$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft File: tgxHDTEgWHLntvv9aE83B01-nXM.mft (raw, json) Hash identifier: OSS87Zwk/T5Txhw/uc8J4zMFRKxeWDhMuTq2SoCiR+Q= Subject key identifier: B7:5F:F3:16:EA:4B:8D:AF:EA:CC:5E:CC:B2:2B:42:E8:33:2B:97:DE Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 Certificate issuer: /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Certificate serial: 34D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft Manifest number: 34C1 Signing time: Fri 22 Aug 2025 14:55:52 +0000 Manifest this update: Fri 22 Aug 2025 14:55:51 +0000 Manifest next update: Fri 29 Aug 2025 14:55:51 +0000 Files and hashes: 1: tgxHDTEgWHLntvv9aE83B01-nXM.crl (hash: k+W4DP4z2SePmAF29s8x4mFySVbtyNxJHPFR55rD1r4=) 2: 4625A21A68B511EA9EF7951AC4F9AE02.roa (hash: jnjl28FUTY22XdJzPEZKhv2fC9E15M9c14yjgyQaqxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13522 (0x34d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F, serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Validity Not Before: Aug 22 14:55:51 2025 GMT Not After : Aug 29 14:55:51 2025 GMT Subject: CN=68a884f8-08ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a2:96:7a:aa:a4:c8:5d:30:21:a0:c4:24:b3: 74:37:49:68:5d:34:53:c3:0c:4e:04:ec:35:4a:1a: 00:5f:5c:57:e6:0d:50:2d:67:14:bc:94:85:64:e1: 69:7f:ee:ce:7a:1b:25:d6:1f:7b:53:39:0b:a8:4b: 3a:79:52:41:34:73:26:7a:fb:65:08:72:e5:36:e1: 88:a0:b3:b4:4f:1b:0a:50:47:13:ac:05:25:7c:33: 1f:bb:a5:70:54:a2:3c:f5:e2:a6:c0:1f:b4:a5:ed: cd:7b:58:ac:7f:cd:f6:cf:61:f0:1a:ce:4d:ee:18: 82:cb:4f:e1:a5:3b:8d:0b:7f:e7:e9:db:1a:af:b3: f0:11:16:7c:e2:8c:6b:92:3f:9c:1f:b5:21:bf:79: 09:a6:c2:ab:b2:a5:0b:1c:b8:8f:75:b8:d2:f5:88: 4a:00:18:b6:58:9e:6f:c7:a3:7a:04:79:37:c6:69: 2f:d0:0e:98:ae:b9:53:c6:70:d0:89:93:da:bf:4b: 06:b7:2c:92:59:fd:ee:1d:7f:ec:a6:8e:54:07:62: a5:b3:d5:a4:99:8a:e4:48:18:ce:3d:f9:a2:b4:74: fc:97:74:0c:ef:83:1b:2f:19:2c:90:38:f2:9b:2f: 0c:2a:e0:0c:b1:ec:45:ef:a2:88:d6:c0:03:b0:da: 01:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5F:F3:16:EA:4B:8D:AF:EA:CC:5E:CC:B2:2B:42:E8:33:2B:97:DE X509v3 Authority Key Identifier: keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:4e:db:43:1a:05:65:03:59:89:b3:bd:56:0a:33:c9:a8:c9: e8:08:95:94:0d:fd:71:93:9f:cb:0e:0f:eb:3e:ad:bf:b2:2d: a4:2d:13:69:39:e5:7b:ed:95:96:5d:70:8c:91:f3:dd:28:6e: d3:28:80:b6:8a:9b:07:ff:19:70:79:35:35:f8:bd:4e:63:3c: 61:33:99:09:69:f1:6d:8a:5d:3e:41:6e:c3:b5:3d:50:38:c6: 2a:be:7d:e1:38:0d:4b:bb:81:88:e1:25:a2:69:13:41:e1:8d: e1:15:be:a4:09:77:68:a7:aa:78:4e:36:f0:49:49:a7:c7:c3: a1:de:fa:04:88:e9:96:c1:47:cc:ec:dc:20:97:06:c6:26:5b: d4:23:e1:09:6b:b4:dd:fd:15:a4:a6:a1:68:c8:64:a5:19:64: fa:8a:35:1e:7b:a4:11:d4:4f:44:59:b1:6e:39:3f:1f:74:51: 9c:5c:a2:57:00:ed:bd:f9:30:af:e9:71:80:ce:c2:60:06:eb: 5c:65:b5:f9:90:57:6e:b5:1a:67:1c:77:ee:05:39:2b:c0:19: bd:b4:c9:e1:b2:33:29:25:31:7e:87:a1:f5:41:26:02:5c:cd: dc:3f:e1:0e:4d:71:4c:c4:85:40:5d:3c:85:de:3f:68:61:fb: f2:9a:59:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDMkYxMTAvBgNVBAUTKEI2MEM0NzBEMzEyMDU4NzJFN0I2RkJGRDY4NEYzNzA3 NEQ3RTlENzMwHhcNMjUwODIyMTQ1NTUxWhcNMjUwODI5MTQ1NTUxWjAYMRYwFAYD VQQDEw02OGE4ODRmOC0wOGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6KWeqqkyF0wIaDEJLN0N0loXTRTwwxOBOw1ShoAX1xX5g1QLWcUvJSFZOFp f+7Oehsl1h97UzkLqEs6eVJBNHMmevtlCHLlNuGIoLO0TxsKUEcTrAUlfDMfu6Vw VKI89eKmwB+0pe3Ne1isf832z2HwGs5N7hiCy0/hpTuNC3/n6dsar7PwERZ84oxr kj+cH7Uhv3kJpsKrsqULHLiPdbjS9YhKABi2WJ5vx6N6BHk3xmkv0A6YrrlTxnDQ iZPav0sGtyySWf3uHX/spo5UB2Kls9WkmYrkSBjOPfmitHT8l3QM74MbLxkskDjy my8MKuAMsexF76KI1sADsNoBLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdf8xbq S42v6sxezLIrQugzK5feMB8GA1UdIwQYMBaAFLYMRw0xIFhy57b7/WhPNwdNfp1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEMyRi83MDVGNTJGQzFE OTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dITG50dnY5YUU4M0IwMS1u WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RneEhEVEVnV0hMbnR2djlhRTgzQjAxLW5YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEMyRi83MDVGNTJGQzFEOTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dI TG50dnY5YUU4M0IwMS1uWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJTttDGgVlA1mJs71WCjPJqMnoCJWUDf1xk5/LDg/rPq2/si2kLRNp OeV77ZWWXXCMkfPdKG7TKIC2ipsH/xlweTU1+L1OYzxhM5kJafFtil0+QW7DtT1Q OMYqvn3hOA1Lu4GI4SWiaRNB4Y3hFb6kCXdop6p4TjbwSUmnx8Oh3voEiOmWwUfM 7NwglwbGJlvUI+EJa7Td/RWkpqFoyGSlGWT6ijUee6QR1E9EWbFuOT8fdFGcXKJX AO29+TCv6XGAzsJgButcZbX5kFdutRpnHHfuBTkrwBm9tMnhsjMpJTF+h6H1QSYC XM3cP+EOTXFMxIVAXTyF3j9oYfvymlll -----END CERTIFICATE-----Generated at Sun Aug 24 00:00:55 2025 by rpki-client