$ rpki-client -vvf rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft File: EW-SD4cwZnR6jO3a_-hLz72wNRo.mft (raw, json) Hash identifier: 3qMUosBTJdgyi+wchay5zc8HVAhRanLmJsETIBGN43A= Subject key identifier: 5E:26:FE:4E:5C:FC:84:5F:75:06:49:57:A5:FF:95:85:F5:8C:3B:07 Authority key identifier: 11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A Certificate issuer: /CN=A9120CDE/serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A Certificate serial: 1230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft Manifest number: 1221 Signing time: Tue 10 Mar 2026 16:58:42 +0000 Manifest this update: Tue 10 Mar 2026 16:58:42 +0000 Manifest next update: Tue 17 Mar 2026 16:58:42 +0000 Files and hashes: 1: EW-SD4cwZnR6jO3a_-hLz72wNRo.crl (hash: cKZAiaMwDBCXNj5YWhEt2GTWQ0vlFg3NXdcXVhDcjl0=) 2: D8D63660B9A811ECB7EE5A71C4F9AE02.roa (hash: 72MUrn7tnvmneOqEgTntxjtIs1ZcTEVLT5WbrHCVP04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Mar 2026 16:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4656 (0x1230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120CDE, serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A Validity Not Before: Mar 10 16:58:42 2026 GMT Not After : Mar 17 16:58:42 2026 GMT Subject: CN=69b04dc2-b9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:ec:08:8c:52:2c:52:2f:91:3b:e3:d5:56: 30:e0:de:b2:d1:3b:0a:5d:f0:5a:f8:b8:b2:bc:a8: e2:b7:7f:25:0d:ec:5c:9d:f6:81:fb:5e:5f:8e:24: fd:84:5e:6f:01:83:93:fa:29:3d:11:0f:77:f2:19: 5e:e0:09:0b:29:39:48:7c:e3:f0:37:20:03:ef:85: 58:89:87:e7:99:60:44:c7:3a:15:d7:e7:9e:70:e2: fe:2f:2c:fa:35:28:86:25:4c:93:54:52:15:ca:a3: d0:e2:bd:bc:f3:d4:41:2b:10:51:3e:3d:30:67:95: ec:7e:b1:82:bf:75:dc:5e:28:3b:a5:46:a3:7a:3a: 16:b6:5d:7c:fe:58:8e:20:f7:dd:9b:d5:b7:41:0d: a0:af:a5:4a:a0:76:a1:3b:dc:49:ef:b5:66:20:79: 64:6c:92:a2:47:a3:5e:2c:9d:f6:43:b8:59:b9:61: 5e:a8:17:10:c0:62:42:1b:a6:ee:00:b1:d2:d5:72: cd:c5:10:4e:d3:51:01:35:74:5b:4c:89:cb:a9:b5: a4:51:c7:dd:92:9d:0a:cc:79:5b:18:dd:c7:b6:0a: 37:4c:66:21:44:af:28:01:2d:3d:0b:d9:7a:be:96: 3d:bc:e4:a6:ed:3d:2c:98:8f:03:6c:45:96:d8:cc: cd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:26:FE:4E:5C:FC:84:5F:75:06:49:57:A5:FF:95:85:F5:8C:3B:07 X509v3 Authority Key Identifier: keyid:11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:79:b4:5f:5d:c6:11:63:30:7a:f9:2b:a6:a7:91:88:19:88: