$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft File: tgxHDTEgWHLntvv9aE83B01-nXM.mft (raw, json) Hash identifier: 8NxxzwzfqhK8LK/3PZYFLMvaBN4k5HSxdLl7zUJhYDM= Subject key identifier: AA:46:AF:D3:F8:35:A6:CA:6F:17:92:BA:16:00:4D:AD:11:52:06:41 Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 Certificate issuer: /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Certificate serial: 3567 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft Manifest number: 3551 Signing time: Wed 20 May 2026 14:54:51 +0000 Manifest this update: Wed 20 May 2026 14:54:50 +0000 Manifest next update: Wed 27 May 2026 14:54:50 +0000 Files and hashes: 1: tgxHDTEgWHLntvv9aE83B01-nXM.crl (hash: ptXmNwXhs8HEK8nnuDYDAimjA5Y4tDdxYjUFZWamxrI=) 2: 02E51B981EC611F19DFCC36D263D8C67.roa (hash: FrGnmySaGsCSvoxQxMX26gnOmUrTLRX+/DoGY28CoDQ=) 3: 2DB78476C69411F09B705765C4F9AE02.roa (hash: A0rm2mFuiHBcSkCFk/ARgcp9MkAC3nii71By+7KQSoI=) 4: 4625A21A68B511EA9EF7951AC4F9AE02.roa (hash: o7npQDRvWWvMoopmjwnmlgxJ/rmN73YKTsYgHTer5PA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 14:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13671 (0x3567) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F, serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Validity Not Before: May 20 14:54:50 2026 GMT Not After : May 27 14:54:50 2026 GMT Subject: CN=6a0dcb3b-ba25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5b:4f:ba:db:10:54:c0:18:2d:09:c0:e7:e9: 02:18:a3:9c:e7:a1:d2:3f:22:ae:2a:cb:1e:2e:62: ca:a0:f4:7c:8f:cd:64:e5:b5:f1:0f:36:91:bd:e9: ee:04:40:07:d8:3e:28:db:02:a7:c6:7e:7d:72:b5: d7:01:e7:c9:83:db:af:e8:8e:08:c0:0b:8a:cd:6b: 22:18:ea:78:fd:88:cb:b5:23:ac:e7:4d:80:a5:e5: 8f:32:2c:5c:f1:e8:54:6c:aa:24:7b:33:95:20:a5: de:ed:8f:ff:85:01:9b:95:d4:78:d5:7a:e2:b6:95: c2:fa:c2:09:ef:86:a8:03:55:66:65:71:f0:a3:9e: 23:b9:0c:fd:dd:1c:d7:bf:c6:61:28:f1:a8:81:eb: 8b:88:49:05:2a:79:35:10:20:b9:5e:c2:16:81:e5: 10:49:9c:f8:44:b5:49:5c:59:15:5f:b1:22:a7:cd: e7:b1:56:69:45:e7:70:af:e6:04:bc:29:2e:b8:96: 2d:1b:3d:5f:11:97:14:17:61:81:26:e1:84:96:8b: e7:d8:ec:4d:53:74:14:67:f6:3c:f9:ab:96:72:99: 28:66:c6:4a:b9:98:a9:c9:c9:48:b7:bf:c8:82:cb: 03:aa:00:81:27:d6:69:cb:df:22:d7:e8:77:07:10: 63:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:46:AF:D3:F8:35:A6:CA:6F:17:92:BA:16:00:4D:AD:11:52:06:41 X509v3 Authority Key Identifier: keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:32:5c:2d:52:35:80:b8:62:d4:60:96:c3:f9:5b:0c:77:53: fd:7b:ef:41:8b:ac:23:c1:e8:11:cc:1c:af:b5:6d:3c:83:54: b5:d1:45:15:eb:4b:db:da:af:65:39:ac:84:45:55:42:fa:16: 77:f9:c5:b7:2f:9c:3e:f5:56:77:70:bf:87:7d:83:12:7c:19: 16:39:aa:cb:35:4a:ea:0b:86:cb:c6:9c:5d:ad:a8:6f:ee:ae: 22:a1:58:1f:e5:97:e1:81:02:e2:a6:a3:96:e7:32:57:fb:eb: 99:6c:99:f7:b0:ba:6a:98:3c:d5:e5:62:5e:2b:b0:9d:ea:30: f0:3d:95:0d:90:5a:3f:da:66:c5:41:92:20:50:18:8f:95:6c: 7b:15:b3:b1:cf:ed:ff:f8:e9:40:66:5c:d7:56:2b:09:7c:be: e3:dc:99:df:74:05:ad:41:9e:54:37:51:ef:9b:87:9f:eb:d9: 33:df:22:b7:d2:c3:9b:fc:c4:d1:7e:59:dc:6e:91:06:11:d0: 66:2b:ea:5c:40:2d:0d:e5:df:ef:be:7e:87:0d:9e:01:1f:3c: ae:39:5a:cc:7a:c2:9f:f8:6d:ac:12:f1:fe:6a:5d:c1:b6:40: e8:51:6e:8d:7f:55:80:62:8e:77:f2:b8:ed:1b:9c:78:e8:90: 64:d8:c1:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDMkYxMTAvBgNVBAUTKEI2MEM0NzBEMzEyMDU4NzJFN0I2RkJGRDY4NEYzNzA3 NEQ3RTlENzMwHhcNMjYwNTIwMTQ1NDUwWhcNMjYwNTI3MTQ1NDUwWjAYMRYwFAYD VQQDEw02YTBkY2IzYi1iYTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlltPutsQVMAYLQnA5+kCGKOc56HSPyKuKsseLmLKoPR8j81k5bXxDzaRvenu BEAH2D4o2wKnxn59crXXAefJg9uv6I4IwAuKzWsiGOp4/YjLtSOs502ApeWPMixc 8ehUbKokezOVIKXe7Y//hQGbldR41XritpXC+sIJ74aoA1VmZXHwo54juQz93RzX v8ZhKPGogeuLiEkFKnk1ECC5XsIWgeUQSZz4RLVJXFkVX7Eip83nsVZpRedwr+YE vCkuuJYtGz1fEZcUF2GBJuGElovn2OxNU3QUZ/Y8+auWcpkoZsZKuZipyclIt7/I gssDqgCBJ9Zpy98i1+h3BxBjXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKpGr9P4 NabKbxeSuhYATa0RUgZBMB8GA1UdIwQYMBaAFLYMRw0xIFhy57b7/WhPNwdNfp1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEMyRi83MDVGNTJGQzFE OTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dITG50dnY5YUU4M0IwMS1u WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RneEhEVEVnV0hMbnR2djlhRTgzQjAxLW5YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEMyRi83MDVGNTJGQzFEOTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dI TG50dnY5YUU4M0IwMS1uWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhDJcLVI1gLhi1GCWw/lbDHdT/XvvQYusI8HoEcwcr7VtPINUtdFFFetL29qv ZTmshEVVQvoWd/nFty+cPvVWd3C/h32DEnwZFjmqyzVK6guGy8acXa2ob+6uIqFY H+WX4YEC4qajlucyV/vrmWyZ97C6apg81eViXiuwneow8D2VDZBaP9pmxUGSIFAY j5VsexWzsc/t//jpQGZc11YrCXy+49yZ33QFrUGeVDdR75uHn+vZM98it9LDm/zE 0X5Z3G6RBhHQZivqXEAtDeXf775+hw2eAR88rjlazHrCn/htrBLx/mpdwbZA6FFu jX9VgGKOd/K47RuceOiQZNjBrQ== -----END CERTIFICATE-----Generated at Thu May 21 09:37:37 2026 by rpki-client