$ rpki-client -vvf rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft File: 60SnxtcuZG2Eose20umnMhAbgTo.mft (raw, json) Hash identifier: IIN1CM4tTvuc08i9l3U1lhlzK7jTAbsBtAxUDjJwS80= Subject key identifier: 6F:C0:BB:4B:35:31:BE:CD:30:E8:B5:83:56:9F:1A:13:51:86:BC:C5 Authority key identifier: EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A Certificate issuer: /CN=A912A10A/serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft Manifest number: 0295 Signing time: Sat 23 Aug 2025 01:51:27 +0000 Manifest this update: Sat 23 Aug 2025 01:51:26 +0000 Manifest next update: Sat 30 Aug 2025 01:51:26 +0000 Files and hashes: 1: 60SnxtcuZG2Eose20umnMhAbgTo.crl (hash: mA/ybal1x7v2JN59ezv+hHBVVYdslY81E0YbLuAruK4=) 2: 8C286648818611ED8D1C5824C4F9AE02.roa (hash: xFXNX7ojWtYsPecQfS60CBpkcLKXmlqCPRZZdxkSgiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.crl rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A10A, serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A Validity Not Before: Aug 23 01:51:26 2025 GMT Not After : Aug 30 01:51:26 2025 GMT Subject: CN=68a91e9f-9994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3e:c5:b0:7a:3b:ca:c2:e1:d5:4f:e8:b0:bf: 63:3c:f2:94:d0:3d:75:25:4a:30:09:d1:c3:1c:67: be:ba:a3:e8:67:83:5e:35:03:ed:4c:6d:50:70:10: 28:f2:ed:43:20:5e:d7:6f:19:7d:30:80:2d:09:df: ba:04:ec:9e:56:8c:ef:aa:d2:32:bf:ac:b3:86:8c: cd:64:21:e8:12:06:08:dd:9f:7b:a1:16:b2:da:5d: fd:eb:eb:9a:2c:fa:ca:6c:78:a9:c5:56:0a:fc:f6: c4:a9:56:d1:f4:5e:0a:e7:ef:71:19:09:d5:50:8c: b7:38:09:4b:47:ba:a8:73:b1:6c:a3:d7:dd:63:b3: db:c3:e4:0c:69:b8:cb:72:f3:62:c2:6f:d7:f5:24: c7:99:bb:f0:ad:70:47:d6:72:be:3d:6d:6e:e0:7b: 00:fb:d6:7c:37:22:a3:34:3b:01:a0:3f:8a:29:94: f0:a3:d7:cb:9f:aa:88:39:77:5f:fc:45:8a:84:a0: 31:a3:22:ba:d4:cb:3d:3d:90:12:11:40:bd:08:50: 90:a3:17:0a:27:29:bc:f3:05:83:7a:c0:fb:66:24: 69:df:ad:f6:33:97:e9:86:7a:3b:5e:96:20:d0:a4: 1c:b2:9c:f8:5d:17:5f:f8:35:d1:b7:61:0f:61:cd: 56:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C0:BB:4B:35:31:BE:CD:30:E8:B5:83:56:9F:1A:13:51:86:BC:C5 X509v3 Authority Key Identifier: keyid:EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8b:de:20:f7:41:84:d0:92:c4:0b:32:84:09:a3:c4:17:7a: 5c:ff:62:1b:07:16:79:84:0b:76:51:d7:1e:8c:0a:fb:c4:dc: de:58:9a:f9:63:ee:b1:c1:57:fe:c8:8e:e9:58:ce:22:42:cd: 1e:f9:3b:87:8d:08:24:4a:e8:fa:06:e8:05:31:58:6a:7d:71: 4a:89:ff:c0:20:f5:ff:68:ab:c3:34:a4:86:86:0b:51:23:71: 26:58:4e:54:f6:c5:08:23:74:6d:07:47:1b:ca:b2:cd:c9:05: 70:55:ad:31:7c:76:3a:65:16:19:39:3a:9a:af:26:fd:8f:9e: 4e:61:5b:6a:20:60:48:62:81:ec:dc:65:61:d7:dc:fc:65:53: b8:a9:1b:e7:ee:2e:fb:51:47:bb:07:25:87:9e:66:3d:26:ad: 56:d2:36:7d:e3:35:11:31:a5:eb:1a:df:12:da:3a:4b:5b:b7: e5:b6:4a:7e:e8:9e:2b:ef:7b:97:15:13:9f:37:da:fc:16:13: 24:0a:ff:16:9b:d6:53:88:0f:e1:1c:3b:f8:2f:44:6a:31:2a: f5:a0:7f:c6:79:fa:c4:cc:f6:8b:8c:d0:e2:0b:f6:8d:65:c6: 74:b3:40:5f:57:d8:a0:b5:51:f1:01:f2:eb:8d:cd:32:62:ac: a7:a5:12:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkExMEExMTAvBgNVBAUTKEVCNDRBN0M2RDcyRTY0NkQ4NEEyQzdCNkQyRTlBNzMy MTAxQjgxM0EwHhcNMjUwODIzMDE1MTI2WhcNMjUwODMwMDE1MTI2WjAYMRYwFAYD VQQDEw02OGE5MWU5Zi05OTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyT7FsHo7ysLh1U/osL9jPPKU0D11JUowCdHDHGe+uqPoZ4NeNQPtTG1QcBAo 8u1DIF7Xbxl9MIAtCd+6BOyeVozvqtIyv6yzhozNZCHoEgYI3Z97oRay2l396+ua LPrKbHipxVYK/PbEqVbR9F4K5+9xGQnVUIy3OAlLR7qoc7Fso9fdY7Pbw+QMabjL cvNiwm/X9STHmbvwrXBH1nK+PW1u4HsA+9Z8NyKjNDsBoD+KKZTwo9fLn6qIOXdf /EWKhKAxoyK61Ms9PZASEUC9CFCQoxcKJym88wWDesD7ZiRp3632M5fphno7XpYg 0KQcspz4XRdf+DXRt2EPYc1WGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/Au0s1 Mb7NMOi1g1afGhNRhrzFMB8GA1UdIwQYMBaAFOtEp8bXLmRthKLHttLppzIQG4E6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTEwQS9FNTE4QjA3NjEz OTIxMUVEQTA1MjAyMUZDNEY5QUUwMi82MFNueHRjdVpHMkVvc2UyMHVtbk1oQWJn VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYwU254dGN1WkcyRW9zZTIwdW1uTWhBYmdUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTEwQS9FNTE4QjA3NjEzOTIxMUVEQTA1MjAyMUZDNEY5QUUwMi82MFNueHRjdVpH MkVvc2UyMHVtbk1oQWJnVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKi94g90GE0JLECzKECaPEF3pc/2IbBxZ5hAt2UdcejAr7xNzeWJr5 Y+6xwVf+yI7pWM4iQs0e+TuHjQgkSuj6BugFMVhqfXFKif/AIPX/aKvDNKSGhgtR I3EmWE5U9sUII3RtB0cbyrLNyQVwVa0xfHY6ZRYZOTqaryb9j55OYVtqIGBIYoHs 3GVh19z8ZVO4qRvn7i77UUe7ByWHnmY9Jq1W0jZ94zURMaXrGt8S2jpLW7fltkp+ 6J4r73uXFROfN9r8FhMkCv8Wm9ZTiA/hHDv4L0RqMSr1oH/GefrEzPaLjNDiC/aN ZcZ0s0BfV9igtVHxAfLrjc0yYqynpRKS -----END CERTIFICATE-----Generated at Sat Aug 23 19:04:08 2025 by rpki-client