d3:7c:04:5d:eb:ad:3a:b3:db:e4:81:67:a0:2f:a6:0a:fc:c8: 26:81:6a:15:cc:cc:42:06:4d:3c:ae:81:7e:f6:50:9e:f6:4a: f8:13:c3:9f:e2:a2:7b:1f:ac:53:24:22:1b:28:3d:a3:a2:8c: 6d:33:f6:df:0e:75:cd:86:97:b1:90:fc:cb:7e:36:d4:4a:bc: 47:8f:c6:e6:f5:42:87:04:d2:0f:9b:8a:1d:18:40:18:f1:14: 68:02:3c:41:4f:a7:67:7d:5e:7a:49:15:4a:08:ee:f8:c0:48: 9d:d9:2d:17:1d:db:d6:e3:6c:e2:5f:15:3e:9a:3e:b1:b7:47: b5:01:d8:ae:93:d1:7a:c1:c9:ff:c1:3a:3c:0c:0a:ee:65:e4: 0e:8d:33:ac:9d:58:68:3f:99:a9:39:a7:51:21:d4:1a:6e:2a: 02:fe:df:ca:3a:ca:1b:52:93:d7:87:5a:8c:fa:96:dc:de:04: d2:9e:3e:ea:9d:b5:44:12:6c:b4:cf:0e:aa:2b:5c:47:60:6e: 6c:1c:d3:29:ff:30:93:1d:d8:7a:20:86:99:c1:eb:c0:0e:7a: aa:38:da:ac:75:16:c4:24:05:7f:a9:5f:ec:77:15:c9:17:8f: 78:09:01:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBDREUxMTAvBgNVBAUTKDExNkY5MjBGODczMDY2NzQ3QThDRUREQUZGRTg0QkNG QkRCMDM1MUEwHhcNMjYwMzEwMTY1ODQyWhcNMjYwMzE3MTY1ODQyWjAYMRYwFAYD VQQDEw02OWIwNGRjMi1iOWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArajsCIxSLFIvkTvj1VYw4N6y0TsKXfBa+LiyvKjit38lDexcnfaB+15fjiT9 hF5vAYOT+ik9EQ938hle4AkLKTlIfOPwNyAD74VYiYfnmWBExzoV1+eecOL+Lyz6 NSiGJUyTVFIVyqPQ4r2889RBKxBRPj0wZ5XsfrGCv3XcXig7pUajejoWtl18/liO IPfdm9W3QQ2gr6VKoHahO9xJ77VmIHlkbJKiR6NeLJ32Q7hZuWFeqBcQwGJCG6bu ALHS1XLNxRBO01EBNXRbTInLqbWkUcfdkp0KzHlbGN3Htgo3TGYhRK8oAS09C9l6 vpY9vOSm7T0smI8DbEWW2MzNFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF4m/k5c /IRfdQZJV6X/lYX1jDsHMB8GA1UdIwQYMBaAFBFvkg+HMGZ0eozt2v/oS8+9sDUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMENERS8yM0Q4NTY2RUZC REIxMUU4OTIwQ0IwNDRDNEY5QUUwMi9FVy1TRDRjd1puUjZqTzNhXy1oTHo3MndO Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VXLVNENGN3Wm5SNmpPM2FfLWhMejcyd05Sby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MENERS8yM0Q4NTY2RUZCREIxMUU4OTIwQ0IwNDRDNEY5QUUwMi9FVy1TRDRjd1pu UjZqTzNhXy1oTHo3MndOUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFHm0X13GEWMwevkrpqeRiBmI03wEXeutOrPb5IFnoC+mCvzIJoFqFczMQgZN PK6BfvZQnvZK+BPDn+Kiex+sUyQiGyg9o6KMbTP23w51zYaXsZD8y3421Eq8R4/G 5vVChwTSD5uKHRhAGPEUaAI8QU+nZ31eekkVSgju+MBIndktFx3b1uNs4l8VPpo+ sbdHtQHYrpPResHJ/8E6PAwK7mXkDo0zrJ1YaD+ZqTmnUSHUGm4qAv7fyjrKG1KT 14dajPqW3N4E0p4+6p21RBJstM8OqitcR2BubBzTKf8wkx3YeiCGmcHrwA56qjja rHUWxCQFf6lf7HcVyRePeAkBJw== -----END CERTIFICATE-----Generated at Thu Mar 12 18:19:29 2026 by rpki-client