
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft
File: EW-SD4cwZnR6jO3a_-hLz72wNRo.mft (raw, json)
Hash identifier: i8pan1+CI7hzBtDKYNRUJUw+JtST9RF5thdThRKT/Jo=
Subject key identifier: 37:65:6D:AD:23:1A:3F:21:4C:6F:45:1E:BC:ED:2C:8A:FC:27:86:58
Authority key identifier: 11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A
Certificate issuer: /CN=A9120CDE/serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A
Certificate serial: 125F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft
Manifest number: 1250
Signing time: Wed 10 Jun 2026 17:05:42 +0000
Manifest this update: Wed 10 Jun 2026 17:05:41 +0000
Manifest next update: Wed 17 Jun 2026 17:05:41 +0000
Files and hashes: 1: EW-SD4cwZnR6jO3a_-hLz72wNRo.crl (hash: NkkiM7lSjYeUgHCrDapdsFAZQ1wBCvJVxCDPdFSqxRE=)
2: D8D63660B9A811ECB7EE5A71C4F9AE02.roa (hash: 72MUrn7tnvmneOqEgTntxjtIs1ZcTEVLT5WbrHCVP04=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl
rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 17:05:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4703 (0x125f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120CDE, serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A
Validity
Not Before: Jun 10 17:05:41 2026 GMT
Not After : Jun 17 17:05:41 2026 GMT
Subject: CN=6a299966-99ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:f0:e4:d4:43:19:e2:3c:50:9c:ba:bf:76:
b9:43:80:8f:22:a7:94:5f:4b:0e:2c:98:00:3b:c0:
31:fd:e5:86:3d:42:95:6e:99:7e:07:bd:8b:a2:21:
d0:a9:79:39:8c:2d:16:db:ec:bb:52:d7:37:e0:40:
56:a5:3b:43:f5:6c:3d:18:19:26:02:8b:4b:6f:ee:
33:2f:7a:be:0b:86:df:4e:ee:60:90:df:b9:6f:30:
9e:51:03:e8:aa:af:86:c6:39:e0:c0:b2:83:73:fc:
6b:cb:02:28:21:d2:62:f2:23:ff:a2:ea:cd:82:a1:
19:47:60:9f:4f:7e:87:d2:83:23:7e:f4:f8:05:6a:
77:4c:1f:78:cd:7a:75:6d:0c:d1:68:b2:02:96:3c:
fe:fe:f6:2b:db:72:de:db:01:d7:8f:ba:2f:f8:97:
d9:e8:1f:b2:42:1f:c0:66:b3:5a:d8:51:34:9c:8a:
a4:af:ba:cb:3d:65:63:b9:6f:7b:39:43:8c:a9:15:
8b:08:ea:03:97:09:ef:8d:51:51:11:ab:0b:2b:68:
26:6e:98:02:3b:65:4e:94:dd:6a:46:56:30:63:02:
74:a7:2d:da:86:08:80:fa:00:fd:23:eb:29:de:7f:
1b:31:ae:4b:64:a8:2b:b2:4a:20:cd:bd:a4:14:75:
ef:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:65:6D:AD:23:1A:3F:21:4C:6F:45:1E:BC:ED:2C:8A:FC:27:86:58
X509v3 Authority Key Identifier:
keyid:11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f9:44:ed:23:7b:c6:85:68:42:d5:61:a0:95:dc:15:99:45:
72:cc:8f:aa:8f:64:37:fd:f1:0e:b8:46:21:b0:f7:be:c3:75:
fe:74:66:98:c3:14:ae:b1:77:41:d8:38:ba:b2:90:6c:ca:08:
ac:d5:2f:0a:4c:e1:96:76:92:ec:2b:5e:00:e4:3f:ac:cf:f2:
d3:e5:85:36:50:1d:4e:7d:f8:7c:2d:4c:b1:af:73:75:2f:39:
93:57:ee:ae:13:a8:2e:8e:6e:de:75:c8:10:20:30:5c:8f:32:
d6:89:8a:a2:c4:4a:21:19:95:4c:6d:49:6e:20:0f:3e:06:00:
54:30:af:ae:fa:c7:37:f7:79:45:58:21:b4:6c:b4:47:5a:aa:
eb:d7:4c:92:ef:00:83:55:e7:54:7f:c7:78:89:4a:04:39:2e:
37:a9:bd:b8:42:8e:15:14:5b:89:5d:f3:cc:7a:53:15:6e:73:
01:1f:f1:ca:7c:d5:ef:20:18:e8:58:c8:80:a7:cb:c9:5c:93:
88:da:26:ab:64:c9:18:cc:21:c6:a1:08:f9:a4:a0:cc:64:1b:
c7:a7:e0:28:c6:f9:35:6a:1c:b9:98:17:7b:f3:8c:38:2d:23:
17:79:e5:f0:82:5a:f7:2b:db:bb:6b:11:3f:78:a5:70:b8:ad:
ac:f7:61:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjBDREUxMTAvBgNVBAUTKDExNkY5MjBGODczMDY2NzQ3QThDRUREQUZGRTg0QkNG
QkRCMDM1MUEwHhcNMjYwNjEwMTcwNTQxWhcNMjYwNjE3MTcwNTQxWjAYMRYwFAYD
VQQDEw02YTI5OTk2Ni05OWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArhDw5NRDGeI8UJy6v3a5Q4CPIqeUX0sOLJgAO8Ax/eWGPUKVbpl+B72LoiHQ
qXk5jC0W2+y7Utc34EBWpTtD9Ww9GBkmAotLb+4zL3q+C4bfTu5gkN+5bzCeUQPo
qq+GxjngwLKDc/xrywIoIdJi8iP/ourNgqEZR2CfT36H0oMjfvT4BWp3TB94zXp1
bQzRaLICljz+/vYr23Le2wHXj7ov+JfZ6B+yQh/AZrNa2FE0nIqkr7rLPWVjuW97
OUOMqRWLCOoDlwnvjVFREasLK2gmbpgCO2VOlN1qRlYwYwJ0py3ahgiA+gD9I+sp
3n8bMa5LZKgrskogzb2kFHXv6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDdlba0j
Gj8hTG9FHrztLIr8J4ZYMB8GA1UdIwQYMBaAFBFvkg+HMGZ0eozt2v/oS8+9sDUa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMENERS8yM0Q4NTY2RUZC
REIxMUU4OTIwQ0IwNDRDNEY5QUUwMi9FVy1TRDRjd1puUjZqTzNhXy1oTHo3MndO
Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VXLVNENGN3Wm5SNmpPM2FfLWhMejcyd05Sby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MENERS8yM0Q4NTY2RUZCREIxMUU4OTIwQ0IwNDRDNEY5QUUwMi9FVy1TRDRjd1pu
UjZqTzNhXy1oTHo3MndOUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuflE7SN7xoVoQtVhoJXcFZlFcsyPqo9kN/3xDrhGIbD3vsN1/nRmmMMUrrF3
Qdg4urKQbMoIrNUvCkzhlnaS7CteAOQ/rM/y0+WFNlAdTn34fC1Msa9zdS85k1fu
rhOoLo5u3nXIECAwXI8y1omKosRKIRmVTG1JbiAPPgYAVDCvrvrHN/d5RVghtGy0
R1qq69dMku8Ag1XnVH/HeIlKBDkuN6m9uEKOFRRbiV3zzHpTFW5zAR/xynzV7yAY
6FjIgKfLyVyTiNomq2TJGMwhxqEI+aSgzGQbx6fgKMb5NWocuZgXe/OMOC0jF3nl
8IJa9yvbu2sRP3ilcLitrPdhqQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:54:28 2026 by rpki-client