$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft File: 60tZM16DIXRfd2sCDOUkz3OZH-0.mft (raw, json) Hash identifier: 08/CX4LOLk7o5pJae/oNc1IQy1PCEjPI/mRO3OQIzNY= Subject key identifier: 50:80:1F:EB:7E:A6:8E:94:49:03:34:E4:7A:12:1D:C5:98:41:AF:61 Authority key identifier: EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED Certificate issuer: /CN=A9142DC9/serialNumber=EB4B59335E8321745F776B020CE524CF73991FED Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft Manifest number: 22 Signing time: Sun 19 Oct 2025 11:18:46 +0000 Manifest this update: Sun 19 Oct 2025 11:18:46 +0000 Manifest next update: Sun 26 Oct 2025 11:18:46 +0000 Files and hashes: 1: 60tZM16DIXRfd2sCDOUkz3OZH-0.crl (hash: i/Xkd0rvQT4HpjDH2FWPWx3GxxO7VWG/mFXWlt3OQ6s=) 2: 3AC24DBE801B11F09DAF167CC4F9AE02.roa (hash: Dfltc6qeosruWWs9RYkLtzznrV3gwpnRBtFc/SCx5TA=) 3: 2F14B290801B11F0989DCE76C4F9AE02.roa (hash: 5Up2xiMOjdnHTLm0XbREaBUtcIUU4ZYKJ2V16NY8kzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DC9, serialNumber=EB4B59335E8321745F776B020CE524CF73991FED Validity Not Before: Oct 19 11:18:46 2025 GMT Not After : Oct 26 11:18:46 2025 GMT Subject: CN=68f4c916-109c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:59:fa:e6:f1:2b:ac:47:53:00:dc:a4:27:cc: 3a:23:22:8c:c1:58:9e:ec:ff:65:a7:70:3a:8a:52: 2a:85:22:ee:85:fd:f3:8b:1c:20:1e:2f:fb:ce:c6: ac:96:27:14:94:65:96:0d:b3:48:a0:be:d0:bf:b4: 40:94:0a:1a:f5:0a:39:5c:00:02:89:81:4d:ce:c5: 6d:88:2c:73:d3:d6:6d:09:6c:ae:d9:44:6b:c9:04: 75:79:70:76:98:41:e4:9e:60:f4:a5:8b:19:74:5a: bc:0e:fb:2d:42:c0:37:a5:41:ec:06:94:76:3d:b7: ff:74:e1:9a:54:b8:b6:84:d5:36:cf:62:ae:ba:27: 06:db:fa:68:16:68:39:1d:1d:f1:25:12:d8:bc:2c: c7:2a:98:cd:e6:ee:f4:f7:7e:29:41:01:43:ea:c6: 8a:db:3a:64:73:fa:73:1d:ba:03:3f:d8:9e:86:15: 2e:f1:b8:52:c9:e4:bb:97:47:0f:26:6f:53:f7:2a: 66:d9:43:7a:b5:32:07:56:b1:9a:31:92:15:76:1a: ff:f2:51:77:02:9a:25:c9:da:a2:43:46:f5:cd:41: f1:e1:f0:71:b2:8b:35:74:32:3d:4a:ca:7a:5e:ce: 3c:8c:f5:5e:5c:72:94:e7:db:5e:ac:aa:40:95:a9: a7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:80:1F:EB:7E:A6:8E:94:49:03:34:E4:7A:12:1D:C5:98:41:AF:61 X509v3 Authority Key Identifier: keyid:EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:3b:65:bd:90:4c:d2:1c:94:78:bb:8f:38:d1:d9:dd:4e:76: 