
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft
File: tgxHDTEgWHLntvv9aE83B01-nXM.mft (raw, json)
Hash identifier: cnhKvItBbNWAEgGdL5IvtgI9MMH0LUoH1Cj/OeXRLok=
Subject key identifier: 9B:CA:32:D1:13:21:3F:16:3F:EB:7D:9D:A1:AB:DE:1F:9B:80:82:15
Authority key identifier: B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73
Certificate issuer: /CN=A9110C2F/serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73
Certificate serial: 35B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft
Manifest number: 359D
Signing time: Tue 06 Oct 2026 14:54:15 +0000
Manifest this update: Tue 06 Oct 2026 14:54:14 +0000
Manifest next update: Tue 13 Oct 2026 14:54:14 +0000
Files and hashes: 1: tgxHDTEgWHLntvv9aE83B01-nXM.crl (hash: cy18rOsB7JsCaSns+Ga1iERfMScP9ST3ZT4T+XoDj64=)
2: 02E51B981EC611F19DFCC36D263D8C67.roa (hash: 3UnVZTaINOUt0RI2EU+GTPI4vVuMr3RqINBZbK3LeNs=)
3: 4625A21A68B511EA9EF7951AC4F9AE02.roa (hash: 0siYH+ngb9Vw3waf4JZmEzwqdvrjCQEL3iCYs6nr71s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl
rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:54:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13750 (0x35b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C2F, serialNumber=B60C470D31205872E7B6FBFD684F37074D7E9D73
Validity
Not Before: Oct 6 14:54:14 2026 GMT
Not After : Oct 13 14:54:14 2026 GMT
Subject: CN=6ac50b97-034c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c1:ff:3c:50:d4:7e:ce:68:88:73:bf:37:e3:
64:73:79:ed:00:02:ce:2d:1d:58:dc:8c:41:fc:95:
6f:b4:02:fd:57:7f:99:03:79:e4:5e:73:73:ea:b2:
1d:aa:c1:3b:af:ce:9c:92:a6:1e:b2:55:8e:76:5e:
c5:da:06:00:a9:ff:9f:01:c2:75:4b:25:76:4e:9c:
d9:d0:70:98:a7:76:e5:c3:5e:47:ea:52:df:33:15:
32:5f:1e:c8:bc:34:00:73:77:ee:9d:8d:19:2e:d5:
7f:c1:e3:67:6b:9b:56:53:55:30:f9:0d:5f:f7:5b:
bd:3f:7e:ac:c3:6d:3a:54:54:d5:aa:b0:e9:1e:60:
71:04:63:28:74:3f:e5:5f:a2:ee:03:4b:34:58:63:
fd:7e:6c:95:21:a1:e0:b8:28:50:8e:7c:38:44:1b:
9e:2b:6d:0b:ec:bc:f6:37:fa:ef:8e:3a:e9:4c:f1:
85:f6:29:3e:12:e9:f6:8c:45:f9:ff:d1:4a:01:cb:
b8:76:ee:78:bd:05:af:e5:f1:a6:cc:5f:4a:da:76:
94:e6:5c:49:e6:e4:15:71:8a:bb:a9:50:95:89:1b:
24:b2:41:20:1c:f0:db:ac:93:24:06:a7:94:91:61:
cf:4e:45:13:ef:fb:7d:bd:b8:67:c9:27:f7:3b:8d:
e0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CA:32:D1:13:21:3F:16:3F:EB:7D:9D:A1:AB:DE:1F:9B:80:82:15
X509v3 Authority Key Identifier:
keyid:B6:0C:47:0D:31:20:58:72:E7:B6:FB:FD:68:4F:37:07:4D:7E:9D:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgxHDTEgWHLntvv9aE83B01-nXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/705F52FC1D9911E285C9ED8508B02CD2/tgxHDTEgWHLntvv9aE83B01-nXM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:54:03:13:56:ea:29:9c:b7:83:47:e1:86:8f:aa:fb:78:ea:
e0:e7:eb:3e:d3:79:09:4d:80:b0:3b:bc:7c:1b:9d:ad:d3:17:
3a:6f:ec:47:92:56:18:f4:16:30:61:5d:cf:ee:a6:0c:cc:92:
cb:e1:a0:a0:8f:f2:be:2b:00:89:ee:55:0e:f7:2f:7d:b6:50:
0d:f2:d0:19:17:da:f5:e6:c4:b6:f8:34:32:34:7a:d3:4d:78:
98:a1:f0:c9:b0:a2:2f:0e:8d:05:00:d1:04:31:0a:4a:ad:05:
cd:4d:c4:22:aa:e7:16:a4:e5:a6:b3:d2:c2:27:c9:53:a1:bf:
57:72:f8:d7:8e:e3:72:eb:69:1a:0a:b8:a4:3e:d5:5d:55:93:
4b:3e:9c:4e:f0:aa:67:a8:e0:00:85:cc:88:84:72:8e:d2:19:
db:4a:88:c0:3f:08:17:aa:92:63:32:e1:ab:99:c6:93:e7:19:
cb:02:00:c8:64:01:a4:49:6f:ca:3d:c8:ec:d5:15:1e:57:20:
5d:13:74:17:9a:65:97:91:86:8d:f0:ab:70:31:22:7c:3c:fd:
83:5b:be:02:77:fc:2b:9a:40:f1:69:46:fd:46:fb:4c:9e:df:
c7:6a:50:ab:79:ae:20:8b:4c:8a:0e:08:6c:bd:5b:15:a6:f9:
11:0c:91:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTBDMkYxMTAvBgNVBAUTKEI2MEM0NzBEMzEyMDU4NzJFN0I2RkJGRDY4NEYzNzA3
NEQ3RTlENzMwHhcNMjYxMDA2MTQ1NDE0WhcNMjYxMDEzMTQ1NDE0WjAYMRYwFAYD
VQQDEw02YWM1MGI5Ny0wMzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnsH/PFDUfs5oiHO/N+Nkc3ntAALOLR1Y3IxB/JVvtAL9V3+ZA3nkXnNz6rId
qsE7r86ckqYeslWOdl7F2gYAqf+fAcJ1SyV2TpzZ0HCYp3blw15H6lLfMxUyXx7I
vDQAc3funY0ZLtV/weNna5tWU1Uw+Q1f91u9P36sw206VFTVqrDpHmBxBGModD/l
X6LuA0s0WGP9fmyVIaHguChQjnw4RBueK20L7Lz2N/rvjjrpTPGF9ik+Eun2jEX5
/9FKAcu4du54vQWv5fGmzF9K2naU5lxJ5uQVcYq7qVCViRskskEgHPDbrJMkBqeU
kWHPTkUT7/t9vbhnySf3O43gAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJvKMtET
IT8WP+t9naGr3h+bgIIVMB8GA1UdIwQYMBaAFLYMRw0xIFhy57b7/WhPNwdNfp1z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEMyRi83MDVGNTJGQzFE
OTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dITG50dnY5YUU4M0IwMS1u
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RneEhEVEVnV0hMbnR2djlhRTgzQjAxLW5YTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MEMyRi83MDVGNTJGQzFEOTkxMUUyODVDOUVEODUwOEIwMkNEMi90Z3hIRFRFZ1dI
TG50dnY5YUU4M0IwMS1uWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALVQDE1bqKZy3g0fhho+q+3jq4OfrPtN5CU2AsDu8fBudrdMXOm/sR5JWGPQW
MGFdz+6mDMySy+GgoI/yvisAie5VDvcvfbZQDfLQGRfa9ebEtvg0MjR60014mKHw
ybCiLw6NBQDRBDEKSq0FzU3EIqrnFqTlprPSwifJU6G/V3L4147jcutpGgq4pD7V
XVWTSz6cTvCqZ6jgAIXMiIRyjtIZ20qIwD8IF6qSYzLhq5nGk+cZywIAyGQBpElv
yj3I7NUVHlcgXRN0F5pll5GGjfCrcDEifDz9g1u+Anf8K5pA8WlG/Ub7TJ7fx2pQ
q3muIItMig4IbL1bFab5EQyR/Q==
-----END CERTIFICATE-----
Generated at Wed Oct 7 11:16:59 2026 by rpki-client