$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft File: tgxHDTEgWHLntvv9aE83B01-nXM.mft (raw, json) Hash identifier: XHOHjJhjKMcJWD9YjjbsEuLHfcQ+uvciM8F2P0lSnGA= Subject key identifier: CE:3F:5D:1C:DA:23:EB:10:3A:60:4B:30:9F:83:69:AA:51:32:CD:6A Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 Certificate issuer: /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Certificate serial: 3587 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft Manifest number: 3571 Signing time: Wed 22 Jul 2026 14:56:27 +0000 Manifest this update: Wed 22 Jul 2026 14:56:27 +0000 Manifest next update: Wed 29 Jul 2026 14:56:27 +0000 Files and hashes: 1: tgxHDTEgWHLntvv9aE83B01-nXM.crl (hash: LMlHN8zv+5TXEwszzhc2L9tydiZ8KiaDNw6rsYAdhxI=) 2: 4625A21A68B511EA9EF7951AC4F9AE02.roa (hash: o7npQDRvWWvMoopmjwnmlgxJ/rmN73YKTsYgHTer5PA=) 3: 2DB78476C69411F09B705765C4F9AE02.roa (hash: A0rm2mFuiHBcSkCFk/ARgcp9MkAC3nii71By+7KQSoI=) 4: 02E51B981EC611F19DFCC36D263D8C67.roa (hash: FrGnmySaGsCSvoxQxMX26gnOmUrTLRX+/DoGY28CoDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13703 (0x3587) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F, serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Validity Not Before: Jul 22 14:56:27 2026 GMT Not After : Jul 29 14:56:27 2026 GMT Subject: CN=6a60da1b-5a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:48:03:de:22:ad:7c:c0:59:a2:ca:22:95:f7: cd:69:9b:a3:1c:12:c9:52:53:bf:5b:66:bc:1e:ff: 42:6c:e4:5f:24:9d:d4:9a:dc:5a:5d:61:90:22:e3: 63:55:86:67:b8:42:f3:27:1b:f4:56:9d:fe:2a:bc: 3e:a3:ac:81:89:c7:1f:f4:cb:f4:dd:37:24:2d:4c: 5a:48:be:e0:4f:f8:f1:0d:dd:55:61:c2:1d:0e:65: 7f:03:ac:df:23:4a:4f:6d:76:e7:22:b2:4d:70:08: 3f:7c:55:9b:ce:0f:97:e3:51:b2:70:de:32:b2:8f: 6b:68:db:60:fd:7c:45:50:47:47:e1:f3:7c:53:56: 6d:07:bf:b5:bc:c4:73:dd:25:e9:d4:8a:17:0c:84: ba:05:c9:21:9f:c1:b4:88:e1:a4:59:b4:3a:5f:f0: cf:ea:c8:a2:01:79:8e:2a:26:0d:03:96:53:43:d2: 29:34:e9:8a:93:dc:3d:a1:99:1a:d8:96:f1:04:e4: 2b:6e:cf:90:07:c3:6c:ba:10:28:8c:d6:5d:30:80: 04:38:44:9c:33:9d:f6:b0:70:d3:99:4c:9a:57:b3: 25:12:36:94:99:78:bc:77:fe:5b:b4:ce:d4:72:05: 82:e0:94:bd:38:87:1e:72:fd:99:5b:49:87:8f:d2: 8b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3F:5D:1C:DA:23:EB:10:3A:60:4B:30:9F:83:69:AA:51:32:CD:6A X509v3 Authority Key Identifier: keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:3a:ed:6e:ee:3c:ed:67:b7:29:27:34:38:27:4b:33:63:b7: 