$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft File: tgxHDTEgWHLntvv9aE83B01-nXM.mft (raw, json) Hash identifier: uyGb2zzxLP/QOjMo+qQGleyTo8Dts1hUZzV6Gkyph4U= Subject key identifier: 77:AE:49:C9:22:4E:83:77:0B:96:9A:FB:95:51:D2:2D:BE:A3:57:2D Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 Certificate issuer: /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Certificate serial: 3550 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft Manifest number: 353A Signing time: Sat 04 Apr 2026 14:53:06 +0000 Manifest this update: Sat 04 Apr 2026 14:53:05 +0000 Manifest next update: Sat 11 Apr 2026 14:53:05 +0000 Files and hashes: 1: tgxHDTEgWHLntvv9aE83B01-nXM.crl (hash: KBAgrfy6TAud6WJTt1PMMKg4tiNc9lgZoYgQM4fH4Kk=) 2: 4625A21A68B511EA9EF7951AC4F9AE02.roa (hash: o7npQDRvWWvMoopmjwnmlgxJ/rmN73YKTsYgHTer5PA=) 3: 02E51B981EC611F19DFCC36D263D8C67.roa (hash: FrGnmySaGsCSvoxQxMX26gnOmUrTLRX+/DoGY28CoDQ=) 4: 2DB78476C69411F09B705765C4F9AE02.roa (hash: A0rm2mFuiHBcSkCFk/ARgcp9MkAC3nii71By+7KQSoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13648 (0x3550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F, serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Validity Not Before: Apr 4 14:53:05 2026 GMT Not After : Apr 11 14:53:05 2026 GMT Subject: CN=69d125d2-81c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6d:22:f7:37:13:6d:1d:ad:13:55:0c:f4:03: 9a:a9:05:d0:99:22:9b:6a:97:55:1a:15:fc:91:14: 3a:15:e0:a8:47:7e:f7:2c:20:3b:9c:10:9e:28:49: c7:43:3c:8e:74:cb:eb:9a:4e:76:73:f5:32:e7:08: fa:8e:d7:b1:20:3a:ed:82:74:59:08:ee:d5:ca:44: e8:f9:4f:f3:c5:d0:04:6c:24:83:7c:06:da:f3:fc: fb:06:02:bf:ca:0c:ab:6d:64:bf:d0:ff:5b:f2:36: 4f:59:f5:79:5c:5c:59:0f:09:af:ac:f1:57:d1:8e: c4:e9:bc:12:18:b5:51:14:12:06:b0:cb:5e:48:a4: 5b:4d:9d:d3:16:8a:83:0d:66:c8:35:0e:e7:bf:de: d9:43:71:02:6c:a4:cd:47:eb:f7:42:b3:14:c2:bc: b1:d5:9b:79:09:9f:d7:85:f5:a3:bb:d7:70:87:63: bc:a0:9f:c9:fe:71:22:e4:eb:d2:6b:e2:78:13:37: 27:c5:54:c2:f7:ea:3a:dd:ed:13:c1:1a:fb:21:70: 26:c8:3c:0b:e5:3d:98:c4:21:8b:3d:29:20:01:98: 2d:a1:96:a8:67:17:11:a8:69:cf:94:42:82:78:3e: de:be:de:ac:63:b2:4e:84:cf:da:a1:0f:d4:35:be: c2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AE:49:C9:22:4E:83:77:0B:96:9A:FB:95:51:D2:2D:BE:A3:57:2D X509v3 Authority Key Identifier: keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:cd:fe:53:38:fa:b2:c0:f4:71:b6:64:50:ee:b2:ec:03:b8: ed:37:54:37:58:1b:d8:48:1a:eb:14:52:cd:c3:66:71:1f:8c: 4b:59:59:2f:12:17:65:21:ed:54:2c:1a:08:1e:43:8f:db:af: c9:8c:26:3a:2d:24:f3:43:30:ed:f5:fb:55:e6:1f:80:a1:43: 13:bb:15:d3:97:bc:6c:df:23:51:77:40:f3:e6:70:9b:47:9d: 97:94:6a:ce:4a:4b:6f:b1:d9:c2:9e:34:77:1e:5b:93:72:e5: 4b:9d:91:02:d0:c5:9e:72:1c:ac:fa:84:bb:2f:d5:d8:dc:e8: 3a:8c:88:cf:a2:be:ed:b5:4b:26:ae:e7:77:e2:1f:a5:73:26: f0:1a:3a:fe:15:71:7e:2b:fd:b2:47:33:a8:5d:32:4a:2d:f8: 2b:b1:72:85:c1:19:e6:7a:d2:64:52:69:51:bb:14:34:be:d8: 6d:9e:d7:98:22:98:a6:08:3e:1a:bc:c7:6e:15:08:41:5c:e5: 62:36:c6:53:6b:a1:6d:ad:a3:36:16:bf:dc:c7:59:63:c7:7c: fe:bf:e7:21:9b:90:6f:9d:a0:83:6c:11:66:4e:08:9e:96:b2: 57:6b:78:bd:5e:79:c6:23:06:e2:b2:0e:a0:44:99:42:50:7b: 03:93:f4:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDMkYxMTAvBgNVBAUTKEI2MEM0NzBEMzEyMDU4NzJFN0I2RkJGRDY4NEYzNzA3 NEQ3RTlENzMwHhcNMjYwNDA0MTQ1MzA1WhcNMjYwNDExMTQ1MzA1WjAYMRYwFAYD VQQDEw02OWQxMjVkMi04MWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlG0i9zcTbR2tE1UM9AOaqQXQmSKbapdVGhX8kRQ6FeCoR373LCA7nBCeKEnH QzyOdMvrmk52c/Uy5wj6jtexIDrtgnRZCO7VykTo+U/zxdAEbCSDfAba8/z7BgK/ ygyrbWS/0P9b8jZPWfV5XFxZDwmvrPFX0Y7E6bwSGLVRFBIGsMteSKRbTZ3TFoqD DWbINQ7nv97ZQ3ECbKTNR+v3QrMUwryx1Zt5CZ/XhfWju9dwh2O8oJ/J/nEi5OvS a+J4EzcnxVTC9+o63e0TwRr7IXAmyDwL5T2YxCGLPSkgAZgtoZaoZxcRqGnPlEKC eD7evt6sY7JOhM/aoQ/UNb7CWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHeuScki ToN3C5aa+5VR0i2+o1ctMB8GA1UdIwQYMBaAFLYMRw0xIFhy57b7/WhPNwdNfp1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEMyRi83MDVGNTJGQzFE OTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dITG50dnY5YUU4M0IwMS1u WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RneEhEVEVnV0hMbnR2djlhRTgzQjAxLW5YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEMyRi83MDVGNTJGQzFEOTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dI TG50dnY5YUU4M0IwMS1uWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXc3+Uzj6ssD0cbZkUO6y7AO47TdUN1gb2Ega6xRSzcNmcR+MS1lZLxIXZSHt VCwaCB5Dj9uvyYwmOi0k80Mw7fX7VeYfgKFDE7sV05e8bN8jUXdA8+Zwm0edl5Rq zkpLb7HZwp40dx5bk3LlS52RAtDFnnIcrPqEuy/V2NzoOoyIz6K+7bVLJq7nd+If pXMm8Bo6/hVxfiv9skczqF0ySi34K7FyhcEZ5nrSZFJpUbsUNL7YbZ7XmCKYpgg+ GrzHbhUIQVzlYjbGU2uhba2jNha/3MdZY8d8/r/nIZuQb52gg2wRZk4InpayV2t4 vV55xiMG4rIOoESZQlB7A5P0tg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:41:27 2026 by rpki-client