$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft File: 60tZM16DIXRfd2sCDOUkz3OZH-0.mft (raw, json) Hash identifier: VyeTb9JmsB4yf0hOO30H5fdCaGfq2ucFe5zW8gMeKe4= Subject key identifier: 36:3A:72:E5:CD:06:6C:C5:50:F1:41:D0:53:7C:5C:F0:43:90:9F:58 Authority key identifier: EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED Certificate issuer: /CN=A9142DC9/serialNumber=EB4B59335E8321745F776B020CE524CF73991FED Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft Manifest number: D0 Signing time: Wed 23 Sep 2026 06:30:47 +0000 Manifest this update: Wed 23 Sep 2026 06:30:46 +0000 Manifest next update: Wed 30 Sep 2026 06:30:46 +0000 Files and hashes: 1: 60tZM16DIXRfd2sCDOUkz3OZH-0.crl (hash: AUsKqBPfHZSzrjKnRcIw2FHsFokU4eAHxRSkYyDZ+Ks=) 2: 3AC24DBE801B11F09DAF167CC4F9AE02.roa (hash: lAXWv3UUJ6cic6YPRSG4uuhpq3Qimwck5d5gS3sMPco=) 3: 2F14B290801B11F0989DCE76C4F9AE02.roa (hash: car3+0AuT/DxwtWfPZqhcplFaS0iE8HtUQGh8tESllM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DC9, serialNumber=EB4B59335E8321745F776B020CE524CF73991FED Validity Not Before: Sep 23 06:30:46 2026 GMT Not After : Sep 30 06:30:46 2026 GMT Subject: CN=6ab37217-b1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ca:b0:40:38:40:d9:76:fa:b2:5d:e0:65:08: e2:ce:6c:b4:16:a2:16:04:37:61:fa:40:13:8d:ae: 99:fa:13:9a:13:f2:0f:ff:f3:a9:ba:21:95:b8:0a: 9d:0f:6d:f6:a3:90:a5:e7:e1:9b:e6:67:6e:69:08: ab:11:82:42:ab:60:b3:93:ac:41:42:42:f9:c2:e6: cd:8d:79:d5:63:01:1f:9c:c2:89:d3:a5:48:ae:d5: 1f:54:40:eb:aa:3a:a5:4e:a0:39:b6:79:23:fb:9a: 1e:2b:a2:1e:44:3e:c0:48:7a:e7:e1:c7:b0:f5:41: a8:4e:6c:48:95:21:bd:2b:94:27:fb:b2:bc:70:f1: 11:41:23:68:8d:ff:fa:01:a2:22:5b:37:70:c5:32: 8f:37:27:9a:17:50:e4:1a:b2:37:d0:3d:fc:3b:78: 9b:e7:c6:5b:b5:35:14:7d:ab:f3:9c:06:f4:68:3e: a6:e8:bc:bb:75:82:5d:cc:8e:0b:4c:68:b5:2a:75: b0:bf:e3:ea:87:e7:27:80:e8:bc:0e:18:3e:68:2c: 12:de:b5:e2:43:da:f4:97:c8:e5:4e:97:93:8e:b4: ef:12:7a:32:de:6d:7e:f5:28:9d:b1:2a:ed:a0:c2: 50:b3:37:21:a3:13:b0:10:c4:80:aa:b7:d6:41:7f: e6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3A:72:E5:CD:06:6C:C5:50:F1:41:D0:53:7C:5C:F0:43:90:9F:58 X509v3 Authority Key Identifier: keyid:EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:32:a0:db:e5:46:3e:ae:c7:b0:c1:42:7e:97:0b:22:4d:e9: 