$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft File: 60tZM16DIXRfd2sCDOUkz3OZH-0.mft (raw, json) Hash identifier: HrkqAzFsU2jN1BRBqwkmj44avKgUbSzZk1cW7IlyJE8= Subject key identifier: 29:CE:9A:E1:1E:88:7C:F3:2B:48:F5:FC:80:98:6F:E4:C0:98:47:BE Authority key identifier: EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED Certificate issuer: /CN=A9142DC9/serialNumber=EB4B59335E8321745F776B020CE524CF73991FED Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft Manifest number: 03 Signing time: Thu 21 Aug 2025 08:24:15 +0000 Manifest this update: Thu 21 Aug 2025 08:24:14 +0000 Manifest next update: Thu 28 Aug 2025 08:24:14 +0000 Files and hashes: 1: 60tZM16DIXRfd2sCDOUkz3OZH-0.crl (hash: k4u7yJWLUxbOMox8Lf9ZXcIpSd4QeT8/UuNTIsQZjDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DC9, serialNumber=EB4B59335E8321745F776B020CE524CF73991FED Validity Not Before: Aug 21 08:24:14 2025 GMT Not After : Aug 28 08:24:14 2025 GMT Subject: CN=68a6d7af-85fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2c:6f:ff:08:ad:25:bf:94:d1:26:23:6c:5c: 5d:2b:b8:74:7d:3f:b7:5b:36:ef:cc:f9:72:2a:bf: b1:8d:f5:e7:9f:93:c4:c8:a7:b2:ec:32:e5:c0:52: 1c:c6:ee:b9:84:72:7e:7b:70:26:5d:30:26:7f:51: 6c:04:d6:ba:75:fb:75:63:68:9b:4a:eb:a8:66:fb: f3:8b:78:24:1f:88:9a:c0:bd:03:5f:b0:f2:d1:97: 9f:64:da:bc:c1:b7:e5:1f:0e:ef:87:69:7b:f7:0d: 21:08:7c:41:38:c0:23:86:b1:af:83:6f:1c:48:e5: d7:3a:d2:e7:b0:b6:62:a6:1a:01:29:52:b0:d7:9f: 99:d3:e8:74:0a:01:c6:e0:a0:5b:40:d3:70:dd:05: 69:c7:00:2b:64:1b:44:bb:f0:33:cf:f9:b6:1f:a9: 1c:8c:fd:dc:3d:ac:f4:20:d3:6e:50:45:47:21:d0: 18:5c:0a:68:d8:a7:f7:c0:1b:bb:81:7f:1b:91:e8: 76:a7:db:f3:15:49:49:d0:e1:e1:00:14:7a:ae:49: 08:22:e2:f1:53:43:6a:63:86:62:30:38:ee:dc:58: 08:b7:1d:8f:66:b2:86:37:94:59:c1:11:99:ac:88: 32:1a:f2:cc:37:af:5f:7e:0f:5a:ca:41:f1:01:ce: 75:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CE:9A:E1:1E:88:7C:F3:2B:48:F5:FC:80:98:6F:E4:C0:98:47:BE X509v3 Authority Key Identifier: keyid:EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d0:00:0c:c2:6e:60:a6:25:7f:41:77:c6:c5:ea:7f:9b:31: 55:90:5a:69:20:bc:f3:d4:c6:15:f5:06:ba:13:d2:1e:93:c0: c7:46:ee:18:4b:99:da:a7:b7:8a:64:e6:45:f2:aa:1d:6e:91: 66:f5:4c:1c:86:e8:c2:d1:e6:46:17:a7:c0:ac:d9:b9:f4:39: 0a:cd:14:f5:31:b0:83:11:08:5c:74:67:cf:cc:49:50:0a:94: d7:83:f1:76:5a:fe:f2:c5:ba:31:af:ee:68:ae:01:bc:1d:a7: ed:3e:1d:e9:83:13:d7:cf:29:33:ea:58:d0:a6:e7:7e:b2:81: 25:18:aa:07:f4:ec:8b:03:7a:86:1c:a7:c0:c2:0f:a2:ba:37: af:23:5f:c2:cd:7f:42:2e:ce:5b:5e:e3:35:69:70:ed:a7:6d: c0:da:4e:db:38:a2:64:f9:1a:6b:02:47:bc:87:98:64:28:3f: d8:7a:29:13:7a:c2:64:33:45:07:f3:12:2d:e2:ec:6f:1f:84: 89:43:85:51:71:2a:1d:b3:b7:30:b9:f1:9e:6d:3e:ec:08:19: ad:6f:5e:d0:a3:a2:3b:72:9c:39:45:37:5e:84:fc:44:02:fc: 98:ae:63:36:0b:e0:51:86:37:fc:98:6e:58:cd:e0:38:77:55: 11:3c:ff:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkRDOTExMC8GA1UEBRMoRUI0QjU5MzM1RTgzMjE3NDVGNzc2QjAyMENFNTI0Q0Y3 Mzk5MUZFRDAeFw0yNTA4MjEwODI0MTRaFw0yNTA4MjgwODI0MTRaMBgxFjAUBgNV BAMTDTY4YTZkN2FmLTg1ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9LG//CK0lv5TRJiNsXF0ruHR9P7dbNu/M+XIqv7GN9eefk8TIp7LsMuXAUhzG 7rmEcn57cCZdMCZ/UWwE1rp1+3VjaJtK66hm+/OLeCQfiJrAvQNfsPLRl59k2rzB t+UfDu+HaXv3DSEIfEE4wCOGsa+DbxxI5dc60uewtmKmGgEpUrDXn5nT6HQKAcbg oFtA03DdBWnHACtkG0S78DPP+bYfqRyM/dw9rPQg025QRUch0BhcCmjYp/fAG7uB fxuR6Han2/MVSUnQ4eEAFHquSQgi4vFTQ2pjhmIwOO7cWAi3HY9msoY3lFnBEZms iDIa8sw3r19+D1rKQfEBznUVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKc6a4R6I fPMrSPX8gJhv5MCYR74wHwYDVR0jBBgwFoAU60tZM16DIXRfd2sCDOUkz3OZH+0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyREM5LzdBRjY3Qzc0N0M2 MTExRjA5MUQzNDEyOUM0RjlBRTAyLzYwdFpNMTZESVhSZmQyc0NET1VrejNPWkgt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNjB0Wk0xNkRJWFJmZDJzQ0RPVWt6M09aSC0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy REM5LzdBRjY3Qzc0N0M2MTExRjA5MUQzNDEyOUM0RjlBRTAyLzYwdFpNMTZESVhS ZmQyc0NET1VrejNPWkgtMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIrQAAzCbmCmJX9Bd8bF6n+bMVWQWmkgvPPUxhX1BroT0h6TwMdG7hhL mdqnt4pk5kXyqh1ukWb1TByG6MLR5kYXp8Cs2bn0OQrNFPUxsIMRCFx0Z8/MSVAK lNeD8XZa/vLFujGv7miuAbwdp+0+HemDE9fPKTPqWNCm536ygSUYqgf07IsDeoYc p8DCD6K6N68jX8LNf0Iuzlte4zVpcO2nbcDaTts4omT5GmsCR7yHmGQoP9h6KRN6 wmQzRQfzEi3i7G8fhIlDhVFxKh2ztzC58Z5tPuwIGa1vXtCjojtynDlFN16E/EQC /JiuYzYL4FGGN/yYbljN4Dh3VRE8/xY= -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:41 2025 by rpki-client