
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
File: 60tZM16DIXRfd2sCDOUkz3OZH-0.mft (raw, json)
Hash identifier: YcDgpOOLX5t1frp9835Z1HAZWR0J8mHV7+f+KYr79LE=
Subject key identifier: 5E:AA:FC:11:5A:6C:08:D9:B6:D4:82:27:58:F5:45:8B:0B:57:5F:A4
Authority key identifier: EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED
Certificate issuer: /CN=A9142DC9/serialNumber=EB4B59335E8321745F776B020CE524CF73991FED
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
Manifest number: DE
Signing time: Wed 21 Oct 2026 07:06:31 +0000
Manifest this update: Wed 21 Oct 2026 07:06:30 +0000
Manifest next update: Wed 28 Oct 2026 07:06:30 +0000
Files and hashes: 1: 60tZM16DIXRfd2sCDOUkz3OZH-0.crl (hash: vrIPX06BVrTZocceCULOOmNRH3pG9Tp7SxT6fSdDeSc=)
2: 3AC24DBE801B11F09DAF167CC4F9AE02.roa (hash: lAXWv3UUJ6cic6YPRSG4uuhpq3Qimwck5d5gS3sMPco=)
3: 2F14B290801B11F0989DCE76C4F9AE02.roa (hash: car3+0AuT/DxwtWfPZqhcplFaS0iE8HtUQGh8tESllM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl
rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142DC9, serialNumber=EB4B59335E8321745F776B020CE524CF73991FED
Validity
Not Before: Oct 21 07:06:30 2026 GMT
Not After : Oct 28 07:06:30 2026 GMT
Subject: CN=6ad86477-2f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4e:82:aa:67:1e:93:25:25:86:b0:da:a6:e9:
68:69:43:9e:c8:66:e7:92:68:a8:da:a5:86:47:f1:
bb:1f:c7:56:98:03:f8:43:c1:8e:83:50:c2:62:f2:
cd:14:5a:6f:ed:ec:08:b1:22:43:76:ca:26:d2:3d:
39:e6:03:02:77:d8:91:ab:18:11:80:18:a8:15:3c:
ce:a1:8c:14:30:cc:b3:c2:94:5c:dd:51:41:33:a7:
94:70:bf:a2:a8:df:6a:57:ca:75:27:2c:9c:03:55:
b6:6a:23:da:8f:46:f3:c1:d7:82:03:b6:2d:c3:59:
c1:c2:81:cc:c9:e7:67:d5:a8:05:59:de:86:b8:1f:
63:6a:06:2c:5b:6b:ac:17:cf:b0:db:77:ef:94:0d:
80:06:db:68:c1:73:d8:17:71:66:54:6b:a0:f6:c7:
a7:51:54:69:d3:10:dd:08:8d:23:88:6b:32:be:21:
c3:09:62:ff:f8:f4:d0:0d:ca:12:0a:31:be:24:9c:
b2:cd:24:83:14:33:f7:1c:02:3b:72:07:11:97:5c:
a4:4b:8b:c1:c4:96:b3:7a:19:57:ae:a3:90:95:a5:
03:c9:1f:99:8a:f4:b0:ee:9d:37:78:4f:ba:00:10:
89:70:4f:d8:c5:3e:c8:08:29:3f:e2:14:d0:f7:be:
96:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AA:FC:11:5A:6C:08:D9:B6:D4:82:27:58:F5:45:8B:0B:57:5F:A4
X509v3 Authority Key Identifier:
keyid:EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:16:7e:dd:2d:78:a2:7c:14:16:b6:58:00:80:07:c3:05:30:
0c:44:fb:49:66:06:2c:c1:39:23:c2:3d:cf:dc:9a:57:5a:00:
6a:11:b5:74:a9:b8:29:8f:97:8d:ce:26:26:98:95:99:17:b9:
5c:88:0f:34:7c:66:83:f5:4e:c0:6b:14:76:a6:f6:a2:6b:7e:
ad:d7:13:03:78:57:17:ae:92:a5:42:a0:14:9a:61:9a:61:4b:
af:f0:14:c1:7c:02:8d:b8:4e:18:a4:33:03:3b:51:3a:14:71:
1c:b5:6a:04:c4:76:87:dc:65:1e:64:30:12:b0:67:4e:14:d0:
20:c3:ce:4d:e2:5e:b7:d1:35:37:70:e4:cf:79:62:48:8a:cd:
45:96:5b:41:48:10:3f:0f:a6:00:64:12:7d:4e:67:d8:18:59:
c9:ef:1c:92:9c:4d:b2:d0:df:81:d1:28:3f:f7:c9:41:14:a2:
d2:ad:a1:f1:84:8f:2a:e2:81:8c:1c:50:3b:a4:bd:82:b8:0e:
6e:de:4e:18:df:2c:db:f1:db:45:8f:00:11:96:6e:da:81:6e:
e3:3b:cb:73:d8:60:a8:74:9a:05:58:e5:e6:74:6e:97:e4:79:
3e:a4:81:ad:79:27:e3:7b:ec:ce:7f:3f:a4:ed:c5:b9:47:06:
2a:b8:f0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 18:23:23 2026 by rpki-client