5a:d2:24:0f:a7:1d:9c:fe:d5:a5:4c:9f:72:86:b2:52:84:d7: 0c:7e:e4:a7:c8:b9:45:32:9c:5b:72:61:b1:a4:46:8b:69:d5: 85:89:42:bb:08:44:26:a4:a7:ea:d5:9b:57:c9:a0:db:36:d1: 5e:86:ab:c7:dc:f8:ce:cf:42:50:72:d5:b7:14:37:1a:0b:26: e1:77:8b:11:b7:22:c7:ca:6f:00:e0:35:05:66:46:44:de:4c: 1a:19:a0:26:04:a1:88:99:9d:cb:f5:c0:bd:1e:45:ca:c7:e8: 9f:48:82:8e:d1:2c:29:57:0c:20:cc:d1:db:7e:17:47:b4:5a: be:dc:c3:0c:93:aa:c3:28:c7:a3:20:75:0d:ab:b2:e7:8a:b6: c6:79:f9:05:6d:ce:a2:c2:77:4b:71:e8:7d:36:bb:f5:4d:fd: f6:8f:f0:4f:b4:ef:81:b3:f6:25:9a:e6:17:ce:fc:be:56:b4: ad:86:30:f8:d9:de:60:cc:f1:2e:fc:90:08:07:ec:8f:d1:d9: 25:22:71:2d:ea:59:ca:7c:f5:b1:ab:48:18:81:72:84:82:42: ad:21:90:55:11:95:dc:41:9c:8b:08:db:fb:f2:d7:97:e0:81: af:5f:bf:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQzkxMTAvBgNVBAUTKEVCNEI1OTMzNUU4MzIxNzQ1Rjc3NkIwMjBDRTUyNENG NzM5OTFGRUQwHhcNMjYwOTIzMDYzMDQ2WhcNMjYwOTMwMDYzMDQ2WjAYMRYwFAYD VQQDEw02YWIzNzIxNy1iMWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsqwQDhA2Xb6sl3gZQjizmy0FqIWBDdh+kATja6Z+hOaE/IP//OpuiGVuAqd D232o5Cl5+Gb5mduaQirEYJCq2Czk6xBQkL5wubNjXnVYwEfnMKJ06VIrtUfVEDr qjqlTqA5tnkj+5oeK6IeRD7ASHrn4cew9UGoTmxIlSG9K5Qn+7K8cPERQSNojf/6 AaIiWzdwxTKPNyeaF1DkGrI30D38O3ib58ZbtTUUfavznAb0aD6m6Ly7dYJdzI4L TGi1KnWwv+Pqh+cngOi8Dhg+aCwS3rXiQ9r0l8jlTpeTjrTvEnoy3m1+9SidsSrt oMJQszchoxOwEMSAqrfWQX/m5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDY6cuXN BmzFUPFB0FN8XPBDkJ9YMB8GA1UdIwQYMBaAFOtLWTNegyF0X3drAgzlJM9zmR/t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRDOS83QUY2N0M3NDdD NjExMUYwOTFEMzQxMjlDNEY5QUUwMi82MHRaTTE2RElYUmZkMnNDRE9Va3ozT1pI LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYwdFpNMTZESVhSZmQyc0NET1VrejNPWkgtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRDOS83QUY2N0M3NDdDNjExMUYwOTFEMzQxMjlDNEY5QUUwMi82MHRaTTE2RElY UmZkMnNDRE9Va3ozT1pILTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvjKg2+VGPq7HsMFCfpcLIk3pWtIkD6cdnP7VpUyfcoayUoTXDH7kp8i5RTKc W3JhsaRGi2nVhYlCuwhEJqSn6tWbV8mg2zbRXoarx9z4zs9CUHLVtxQ3Ggsm4XeL Ebcix8pvAOA1BWZGRN5MGhmgJgShiJmdy/XAvR5Fysfon0iCjtEsKVcMIMzR234X R7RavtzDDJOqwyjHoyB1Dauy54q2xnn5BW3OosJ3S3HofTa79U399o/wT7TvgbP2 JZrmF878vla0rYYw+NneYMzxLvyQCAfsj9HZJSJxLepZynz1satIGIFyhIJCrSGQ VRGV3EGciwjb+/LXl+CBr1+/hA== -----END CERTIFICATE-----Generated at Thu Sep 24 21:39:30 2026 by rpki-client