$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft File: tgxHDTEgWHLntvv9aE83B01-nXM.mft (raw, json) Hash identifier: 8bU4Y2BYCRIyj+o67Fg0i3i+GAcQgydq8H6FhFheupY= Subject key identifier: 3C:62:E2:13:E5:00:88:21:BB:3D:60:09:2D:27:F4:67:CA:FC:03:C0 Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 Certificate issuer: /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Certificate serial: 34EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft Manifest number: 34DE Signing time: Sat 18 Oct 2025 15:01:02 +0000 Manifest this update: Sat 18 Oct 2025 15:01:01 +0000 Manifest next update: Sat 25 Oct 2025 15:01:01 +0000 Files and hashes: 1: tgxHDTEgWHLntvv9aE83B01-nXM.crl (hash: Ytc8oDMNf4VX2AuM2T4key1YQvJBkcqfZyrBdsGhS8c=) 2: 4625A21A68B511EA9EF7951AC4F9AE02.roa (hash: jnjl28FUTY22XdJzPEZKhv2fC9E15M9c14yjgyQaqxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13551 (0x34ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F, serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Validity Not Before: Oct 18 15:01:01 2025 GMT Not After : Oct 25 15:01:01 2025 GMT Subject: CN=68f3abad-a67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:eb:c9:6c:93:3c:ff:52:fc:48:20:3b:7e:de: 39:6e:ac:ed:c1:d9:27:72:e5:aa:12:f0:01:b9:19: d2:56:33:8d:d5:b3:85:d1:04:a0:e8:89:91:25:c5: 6f:57:de:91:34:11:48:23:01:e1:3c:80:e9:7b:89: b1:84:11:20:f4:20:7b:57:17:90:37:a0:f6:bd:6a: 6b:40:e7:8d:1d:40:95:c5:cd:c4:63:07:33:af:24: c5:5a:af:8f:fc:94:44:6b:dd:a1:58:40:84:44:cb: d1:a1:ac:fd:83:52:bb:27:98:8a:67:71:94:9c:ee: 92:d8:b4:62:38:db:60:b6:00:50:6f:bf:a2:83:46: 83:51:22:73:50:95:54:2d:fc:65:9c:3a:7a:7f:6c: 7e:4e:45:61:f7:89:54:9e:85:a2:f0:f4:51:e1:e2: f0:e0:1b:ca:c6:58:4d:bc:40:8f:42:83:56:99:a2: d1:0a:a0:d1:de:34:cf:76:53:5f:33:c0:c9:8a:24: 97:60:d3:84:e6:24:6d:99:fd:d9:30:97:e4:d6:3d: 44:e5:49:78:3f:dc:d8:96:cd:08:22:68:e0:24:49: 1c:35:2a:3e:e9:a0:4a:33:79:cf:a5:50:97:d9:99: 97:b2:dd:7d:e6:ab:d6:b8:10:86:ec:73:24:5e:d1: 40:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:62:E2:13:E5:00:88:21:BB:3D:60:09:2D:27:F4:67:CA:FC:03:C0 X509v3 Authority Key Identifier: keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ca:12:47:48:af:08:e6:e3:69:04:da:85:20:44:c0:81:49: 06:26:72:cf:98:b7:98:30:79:88:ba:aa:c0:c7:dd:02:dd:2e: af:56:5e:68:e2:2f:57:6c:c0:7b:ff:92:f1:17:56:6f:d7:a6: 60:17:bd:89:a7:f6:b0:c7:91:34:99:fd:22:ab:c0:5a:b7:8c: 3a:33:64:4e:90:9c:1b:8b:b4:51:1f:f8:42:7b:99:94:7d:9c: 52:ef:ae:36:32:2a:f3:ef:3d:c9:ab:2b:03:d8:55:bd:e3:be: b1:de:53:d0:32:df:59:91:d4:01:e6:1e:dc:66:95:1e:ea:30: df:30:6d:75:51:35:ee:ec:ce:0c:83:28:ea:86:35:c6:0f:fe: e9:5e:5e:2e:d6:24:96:e7:4f:61:0e:94:01:f2:dd:42:4b:bc: 4a:df:ba:a7:81:96:f4:dd:d9:2c:2b:54:e5:1d:88:e1:72:b8: 43:32:69:46:5d:12:01:f5:4d:6a:29:8e:a9:01:e5:3e:26:6a: 88:d6:f0:03:87:81:6d:8e:e5:ec:3d:28:c5:ab:56:9c:0e:d0: b7:dc:92:0b:88:d7:1c:9d:c0:d1:fc:2c:e6:37:b5:f6:0f:3b: c5:c6:72:45:c4:e9:cf:1b:be:b8:d4:1c:f8:af:33:fe:51:f5: 67:7e:67:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDMkYxMTAvBgNVBAUTKEI2MEM0NzBEMzEyMDU4NzJFN0I2RkJGRDY4NEYzNzA3 NEQ3RTlENzMwHhcNMjUxMDE4MTUwMTAxWhcNMjUxMDI1MTUwMTAxWjAYMRYwFAYD VQQDEw02OGYzYWJhZC1hNjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmevJbJM8/1L8SCA7ft45bqztwdkncuWqEvABuRnSVjON1bOF0QSg6ImRJcVv V96RNBFIIwHhPIDpe4mxhBEg9CB7VxeQN6D2vWprQOeNHUCVxc3EYwczryTFWq+P /JREa92hWECERMvRoaz9g1K7J5iKZ3GUnO6S2LRiONtgtgBQb7+ig0aDUSJzUJVU LfxlnDp6f2x+TkVh94lUnoWi8PRR4eLw4BvKxlhNvECPQoNWmaLRCqDR3jTPdlNf M8DJiiSXYNOE5iRtmf3ZMJfk1j1E5Ul4P9zYls0IImjgJEkcNSo+6aBKM3nPpVCX 2ZmXst195qvWuBCG7HMkXtFAwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxi4hPl AIghuz1gCS0n9GfK/APAMB8GA1UdIwQYMBaAFLYMRw0xIFhy57b7/WhPNwdNfp1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEMyRi83MDVGNTJGQzFE OTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dITG50dnY5YUU4M0IwMS1u WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RneEhEVEVnV0hMbnR2djlhRTgzQjAxLW5YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEMyRi83MDVGNTJGQzFEOTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dI TG50dnY5YUU4M0IwMS1uWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyyhJHSK8I5uNpBNqFIETAgUkGJnLPmLeYMHmIuqrAx90C3S6vVl5o 4i9XbMB7/5LxF1Zv16ZgF72Jp/awx5E0mf0iq8Bat4w6M2ROkJwbi7RRH/hCe5mU fZxS7642Mirz7z3JqysD2FW9476x3lPQMt9ZkdQB5h7cZpUe6jDfMG11UTXu7M4M gyjqhjXGD/7pXl4u1iSW509hDpQB8t1CS7xK37qngZb03dksK1TlHYjhcrhDMmlG XRIB9U1qKY6pAeU+JmqI1vADh4FtjuXsPSjFq1acDtC33JILiNccncDR/CzmN7X2 DzvFxnJFxOnPG7641Bz4rzP+UfVnfmfi -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:07 2025 by rpki-client