$ rpki-client -vvf rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft File: 60SnxtcuZG2Eose20umnMhAbgTo.mft (raw, json) Hash identifier: 55AA2B+Q1YHjtDCLVf8rfrhAL4MVpllSzvw6sfdzh6Q= Subject key identifier: 59:A4:B7:9A:19:18:DA:0A:CD:77:2F:CC:A3:0E:2C:8A:0A:EC:F1:B2 Authority key identifier: EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A Certificate issuer: /CN=A912A10A/serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A Certificate serial: 0299 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft Manifest number: 0294 Signing time: Thu 21 Aug 2025 01:47:56 +0000 Manifest this update: Thu 21 Aug 2025 01:47:56 +0000 Manifest next update: Thu 28 Aug 2025 01:47:56 +0000 Files and hashes: 1: 60SnxtcuZG2Eose20umnMhAbgTo.crl (hash: r+P9jGyqSsDHmTyw6BsvGHXBTiNOVFTfz8yc2M5Qd84=) 2: 8C286648818611ED8D1C5824C4F9AE02.roa (hash: xFXNX7ojWtYsPecQfS60CBpkcLKXmlqCPRZZdxkSgiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.crl rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A10A, serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A Validity Not Before: Aug 21 01:47:56 2025 GMT Not After : Aug 28 01:47:56 2025 GMT Subject: CN=68a67acc-4845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:87:5b:03:26:28:03:3f:e9:0b:13:e2:ea:c0: a4:a8:9f:23:de:c5:f7:85:6a:e8:7f:f0:eb:ef:c0: 16:a4:0a:f2:b4:3f:28:6c:e9:3f:c9:47:53:69:5d: 52:23:37:e8:e4:cb:e5:d0:d9:51:4e:ad:be:ae:87: 1f:7a:22:fe:7a:91:40:1e:36:5b:72:73:18:e4:2d: 7d:ab:74:e9:df:46:8e:17:05:e3:b5:b8:57:0c:8d: 01:cc:c4:0a:d9:ac:e7:b1:8a:e7:72:a9:fc:b0:d4: 0c:3f:86:54:64:01:ae:66:cb:ef:d1:7f:8a:2b:4a: 0a:cd:18:c8:9b:c5:3a:e2:8c:89:dc:9a:d0:64:6f: 06:16:91:b2:04:88:70:e6:42:bd:17:96:61:6d:c1: 65:fa:ee:50:87:ef:54:47:83:66:79:95:d4:bc:17: 1d:18:f0:64:a5:57:bd:01:81:4c:0b:55:e6:d3:0e: b4:4c:e8:0d:28:41:79:99:42:4e:06:df:b1:34:ec: d2:ab:fc:f8:14:49:14:50:3e:c8:ea:78:13:06:dc: ef:a3:87:76:96:41:28:14:9c:8d:a6:b9:0d:e6:ef: fb:a0:da:1d:b2:44:c8:ee:9b:b7:e1:b8:0b:9b:e7: 97:9a:38:ad:5d:a4:de:20:f0:51:6a:c7:e8:88:fa: 4f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A4:B7:9A:19:18:DA:0A:CD:77:2F:CC:A3:0E:2C:8A:0A:EC:F1:B2 X509v3 Authority Key Identifier: keyid:EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:0c:2f:05:11:d3:fc:98:de:74:d9:c1:08:1f:b5:bf:34:93: f9:5c:0d:4b:1e:e5:21:4c:72:fb:75:8e:e9:20:ab:bf:4b:0f: 0b:1e:d7:e2:78:d2:bd:a6:67:9f:d8:83:51:d2:a2:7c:13:60: e0:51:39:78:10:8f:10:74:07:f5:ce:f5:d3:57:26:83:9e:f1: 5b:07:3a:f7:10:0d:c5:f9:ab:93:2c:00:69:71:35:6f:fa:c2: 84:68:85:18:2d:cd:ba:f4:f3:54:8e:12:51:80:09:60:f4:df: e3:7d:76:3c:cb:a7:d6:df:22:29:e7:f9:cc:08:9c:c3:44:df: 9a:65:8d:51:41:97:b8:f7:fc:40:08:fb:0d:06:b9:42:8f:eb: c3:b5:97:24:31:35:37:7a:a2:c2:00:ea:ce:fa:48:47:c6:87: b2:6e:39:20:08:c9:1a:f5:88:80:b9:09:2d:6c:37:c4:12:d8: 40:e5:a5:63:d8:14:f7:56:5f:21:5e:8c:e8:10:fb:02:cc:55: 9e:55:f3:e4:89:1a:e8:ac:d6:72:b3:44:cb:74:13:b4:5c:6d: 65:de:bf:9b:41:96:9d:03:76:2b:16:65:29:0f:d3:3a:0d:01: 21:14:ac:2c:76:95:05:89:6d:74:5f:96:7d:ed:38:01:67:88: 06:8a:f6:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkExMEExMTAvBgNVBAUTKEVCNDRBN0M2RDcyRTY0NkQ4NEEyQzdCNkQyRTlBNzMy MTAxQjgxM0EwHhcNMjUwODIxMDE0NzU2WhcNMjUwODI4MDE0NzU2WjAYMRYwFAYD VQQDEw02OGE2N2FjYy00ODQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YdbAyYoAz/pCxPi6sCkqJ8j3sX3hWrof/Dr78AWpArytD8obOk/yUdTaV1S Izfo5Mvl0NlRTq2+rocfeiL+epFAHjZbcnMY5C19q3Tp30aOFwXjtbhXDI0BzMQK 2aznsYrncqn8sNQMP4ZUZAGuZsvv0X+KK0oKzRjIm8U64oyJ3JrQZG8GFpGyBIhw 5kK9F5ZhbcFl+u5Qh+9UR4NmeZXUvBcdGPBkpVe9AYFMC1Xm0w60TOgNKEF5mUJO Bt+xNOzSq/z4FEkUUD7I6ngTBtzvo4d2lkEoFJyNprkN5u/7oNodskTI7pu34bgL m+eXmjitXaTeIPBRasfoiPpPZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmkt5oZ GNoKzXcvzKMOLIoK7PGyMB8GA1UdIwQYMBaAFOtEp8bXLmRthKLHttLppzIQG4E6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTEwQS9FNTE4QjA3NjEz OTIxMUVEQTA1MjAyMUZDNEY5QUUwMi82MFNueHRjdVpHMkVvc2UyMHVtbk1oQWJn VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYwU254dGN1WkcyRW9zZTIwdW1uTWhBYmdUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTEwQS9FNTE4QjA3NjEzOTIxMUVEQTA1MjAyMUZDNEY5QUUwMi82MFNueHRjdVpH MkVvc2UyMHVtbk1oQWJnVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvDC8FEdP8mN502cEIH7W/NJP5XA1LHuUhTHL7dY7pIKu/Sw8LHtfi eNK9pmef2INR0qJ8E2DgUTl4EI8QdAf1zvXTVyaDnvFbBzr3EA3F+auTLABpcTVv +sKEaIUYLc269PNUjhJRgAlg9N/jfXY8y6fW3yIp5/nMCJzDRN+aZY1RQZe49/xA CPsNBrlCj+vDtZckMTU3eqLCAOrO+khHxoeybjkgCMka9YiAuQktbDfEEthA5aVj 2BT3Vl8hXozoEPsCzFWeVfPkiRrorNZys0TLdBO0XG1l3r+bQZadA3YrFmUpD9M6 DQEhFKwsdpUFiW10X5Z97TgBZ4gGivZX -----END CERTIFICATE-----Generated at Fri Aug 22 16:19:04 2025 by rpki-client