$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft File: tgxHDTEgWHLntvv9aE83B01-nXM.mft (raw, json) Hash identifier: MEvp53WCjKijCAi2667WeQrcIoiMDxtBVkimAX53f04= Subject key identifier: DD:6B:94:96:79:3F:3E:66:58:37:72:2F:D1:2A:45:58:CD:96:0B:86 Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 Certificate issuer: /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Certificate serial: 34A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft Manifest number: 3495 Signing time: Sat 31 May 2025 14:54:29 +0000 Manifest this update: Sat 31 May 2025 14:54:29 +0000 Manifest next update: Sat 07 Jun 2025 14:54:29 +0000 Files and hashes: 1: tgxHDTEgWHLntvv9aE83B01-nXM.crl (hash: Z6cW5+1rIAzuuHiYlHWAg2Go068GrLImPtrObyTl/XA=) 2: 4625A21A68B511EA9EF7951AC4F9AE02.roa (hash: RwfQrmvNnRQyIUXieZHGYDJzOJ942Gv6AiVFyJelDe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13477 (0x34a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F, serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Validity Not Before: May 31 14:54:29 2025 GMT Not After : Jun 7 14:54:29 2025 GMT Subject: CN=683b1825-9027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cb:6b:2b:3d:69:0d:f1:8e:c3:6e:ff:33:21: b3:bf:aa:50:4c:da:90:34:51:cf:60:1a:61:26:38: 2a:d0:cb:2f:0a:1f:c3:50:72:95:25:d8:33:bb:c1: a0:ab:75:f6:8c:e9:40:66:9a:44:4e:bb:61:e0:38: 1e:fa:73:a3:73:79:2c:3f:f7:a7:9a:bb:77:25:b9: b9:18:03:de:3a:39:14:26:08:77:dc:b9:0f:e8:bf: cc:e8:97:7a:73:e3:af:95:2a:00:8a:41:4b:cd:5d: b8:a5:b0:d8:71:5a:4c:b5:cb:92:e3:8f:28:ef:d6: 69:7d:2c:46:80:20:6b:1c:8d:73:6e:4d:db:f8:eb: b3:f8:02:36:de:ee:54:d8:62:55:4a:3d:16:2a:ca: 57:53:5a:30:c0:2f:d0:c6:8a:47:38:58:ef:96:00: 16:d2:75:31:ab:93:47:7c:b6:23:f5:2f:1f:b5:84: f0:20:d1:e0:27:a5:07:70:60:3b:73:61:e9:60:81: b3:05:74:bd:27:a6:cc:9a:1c:ba:24:07:99:0c:60: 68:1a:c1:cd:06:f7:60:49:ee:a3:81:ce:e8:0f:3e: 6c:16:48:6a:40:e0:ba:9f:06:35:84:3b:7c:8e:c0: dd:ba:38:bf:da:3e:13:c5:c2:d3:f3:9b:2c:0c:af: c2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6B:94:96:79:3F:3E:66:58:37:72:2F:D1:2A:45:58:CD:96:0B:86 X509v3 Authority Key Identifier: keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:e1:4c:6b:51:21:4c:0a:69:70:41:d3:65:3b:b4:2e:e9:37: d2:c6:8c:f1:70:60:c1:5b:37:6b:f3:4e:e7:0a:33:e8:ff:01: 87:22:b9:09:3b:51:45:60:18:7e:3f:2d:a3:bc:32:cf:76:88: f0:ba:c5:81:25:f9:72:b8:33:68:9c:ce:70:6b:66:f9:74:9f: 29:09:3b:bd:14:f3:e8:d7:03:38:e1:28:8e:94:19:48:b3:47: 93:cd:a9:c4:20:3a:2b:ce:bd:e0:4d:f0:75:83:ac:fc:91:88: f3:f8:38:f5:ef:ab:e7:03:3b:4b:76:49:21:78:e9:45:ba:63: 06:1a:17:01:d0:7f:db:06:ac:d3:90:0e:11:95:40:c7:32:76: cb:d3:04:a2:81:be:6d:f5:8f:cc:5f:d5:08:6e:fa:c6:10:cb: 8a:be:7d:e4:34:29:09:cb:b8:bb:03:8d:e9:db:51:b9:35:6b: ae:92:ac:6b:90:b1:50:db:4b:ad:55:1d:d4:4c:c2:4b:38:c6: dd:5f:6c:4a:df:4b:9c:34:87:dc:01:c5:2f:be:a1:1f:8f:58: d5:ce:56:1e:01:b9:c3:08:fb:68:49:46:70:7d:2e:d0:e6:cd: 93:90:ae:6b:f9:8e:08:7a:e9:d6:7e:67:d4:54:e7:46:b8:66: 64:0a:76:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDMkYxMTAvBgNVBAUTKEI2MEM0NzBEMzEyMDU4NzJFN0I2RkJGRDY4NEYzNzA3 NEQ3RTlENzMwHhcNMjUwNTMxMTQ1NDI5WhcNMjUwNjA3MTQ1NDI5WjAYMRYwFAYD VQQDEw02ODNiMTgyNS05MDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8trKz1pDfGOw27/MyGzv6pQTNqQNFHPYBphJjgq0MsvCh/DUHKVJdgzu8Gg q3X2jOlAZppETrth4Dge+nOjc3ksP/enmrt3Jbm5GAPeOjkUJgh33LkP6L/M6Jd6 c+OvlSoAikFLzV24pbDYcVpMtcuS448o79ZpfSxGgCBrHI1zbk3b+Ouz+AI23u5U 2GJVSj0WKspXU1owwC/QxopHOFjvlgAW0nUxq5NHfLYj9S8ftYTwINHgJ6UHcGA7 c2HpYIGzBXS9J6bMmhy6JAeZDGBoGsHNBvdgSe6jgc7oDz5sFkhqQOC6nwY1hDt8 jsDduji/2j4TxcLT85ssDK/C0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1rlJZ5 Pz5mWDdyL9EqRVjNlguGMB8GA1UdIwQYMBaAFLYMRw0xIFhy57b7/WhPNwdNfp1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEMyRi83MDVGNTJGQzFE OTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dITG50dnY5YUU4M0IwMS1u WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RneEhEVEVnV0hMbnR2djlhRTgzQjAxLW5YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEMyRi83MDVGNTJGQzFEOTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dI TG50dnY5YUU4M0IwMS1uWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI4UxrUSFMCmlwQdNlO7Qu6TfSxozxcGDBWzdr807nCjPo/wGHIrkJ O1FFYBh+Py2jvDLPdojwusWBJflyuDNonM5wa2b5dJ8pCTu9FPPo1wM44SiOlBlI s0eTzanEIDorzr3gTfB1g6z8kYjz+Dj176vnAztLdkkheOlFumMGGhcB0H/bBqzT kA4RlUDHMnbL0wSigb5t9Y/MX9UIbvrGEMuKvn3kNCkJy7i7A43p21G5NWuukqxr kLFQ20utVR3UTMJLOMbdX2xK30ucNIfcAcUvvqEfj1jVzlYeAbnDCPtoSUZwfS7Q 5s2TkK5r+Y4IeunWfmfUVOdGuGZkCnYc -----END CERTIFICATE-----Generated at Sat May 31 16:55:04 2025 by rpki-client