
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft
File: 60Y5e044RmfgPE26UHVUDwA30bg.mft (raw, json)
Hash identifier: 4erPzh0tgwcIG+T9/CtPivkqFcYCCXboQ6No+U7//LQ=
Subject key identifier: E0:46:70:B8:95:75:41:9C:A5:38:E5:99:6A:E2:31:62:D5:BF:A7:3D
Authority key identifier: EB:46:39:7B:4E:38:46:67:E0:3C:4D:BA:50:75:54:0F:00:37:D1:B8
Certificate issuer: /CN=A9176DA8/serialNumber=EB46397B4E384667E03C4DBA5075540F0037D1B8
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60Y5e044RmfgPE26UHVUDwA30bg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft
Manifest number: 0A
Signing time: Sun 05 Apr 2026 08:30:17 +0000
Manifest this update: Sun 05 Apr 2026 08:30:17 +0000
Manifest next update: Sun 12 Apr 2026 08:30:17 +0000
Files and hashes: 1: 60Y5e044RmfgPE26UHVUDwA30bg.crl (hash: gldZTf6Th+utf2P1wxia+WLWXUL1G4wTUCuJOk421Qw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.crl
rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60Y5e044RmfgPE26UHVUDwA30bg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176DA8, serialNumber=EB46397B4E384667E03C4DBA5075540F0037D1B8
Validity
Not Before: Apr 5 08:30:17 2026 GMT
Not After : Apr 12 08:30:17 2026 GMT
Subject: CN=69d21d99-8dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9a:9a:f1:1f:cf:f8:03:ce:c6:d8:9a:96:e7:
46:f7:c9:04:84:6c:cd:a3:64:06:79:50:39:7d:fb:
e5:46:f4:7c:e3:ec:7d:95:08:a3:20:a7:9f:89:46:
53:db:5f:98:4c:64:be:96:b5:3d:11:57:8d:72:dc:
eb:3f:cf:1b:26:ef:6c:b4:43:ad:54:6b:c1:73:bc:
ad:48:a8:e5:f3:f2:c3:83:d1:9f:9b:79:3e:ae:89:
93:ed:a8:5f:12:1f:ca:84:1d:c4:1f:74:f7:96:77:
57:42:b8:75:86:a0:52:7a:f4:9b:d9:a5:44:c2:26:
c7:69:ee:7e:f8:fb:8e:ad:a4:77:2c:1d:1e:e0:f8:
16:87:c4:49:e7:bc:1d:92:35:fe:4b:34:48:22:ea:
36:9f:40:69:1d:27:4e:99:e4:6a:f6:29:77:da:ca:
a6:96:a5:56:b0:41:ba:46:cb:3e:a0:b3:3b:87:4a:
a9:df:69:0f:bd:7e:cc:d0:18:c7:ae:0d:ab:9a:aa:
85:04:67:fd:09:e0:b4:71:1b:80:64:d9:38:16:df:
44:b7:4f:e4:ec:b4:0a:b9:ba:45:1c:31:5d:3d:8f:
55:71:07:04:ca:13:36:a2:8f:dd:4f:52:61:1f:5c:
21:88:5f:a6:7e:44:55:ad:66:92:fb:74:ac:50:39:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:46:70:B8:95:75:41:9C:A5:38:E5:99:6A:E2:31:62:D5:BF:A7:3D
X509v3 Authority Key Identifier:
keyid:EB:46:39:7B:4E:38:46:67:E0:3C:4D:BA:50:75:54:0F:00:37:D1:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60Y5e044RmfgPE26UHVUDwA30bg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DA8/9006CC30271611F1A41F8856A3833773/60Y5e044RmfgPE26UHVUDwA30bg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:2d:dc:51:be:4d:4d:14:a9:8f:18:43:fd:c5:86:ea:c9:ff:
fd:d5:06:8e:30:12:ec:23:ec:66:cf:81:8a:dd:e8:2a:e0:81:
6b:82:b0:c7:51:38:23:df:7e:2d:91:ba:51:2d:04:13:67:04:
fe:57:74:c5:45:0e:a9:98:fc:f0:61:4e:ea:65:b5:c4:3e:6a:
68:1b:5f:f0:27:1b:e9:e3:b1:c4:7d:7b:1d:f5:6c:29:88:15:
23:be:41:7c:95:d8:2f:2f:38:d5:6b:5a:24:df:68:94:99:0d:
92:2c:81:0e:ce:99:e2:63:7b:70:87:3d:96:ff:65:0d:a3:85:
3c:04:51:fe:9b:4b:24:06:0d:66:80:c4:61:92:fe:93:9c:bf:
f3:7c:b7:fc:5b:b3:a8:75:98:d0:83:04:6e:c5:f3:aa:a8:d6:
47:78:0a:42:63:ff:0f:e0:3c:79:c0:34:7b:96:92:c5:eb:e5:
61:d7:6d:3c:91:75:0b:20:92:9c:b5:b6:29:c9:67:9a:51:93:
a7:ef:7b:13:14:0e:4f:bf:1a:58:88:36:fc:54:33:f3:ef:37:
6a:2a:f0:ba:88:ef:7b:a4:5d:cd:7f:0b:27:3b:f9:36:1c:31:
db:c5:49:5b:c0:5a:3c:78:34:3a:78:0c:2c:a1:04:8b:1c:22:
0f:7d:af:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:41 2026 by rpki-client