$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft File: tgxHDTEgWHLntvv9aE83B01-nXM.mft (raw, json) Hash identifier: nCsrv/ufJAoIN01gOU/rDaHg9jZbFXsS97DfBGnRoEQ= Subject key identifier: 55:F9:36:57:16:71:86:A9:22:B6:BA:00:33:E7:32:29:2A:7B:AB:46 Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 Certificate issuer: /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Certificate serial: 34D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft Manifest number: 34C2 Signing time: Sun 24 Aug 2025 14:53:48 +0000 Manifest this update: Sun 24 Aug 2025 14:53:48 +0000 Manifest next update: Sun 31 Aug 2025 14:53:48 +0000 Files and hashes: 1: tgxHDTEgWHLntvv9aE83B01-nXM.crl (hash: gp2s6JUurdfFlAOd8lgyF3jK4YyYTn1/WQnxLiDL16c=) 2: 4625A21A68B511EA9EF7951AC4F9AE02.roa (hash: jnjl28FUTY22XdJzPEZKhv2fC9E15M9c14yjgyQaqxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F, serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Validity Not Before: Aug 24 14:53:48 2025 GMT Not After : Aug 31 14:53:48 2025 GMT Subject: CN=68ab277c-4064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a8:12:c1:1a:94:9c:42:1e:36:4c:2d:c4:55: 34:48:f0:45:17:e8:2e:22:f7:d5:91:37:24:cd:f6: 73:76:fa:3c:2c:91:6e:83:9b:37:79:c5:59:f4:72: ea:61:02:d0:32:08:d4:0e:5a:dc:ae:6a:d0:a7:f2: 05:ed:58:4a:0f:02:30:e5:dd:43:3e:47:06:17:54: c6:72:f4:31:ad:6b:14:b0:6c:4f:ce:cb:56:9e:5f: 93:86:20:5f:cd:53:16:57:4d:37:37:09:9a:75:71: fe:88:62:f8:6f:7f:f8:2a:e7:62:36:fd:77:7c:9e: bd:70:ba:f5:39:89:de:ca:95:9a:36:fe:19:23:98: 4c:5f:e5:6a:42:cd:6f:01:81:ac:2f:0e:ca:a0:cd: ae:80:bd:bc:d3:8a:4b:81:8c:f1:a3:7e:54:3c:19: a8:a6:6b:31:ff:c4:ac:e4:86:2c:b6:ac:57:5a:cd: cf:50:ff:80:9a:60:9f:5b:10:a2:16:4a:6e:79:c2: 91:ce:69:fa:fb:7a:2b:64:c6:47:10:de:f6:a3:30: cf:f4:11:cf:f4:07:bd:61:c0:9f:02:c2:a2:ac:c7: d6:1b:88:d4:7f:f4:0a:1a:d9:ee:b3:19:66:27:12: 05:98:d7:71:50:6d:b6:9e:b6:f6:b2:d4:0f:f2:bc: 90:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F9:36:57:16:71:86:A9:22:B6:BA:00:33:E7:32:29:2A:7B:AB:46 X509v3 Authority Key Identifier: keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:01:7a:2e:b6:0b:d2:d3:65:e4:00:cd:74:04:e0:85:f3:5c: d3:93:1d:42:9a:c4:fa:b8:b7:b7:16:c8:9f:3c:7a:5f:5d:b4: 31:ac:2a:6e:c0:8d:4e:3a:4f:c4:9d:0c:f7:37:1a:de:d9:09: 8b:e5:c8:9a:18:0d:ba:52:c2:02:a6:0e:a0:bd:a4:38:bc:f3: 28:3c:ec:70:e1:c2:7f:7b:8a:bc:89:8f:3e:5f:19:8d:f6:65: 82:f7:86:fe:e3:f6:fd:54:de:c0:7f:5c:0c:5b:bb:b9:75:13: 2d:d4:e5:66:c7:cd:62:7f:fc:0f:e3:88:5e:73:13:9a:04:35: 57:fa:30:91:c2:a0:62:5a:e6:a4:0c:91:2f:63:98:b7:62:94: ae:b3:e2:91:05:58:3e:4b:f7:19:1b:74:ae:ad:a9:5e:b6:a9: a4:d7:80:c5:42:98:92:bd:87:3e:ce:e1:fd:f7:bf:60:11:16: 6f:db:f0:96:7b:46:00:33:0e:ef:0a:d3:eb:c2:f5:94:41:00: fe:52:e7:bf:42:d3:af:37:a1:86:6f:d7:2e:fe:8b:24:b7:d9: 52:8a:92:08:79:dc:13:53:1e:9d:1f:84:e1:98:b2:2d:05:c4: e1:ad:72:c6:ff:47:0f:a0:a1:a2:68:a7:8c:fa:e0:2e:60:2a: 14:50:a4:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDMkYxMTAvBgNVBAUTKEI2MEM0NzBEMzEyMDU4NzJFN0I2RkJGRDY4NEYzNzA3 NEQ3RTlENzMwHhcNMjUwODI0MTQ1MzQ4WhcNMjUwODMxMTQ1MzQ4WjAYMRYwFAYD VQQDEw02OGFiMjc3Yy00MDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2agSwRqUnEIeNkwtxFU0SPBFF+guIvfVkTckzfZzdvo8LJFug5s3ecVZ9HLq YQLQMgjUDlrcrmrQp/IF7VhKDwIw5d1DPkcGF1TGcvQxrWsUsGxPzstWnl+ThiBf zVMWV003NwmadXH+iGL4b3/4KudiNv13fJ69cLr1OYneypWaNv4ZI5hMX+VqQs1v AYGsLw7KoM2ugL2804pLgYzxo35UPBmopmsx/8Ss5IYstqxXWs3PUP+AmmCfWxCi FkpuecKRzmn6+3orZMZHEN72ozDP9BHP9Ae9YcCfAsKirMfWG4jUf/QKGtnusxlm JxIFmNdxUG22nrb2stQP8ryQ+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFX5NlcW cYapIra6ADPnMikqe6tGMB8GA1UdIwQYMBaAFLYMRw0xIFhy57b7/WhPNwdNfp1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEMyRi83MDVGNTJGQzFE OTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dITG50dnY5YUU4M0IwMS1u WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RneEhEVEVnV0hMbnR2djlhRTgzQjAxLW5YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEMyRi83MDVGNTJGQzFEOTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dI TG50dnY5YUU4M0IwMS1uWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuAXoutgvS02XkAM10BOCF81zTkx1CmsT6uLe3FsifPHpfXbQxrCpu wI1OOk/EnQz3Nxre2QmL5ciaGA26UsICpg6gvaQ4vPMoPOxw4cJ/e4q8iY8+XxmN 9mWC94b+4/b9VN7Af1wMW7u5dRMt1OVmx81if/wP44hecxOaBDVX+jCRwqBiWuak DJEvY5i3YpSus+KRBVg+S/cZG3Suraletqmk14DFQpiSvYc+zuH9979gERZv2/CW e0YAMw7vCtPrwvWUQQD+Uue/QtOvN6GGb9cu/oskt9lSipIIedwTUx6dH4ThmLIt BcThrXLG/0cPoKGiaKeM+uAuYCoUUKTA -----END CERTIFICATE-----Generated at Sun Aug 24 22:04:58 2025 by rpki-client