$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft File: 60tZM16DIXRfd2sCDOUkz3OZH-0.mft (raw, json) Hash identifier: KPRIhGkDJr50peHD3etN3mob+Plk/DRCzb2gC3cfEVM= Subject key identifier: 8C:92:C1:E4:56:FC:E1:A2:56:51:F9:84:4C:E5:EF:58:F5:82:B9:AA Authority key identifier: EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED Certificate issuer: /CN=A9142DC9/serialNumber=EB4B59335E8321745F776B020CE524CF73991FED Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft Manifest number: 78 Signing time: Sun 05 Apr 2026 07:07:23 +0000 Manifest this update: Sun 05 Apr 2026 07:07:22 +0000 Manifest next update: Sun 12 Apr 2026 07:07:22 +0000 Files and hashes: 1: 60tZM16DIXRfd2sCDOUkz3OZH-0.crl (hash: wb9NF4T6nKHrIeXOf7Y3P7ZpfXx05a5sln9WQqw1LJ8=) 2: 3AC24DBE801B11F09DAF167CC4F9AE02.roa (hash: KgTcEBQwyeNNEcPVGV0LGEJQJnqAyFvRcFGWQSUD/3E=) 3: 2F14B290801B11F0989DCE76C4F9AE02.roa (hash: 2Sh4HNxYtB9dGVF8vJ1SzNebK3nTgLRc3WLrBkkeJGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DC9, serialNumber=EB4B59335E8321745F776B020CE524CF73991FED Validity Not Before: Apr 5 07:07:22 2026 GMT Not After : Apr 12 07:07:22 2026 GMT Subject: CN=69d20a2b-1442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2e:06:46:6b:c4:cc:64:e8:7b:70:56:7f:34: d9:3b:3c:23:76:8c:a4:2e:6d:9b:f7:ff:64:50:be: 1e:02:ca:58:65:30:1d:3c:2b:20:97:37:f3:8e:8a: ef:ed:de:c8:ed:b3:4c:c7:eb:a4:45:ed:c9:33:0e: d5:13:2b:da:f6:e2:65:62:6d:7b:43:b7:35:23:60: ca:42:b4:59:f4:cf:3b:4c:a9:89:b4:01:5c:55:ca: dc:3e:12:cb:93:9c:25:4f:fd:32:9c:64:83:96:ec: 8e:c5:09:55:af:66:29:7e:96:a0:33:37:07:5e:9e: bc:be:83:87:58:63:f1:e3:18:e6:2d:b2:2c:ed:1d: bc:82:09:5c:76:a6:c7:21:a4:0c:cf:a9:b2:78:19: 4e:f4:ad:fb:3f:04:ea:73:65:25:31:eb:08:8d:21: a1:f9:f4:6e:3d:2c:35:a5:04:68:28:25:0c:12:fc: 7a:0f:2a:fa:af:c1:e9:4b:37:cb:08:81:52:f5:51: 87:9c:b5:e7:65:45:f0:4c:89:52:3c:55:19:26:cb: 93:48:16:95:3c:4d:f3:d0:e3:71:e8:5a:85:e4:97: 14:ec:2e:ce:34:b5:2b:3e:d5:5e:2e:f3:37:c3:c2: b8:39:8c:2a:1a:70:b0:18:81:66:7d:12:4d:db:8b: b3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:92:C1:E4:56:FC:E1:A2:56:51:F9:84:4C:E5:EF:58:F5:82:B9:AA X509v3 Authority Key Identifier: keyid:EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:99:e6:fa:37:a5:33:1b:b8:92:d1:93:7e:0e:34:8b:d4:d8: 35:17:5b:00:57:5e:b0:e4:ee:b0:9f:f2:19:43:1f:99:a7:e7: f2:35:8e:d8:98:0b:02:bf:87:a3:de:c0:ab:fa:8f:a5:36:db: ef:49:d8:75:d4:23:a1:cf:2a:c8:7b:29:4e:7a:6a:75:a8:5a: eb:24:3b:84:bf:f3:ec:8b:5e:26:74:be:82:2a:eb:a2:e1:39: ba:cf:08:9f:5d:34:cc:d2:fc:04:72:1a:5d:2d:f4:f5:e4:36: 68:4b:40:45:c6:2f:be:93:29:a9:82:13:6e:4e:f6:71:c9:04: ed:67:a1:33:ff:10:ec:89:ba:88:95:00:33:b8:0d:cf:a6:96: c4:36:18:ce:e1:c1:7d:be:52:90:76:e9:2d:4f:fa:f8:e9:5b: 3b:ae:00:3a:83:4f:8f:84:ca:05:ef:26:38:12:dd:97:d7:ea: f7:2e:e5:95:65:1d:05:e9:92:73:a1:3a:c0:71:80:5a:77:4e: 98:28:d1:48:99:33:b5:9c:61:5d:23:e6:74:cb:a5:d9:82:ac: c4:06:ec:54:be:86:03:de:fe:6a:31:6c:49:bc:b6:55:9c:7e: 6a:d4:42:5a:cc:9f:21:26:42:c3:b6:79:d7:aa:82:bd:3b:65: 85:dd:12:f5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkRDOTExMC8GA1UEBRMoRUI0QjU5MzM1RTgzMjE3NDVGNzc2QjAyMENFNTI0Q0Y3 Mzk5MUZFRDAeFw0yNjA0MDUwNzA3MjJaFw0yNjA0MTIwNzA3MjJaMBgxFjAUBgNV BAMTDTY5ZDIwYTJiLTE0NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChLgZGa8TMZOh7cFZ/NNk7PCN2jKQubZv3/2RQvh4CylhlMB08KyCXN/OOiu/t 3sjts0zH66RF7ckzDtUTK9r24mVibXtDtzUjYMpCtFn0zztMqYm0AVxVytw+EsuT nCVP/TKcZIOW7I7FCVWvZil+lqAzNwdenry+g4dYY/HjGOYtsiztHbyCCVx2psch pAzPqbJ4GU70rfs/BOpzZSUx6wiNIaH59G49LDWlBGgoJQwS/HoPKvqvwelLN8sI gVL1UYectedlRfBMiVI8VRkmy5NIFpU8TfPQ43HoWoXklxTsLs40tSs+1V4u8zfD wrg5jCoacLAYgWZ9Ek3bi7P7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUjJLB5Fb8 4aJWUfmETOXvWPWCuaowHwYDVR0jBBgwFoAU60tZM16DIXRfd2sCDOUkz3OZH+0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyREM5LzdBRjY3Qzc0N0M2 MTExRjA5MUQzNDEyOUM0RjlBRTAyLzYwdFpNMTZESVhSZmQyc0NET1VrejNPWkgt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNjB0Wk0xNkRJWFJmZDJzQ0RPVWt6M09aSC0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy REM5LzdBRjY3Qzc0N0M2MTExRjA5MUQzNDEyOUM0RjlBRTAyLzYwdFpNMTZESVhS ZmQyc0NET1VrejNPWkgtMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA7meb6N6UzG7iS0ZN+DjSL1Ng1F1sAV16w5O6wn/IZQx+Zp+fyNY7YmAsCv4ej 3sCr+o+lNtvvSdh11COhzyrIeylOemp1qFrrJDuEv/Psi14mdL6CKuui4Tm6zwif XTTM0vwEchpdLfT15DZoS0BFxi++kympghNuTvZxyQTtZ6Ez/xDsibqIlQAzuA3P ppbENhjO4cF9vlKQduktT/r46Vs7rgA6g0+PhMoF7yY4Et2X1+r3LuWVZR0F6ZJz oTrAcYBad06YKNFImTO1nGFdI+Z0y6XZgqzEBuxUvoYD3v5qMWxJvLZVnH5q1EJa zJ8hJkLDtnnXqoK9O2WF3RL1 -----END CERTIFICATE-----Generated at Mon Apr 6 15:11:17 2026 by rpki-client