$ rpki-client -vvf rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft File: EW-SD4cwZnR6jO3a_-hLz72wNRo.mft (raw, json) Hash identifier: Z/Vjygq7ztAIyMOnzp8ToVPgegRup02EDnaqD3qN+zo= Subject key identifier: 64:A5:78:59:06:55:6B:C1:F0:84:5F:5A:0A:84:AA:D9:84:D2:30:C3 Authority key identifier: 11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A Certificate issuer: /CN=A9120CDE/serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A Certificate serial: 1248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft Manifest number: 1239 Signing time: Sun 26 Apr 2026 17:02:00 +0000 Manifest this update: Sun 26 Apr 2026 17:01:59 +0000 Manifest next update: Sun 03 May 2026 17:01:59 +0000 Files and hashes: 1: EW-SD4cwZnR6jO3a_-hLz72wNRo.crl (hash: wJYuC+vc5y5DyDRVYinU9RkgiWNCCo6rFd7CxAC/O8U=) 2: D8D63660B9A811ECB7EE5A71C4F9AE02.roa (hash: 72MUrn7tnvmneOqEgTntxjtIs1ZcTEVLT5WbrHCVP04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 17:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4680 (0x1248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120CDE, serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A Validity Not Before: Apr 26 17:01:59 2026 GMT Not After : May 3 17:01:59 2026 GMT Subject: CN=69ee4507-02a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2d:5f:01:d5:85:4b:c2:8a:e2:0d:41:c9:79: d2:77:a1:b5:1b:55:db:87:c1:db:f8:3b:73:25:93: 34:b5:7d:26:6a:b0:c9:78:7b:a6:5b:51:fc:53:01: 13:9c:b6:83:97:21:63:bd:09:12:2b:33:1d:50:74: 8e:20:f3:b1:12:01:69:2f:4e:88:b9:d8:ec:2f:99: fc:38:95:e4:92:e8:b2:ed:d9:fe:75:45:99:e2:de: 4a:6c:b5:7a:12:a1:cd:59:14:a2:13:51:79:7e:6a: 6b:c5:0f:3e:eb:b4:3f:ad:01:76:45:9e:83:cd:71: ad:d3:79:45:e0:65:25:6d:23:ed:0f:9e:79:06:7c: f1:d7:db:05:2e:af:6a:40:ca:56:74:f3:54:c1:e1: 27:bf:2c:44:1b:2c:cc:7e:07:86:29:2f:e3:65:8e: a6:ad:6a:1c:c6:a2:5e:85:83:2f:bb:a2:52:fa:de: 9d:b1:27:97:15:80:b1:73:29:02:30:5b:55:04:a4: 2c:44:8e:69:4e:78:7a:9c:c4:a7:01:40:ab:24:e3: 65:b4:8b:32:f7:f5:13:d9:15:fa:e7:bc:9b:25:49: 9b:eb:89:d1:24:57:7a:8b:b5:27:06:a1:8d:a6:bf: b2:3a:04:44:b3:30:df:37:08:09:bf:5a:22:0d:b7: 04:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A5:78:59:06:55:6B:C1:F0:84:5F:5A:0A:84:AA:D9:84:D2:30:C3 X509v3 Authority Key Identifier: keyid:11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b8:37:ba:0e:e8:5e:43:e3:ca:e7:9d:d5:4b:02:54:9c:bc: 1b:77:03:13:bd:72:66:a8:1d:a3:fe:36:3b:c1:51:22:18:1e: 8e:c2:80:d2:19:0f:ae:c6:36:3b:79:89:35:f1:c8:1d:71:3f: 8f:ea:f7:72:01:4c:14:b5:2d:6b:fb:7c:f1:84:aa:34:4c:3d: a1:ab:12:8c:e0:3f:93:da:34:ec:fa:22:2f:22:89:49:18:e1: 8d:4b:66:0d:78:c2:0b:53:a7:56:1a:4c:5e:c1:37:f1:26:19: a1:e8:6d:b2:1c:20:ae:f3:eb:9d:2a:5b:52:9d:79:0a:32:31: 9b:94:75:aa:06:23:5d:35:eb:1e:3c:73:30:0d:7f:9d:74:84: 3b:50:b7:a4:f3:c7:bd:5e:4e:33:c2:2d:ef:37:68:78:1e:77: 44:d6:37:40:8e:0f:3f:2d:9b:09:82:fe:9f:38:bc:7c:7a:92: a9:94:3e:86:26:ee:53:04:68:26:c0:95:48:97:e0:7b:c9:72: dc:1b:3e:f1:35:4c:ce:63:ae:98:78:91:51:de:10:53:dd:d4: 8b:18:99:8d:78:0e:87:54:5b:df:4f:53:c8:06:83:5c:1f:a4: e8:dd:e2:6c:df:ba:c7:65:a3:2e:4b:ec:6d:bf:e7:7a:31:7c: 4c:81:34:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBDREUxMTAvBgNVBAUTKDExNkY5MjBGODczMDY2NzQ3QThDRUREQUZGRTg0QkNG QkRCMDM1MUEwHhcNMjYwNDI2MTcwMTU5WhcNMjYwNTAzMTcwMTU5WjAYMRYwFAYD VQQDEw02OWVlNDUwNy0wMmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoi1fAdWFS8KK4g1ByXnSd6G1G1Xbh8Hb+DtzJZM0tX0marDJeHumW1H8UwET nLaDlyFjvQkSKzMdUHSOIPOxEgFpL06IudjsL5n8OJXkkuiy7dn+dUWZ4t5KbLV6 EqHNWRSiE1F5fmprxQ8+67Q/rQF2RZ6DzXGt03lF4GUlbSPtD555Bnzx19sFLq9q QMpWdPNUweEnvyxEGyzMfgeGKS/jZY6mrWocxqJehYMvu6JS+t6dsSeXFYCxcykC MFtVBKQsRI5pTnh6nMSnAUCrJONltIsy9/UT2RX657ybJUmb64nRJFd6i7UnBqGN pr+yOgREszDfNwgJv1oiDbcEoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGSleFkG VWvB8IRfWgqEqtmE0jDDMB8GA1UdIwQYMBaAFBFvkg+HMGZ0eozt2v/oS8+9sDUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMENERS8yM0Q4NTY2RUZC REIxMUU4OTIwQ0IwNDRDNEY5QUUwMi9FVy1TRDRjd1puUjZqTzNhXy1oTHo3MndO Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VXLVNENGN3Wm5SNmpPM2FfLWhMejcyd05Sby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MENERS8yM0Q4NTY2RUZCREIxMUU4OTIwQ0IwNDRDNEY5QUUwMi9FVy1TRDRjd1pu UjZqTzNhXy1oTHo3MndOUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAirg3ug7oXkPjyued1UsCVJy8G3cDE71yZqgdo/42O8FRIhgejsKA0hkPrsY2 O3mJNfHIHXE/j+r3cgFMFLUta/t88YSqNEw9oasSjOA/k9o07PoiLyKJSRjhjUtm DXjCC1OnVhpMXsE38SYZoehtshwgrvPrnSpbUp15CjIxm5R1qgYjXTXrHjxzMA1/ nXSEO1C3pPPHvV5OM8It7zdoeB53RNY3QI4PPy2bCYL+nzi8fHqSqZQ+hibuUwRo JsCVSJfge8ly3Bs+8TVMzmOumHiRUd4QU93UixiZjXgOh1Rb309TyAaDXB+k6N3i bN+6x2WjLkvsbb/nejF8TIE0IA== -----END CERTIFICATE-----Generated at Mon Apr 27 22:10:20 2026 by rpki-client