
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft
File: 60Y5e044RmfgPE26UHVUDwA30bg.mft (raw, json)
Hash identifier: nivtbZBKhE1kOgqWYQ0FhWtn9mfJ/IKoUIalxPQ6QLg=
Subject key identifier: BC:D9:FC:2D:2C:23:65:F3:51:2B:6B:5D:0C:C2:CA:BD:81:2D:0A:36
Authority key identifier: EB:46:39:7B:4E:38:46:67:E0:3C:4D:BA:50:75:54:0F:00:37:D1:B8
Certificate issuer: /CN=A9176DA8/serialNumber=EB46397B4E384667E03C4DBA5075540F0037D1B8
Certificate serial: 1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60Y5e044RmfgPE26UHVUDwA30bg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft
Manifest number: 1C
Signing time: Mon 11 May 2026 09:09:14 +0000
Manifest this update: Mon 11 May 2026 09:09:14 +0000
Manifest next update: Mon 18 May 2026 09:09:14 +0000
Files and hashes: 1: 60Y5e044RmfgPE26UHVUDwA30bg.crl (hash: vvNPY4QFeTASx8yFyOYsDv/nu8cv3deUJzW6fTXbZd0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.crl
rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60Y5e044RmfgPE26UHVUDwA30bg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:09:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176DA8, serialNumber=EB46397B4E384667E03C4DBA5075540F0037D1B8
Validity
Not Before: May 11 09:09:14 2026 GMT
Not After : May 18 09:09:14 2026 GMT
Subject: CN=6a019cba-2b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:da:0b:32:d8:ed:71:9f:44:42:c8:10:3b:57:
c7:7b:c4:81:1a:18:3b:be:34:ac:7c:92:01:6f:ba:
3c:f2:ad:51:87:40:9b:66:8c:1f:0a:23:5c:12:cf:
fb:aa:ba:aa:8d:4b:77:2a:60:18:c9:06:7a:16:b4:
3a:85:25:a2:0a:2d:02:0e:28:37:37:46:b5:40:e5:
22:d0:d0:58:60:f4:9b:c4:5c:ff:7f:6d:31:ee:84:
27:0e:2c:03:93:51:3e:0b:29:42:18:94:35:9d:09:
7e:ea:2f:46:74:7a:49:76:64:b8:cc:88:46:2b:0a:
b5:c4:29:3d:af:f7:5a:e6:e0:bc:40:90:fd:ad:94:
81:74:e4:34:c8:4c:af:6c:f5:80:c7:5e:16:60:61:
74:b4:29:58:f2:ae:8d:6a:90:25:98:56:e9:dd:52:
57:84:98:e6:48:86:b3:07:d1:8e:ef:96:c1:46:2b:
4f:dc:84:36:9d:1d:d9:5e:88:ab:f5:7a:1f:77:35:
89:d6:16:82:ea:04:d2:cd:9d:16:a3:ac:67:2d:22:
8d:44:11:95:9c:d0:57:e3:43:b4:fb:56:52:ab:a4:
0c:c2:33:ff:66:a1:b9:5b:21:2e:6a:92:e2:f0:26:
59:1b:d9:a1:17:07:46:9c:4e:8d:89:4b:21:1d:a4:
06:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D9:FC:2D:2C:23:65:F3:51:2B:6B:5D:0C:C2:CA:BD:81:2D:0A:36
X509v3 Authority Key Identifier:
keyid:EB:46:39:7B:4E:38:46:67:E0:3C:4D:BA:50:75:54:0F:00:37:D1:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60Y5e044RmfgPE26UHVUDwA30bg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:87:c2:3f:c7:9a:b9:e5:db:59:36:46:0e:7f:c3:9a:28:4c:
62:1d:25:9e:6d:6b:37:76:7d:7d:d3:74:02:c4:b5:e5:44:af:
82:fe:69:d3:77:09:fa:45:22:f5:f0:d0:bf:5a:3b:8f:97:5b:
18:d7:c9:04:29:27:07:c3:e7:35:8f:e7:5a:3f:1a:6b:55:a7:
2e:b6:55:38:06:3b:dd:43:c5:07:0e:b7:64:e6:5a:4a:e9:da:
6e:cf:d0:c2:34:b1:0d:7e:29:c8:65:7b:53:17:2f:5a:5c:db:
f6:f7:4e:57:66:8f:6a:be:27:09:50:0c:0a:a1:f8:8a:6b:59:
5f:36:ca:2f:ec:68:41:cf:e9:61:0a:04:bb:fc:55:92:4a:6a:
f1:f2:3e:a7:97:30:0b:36:94:fa:bf:a1:12:4f:6f:22:6d:27:
b9:15:2a:a3:55:aa:7f:ff:ca:3b:2e:23:17:a3:f2:e9:c5:f1:
49:71:10:93:33:d9:41:48:e2:9a:f4:9a:f4:e0:a4:44:21:94:
7b:39:05:e7:22:62:2b:f8:e2:6c:d1:5e:f0:e9:96:1f:5e:fd:
15:ea:50:99:c6:d0:22:3a:4e:ae:20:7b:72:3b:b5:94:a0:7d:
28:cc:eb:56:3a:04:0f:d1:58:78:bb:dd:4b:a8:2d:c2:a8:a2:
91:8e:57:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:00:50 2026 by rpki-client