
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
File: 60tZM16DIXRfd2sCDOUkz3OZH-0.mft (raw, json)
Hash identifier: l+dI9KK3ntT5E9zQrLx2WI5tZkYGvXJk2DqIRdqJu6U=
Subject key identifier: 76:8C:6A:8C:50:68:96:21:54:0E:B4:97:A1:92:86:A0:BF:D0:83:BC
Authority key identifier: EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED
Certificate issuer: /CN=A9142DC9/serialNumber=EB4B59335E8321745F776B020CE524CF73991FED
Certificate serial: B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
Manifest number: AE
Signing time: Thu 23 Jul 2026 08:58:16 +0000
Manifest this update: Thu 23 Jul 2026 08:58:15 +0000
Manifest next update: Thu 30 Jul 2026 08:58:15 +0000
Files and hashes: 1: 60tZM16DIXRfd2sCDOUkz3OZH-0.crl (hash: fGDgxH55augrppcBDddex1qSIo2xft2ee9N2M9Y2uZ4=)
2: 2F14B290801B11F0989DCE76C4F9AE02.roa (hash: 2Sh4HNxYtB9dGVF8vJ1SzNebK3nTgLRc3WLrBkkeJGc=)
3: 3AC24DBE801B11F09DAF167CC4F9AE02.roa (hash: KgTcEBQwyeNNEcPVGV0LGEJQJnqAyFvRcFGWQSUD/3E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl
rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:58:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142DC9, serialNumber=EB4B59335E8321745F776B020CE524CF73991FED
Validity
Not Before: Jul 23 08:58:15 2026 GMT
Not After : Jul 30 08:58:15 2026 GMT
Subject: CN=6a61d7a8-59f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:c2:c3:e8:e1:32:17:26:78:99:39:e3:80:
3c:43:29:1c:cf:c2:fa:fa:29:45:3e:33:b5:56:5a:
cd:c6:c4:fe:05:6f:2b:51:d6:76:21:9e:52:e7:90:
63:9b:18:49:8f:8d:f7:7a:90:63:8c:ff:85:6e:4a:
a4:19:5e:63:ee:7d:1c:5c:76:1c:00:4d:8b:d3:37:
7d:a3:ef:e0:bb:28:2c:67:9f:35:58:49:da:4b:49:
fb:fb:a9:d9:cd:6b:20:74:bf:2f:00:ce:d6:1e:9a:
9d:42:c4:a0:f3:ce:ea:23:15:67:44:a1:a6:ef:ad:
80:51:7b:bb:86:9e:89:59:80:3c:f6:5b:b9:b1:e4:
4f:0e:60:dc:b9:99:d7:e1:84:15:ab:05:b8:b4:52:
51:eb:9c:51:ad:1e:c4:e6:a9:6a:f6:b1:c6:e6:4e:
4b:e1:64:5e:14:ba:c0:ec:a2:87:c1:0f:af:1e:18:
7a:d1:07:7a:95:50:50:98:95:91:18:4f:ac:56:3b:
b7:dc:4d:dd:f2:79:64:58:11:60:21:c5:82:02:48:
3d:71:ec:bb:77:0a:4c:b4:ce:ab:ad:08:14:4d:e4:
58:96:eb:ea:93:09:42:3a:9d:6e:af:be:4e:c4:d5:
1e:91:7e:bf:33:bc:d8:43:d7:55:7a:f6:a7:fc:d2:
fe:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8C:6A:8C:50:68:96:21:54:0E:B4:97:A1:92:86:A0:BF:D0:83:BC
X509v3 Authority Key Identifier:
keyid:EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f7:20:e3:44:c7:5e:55:9a:7f:4c:93:23:55:12:9e:fe:20:
10:d9:d7:77:6f:f4:64:48:24:9b:ca:03:bf:02:98:67:58:21:
9a:af:05:9f:1b:1e:6c:06:23:fb:ca:25:1b:13:f6:d8:47:53:
c4:d7:ad:00:72:e2:7e:0b:55:09:1e:71:f2:f2:76:91:b1:e3:
a6:5d:56:0f:18:34:42:4c:c8:ca:f6:97:4a:13:4f:c8:5c:b9:
a0:d0:2a:3c:f8:87:5b:c0:89:ac:d6:b4:7e:ba:ce:21:29:05:
e6:ac:95:7d:5a:47:a5:a8:2e:f8:36:41:e3:5b:a4:f4:35:85:
bc:7c:1b:23:6b:92:fd:6e:56:8b:a4:7b:6b:cf:54:f9:ed:86:
24:a3:67:47:50:89:27:26:55:0b:ac:42:1f:eb:db:35:e3:7b:
86:2a:8e:40:1b:c4:21:f0:21:11:6e:fc:d0:82:02:4a:96:5d:
ec:57:41:37:56:0b:9e:25:5f:9f:a5:95:51:52:a1:40:93:fb:
61:e7:57:7f:c6:d5:23:e2:36:c4:8f:62:85:ed:a2:38:7f:f2:
ce:f9:13:83:7c:39:92:9c:84:68:f5:89:3c:dd:00:cc:b9:85:
af:69:be:3a:e4:14:6d:b9:97:80:ee:d5:5a:64:7a:c0:b2:44:
6b:a1:56:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:43 2026 by rpki-client