$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft File: 60tZM16DIXRfd2sCDOUkz3OZH-0.mft (raw, json) Hash identifier: FKHMPGN8uqamPYU2i0a3r3bNUza3FxvlXOT8EjlUowg= Subject key identifier: 61:DC:3A:94:BC:14:DC:96:12:CE:A3:EC:35:DB:19:CD:0D:AA:2B:9C Authority key identifier: EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED Certificate issuer: /CN=A9142DC9/serialNumber=EB4B59335E8321745F776B020CE524CF73991FED Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft Manifest number: 66 Signing time: Sun 01 Mar 2026 09:19:25 +0000 Manifest this update: Sun 01 Mar 2026 09:19:24 +0000 Manifest next update: Sun 08 Mar 2026 09:19:24 +0000 Files and hashes: 1: 60tZM16DIXRfd2sCDOUkz3OZH-0.crl (hash: +/JHK0k0VmPI0uGMjigwDXYQGfKIrGj80PgjB29OhhM=) 2: 2F14B290801B11F0989DCE76C4F9AE02.roa (hash: 2Sh4HNxYtB9dGVF8vJ1SzNebK3nTgLRc3WLrBkkeJGc=) 3: 3AC24DBE801B11F09DAF167CC4F9AE02.roa (hash: KgTcEBQwyeNNEcPVGV0LGEJQJnqAyFvRcFGWQSUD/3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DC9, serialNumber=EB4B59335E8321745F776B020CE524CF73991FED Validity Not Before: Mar 1 09:19:24 2026 GMT Not After : Mar 8 09:19:24 2026 GMT Subject: CN=69a4049c-2bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:09:f6:f3:a1:95:ed:20:b7:94:2b:72:e2:70: 33:53:5f:0e:f1:12:85:63:6d:97:fb:26:35:2d:cb: 75:9c:b3:6a:cd:11:42:0a:5a:c6:09:a4:e8:2b:b5: 89:cc:94:59:ba:f3:97:e6:49:88:a5:12:ae:22:5d: bb:78:6b:46:38:b2:d0:02:ac:21:93:f8:ed:c3:d1: 86:a9:a6:e9:13:8e:a6:0f:27:db:46:ad:e5:a7:9c: 00:fd:f6:ee:26:26:4f:d3:91:e9:72:37:38:c6:18: e0:85:d4:3e:cc:76:4d:70:2d:e9:f3:e3:ba:04:3b: a6:d3:ca:20:a0:c0:d7:16:a1:af:33:35:62:d8:e7: 73:60:b7:75:cd:93:eb:0b:d9:3b:b0:4d:63:1b:dc: cf:68:1d:78:ba:bb:af:28:40:5a:13:4f:75:69:86: 3a:3b:14:8e:50:e9:22:92:ae:9b:0f:de:2a:3e:94: dc:95:ba:1a:61:f4:ff:c3:5c:23:d5:48:84:d5:24: 95:e5:21:db:e1:a0:58:b2:55:19:12:0f:f8:6d:3a: d3:e2:06:ef:f0:b9:10:4b:1a:af:b5:22:f4:15:19: 76:e0:9c:9d:50:98:d5:38:b1:63:34:f3:2e:13:38: bb:56:94:54:ad:60:24:d4:6b:88:89:a2:07:dc:5f: d4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DC:3A:94:BC:14:DC:96:12:CE:A3:EC:35:DB:19:CD:0D:AA:2B:9C X509v3 Authority Key Identifier: keyid:EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:27:f1:8d:3a:e4:b7:9e:32:5f:91:c0:96:ed:67:7b:69:4e: 1b:7f:6b:4c:fc:95:8e:9b:95:6d:74:58:de:1f:76:fc:44:f3: 