$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft File: 60tZM16DIXRfd2sCDOUkz3OZH-0.mft (raw, json) Hash identifier: U8cXFDloP/ezy+KtvilxdgUualMtRCCE4yQL+WIgQKs= Subject key identifier: C2:77:D8:3D:06:1F:99:1C:8F:7E:1F:49:AE:7B:1A:E3:CA:6E:47:B6 Authority key identifier: EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED Certificate issuer: /CN=A9142DC9/serialNumber=EB4B59335E8321745F776B020CE524CF73991FED Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft Manifest number: 06 Signing time: Sat 23 Aug 2025 12:18:12 +0000 Manifest this update: Sat 23 Aug 2025 12:18:11 +0000 Manifest next update: Sat 30 Aug 2025 12:18:11 +0000 Files and hashes: 1: 60tZM16DIXRfd2sCDOUkz3OZH-0.crl (hash: CK7UWTHSB2hw+1+a/FGnvCh7Qeul2aBnAyDpEokP0bQ=) 2: 3AC24DBE801B11F09DAF167CC4F9AE02.roa (hash: Dfltc6qeosruWWs9RYkLtzznrV3gwpnRBtFc/SCx5TA=) 3: 2F14B290801B11F0989DCE76C4F9AE02.roa (hash: 5Up2xiMOjdnHTLm0XbREaBUtcIUU4ZYKJ2V16NY8kzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 12:18:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DC9, serialNumber=EB4B59335E8321745F776B020CE524CF73991FED Validity Not Before: Aug 23 12:18:11 2025 GMT Not After : Aug 30 12:18:11 2025 GMT Subject: CN=68a9b184-957e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fa:a5:02:e9:1d:9b:17:64:ab:05:a9:08:b5: 23:07:1d:bc:45:ed:c3:b0:d8:a1:6b:48:71:c2:83: bb:0f:07:76:65:e7:71:02:5d:4a:45:d9:1b:52:8c: 73:b5:ba:e7:96:3b:17:05:db:81:d0:35:60:f4:3a: eb:cb:23:cc:cd:26:fe:88:20:3e:7e:b9:25:28:c7: 4b:b9:73:4a:80:82:ff:5a:22:04:03:26:ad:ce:29: c3:fe:d7:f8:05:51:c7:5f:8a:a3:53:1a:0a:11:e2: 59:b9:8c:72:a5:06:8d:65:73:31:45:79:b2:5e:3a: 62:dc:b6:a9:02:e4:af:d9:11:27:5b:66:43:3a:8f: 39:69:5f:c3:68:c1:41:78:53:43:50:88:c8:3d:55: 9b:bd:97:53:44:bf:5f:b6:39:94:2e:90:24:b4:66: 72:e3:57:73:fa:e1:6e:fe:84:e2:12:31:99:36:53: 0d:02:e3:54:b0:48:f4:54:87:cb:a1:bf:bf:a8:c1: 21:16:60:81:20:39:e7:02:be:5e:e8:0d:17:4e:0c: cc:7c:24:a5:9f:4f:96:5b:3b:4a:07:ad:0c:4d:6e: 67:bc:51:c2:ea:06:6f:6f:07:4f:a4:f0:3e:d2:97: 54:09:3d:29:ee:22:f8:c0:7d:9b:dd:2c:69:4d:7c: 9b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:77:D8:3D:06:1F:99:1C:8F:7E:1F:49:AE:7B:1A:E3:CA:6E:47:B6 X509v3 Authority Key Identifier: keyid:EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:7c:ad:d0:10:a2:20:43:63:43:c9:44:51:7d:31:dd:24:c7: