$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft File: tgxHDTEgWHLntvv9aE83B01-nXM.mft (raw, json) Hash identifier: ZiaqDIopdFWSNJoPHJ5OcyAPYxzsC2LRn/ffsr75t0Q= Subject key identifier: 53:C4:88:91:B6:C0:B9:81:69:93:CA:E5:D7:1E:59:2F:AD:35:96:9C Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 Certificate issuer: /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Certificate serial: 34F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft Manifest number: 34E7 Signing time: Tue 04 Nov 2025 14:57:47 +0000 Manifest this update: Tue 04 Nov 2025 14:57:46 +0000 Manifest next update: Tue 11 Nov 2025 14:57:46 +0000 Files and hashes: 1: tgxHDTEgWHLntvv9aE83B01-nXM.crl (hash: vQh86brQkbTPvr366yrXtfimghumeLOYLW1eaiOLCjc=) 2: 4625A21A68B511EA9EF7951AC4F9AE02.roa (hash: jnjl28FUTY22XdJzPEZKhv2fC9E15M9c14yjgyQaqxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13560 (0x34f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F, serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73 Validity Not Before: Nov 4 14:57:46 2025 GMT Not After : Nov 11 14:57:46 2025 GMT Subject: CN=690a146a-dfe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:07:1f:50:df:46:60:6e:de:ca:1b:83:d8:eb: aa:11:26:b4:66:f8:0d:00:e7:b7:cc:7f:98:91:6f: 8d:fc:23:dc:a7:0d:fa:ae:5f:9c:5f:fb:f1:c8:9c: 1b:c0:6e:3b:92:81:58:60:ed:01:18:b6:46:c6:8f: 3b:05:bb:07:3e:ae:40:43:b8:92:4f:ed:c4:f1:64: 3c:c2:c5:73:52:16:09:79:d6:6a:af:a7:40:ea:fe: 24:fb:4e:f7:11:8c:8a:49:9f:be:b9:a1:d0:3a:9f: 19:96:0c:b6:cc:b8:0b:f1:70:8c:21:6e:cd:b6:28: 3c:ed:5a:81:2f:52:e5:6a:5d:0e:11:d3:dd:51:bc: 41:96:bc:74:91:a1:6a:da:47:13:f1:d2:b1:24:31: 63:dc:90:75:df:00:47:6c:39:40:e5:23:43:92:6c: 3c:8b:bd:2f:21:cd:c1:56:85:b8:c6:a3:fc:a0:cf: eb:08:78:4b:78:c1:f7:e9:d0:88:8e:b6:78:03:68: 6b:ec:fd:57:58:4f:70:15:09:ad:39:4e:44:13:a6: 51:e0:2a:4a:91:2e:8b:6a:43:dc:f0:de:a3:f6:2e: 82:64:03:b6:3c:68:71:74:86:5b:56:88:03:87:16: bc:a7:9e:25:b4:18:12:b4:46:b6:b8:63:f2:b1:32: 77:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C4:88:91:B6:C0:B9:81:69:93:CA:E5:D7:1E:59:2F:AD:35:96:9C X509v3 Authority Key Identifier: keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:81:1a:ee:6e:8d:09:02:eb:b6:46:22:e3:c2:a6:fc:a5:08: e8:83:89:7e:c8:a9:0b:21:1d:3b:f0:9d:08:f0:b4:a9:1d:93: ab:20:44:8a:85:b0:01:af:db:2d:b4:a4:71:ae:54:d8:bd:8a: f8:31:b0:fd:35:ba:34:20:7d:ab:d3:a6:56:dc:22:40:74:7e: 0c:86:72:cd:3d:4d:f0:2e:18:43:0f:5b:05:78:3e:89:38:94: 18:a8:f9:3b:58:41:9a:88:62:fa:34:60:ca:7e:99:25:e4:7c: 4f:f9:d3:88:e3:8a:1b:22:c6:90:66:85:c5:3c:62:2a:95:dc: 6c:ab:55:e5:b6:fa:33:50:02:9f:3b:8a:ec:a1:b0:be:1f:d0: d7:2a:71:9d:fb:ca:55:35:dd:d5:b9:04:bf:f1:4b:62:96:2f: 73:85:b3:56:70:10:db:81:6a:9e:ec:26:da:11:c7:47:ee:8b: 91:b2:fe:09:b0:d4:91:e3:19:b1:56:0d:2c:7f:81:02:4c:bf: 29:9b:60:f6:27:47:2d:4f:34:46:fe:f5:a0:de:11:1b:fc:5a: e4:db:51:cd:fd:f2:17:42:55:89:5b:1d:f5:cb:9f:2b:8a:f6: a4:4f:d1:d4:34:13:f3:64:d1:16:60:cf:a3:c6:98:31:7d:0e: 36:85:03:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDMkYxMTAvBgNVBAUTKEI2MEM0NzBEMzEyMDU4NzJFN0I2RkJGRDY4NEYzNzA3 NEQ3RTlENzMwHhcNMjUxMTA0MTQ1NzQ2WhcNMjUxMTExMTQ1NzQ2WjAYMRYwFAYD VQQDEw02OTBhMTQ2YS1kZmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwcfUN9GYG7eyhuD2OuqESa0ZvgNAOe3zH+YkW+N/CPcpw36rl+cX/vxyJwb wG47koFYYO0BGLZGxo87BbsHPq5AQ7iST+3E8WQ8wsVzUhYJedZqr6dA6v4k+073 EYyKSZ++uaHQOp8Zlgy2zLgL8XCMIW7Ntig87VqBL1Llal0OEdPdUbxBlrx0kaFq 2kcT8dKxJDFj3JB13wBHbDlA5SNDkmw8i70vIc3BVoW4xqP8oM/rCHhLeMH36dCI jrZ4A2hr7P1XWE9wFQmtOU5EE6ZR4CpKkS6LakPc8N6j9i6CZAO2PGhxdIZbVogD hxa8p54ltBgStEa2uGPysTJ3CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPEiJG2 wLmBaZPK5dceWS+tNZacMB8GA1UdIwQYMBaAFLYMRw0xIFhy57b7/WhPNwdNfp1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEMyRi83MDVGNTJGQzFE OTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dITG50dnY5YUU4M0IwMS1u WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RneEhEVEVnV0hMbnR2djlhRTgzQjAxLW5YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEMyRi83MDVGNTJGQzFEOTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dI TG50dnY5YUU4M0IwMS1uWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkgRrubo0JAuu2RiLjwqb8pQjog4l+yKkLIR078J0I8LSpHZOrIESK hbABr9sttKRxrlTYvYr4MbD9Nbo0IH2r06ZW3CJAdH4MhnLNPU3wLhhDD1sFeD6J OJQYqPk7WEGaiGL6NGDKfpkl5HxP+dOI44obIsaQZoXFPGIqldxsq1XltvozUAKf O4rsobC+H9DXKnGd+8pVNd3VuQS/8Utili9zhbNWcBDbgWqe7CbaEcdH7ouRsv4J sNSR4xmxVg0sf4ECTL8pm2D2J0ctTzRG/vWg3hEb/Frk21HN/fIXQlWJWx31y58r ivakT9HUNBPzZNEWYM+jxpgxfQ42hQOs -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:28 2025 by rpki-client