8c:f6:23:7b:a5:5e:34:57:e4:37:9f:f8:4f:40:a8:2e:29:07: b1:97:a5:ce:60:e6:66:3c:22:44:52:2d:7a:dd:9c:d5:a4:af: e9:4b:a7:c3:c6:b3:1c:a8:ca:37:40:ad:6b:de:d8:44:58:fc: 5c:d0:73:83:67:7c:11:50:13:9d:ee:2e:b5:87:c7:48:2a:22: 25:91:c8:2b:58:6a:f6:dc:1f:7d:5b:f1:86:8f:ae:75:8e:f5: 4f:19:1e:c9:0a:be:2d:e2:21:78:01:9c:05:bd:fb:38:3b:6b: 72:4d:19:0b:ed:60:55:63:c0:2d:d3:b4:f7:c3:fa:cd:53:2b: 0d:3e:5b:38:b1:68:b8:80:dd:5e:28:79:50:79:8b:85:98:b1: 44:b6:85:42:c5:b1:2a:b6:36:0d:5c:d8:79:fb:17:e0:92:91: 8c:d7:d8:f5:cf:43:df:b3:cb:84:1a:93:7b:a5:52:6e:12:6b: cf:fa:8c:c8:2c:03:de:e5:bf:d0:a1:43:39:02:c5:e2:ec:ed: 71:5a:16:72:fb:f4:18:b1:17:9d:a6:15:47:ad:5f:19:40:f3: a9:db:31:73 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkRDOTExMC8GA1UEBRMoRUI0QjU5MzM1RTgzMjE3NDVGNzc2QjAyMENFNTI0Q0Y3 Mzk5MUZFRDAeFw0yNjAzMDEwOTE5MjRaFw0yNjAzMDgwOTE5MjRaMBgxFjAUBgNV BAMTDTY5YTQwNDljLTJiYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkCfbzoZXtILeUK3LicDNTXw7xEoVjbZf7JjUty3Wcs2rNEUIKWsYJpOgrtYnM lFm685fmSYilEq4iXbt4a0Y4stACrCGT+O3D0YappukTjqYPJ9tGreWnnAD99u4m Jk/TkelyNzjGGOCF1D7Mdk1wLenz47oEO6bTyiCgwNcWoa8zNWLY53Ngt3XNk+sL 2TuwTWMb3M9oHXi6u68oQFoTT3Vphjo7FI5Q6SKSrpsP3io+lNyVuhph9P/DXCPV SITVJJXlIdvhoFiyVRkSD/htOtPiBu/wuRBLGq+1IvQVGXbgnJ1QmNU4sWM08y4T OLtWlFStYCTUa4iJogfcX9SFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYdw6lLwU 3JYSzqPsNdsZzQ2qK5wwHwYDVR0jBBgwFoAU60tZM16DIXRfd2sCDOUkz3OZH+0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyREM5LzdBRjY3Qzc0N0M2 MTExRjA5MUQzNDEyOUM0RjlBRTAyLzYwdFpNMTZESVhSZmQyc0NET1VrejNPWkgt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNjB0Wk0xNkRJWFJmZDJzQ0RPVWt6M09aSC0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy REM5LzdBRjY3Qzc0N0M2MTExRjA5MUQzNDEyOUM0RjlBRTAyLzYwdFpNMTZESVhS ZmQyc0NET1VrejNPWkgtMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBIJ/GNOuS3njJfkcCW7Wd7aU4bf2tM/JWOm5VtdFjeH3b8RPOM9iN7pV40V+Q3 n/hPQKguKQexl6XOYOZmPCJEUi163ZzVpK/pS6fDxrMcqMo3QK1r3thEWPxc0HOD Z3wRUBOd7i61h8dIKiIlkcgrWGr23B99W/GGj651jvVPGR7JCr4t4iF4AZwFvfs4 O2tyTRkL7WBVY8At07T3w/rNUysNPls4sWi4gN1eKHlQeYuFmLFEtoVCxbEqtjYN XNh5+xfgkpGM19j1z0Pfs8uEGpN7pVJuEmvP+ozILAPe5b/QoUM5AsXi7O1xWhZy +/QYsRedphVHrV8ZQPOp2zFz -----END CERTIFICATE-----Generated at Sun Mar 1 20:15:57 2026 by rpki-client