93:4e:fb:bf:ef:0f:2b:07:86:13:c2:7f:e6:c0:38:81:f0:21: 9a:d8:11:40:0c:4a:10:fc:79:42:6d:bf:62:38:09:8e:1d:d9: e5:e8:e9:aa:6a:64:ac:ec:37:9b:ce:d1:26:99:7c:b5:15:df: 09:b5:1a:ed:92:fb:e0:4a:72:29:ab:c4:7b:a9:27:c0:f2:e6: 32:7f:24:47:b1:f5:19:78:e2:17:a7:ec:1d:2d:db:38:e5:df: b6:fc:f4:2e:22:3d:4f:46:bd:cb:83:6d:7c:3b:43:0f:fd:f3: 41:1e:6e:37:e9:e9:d2:99:35:bd:a2:d5:99:d0:fe:e9:f9:5b: 06:75:3a:dc:0a:78:80:5f:77:4e:6b:b9:b4:24:05:11:6a:0f: bb:9c:7a:23:a2:eb:cb:f3:3b:a7:3c:db:79:06:d1:71:48:df: 20:68:19:b1:ab:36:85:1c:39:3d:ed:00:0d:bd:08:26:a7:09: 8c:92:d6:51:ec:0e:47:bd:93:4e:ca:94:43:2c:d4:d6:c8:5a: f7:68:36:35:16:1e:79:2a:b5:9a:09:6e:cc:c5:8e:2e:9b:16: 4f:9e:b9:28:91:b1:7c:e5:98:a2:9c:ff:ca:34:00:88:ce:a5: 87:57:ca:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDMkYxMTAvBgNVBAUTKEI2MEM0NzBEMzEyMDU4NzJFN0I2RkJGRDY4NEYzNzA3 NEQ3RTlENzMwHhcNMjYwNzIyMTQ1NjI3WhcNMjYwNzI5MTQ1NjI3WjAYMRYwFAYD VQQDEw02YTYwZGExYi01YTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0gD3iKtfMBZosoilffNaZujHBLJUlO/W2a8Hv9CbORfJJ3UmtxaXWGQIuNj VYZnuELzJxv0Vp3+Krw+o6yBiccf9Mv03TckLUxaSL7gT/jxDd1VYcIdDmV/A6zf I0pPbXbnIrJNcAg/fFWbzg+X41GycN4yso9raNtg/XxFUEdH4fN8U1ZtB7+1vMRz 3SXp1IoXDIS6Bckhn8G0iOGkWbQ6X/DP6siiAXmOKiYNA5ZTQ9IpNOmKk9w9oZka 2JbxBOQrbs+QB8NsuhAojNZdMIAEOEScM532sHDTmUyaV7MlEjaUmXi8d/5btM7U cgWC4JS9OIcecv2ZW0mHj9KLaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4/XRza I+sQOmBLMJ+DaapRMs1qMB8GA1UdIwQYMBaAFLYMRw0xIFhy57b7/WhPNwdNfp1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEMyRi83MDVGNTJGQzFE OTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dITG50dnY5YUU4M0IwMS1u WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RneEhEVEVnV0hMbnR2djlhRTgzQjAxLW5YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEMyRi83MDVGNTJGQzFEOTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dI TG50dnY5YUU4M0IwMS1uWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHTrtbu487We3KSc0OCdLM2O3k077v+8PKweGE8J/5sA4gfAhmtgRQAxKEPx5 Qm2/YjgJjh3Z5ejpqmpkrOw3m87RJpl8tRXfCbUa7ZL74EpyKavEe6knwPLmMn8k R7H1GXjiF6fsHS3bOOXftvz0LiI9T0a9y4NtfDtDD/3zQR5uN+np0pk1vaLVmdD+ 6flbBnU63Ap4gF93Tmu5tCQFEWoPu5x6I6Lry/M7pzzbeQbRcUjfIGgZsas2hRw5 Pe0ADb0IJqcJjJLWUewOR72TTsqUQyzU1sha92g2NRYeeSq1mgluzMWOLpsWT565 KJGxfOWYopz/yjQAiM6lh1fKVw== -----END CERTIFICATE-----Generated at Thu Jul 23 21:39:10 2026 by rpki-client