
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
File: 60tZM16DIXRfd2sCDOUkz3OZH-0.mft (raw, json)
Hash identifier: dok/VQ3V7DUwfEmnGcq+tJNpptEMvT7fY0tPUwCcsMc=
Subject key identifier: 19:4F:9D:3F:9E:C5:1E:2F:86:AD:B2:05:9B:90:81:17:E0:91:BD:83
Authority key identifier: EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED
Certificate issuer: /CN=A9142DC9/serialNumber=EB4B59335E8321745F776B020CE524CF73991FED
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
Manifest number: 7D
Signing time: Wed 15 Apr 2026 07:16:34 +0000
Manifest this update: Wed 15 Apr 2026 07:16:34 +0000
Manifest next update: Wed 22 Apr 2026 07:16:34 +0000
Files and hashes: 1: 60tZM16DIXRfd2sCDOUkz3OZH-0.crl (hash: zwHhpvJxO9iXlgf2hAF474vLYgTjNUKMxMQoOZHc/Xc=)
2: 2F14B290801B11F0989DCE76C4F9AE02.roa (hash: 2Sh4HNxYtB9dGVF8vJ1SzNebK3nTgLRc3WLrBkkeJGc=)
3: 3AC24DBE801B11F09DAF167CC4F9AE02.roa (hash: KgTcEBQwyeNNEcPVGV0LGEJQJnqAyFvRcFGWQSUD/3E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl
rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 07:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142DC9, serialNumber=EB4B59335E8321745F776B020CE524CF73991FED
Validity
Not Before: Apr 15 07:16:34 2026 GMT
Not After : Apr 22 07:16:34 2026 GMT
Subject: CN=69df3b52-bf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:2d:38:b2:04:82:f9:66:fa:76:2e:b1:42:
2e:80:9b:c4:32:cb:c7:e2:5e:2f:80:7a:d5:2a:16:
05:d7:05:21:ab:11:83:c5:ae:9c:5f:b0:c1:05:45:
63:8c:65:92:42:03:0d:1e:32:4b:ab:4e:28:f4:1f:
0a:b4:3a:43:b3:11:c4:b9:7f:e7:7c:8c:3d:0e:8e:
d1:eb:e7:c0:59:13:8c:a4:b3:9a:a8:7e:70:3b:1a:
4f:6e:82:01:63:d8:3f:61:c2:73:77:a8:86:3c:09:
c5:91:20:80:23:4f:cf:4c:55:a1:43:44:b5:ce:89:
54:2b:ec:3d:c7:78:b7:8e:c3:bf:44:84:44:2a:d3:
45:7e:b2:ba:82:f5:ed:33:2b:15:fa:49:5f:8a:1b:
55:ff:ba:fa:be:e4:91:be:05:a8:27:3d:45:9c:57:
8b:8d:7c:eb:05:49:13:88:e0:bd:a5:00:7e:3e:bb:
32:0e:18:c9:cd:83:5c:ba:e9:a8:a4:94:ea:64:0f:
73:0d:50:b4:78:e9:57:12:0f:60:f6:f9:1f:73:31:
a0:c8:74:87:6d:7a:ad:1f:ac:49:ba:6b:67:ba:a6:
72:b6:3a:64:22:a9:4c:62:3a:19:22:21:f7:92:4c:
fc:0b:be:d9:69:41:d6:72:f6:e5:e1:2a:b4:13:47:
d2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4F:9D:3F:9E:C5:1E:2F:86:AD:B2:05:9B:90:81:17:E0:91:BD:83
X509v3 Authority Key Identifier:
keyid:EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:07:b0:50:b1:10:c2:fb:48:f6:d8:1d:05:f8:b2:2b:94:3e:
cf:3f:f5:e3:bf:af:70:3d:57:c2:21:10:d6:b7:0b:83:54:84:
c1:5c:be:9c:37:21:f6:d5:f5:40:9c:b4:b6:46:69:b4:ba:81:
d8:74:71:b1:1b:9d:34:c0:1e:82:9b:13:65:d0:d3:86:c1:d1:
33:35:29:42:c0:c9:f7:8a:7f:f5:13:d6:ee:67:8d:0c:3d:b3:
68:80:0c:42:8c:15:f0:e2:ff:c6:6e:00:bb:fc:04:8e:28:94:
bd:1a:57:62:18:da:4f:c5:02:61:c8:a1:d6:e2:38:4d:65:17:
d5:32:a1:52:a5:10:5f:bb:ef:d1:47:0e:bb:d2:9b:1e:76:44:
42:38:81:34:de:de:6b:18:b0:27:18:c8:3c:ec:ab:b9:54:24:
79:84:94:c9:57:51:e0:fe:0f:32:f9:fd:0d:32:b5:80:c3:ed:
de:bb:bd:23:ab:2c:bc:79:7d:93:e8:19:b8:f6:b5:e5:c3:25:
10:cd:01:bc:fb:df:92:82:9d:cb:e4:93:69:e2:10:0f:a4:37:
f7:d2:9a:d6:c7:ff:64:e3:ae:6d:19:41:af:29:49:c4:f0:b9:
40:a7:96:b7:8d:4e:91:d8:0e:57:a7:e9:72:0f:ba:4c:d2:11:
5d:95:7a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:07:53 2026 by rpki-client