b5:12:95:5d:c0:64:2b:7b:e8:9f:63:e8:9d:48:e8:ca:54:7a: 2e:77:b8:50:f4:3c:bc:76:c7:de:89:a6:bb:6f:df:2e:24:b2: 2a:67:97:99:ef:a1:a0:af:47:e7:c5:f4:0f:7f:59:fb:05:58: 8a:25:a9:6d:86:a6:c8:bd:18:3b:63:78:80:30:7b:47:8c:c1: 0d:ba:50:92:b8:55:a1:49:26:cf:54:f5:05:0e:a4:bb:36:d8: 2d:af:02:09:90:79:2e:da:02:52:11:71:11:f3:8e:62:e2:e7: e6:08:96:8a:39:03:41:cc:c3:37:b8:10:60:41:6d:5c:51:b4: bf:06:8e:83:88:fa:8f:fa:91:f8:25:d7:6a:d7:bc:5d:88:63: fe:12:b4:b9:a6:b8:5f:f5:0d:c8:22:47:b9:9b:09:0d:66:61: e2:13:a1:7f:6a:e6:04:61:b7:70:59:90:58:03:e2:53:23:ac: d7:cc:d6:a8:4a:14:3d:38:c4:a4:ba:13:6d:04:00:87:32:6d: 58:48:6f:8a:2b:71:1f:52:e8:d2:2f:c2:4b:83:97:8f:8f:9e: 10:d3:ee:32:6d:e8:82:4a:a3:33:50:b1:62:4a:50:39:66:a5: fe:38:64:a1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkRDOTExMC8GA1UEBRMoRUI0QjU5MzM1RTgzMjE3NDVGNzc2QjAyMENFNTI0Q0Y3 Mzk5MUZFRDAeFw0yNTA4MjMxMjE4MTFaFw0yNTA4MzAxMjE4MTFaMBgxFjAUBgNV BAMTDTY4YTliMTg0LTk1N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC+qUC6R2bF2SrBakItSMHHbxF7cOw2KFrSHHCg7sPB3Zl53ECXUpF2RtSjHO1 uueWOxcF24HQNWD0OuvLI8zNJv6IID5+uSUox0u5c0qAgv9aIgQDJq3OKcP+1/gF UcdfiqNTGgoR4lm5jHKlBo1lczFFebJeOmLctqkC5K/ZESdbZkM6jzlpX8NowUF4 U0NQiMg9VZu9l1NEv1+2OZQukCS0ZnLjV3P64W7+hOISMZk2Uw0C41SwSPRUh8uh v7+owSEWYIEgOecCvl7oDRdODMx8JKWfT5ZbO0oHrQxNbme8UcLqBm9vB0+k8D7S l1QJPSnuIvjAfZvdLGlNfJsDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwnfYPQYf mRyPfh9Jrnsa48puR7YwHwYDVR0jBBgwFoAU60tZM16DIXRfd2sCDOUkz3OZH+0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyREM5LzdBRjY3Qzc0N0M2 MTExRjA5MUQzNDEyOUM0RjlBRTAyLzYwdFpNMTZESVhSZmQyc0NET1VrejNPWkgt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNjB0Wk0xNkRJWFJmZDJzQ0RPVWt6M09aSC0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy REM5LzdBRjY3Qzc0N0M2MTExRjA5MUQzNDEyOUM0RjlBRTAyLzYwdFpNMTZESVhS ZmQyc0NET1VrejNPWkgtMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMp8rdAQoiBDY0PJRFF9Md0kx7USlV3AZCt76J9j6J1I6MpUei53uFD0 PLx2x96Jprtv3y4ksipnl5nvoaCvR+fF9A9/WfsFWIolqW2Gpsi9GDtjeIAwe0eM wQ26UJK4VaFJJs9U9QUOpLs22C2vAgmQeS7aAlIRcRHzjmLi5+YIloo5A0HMwze4 EGBBbVxRtL8GjoOI+o/6kfgl12rXvF2IY/4StLmmuF/1DcgiR7mbCQ1mYeIToX9q 5gRht3BZkFgD4lMjrNfM1qhKFD04xKS6E20EAIcybVhIb4orcR9S6NIvwkuDl4+P nhDT7jJt6IJKozNQsWJKUDlmpf44ZKE= -----END CERTIFICATE-----Generated at Sun Aug 24 00:31:53 2025 by rpki-client