
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft
File: tgxHDTEgWHLntvv9aE83B01-nXM.mft (raw, json)
Hash identifier: BvMC3HOQx2bUT1mCW2WQfKM7krW1TOQ2t4xdo4WHha4=
Subject key identifier: A0:F6:AC:92:9E:9B:42:3A:08:0E:9F:58:6E:DC:55:E6:1E:94:E4:C8
Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73
Certificate issuer: /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73
Certificate serial: 35B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft
Manifest number: 3597
Signing time: Thu 24 Sep 2026 14:53:02 +0000
Manifest this update: Thu 24 Sep 2026 14:53:02 +0000
Manifest next update: Thu 01 Oct 2026 14:53:02 +0000
Files and hashes: 1: tgxHDTEgWHLntvv9aE83B01-nXM.crl (hash: NMPQWXqTPaka9x6JXQVsc0BBMLeRE+YcyZgK8jKwISg=)
2: 02E51B981EC611F19DFCC36D263D8C67.roa (hash: 3UnVZTaINOUt0RI2EU+GTPI4vVuMr3RqINBZbK3LeNs=)
3: 4625A21A68B511EA9EF7951AC4F9AE02.roa (hash: 0siYH+ngb9Vw3waf4JZmEzwqdvrjCQEL3iCYs6nr71s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl
rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:53:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13744 (0x35b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C2F, serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73
Validity
Not Before: Sep 24 14:53:02 2026 GMT
Not After : Oct 1 14:53:02 2026 GMT
Subject: CN=6ab5394e-7277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:ad:56:54:69:42:1a:5e:31:dd:de:6d:97:
89:f2:a2:0b:37:4b:29:49:85:25:fa:66:2b:cb:4f:
57:d5:b4:59:bc:7b:2a:72:91:7f:e4:9a:22:c4:c7:
68:5d:19:98:b4:42:f9:40:70:8e:0c:63:0e:d7:be:
5a:32:7b:43:1b:29:33:a4:60:01:de:b5:37:cf:4c:
84:7c:a3:a0:bf:a0:e3:26:97:48:cb:93:7f:66:a9:
61:41:61:dd:59:73:33:f7:e9:24:6b:56:0b:72:67:
f8:16:fd:bf:1b:42:06:57:97:22:8e:42:d4:dc:98:
a4:de:87:17:ab:7c:e3:38:d0:ce:0c:43:80:6c:b9:
30:84:d3:b9:55:42:1b:c6:4f:1c:61:42:10:16:48:
31:45:10:74:92:3e:fd:42:b4:1f:b2:23:e6:11:43:
1f:d0:10:f5:e8:f5:35:30:99:93:32:88:d0:85:9e:
28:f2:1f:57:e3:b7:37:d0:77:3d:d3:89:a5:2a:7d:
25:db:84:30:6a:40:cf:00:0c:db:e4:2f:96:3c:83:
57:59:3d:23:c1:35:6e:c6:0c:aa:bd:b8:97:a2:c5:
97:54:9d:ae:c7:8f:56:d6:ae:f6:ac:2c:9a:07:b3:
7b:de:99:43:20:d8:f4:90:eb:4e:66:9c:b9:a4:64:
ed:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F6:AC:92:9E:9B:42:3A:08:0E:9F:58:6E:DC:55:E6:1E:94:E4:C8
X509v3 Authority Key Identifier:
keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:02:4e:bf:b4:3b:38:3b:ad:c5:21:2f:37:2c:6f:a1:16:57:
b1:f3:7a:31:aa:5e:46:f6:54:b2:b3:0c:3f:ff:ba:8a:15:83:
7f:89:48:05:81:98:a7:32:5d:19:43:ff:29:c5:1f:34:82:11:
c6:ae:cd:93:90:75:74:26:cc:70:fb:f2:f1:60:34:42:ff:07:
f8:9c:93:73:b6:23:f5:82:44:fc:88:53:d8:75:6f:89:d3:f7:
9d:30:d2:67:dd:93:63:7b:e8:4b:bf:61:33:72:45:ae:fd:39:
9a:c5:6d:80:cc:4f:7e:74:d5:1a:5a:15:5d:38:27:de:57:b4:
6a:b8:f0:1e:b1:f0:e3:dc:bc:78:e5:aa:f7:1a:ed:09:b6:15:
a8:6d:c9:3f:9f:71:46:26:fe:49:29:5f:c9:f6:59:47:a1:b4:
ac:99:a4:ce:73:79:e0:2d:01:71:d7:5d:6b:a0:76:18:ef:68:
44:d4:03:45:47:35:94:a9:6f:4a:a7:d3:ce:fb:3a:d9:0f:14:
a4:53:bb:e0:e7:e3:cd:b7:41:94:5a:cf:7f:cf:1e:a5:43:38:
87:73:0f:27:b1:e3:0a:0d:8a:67:12:14:72:e0:59:00:7d:ca:
28:a2:01:c6:77:9c:0c:c5:1a:75:15:52:51:9b:d8:da:e6:bf:
79:2e:7b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:19:54 2026 by rpki-client