
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
File: 60SnxtcuZG2Eose20umnMhAbgTo.mft (raw, json)
Hash identifier: xwNSjjxT5Xwe1irsPI1dmUuc5TfDu5phPdWHGv4fdmM=
Subject key identifier: B6:8E:08:00:2D:C2:60:F5:C9:7B:DD:CD:8B:90:21:02:2E:30:21:34
Authority key identifier: EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A
Certificate issuer: /CN=A912A10A/serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A
Certificate serial: 02FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
Manifest number: 02F7
Signing time: Sun 01 Mar 2026 02:07:22 +0000
Manifest this update: Sun 01 Mar 2026 02:07:21 +0000
Manifest next update: Sun 08 Mar 2026 02:07:21 +0000
Files and hashes: 1: 60SnxtcuZG2Eose20umnMhAbgTo.crl (hash: xFYA5R1jUA7uBropYrfdCPlnYAlKgPND9XXAVYvZPzw=)
2: 8C286648818611ED8D1C5824C4F9AE02.roa (hash: K2eRSWaNhgeJAJT+eZoCaSCPtQt1cFG3OtTWO7vDxZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.crl
rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 765 (0x2fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A10A, serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A
Validity
Not Before: Mar 1 02:07:21 2026 GMT
Not After : Mar 8 02:07:21 2026 GMT
Subject: CN=69a39f5a-5f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:d7:5d:70:fe:70:bc:6a:43:79:0d:e0:61:
15:e5:64:bb:d9:1b:87:86:28:87:06:09:a2:ea:08:
99:e8:51:1d:af:0e:8a:33:9f:5a:47:e3:49:e1:8c:
5c:38:c5:35:ee:69:d6:a9:0c:58:a8:4b:aa:24:67:
0b:bf:7b:d2:3b:4d:bd:51:f8:3e:07:e3:5d:56:d2:
e6:a0:ae:39:8a:aa:fa:6b:f1:63:f6:c5:34:9d:ac:
7d:01:69:1f:a3:e9:83:4f:df:73:d7:61:fd:3a:23:
77:08:dc:86:24:14:81:3f:14:d3:24:bb:84:29:a1:
d0:d8:39:a6:77:2f:0b:9c:2c:1c:f0:b8:9b:26:cb:
f5:a0:28:46:fd:17:d9:c4:d9:51:17:bd:f4:2b:d6:
59:28:3d:65:83:31:b4:ba:4b:8e:12:97:4c:9f:f1:
f4:23:8b:e2:8a:cc:78:9c:9a:03:46:56:85:25:ee:
7d:b9:8d:0c:c1:cd:75:63:67:32:d0:7d:44:cd:44:
fc:61:db:95:59:7f:f0:32:ae:57:00:a4:6e:d8:9f:
d8:d6:35:fa:93:ab:19:f1:0a:f3:4e:4b:24:62:f6:
b4:4c:5b:4d:33:a1:5f:a7:9b:07:99:f1:98:0c:dc:
c4:00:8d:31:51:c9:6b:6a:88:56:d6:63:e5:dc:78:
c2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8E:08:00:2D:C2:60:F5:C9:7B:DD:CD:8B:90:21:02:2E:30:21:34
X509v3 Authority Key Identifier:
keyid:EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:94:de:7a:a9:71:c3:1f:bc:d1:b3:ec:6c:ca:24:52:8e:e9:
89:7d:a2:6c:f5:99:f3:af:e0:b1:80:54:9c:58:16:c2:87:c0:
e0:15:0f:5b:d8:56:52:ee:13:4e:b2:0c:4a:f0:17:07:bb:c3:
fc:46:b8:4d:40:c0:cb:ea:ff:8d:bc:67:0a:ee:71:0e:12:44:
5e:87:b5:df:7c:75:f3:f3:91:86:6d:32:e7:0d:9f:13:8c:ea:
22:35:c8:0f:c0:7c:13:b6:84:60:ea:31:2a:24:4a:5b:7e:7d:
ee:bd:2f:12:53:4f:53:e1:47:b8:26:db:1e:70:d6:8c:63:a0:
54:ec:0f:b4:55:20:92:c1:3e:ed:d9:28:20:ab:7b:c4:70:b6:
76:9a:05:88:28:d5:80:a6:c9:9d:79:0c:9a:2c:2b:be:a5:e4:
a6:3d:4e:3a:c0:bf:69:92:df:dc:10:a3:ec:c1:68:80:d7:9b:
85:ff:0a:6d:ad:7d:16:a9:5c:8c:d4:78:3b:e3:88:f2:d1:ef:
28:57:74:99:98:82:2d:8e:b4:87:eb:a0:45:41:35:bc:15:67:
47:73:ef:0b:db:51:df:93:22:c9:79:01:4e:5c:fe:b3:13:7a:
12:6a:11:2e:5f:a9:ac:a2:a1:6a:11:1d:77:06:30:b2:cd:3a:
ce:73:a5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:38 2026 by rpki-client