$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft File: tgxHDTEgWHLntvv9aE83B01-nXM.mft (raw, json) Hash identifier: QJomfHl3efcffQZrFOyCyUc8zgxVW+hJ7lTXVsscJtM= Subject key identifier: 89:B6:91:A5:F7:EA:E5:A1:3A:6B:AE:FC:38:74:A8:D3:4A:4A:25:A6 Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 Certificate issuer: /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Certificate serial: 354A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft Manifest number: 3534 Signing time: Tue 24 Mar 2026 14:53:16 +0000 Manifest this update: Tue 24 Mar 2026 14:53:15 +0000 Manifest next update: Tue 31 Mar 2026 14:53:15 +0000 Files and hashes: 1: tgxHDTEgWHLntvv9aE83B01-nXM.crl (hash: +XnzGTMRuuLLjQhENeWp95KY8hqA769U27comth01o4=) 2: 4625A21A68B511EA9EF7951AC4F9AE02.roa (hash: o7npQDRvWWvMoopmjwnmlgxJ/rmN73YKTsYgHTer5PA=) 3: 2DB78476C69411F09B705765C4F9AE02.roa (hash: A0rm2mFuiHBcSkCFk/ARgcp9MkAC3nii71By+7KQSoI=) 4: 02E51B981EC611F19DFCC36D263D8C67.roa (hash: FrGnmySaGsCSvoxQxMX26gnOmUrTLRX+/DoGY28CoDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13642 (0x354a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F, serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Validity Not Before: Mar 24 14:53:15 2026 GMT Not After : Mar 31 14:53:15 2026 GMT Subject: CN=69c2a55c-4a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8f:3a:6d:a7:5b:e6:ae:28:46:64:be:55:d2: b2:42:1c:9a:55:e7:d1:7d:cf:ed:61:6b:13:88:2c: 56:cb:aa:56:44:ca:63:0b:8d:50:8f:fe:97:e7:6b: 09:f6:2a:55:8a:30:0d:22:a2:49:c5:a2:bf:08:37: c5:b0:dc:01:54:9a:ab:23:20:20:11:99:5f:b5:57: f5:09:da:86:75:ea:dd:a5:02:26:28:29:fb:69:e9: 23:94:60:ac:63:d7:7f:10:07:f8:82:a0:e0:97:d2: f7:10:f5:98:90:9e:65:06:c6:04:d0:94:9d:44:66: b1:fb:13:78:e5:19:d1:f5:aa:4a:bb:89:b6:65:fe: a3:35:8e:58:2c:51:a3:79:eb:10:2c:50:88:ad:7c: 95:c0:72:e7:1c:4d:d3:04:71:a4:6a:57:f6:6c:40: 37:60:3c:d5:56:c7:64:02:ce:d1:2b:6c:31:99:a0: 69:80:a0:27:e1:57:98:85:d7:80:c5:d7:4e:14:67: 5f:84:72:ef:28:86:26:be:12:35:d7:3b:26:f1:3e: 7b:66:c6:68:1c:c0:cf:2e:be:92:66:73:0e:f2:70: 9e:3e:58:89:ea:36:2d:cc:7b:b1:87:2e:a3:6a:2e: d0:f7:ba:a8:6b:5d:ba:bd:f2:ca:a3:c1:ad:77:dc: 26:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B6:91:A5:F7:EA:E5:A1:3A:6B:AE:FC:38:74:A8:D3:4A:4A:25:A6 X509v3 Authority Key Identifier: keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f3:ed:bf:7e:90:dc:46:ef:a4:62:23:fb:1a:ec:1b:86:66: