$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft File: tgxHDTEgWHLntvv9aE83B01-nXM.mft (raw, json) Hash identifier: YawTZ+VRYpn/g5J1y2Icy+2XkV69dOx70zaRCPTqgt0= Subject key identifier: AA:E6:23:3D:9C:1D:BB:62:41:7D:CB:A2:4D:47:A6:3C:81:79:43:9C Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 Certificate issuer: /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Certificate serial: 349B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft Manifest number: 348B Signing time: Mon 12 May 2025 14:53:20 +0000 Manifest this update: Mon 12 May 2025 14:53:19 +0000 Manifest next update: Mon 19 May 2025 14:53:19 +0000 Files and hashes: 1: tgxHDTEgWHLntvv9aE83B01-nXM.crl (hash: X9kk1Fk+mC3Al6vn3TTWoFQh/cMx9g2eq+jZrdi5pu8=) 2: 4625A21A68B511EA9EF7951AC4F9AE02.roa (hash: RwfQrmvNnRQyIUXieZHGYDJzOJ942Gv6AiVFyJelDe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13467 (0x349b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F, serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Validity Not Before: May 12 14:53:19 2025 GMT Not After : May 19 14:53:19 2025 GMT Subject: CN=68220b5f-b13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:95:f4:11:bc:d5:dc:d3:18:27:d2:34:79:ab: 3b:aa:9a:8f:61:3b:4e:fd:e2:10:ad:25:34:16:7e: c8:9f:83:67:0d:98:64:40:8d:e7:5a:a1:29:40:23: ef:ae:7f:eb:75:15:6a:c1:6d:55:40:83:28:42:da: af:64:36:e8:df:6e:45:3d:67:a5:92:62:53:5d:6d: de:a1:26:30:9c:72:8d:f2:d1:7f:bd:01:4e:10:79: 38:5a:b1:d4:1b:29:a0:ac:50:00:aa:64:c8:4a:b0: 4a:84:02:b7:1c:32:a5:0e:8d:7d:fd:2a:f1:99:d0: 82:b9:81:cd:95:a3:ee:eb:10:85:3d:43:db:28:28: 76:83:7c:cb:74:47:e8:ec:d6:22:87:3e:03:21:a6: 15:6e:25:7d:6c:f8:93:33:e2:50:82:fa:e5:c4:6e: 0e:52:9f:54:2f:7d:b6:b3:8a:83:56:78:2c:3f:85: ce:95:5a:72:99:6f:6e:8a:f3:ab:95:67:41:61:b0: a3:29:ec:9b:ab:fd:92:e3:6b:39:14:ff:dc:b5:c9: 23:fc:f9:79:a0:d4:be:de:c8:28:48:eb:bc:fb:64: a2:cd:2b:0c:a4:8d:9f:d4:35:df:fb:ae:ca:f0:ad: 9c:12:e5:ab:92:03:3b:2f:b1:94:3a:fa:43:56:e1: 85:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E6:23:3D:9C:1D:BB:62:41:7D:CB:A2:4D:47:A6:3C:81:79:43:9C X509v3 Authority Key Identifier: keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:34:b0:c7:61:a9:44:02:5c:74:cf:2b:a9:c0:1d:50:23:65: 92:3c:62:f7:10:c5:83:93:96:fe:f2:e0:a1:8f:56:4b:27:d4: 02:1d:94:71:51:9b:e7:67:b8:a1:90:f5:c1:3a:2e:b9:1a:0b: 4a:51:ed:29:fe:92:63:f9:f5:fe:fe:31:36:05:6b:ef:56:80: e8:f9:90:40:ec:22:f0:e0:7a:cf:8a:bc:c1:66:2f:b4:91:5c: 88:9a:46:6c:f8:a1:8a:30:58:1f:12:2c:41:ab:0f:b6:ca:28: a8:dd:d6:05:56:47:2a:bc:e8:c3:ee:13:28:7d:33:50:c9:11: 18:aa:bf:75:9d:7d:87:17:64:d7:0e:ba:09:b8:bd:4f:94:ea: 03:0e:e2:3b:07:9a:7b:32:0b:cf:3f:99:7a:be:ef:b3:16:52: 42:0c:5b:6c:1a:91:aa:56:32:16:19:4a:50:c2:69:c0:f5:56: a8:3f:e2:65:47:d9:cb:b9:0f:c7:76:0f:eb:bb:6c:83:62:88: 3c:45:5c:e2:d5:ab:bc:3e:a9:79:55:6e:d9:6b:cc:00:08:9a: 4b:78:98:37:85:81:c1:97:0d:18:71:39:6b:51:16:de:d1:11: 27:8e:ac:b6:af:63:69:53:15:29:ab:ec:e5:77:40:4b:24:bb: c1:f4:3f:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDMkYxMTAvBgNVBAUTKEI2MEM0NzBEMzEyMDU4NzJFN0I2RkJGRDY4NEYzNzA3 NEQ3RTlENzMwHhcNMjUwNTEyMTQ1MzE5WhcNMjUwNTE5MTQ1MzE5WjAYMRYwFAYD VQQDEw02ODIyMGI1Zi1iMTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZX0EbzV3NMYJ9I0eas7qpqPYTtO/eIQrSU0Fn7In4NnDZhkQI3nWqEpQCPv rn/rdRVqwW1VQIMoQtqvZDbo325FPWelkmJTXW3eoSYwnHKN8tF/vQFOEHk4WrHU GymgrFAAqmTISrBKhAK3HDKlDo19/SrxmdCCuYHNlaPu6xCFPUPbKCh2g3zLdEfo 7NYihz4DIaYVbiV9bPiTM+JQgvrlxG4OUp9UL322s4qDVngsP4XOlVpymW9uivOr lWdBYbCjKeybq/2S42s5FP/ctckj/Pl5oNS+3sgoSOu8+2SizSsMpI2f1DXf+67K 8K2cEuWrkgM7L7GUOvpDVuGFRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrmIz2c HbtiQX3Lok1HpjyBeUOcMB8GA1UdIwQYMBaAFLYMRw0xIFhy57b7/WhPNwdNfp1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEMyRi83MDVGNTJGQzFE OTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dITG50dnY5YUU4M0IwMS1u WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RneEhEVEVnV0hMbnR2djlhRTgzQjAxLW5YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEMyRi83MDVGNTJGQzFEOTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dI TG50dnY5YUU4M0IwMS1uWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsNLDHYalEAlx0zyupwB1QI2WSPGL3EMWDk5b+8uChj1ZLJ9QCHZRx UZvnZ7ihkPXBOi65GgtKUe0p/pJj+fX+/jE2BWvvVoDo+ZBA7CLw4HrPirzBZi+0 kVyImkZs+KGKMFgfEixBqw+2yiio3dYFVkcqvOjD7hMofTNQyREYqr91nX2HF2TX DroJuL1PlOoDDuI7B5p7MgvPP5l6vu+zFlJCDFtsGpGqVjIWGUpQwmnA9VaoP+Jl R9nLuQ/Hdg/ru2yDYog8RVzi1au8Pql5VW7Za8wACJpLeJg3hYHBlw0YcTlrURbe 0REnjqy2r2NpUxUpq+zld0BLJLvB9D8y -----END CERTIFICATE-----Generated at Mon May 12 19:18:20 2025 by rpki-client