f5:b4:e6:8b:3f:5d:c2: 00:b6:da:4d:05:33:fa:f1:f5:41:e3:9c:2d:c2:fa: 88:d2:12:32:e9:53:39:a7:4e:fb:4e:b3:66:e4:80: 43:26:c4:94:53:8d:4b:08:10:d5:e8:8c:cc:79:82: 79:58:9d:34:01:ba:15:5f:e3:09:98:67:53:8a:ab: 6b:df:ec:f7:90:f1:1e:55:84:8b:3f:8e:6e:50:05: ca:3d:b1:ec:02:a4:a7:6c:c8:8b:e6:bb:25:66:a1: 0f:55:0d:e8:43:61:63:5b:e2:99:1b:a7:c6:d8:2a: eb:f4:58:5e:b9:2d:80:32:d3:de:bd:4e:4b:64:29: 85:e3:3b:98:28:ba:5c:9e:db:d9:a5:af:76:89:17: 0d:e1:c6:c2:5e:54:73:53:58:17:50:40:33:24:dc: 1b:ca:28:77:bf:f6:38:e2:e1:59:69:30:a0:bb:ca: f8:aa:d7:4b:98:1c:69:77:19:a3:00:f9:f3:81:ec: 36:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A2:7F:D4:A6:81:38:37:7D:9F:6B:3D:17:B8:35:D5:B4:9F:FA:CF X509v3 Authority Key Identifier: keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:78:d6:82:72:26:2c:5f:cf:b6:ea:b2:d3:e6:c4:11:fe:4b: 32:2c:62:2a:fe:65:1a:00:94:78:a4:7a:8e:e8:06:e8:02:0a: 3a:b7:44:ca:21:e0:18:05:0d:a3:d9:63:8b:ce:81:52:88:97: 5a:e0:91:74:76:37:3b:63:75:c8:49:da:cf:c5:b0:0f:b2:21: ac:5c:b2:f4:26:72:da:a3:be:68:21:ff:4a:43:9b:54:9b:e3: 6c:1c:34:4e:0a:6f:b9:31:3a:36:2b:37:6d:c6:68:6c:62:4e: aa:48:a2:bb:3b:93:58:b4:72:33:70:0b:57:2d:66:55:b1:81: a5:ab:a5:55:3b:17:1a:85:86:d2:9f:55:b7:63:37:d2:80:58: 4d:dd:10:33:7f:4e:89:16:dc:90:3b:d1:3c:ae:8c:56:72:ea: fe:8e:82:00:cb:8f:bc:cd:43:e0:4e:a0:82:cf:bf:8e:9b:43: b0:8e:59:c9:d8:bf:e8:4e:2e:a4:d4:48:8b:1f:1d:ec:67:b1: 34:08:32:b9:96:9b:fd:2a:2c:a9:ae:00:ee:43:b0:a6:61:4c: 2c:04:61:cc:10:7a:bb:08:f4:a0:e0:21:d6:85:a6:fc:19:17: 6d:14:a0:99:ca:c2:63:a2:9d:99:9a:d3:e9:28:fc:c6:bb:0d: 43:05:90:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDMkYxMTAvBgNVBAUTKEI2MEM0NzBEMzEyMDU4NzJFN0I2RkJGRDY4NEYzNzA3 NEQ3RTlENzMwHhcNMjUwODEwMTQ1MzExWhcNMjUwODE3MTQ1MzExWjAYMRYwFAYD VQQDEw02ODk4YjI1Ny02ODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6TvsgkYtXDjym+LEjOkfviYmj9Wkdj8GSpOhM6FGbMTIvshJKLe10tOpL/G 47vsxbunbYCMBuYN8p9myDh2344rTvW05os/XcIAttpNBTP68fVB45wtwvqI0hIy 6VM5p077TrNm5IBDJsSUU41LCBDV6IzMeYJ5WJ00AboVX+MJmGdTiqtr3+z3kPEe VYSLP45uUAXKPbHsAqSnbMiL5rslZqEPVQ3oQ2FjW+KZG6fG2Crr9FheuS2AMtPe vU5LZCmF4zuYKLpcntvZpa92iRcN4cbCXlRzU1gXUEAzJNwbyih3v/Y44uFZaTCg u8r4qtdLmBxpdxmjAPnzgew2pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+if9Sm gTg3fZ9rPRe4NdW0n/rPMB8GA1UdIwQYMBaAFLYMRw0xIFhy57b7/WhPNwdNfp1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEMyRi83MDVGNTJGQzFE OTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dITG50dnY5YUU4M0IwMS1u WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RneEhEVEVnV0hMbnR2djlhRTgzQjAxLW5YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEMyRi83MDVGNTJGQzFEOTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dI TG50dnY5YUU4M0IwMS1uWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4eNaCciYsX8+26rLT5sQR/ksyLGIq/mUaAJR4pHqO6AboAgo6t0TK IeAYBQ2j2WOLzoFSiJda4JF0djc7Y3XISdrPxbAPsiGsXLL0JnLao75oIf9KQ5tU m+NsHDROCm+5MTo2KzdtxmhsYk6qSKK7O5NYtHIzcAtXLWZVsYGlq6VVOxcahYbS n1W3YzfSgFhN3RAzf06JFtyQO9E8roxWcur+joIAy4+8zUPgTqCCz7+Om0OwjlnJ 2L/oTi6k1EiLHx3sZ7E0CDK5lpv9KiyprgDuQ7CmYUwsBGHMEHq7CPSg4CHWhab8 GRdtFKCZysJjop2ZmtPpKPzGuw1DBZAP -----END CERTIFICATE-----Generated at Sun Aug 10 21:02:27 2025 by rpki-client