aa:a1:a6:85:05:ac:36:73:9b:bf:9d:86:02:96:c4:35:eb:87: 86:d7:49:29:f4:eb:76:df:d3:de:f5:11:90:1c:dd:a9:00:66: 23:92:59:05:97:e2:c7:e4:5a:eb:c7:1a:56:d5:f1:4d:c2:00: f6:8a:61:0d:0e:74:cb:ad:14:0d:0a:e4:12:ff:bf:40:6e:ea: 77:a4:7d:1e:b2:25:08:3f:96:73:8d:05:56:f9:c4:c5:a6:57: 33:d3:e1:e5:0a:ab:5a:05:7c:49:d7:f3:22:f9:35:34:24:6b: 23:c7:ff:5c:4b:9e:4c:91:f6:f3:9c:f3:50:10:ec:60:4d:7e: 09:97:4d:1c:57:50:92:fe:f2:50:ef:4e:f3:86:37:f7:20:d5: 94:cf:87:35:b7:d2:7f:83:e0:1b:2f:17:22:c5:4a:7a:d1:87: 90:d3:85:81:9a:32:3c:24:23:00:10:54:99:86:85:9c:81:ec: b4:87:cc:9a:74:1c:dc:26:d3:ac:59:4f:54:29:27:99:ad:dc: 03:fb:f5:1a:a7:d6:99:37:e2:a5:67:4e:ff:9e:75:14:cd:7b: 55:6a:8c:a6:d9:0a:dc:ad:a4:57:61:e6:8d:27:55:d0:f7:53: 94:dc:f4:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDMkYxMTAvBgNVBAUTKEI2MEM0NzBEMzEyMDU4NzJFN0I2RkJGRDY4NEYzNzA3 NEQ3RTlENzMwHhcNMjYwMzI0MTQ1MzE1WhcNMjYwMzMxMTQ1MzE1WjAYMRYwFAYD VQQDEw02OWMyYTU1Yy00YTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuI86badb5q4oRmS+VdKyQhyaVefRfc/tYWsTiCxWy6pWRMpjC41Qj/6X52sJ 9ipVijANIqJJxaK/CDfFsNwBVJqrIyAgEZlftVf1CdqGderdpQImKCn7aekjlGCs Y9d/EAf4gqDgl9L3EPWYkJ5lBsYE0JSdRGax+xN45RnR9apKu4m2Zf6jNY5YLFGj eesQLFCIrXyVwHLnHE3TBHGkalf2bEA3YDzVVsdkAs7RK2wxmaBpgKAn4VeYhdeA xddOFGdfhHLvKIYmvhI11zsm8T57ZsZoHMDPLr6SZnMO8nCePliJ6jYtzHuxhy6j ai7Q97qoa126vfLKo8Gtd9wmMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIm2kaX3 6uWhOmuu/Dh0qNNKSiWmMB8GA1UdIwQYMBaAFLYMRw0xIFhy57b7/WhPNwdNfp1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEMyRi83MDVGNTJGQzFE OTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dITG50dnY5YUU4M0IwMS1u WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RneEhEVEVnV0hMbnR2djlhRTgzQjAxLW5YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEMyRi83MDVGNTJGQzFEOTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dI TG50dnY5YUU4M0IwMS1uWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjvPtv36Q3EbvpGIj+xrsG4ZmqqGmhQWsNnObv52GApbENeuHhtdJKfTrdt/T 3vURkBzdqQBmI5JZBZfix+Ra68caVtXxTcIA9ophDQ50y60UDQrkEv+/QG7qd6R9 HrIlCD+Wc40FVvnExaZXM9Ph5QqrWgV8SdfzIvk1NCRrI8f/XEueTJH285zzUBDs YE1+CZdNHFdQkv7yUO9O84Y39yDVlM+HNbfSf4PgGy8XIsVKetGHkNOFgZoyPCQj ABBUmYaFnIHstIfMmnQc3CbTrFlPVCknma3cA/v1GqfWmTfipWdO/551FM17VWqM ptkK3K2kV2HmjSdV0PdTlNz07g== -----END CERTIFICATE-----Generated at Thu Mar 26 10:14:09 2026 by rpki-client