$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft File: EW-SD4cwZnR6jO3a_-hLz72wNRo.mft (raw, json) Hash identifier: wRZjoZ8aw4AKoqn/Yh8GKtoNLuYc3ogrCMyb/OQ2Mp0= Subject key identifier: 0B:B9:65:FD:D7:17:38:06:29:7C:E5:CC:31:71:23:2E:7B:DD:1E:A7 Authority key identifier: 11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A Certificate issuer: /CN=A9120CDE/serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A Certificate serial: 12A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft Manifest number: 1299 Signing time: Sat 31 Oct 2026 17:12:39 +0000 Manifest this update: Sat 31 Oct 2026 17:12:39 +0000 Manifest next update: Sat 07 Nov 2026 17:12:38 +0000 Files and hashes: 1: EW-SD4cwZnR6jO3a_-hLz72wNRo.crl (hash: JJCph24O1xeW2v/38KyGSEnY+4TcsrEPRhU62PtafTA=) 2: D8D63660B9A811ECB7EE5A71C4F9AE02.roa (hash: 72MUrn7tnvmneOqEgTntxjtIs1ZcTEVLT5WbrHCVP04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 17:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4776 (0x12a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120CDE, serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A Validity Not Before: Oct 31 17:12:39 2026 GMT Not After : Nov 7 17:12:38 2026 GMT Subject: CN=6ae62187-2f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:05:86:65:30:e8:04:30:3c:ff:d9:dd:37:cf: e6:07:ef:03:fc:7a:0a:9c:30:1e:05:98:7f:60:d2: 6f:73:5f:a4:08:2f:d3:fa:c7:6f:64:78:11:c8:c3: 5e:2e:de:60:0d:f9:be:1c:f4:79:4b:1f:16:08:f0: 07:7e:58:b2:45:29:de:90:c9:69:d4:50:1d:06:f5: ae:63:d5:0a:e6:35:c3:31:f3:3e:b9:67:6e:55:ee: d9:b2:4a:3f:d7:2f:fc:20:65:88:66:d9:da:b9:82: 11:d5:ad:ee:a5:87:46:5a:7b:6f:b2:81:fb:c8:40: 48:34:e4:4a:70:17:64:20:65:14:37:fb:e1:0b:60: 50:64:87:9b:a3:e0:8d:6f:2a:01:ef:81:a5:24:73: b8:d3:57:7c:7d:be:db:b7:ed:d7:d7:28:21:ec:06: be:69:1e:3a:e1:ba:d6:dc:2c:3e:27:19:0f:36:e3: c3:b3:d7:6a:47:4e:24:78:97:ee:7f:b5:72:f2:15: 5e:26:0f:75:34:8a:37:db:8d:8a:8b:5b:ba:71:1f: db:1b:12:e3:7f:75:13:f5:6d:04:97:89:02:dd:fa: 27:bd:e0:aa:45:02:ec:cc:18:59:17:57:79:52:4a: f9:dd:6f:98:69:c3:a2:a9:49:e0:19:2a:ec:83:40: f2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B9:65:FD:D7:17:38:06:29:7C:E5:CC:31:71:23:2E:7B:DD:1E:A7 X509v3 Authority Key Identifier: keyid:11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:30:50:cd:2a:6e:66:94:06:34:bf:76:0d:5d:6a:59:ee:7a: da:de:6c:3b:8b:8b:e0:e3:13:d6:c4:86:f3:26:58:57:53:dd: 3e:b1:c4:6d:05:12:05:9d:59:7f:15:6a:3b:c5:94:ae:51:81: c8:9f:f2:0b:78:bb:38:c7:95:7e:4c:87:45:86:0d:34:57:50: 2c:e2:0e:ba:9c:3f:a0:b0:ab:28:0a:f9:94:1e:f6:4e:00:15: 42:81:20:ea:29:4c:01:66:29:b5:d7:a4:52:b3:25:6c:06:4b: 54:eb:9c:df:d5:60:4e:dc:79:ac:0b:f4:ad:bd:3f:13:0e:f4: fa:89:60:ba:8a:fe:38:46:83:96:43:a6:0e:47:f1:98:38:b7: ae:75:65:d5:c1:4a:80:48:90:9d:5f:8e:d3:c3:9b:90:7c:99: 89:79:46:db:ae:30:87:1d:29:73:2d:24:67:2f:4c:52:55:2e: 84:d7:b7:6f:c0:95:e1:f1:f6:2a:bc:16:0e:60:6e:43:ad:3c: 9a:f0:19:f4:93:62:e2:12:0e:3e:a4:e7:ec:b5:ad:04:8a:4a: bb:5c:55:89:56:70:1a:3a:94:bf:3c:f5:dd:ec:91:23:d0:43: 42:d8:36:f5:56:65:2c:54:ab:f3:d8:0f:ac:0c:12:c4:f9:d3: 6b:d4:3b:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBDREUxMTAvBgNVBAUTKDExNkY5MjBGODczMDY2NzQ3QThDRUREQUZGRTg0QkNG QkRCMDM1MUEwHhcNMjYxMDMxMTcxMjM5WhcNMjYxMTA3MTcxMjM4WjAYMRYwFAYD VQQDEw02YWU2MjE4Ny0yZjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQWGZTDoBDA8/9ndN8/mB+8D/HoKnDAeBZh/YNJvc1+kCC/T+sdvZHgRyMNe Lt5gDfm+HPR5Sx8WCPAHfliyRSnekMlp1FAdBvWuY9UK5jXDMfM+uWduVe7Zsko/ 1y/8IGWIZtnauYIR1a3upYdGWntvsoH7yEBINORKcBdkIGUUN/vhC2BQZIebo+CN byoB74GlJHO401d8fb7bt+3X1ygh7Aa+aR464brW3Cw+JxkPNuPDs9dqR04keJfu f7Vy8hVeJg91NIo3242Ki1u6cR/bGxLjf3UT9W0El4kC3fonveCqRQLszBhZF1d5 Ukr53W+YacOiqUngGSrsg0DyvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAu5Zf3X FzgGKXzlzDFxIy573R6nMB8GA1UdIwQYMBaAFBFvkg+HMGZ0eozt2v/oS8+9sDUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMENERS8yM0Q4NTY2RUZC REIxMUU4OTIwQ0IwNDRDNEY5QUUwMi9FVy1TRDRjd1puUjZqTzNhXy1oTHo3MndO Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VXLVNENGN3Wm5SNmpPM2FfLWhMejcyd05Sby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MENERS8yM0Q4NTY2RUZCREIxMUU4OTIwQ0IwNDRDNEY5QUUwMi9FVy1TRDRjd1pu UjZqTzNhXy1oTHo3MndOUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcjBQzSpuZpQGNL92DV1qWe562t5sO4uL4OMT1sSG8yZYV1PdPrHEbQUSBZ1Z fxVqO8WUrlGByJ/yC3i7OMeVfkyHRYYNNFdQLOIOupw/oLCrKAr5lB72TgAVQoEg 6ilMAWYptdekUrMlbAZLVOuc39VgTtx5rAv0rb0/Ew70+olguor+OEaDlkOmDkfx mDi3rnVl1cFKgEiQnV+O08ObkHyZiXlG264whx0pcy0kZy9MUlUuhNe3b8CV4fH2 KrwWDmBuQ608mvAZ9JNi4hIOPqTn7LWtBIpKu1xViVZwGjqUvzz13eyRI9BDQtg2 9VZlLFSr89gPrAwSxPnTa9Q7iw== -----END CERTIFICATE-----Generated at Sun Nov 1 10:02:36 2026 by rpki-client