42:b8:04:b7:db:c2:2a:2b:c1:1d:e8:ca:4a:2e:18:5f:aa:9d: 8c:92:9e:fc:e6:84:4c:e6:d9:65:e8:d2:3c:61:53:b0:39:6c: 7e:1a:90:12:da:63:bb:17:db:cf:f3:c8:c1:9c:79:f6:8c:43: 8b:bc:b8:65:ac:41:da:2c:70:7e:36:6c:6d:b9:ea:f3:1a:f1: f1:73:87:7a:5a:24:0a:7e:ff:ce:02:83:5d:98:ff:36:69:05: d1:a0:4f:fd:58:5d:f1:14:a4:56:a6:7a:fe:5f:62:ee:c6:f0: 2e:a9:42:17:79:67:69:3a:40:72:95:29:75:4c:60:79:84:f0: 09:4b:69:66:b3:f3:75:4d:67:ea:06:25:ce:69:af:ab:01:42: 48:3f:2e:2e:b8:4d:bc:fc:ac:08:30:27:9a:cc:f8:2c:95:08: 7d:fa:99:02:02:40:e5:14:7e:86:b0:14:43:e9:4b:0f:a8:18: db:50:0f:78:96:af:a0:88:cd:4d:60:01:9e:f2:f3:dc:40:26: 3a:83:ae:65:7d:85:91:f6:67:40:a8:74:ee:3a:cb:bf:47:7e: b2:e7:05:d0:f3:0f:f5:43:82:7c:53:94:5c:36:cb:40:69:ef: cc:1c:59:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkRDOTExMC8GA1UEBRMoRUI0QjU5MzM1RTgzMjE3NDVGNzc2QjAyMENFNTI0Q0Y3 Mzk5MUZFRDAeFw0yNTEwMTkxMTE4NDZaFw0yNTEwMjYxMTE4NDZaMBgxFjAUBgNV BAMTDTY4ZjRjOTE2LTEwOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWWfrm8SusR1MA3KQnzDojIozBWJ7s/2WncDqKUiqFIu6F/fOLHCAeL/vOxqyW JxSUZZYNs0igvtC/tECUChr1CjlcAAKJgU3OxW2ILHPT1m0JbK7ZRGvJBHV5cHaY QeSeYPSlixl0WrwO+y1CwDelQewGlHY9t/904ZpUuLaE1TbPYq66Jwbb+mgWaDkd HfElEti8LMcqmM3m7vT3filBAUPqxorbOmRz+nMdugM/2J6GFS7xuFLJ5LuXRw8m b1P3KmbZQ3q1MgdWsZoxkhV2Gv/yUXcCmiXJ2qJDRvXNQfHh8HGyizV0Mj1Kynpe zjyM9V5ccpTn216sqkCVqafBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUIAf636m jpRJAzTkehIdxZhBr2EwHwYDVR0jBBgwFoAU60tZM16DIXRfd2sCDOUkz3OZH+0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyREM5LzdBRjY3Qzc0N0M2 MTExRjA5MUQzNDEyOUM0RjlBRTAyLzYwdFpNMTZESVhSZmQyc0NET1VrejNPWkgt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNjB0Wk0xNkRJWFJmZDJzQ0RPVWt6M09aSC0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy REM5LzdBRjY3Qzc0N0M2MTExRjA5MUQzNDEyOUM0RjlBRTAyLzYwdFpNMTZESVhS ZmQyc0NET1VrejNPWkgtMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEM7Zb2QTNIclHi7jzjR2d1OdkK4BLfbwiorwR3oykouGF+qnYySnvzm hEzm2WXo0jxhU7A5bH4akBLaY7sX28/zyMGcefaMQ4u8uGWsQdoscH42bG256vMa 8fFzh3paJAp+/84Cg12Y/zZpBdGgT/1YXfEUpFamev5fYu7G8C6pQhd5Z2k6QHKV KXVMYHmE8AlLaWaz83VNZ+oGJc5pr6sBQkg/Li64Tbz8rAgwJ5rM+CyVCH36mQIC QOUUfoawFEPpSw+oGNtQD3iWr6CIzU1gAZ7y89xAJjqDrmV9hZH2Z0CodO46y79H frLnBdDzD/VDgnxTlFw2y0Bp78wcWVA= -----END CERTIFICATE-----Generated at Mon Oct 20 10:33:47 2025 by rpki-client