$ rpki-client -vvf rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft File: 60SnxtcuZG2Eose20umnMhAbgTo.mft (raw, json) Hash identifier: DBiZvYGNAky7ZLwILpts3VamyZTL8HvNp7dujCLOprc= Subject key identifier: D6:05:5C:7B:82:34:4F:45:E7:5A:53:B4:EE:06:80:7F:FA:51:1A:09 Authority key identifier: EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A Certificate issuer: /CN=A912A10A/serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A Certificate serial: 0275 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft Manifest number: 0270 Signing time: Wed 11 Jun 2025 01:37:42 +0000 Manifest this update: Wed 11 Jun 2025 01:37:42 +0000 Manifest next update: Wed 18 Jun 2025 01:37:42 +0000 Files and hashes: 1: 60SnxtcuZG2Eose20umnMhAbgTo.crl (hash: pkb8CnoN8z6mSkum16rgn0/04eegY0b0tvA5Tcwa3QU=) 2: 8C286648818611ED8D1C5824C4F9AE02.roa (hash: xFXNX7ojWtYsPecQfS60CBpkcLKXmlqCPRZZdxkSgiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.crl rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 01:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 629 (0x275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A10A, serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A Validity Not Before: Jun 11 01:37:42 2025 GMT Not After : Jun 18 01:37:42 2025 GMT Subject: CN=6848dde6-5af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ec:78:9a:a5:03:68:a4:eb:ad:64:81:7a:50: 15:93:1f:2f:1f:47:81:9c:95:2f:8e:cd:22:37:5d: ad:09:0a:6b:1c:56:62:ac:ce:1c:ea:93:95:a4:c5: 58:1b:22:15:9a:79:80:a6:da:52:90:0f:02:83:5a: f8:4e:ae:0d:31:8c:5f:0d:8b:4c:41:74:72:11:f7: 65:0e:69:60:8b:79:1b:c6:b4:f5:55:9f:b5:86:0d: 23:a7:2f:de:b8:f6:a0:fd:6c:61:19:af:10:e1:d5: 9c:6a:5e:a6:5f:64:43:0b:05:49:7f:e5:ac:02:e1: af:4e:7a:b6:3c:d7:86:bc:ae:1e:9d:50:a5:88:9f: 63:87:b2:bc:56:08:55:c1:48:07:d8:83:c9:00:3b: 75:7f:0e:4a:71:92:56:29:69:ea:6c:76:4d:10:44: 62:ad:03:0c:7d:68:d1:d4:6c:d4:bf:71:44:75:0b: 12:07:5c:36:be:e2:93:3e:17:69:58:0b:00:8a:5d: 7a:1e:3a:59:37:e0:47:c9:02:4e:56:a2:0c:d3:9d: 8d:73:82:34:83:62:00:03:2c:be:7c:27:91:c0:50: cd:d7:90:db:77:88:8e:a4:47:3f:82:71:ca:7b:c7: 08:7a:45:f0:67:57:e9:70:0b:1f:c7:cd:d4:63:5e: 19:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:05:5C:7B:82:34:4F:45:E7:5A:53:B4:EE:06:80:7F:FA:51:1A:09 X509v3 Authority Key Identifier: keyid:EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:88:2f:a5:42:6d:84:62:d9:6f:98:8a:aa:e9:39:53:99:f1: c9:5d:68:64:0a:8b:21:92:dd:1f:57:51:61:f8:b3:c0:95:6d: ef:c8:8e:40:60:a2:24:3c:a2:6b:be:e5:c1:e7:f5:36:59:06: 2a:25:a8:77:53:e1:5e:0f:9b:e6:e0:29:24:bf:55:34:11:79: e9:0c:e6:ca:03:df:c2:d1:77:cf:46:11:1e:aa:b8:b4:0d:b2: 65:86:fa:d3:7b:14:b1:21:72:eb:91:3f:44:0f:3e:4a:b7:bb: ad:15:14:f5:ce:54:64:6d:33:c3:3d:df:50:dd:12:e1:d4:37: a9:c0:e4:e9:3d:c2:a4:3c:d2:3b:f6:81:8f:57:f7:3d:31:e4: 8b:64:9b:8e:f4:0e:ba:ac:78:83:2c:db:83:8e:19:e0:2e:ec: e3:22:89:3e:ff:8d:b1:5a:ba:38:f9:9a:f1:b2:64:46:55:e9: b1:85:38:96:0c:88:ae:ef:8c:3f:d4:42:d1:4d:2e:0e:a0:85: 3a:57:c5:f0:79:e7:20:6e:fa:52:e1:8a:0a:31:eb:d7:18:b8: 92:0f:a0:df:bd:86:ee:57:1d:0c:cc:bc:e0:1e:c5:d3:60:96: 7d:8a:f1:34:fd:03:fb:cc:cb:52:b6:19:f9:9e:be:5a:2d:41: 93:43:0c:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkExMEExMTAvBgNVBAUTKEVCNDRBN0M2RDcyRTY0NkQ4NEEyQzdCNkQyRTlBNzMy MTAxQjgxM0EwHhcNMjUwNjExMDEzNzQyWhcNMjUwNjE4MDEzNzQyWjAYMRYwFAYD VQQDEw02ODQ4ZGRlNi01YWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzux4mqUDaKTrrWSBelAVkx8vH0eBnJUvjs0iN12tCQprHFZirM4c6pOVpMVY GyIVmnmAptpSkA8Cg1r4Tq4NMYxfDYtMQXRyEfdlDmlgi3kbxrT1VZ+1hg0jpy/e uPag/WxhGa8Q4dWcal6mX2RDCwVJf+WsAuGvTnq2PNeGvK4enVCliJ9jh7K8VghV wUgH2IPJADt1fw5KcZJWKWnqbHZNEERirQMMfWjR1GzUv3FEdQsSB1w2vuKTPhdp WAsAil16HjpZN+BHyQJOVqIM052Nc4I0g2IAAyy+fCeRwFDN15Dbd4iOpEc/gnHK e8cIekXwZ1fpcAsfx83UY14ZtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYFXHuC NE9F51pTtO4GgH/6URoJMB8GA1UdIwQYMBaAFOtEp8bXLmRthKLHttLppzIQG4E6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTEwQS9FNTE4QjA3NjEz OTIxMUVEQTA1MjAyMUZDNEY5QUUwMi82MFNueHRjdVpHMkVvc2UyMHVtbk1oQWJn VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYwU254dGN1WkcyRW9zZTIwdW1uTWhBYmdUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTEwQS9FNTE4QjA3NjEzOTIxMUVEQTA1MjAyMUZDNEY5QUUwMi82MFNueHRjdVpH MkVvc2UyMHVtbk1oQWJnVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWiC+lQm2EYtlvmIqq6TlTmfHJXWhkCoshkt0fV1Fh+LPAlW3vyI5A YKIkPKJrvuXB5/U2WQYqJah3U+FeD5vm4Ckkv1U0EXnpDObKA9/C0XfPRhEeqri0 DbJlhvrTexSxIXLrkT9EDz5Kt7utFRT1zlRkbTPDPd9Q3RLh1DepwOTpPcKkPNI7 9oGPV/c9MeSLZJuO9A66rHiDLNuDjhngLuzjIok+/42xWro4+ZrxsmRGVemxhTiW DIiu74w/1ELRTS4OoIU6V8XweecgbvpS4YoKMevXGLiSD6DfvYbuVx0MzLzgHsXT YJZ9ivE0/QP7zMtSthn5nr5aLUGTQwww -----END CERTIFICATE-----Generated at Thu Jun 12 18:42:41 2025 by rpki-client