$ rpki-client -vvf rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft File: EW-SD4cwZnR6jO3a_-hLz72wNRo.mft (raw, json) Hash identifier: mPNmoWeOnnOoC9lQTsiLjK9z/cDW27/Fo+Kop2uGmV4= Subject key identifier: 30:2B:A4:DE:7E:03:96:7F:0D:0F:23:92:90:5F:D7:9F:CD:9C:B3:04 Authority key identifier: 11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A Certificate issuer: /CN=A9120CDE/serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A Certificate serial: 1250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft Manifest number: 1241 Signing time: Tue 12 May 2026 17:07:55 +0000 Manifest this update: Tue 12 May 2026 17:07:55 +0000 Manifest next update: Tue 19 May 2026 17:07:55 +0000 Files and hashes: 1: EW-SD4cwZnR6jO3a_-hLz72wNRo.crl (hash: y8R7oXzieHWEDDRBvjRJrXhj3qfw2CHQLNf5RAbzyTQ=) 2: D8D63660B9A811ECB7EE5A71C4F9AE02.roa (hash: 72MUrn7tnvmneOqEgTntxjtIs1ZcTEVLT5WbrHCVP04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4688 (0x1250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120CDE, serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A Validity Not Before: May 12 17:07:55 2026 GMT Not After : May 19 17:07:55 2026 GMT Subject: CN=6a035e6b-cd2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b9:b8:96:b8:a3:9c:9f:60:3a:3c:f3:fd:08: 17:ef:01:00:50:74:cf:cc:c6:57:e3:fa:b9:b7:72: c3:01:4b:d6:f7:9a:4d:37:f6:a1:ca:0d:4b:29:a6: da:4c:ac:cc:01:a5:2e:7a:1f:5b:77:76:a6:91:d5: 1d:50:99:b4:48:e5:84:f9:6d:65:88:68:10:bd:24: 66:5b:62:b2:d3:3b:03:ea:ea:32:a5:b3:0a:69:6a: a5:9f:1b:3c:57:ad:7a:5c:74:8f:86:f2:17:29:94: d9:52:b4:a6:a3:5e:8e:71:78:53:0e:b1:57:48:fb: ff:e8:33:e6:0c:33:dd:b5:12:15:a3:ec:a1:d0:82: 37:8e:94:17:11:bf:c5:31:ba:33:c6:94:04:b6:a0: f5:5d:d8:25:01:4d:33:e9:b2:45:5a:b8:b3:6a:51: 98:17:d6:73:9d:9f:35:db:83:10:94:44:15:2c:9f: 0f:b6:8f:55:d8:17:ba:89:16:3f:c1:64:52:7a:5c: d7:91:4b:ad:4f:4f:3b:81:bc:b9:a2:3b:56:43:a0: da:8b:13:be:a1:75:42:df:45:ad:25:2c:69:39:e5: 0f:70:b6:ad:e5:2b:d3:6a:9f:22:61:6a:ae:02:e1: 62:59:61:8c:7b:de:79:75:8c:0a:ee:91:74:cc:d7: de:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2B:A4:DE:7E:03:96:7F:0D:0F:23:92:90:5F:D7:9F:CD:9C:B3:04 X509v3 Authority Key Identifier: keyid:11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:3d:fe:f2:0d:47:f5:d9:4d:29:56:f1:6e:e8:94:1e:c4:e6: 68:99:a1:eb:ad:e7:49:87:3a:62:9e:69:46:57:d9:6b:b0:5d: a5:1f:44:44:23:ba:32:b1:3c:09:60:5e:a0:3e:5c:0e:64:e7: 93:a1:08:72:f0:0f:4e:e4:b0:f0:30:ac:ea:e2:85:b4:b7:96: 04:88:44:ec:37:79:e2:30:69:bc:32:3f:cc:d6:ee:d1:39:c7: 97:45:56:33:63:1e:57:f9:89:1d:47:11:56:3e:37:95:01:aa: 2a:49:68:31:75:37:54:19:ba:fc:20:74:b7:3d:fe:87:f9:54: 7a:4f:d6:98:3f:14:89:c2:9c:4f:ba:81:93:c8:30:cf:9f:3e: f5:f9:7f:d4:e8:0e:a8:2e:e8:98:ac:67:60:c4:f2:35:fb:aa: 2f:63:b1:44:1b:16:52:f6:dd:89:27:3b:bc:95:cb:5b:e6:a1: a0:5d:02:01:fd:91:21:2e:73:09:96:cc:6f:a2:c7:1c:73:77: e3:cc:55:e3:b5:b8:b2:fb:fd:9e:1d:31:a1:74:b3:3d:53:ee: 61:f5:c0:6c:50:ea:3e:67:96:ca:6d:17:b9:3f:2b:8c:7f:c1: 9d:a8:2e:08:93:54:8a:61:33:28:d2:5e:34:0a:5e:d3:bb:88: e5:23:fc:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICElAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBDREUxMTAvBgNVBAUTKDExNkY5MjBGODczMDY2NzQ3QThDRUREQUZGRTg0QkNG QkRCMDM1MUEwHhcNMjYwNTEyMTcwNzU1WhcNMjYwNTE5MTcwNzU1WjAYMRYwFAYD VQQDEw02YTAzNWU2Yi1jZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbm4lrijnJ9gOjzz/QgX7wEAUHTPzMZX4/q5t3LDAUvW95pNN/ahyg1LKaba TKzMAaUueh9bd3amkdUdUJm0SOWE+W1liGgQvSRmW2Ky0zsD6uoypbMKaWqlnxs8 V616XHSPhvIXKZTZUrSmo16OcXhTDrFXSPv/6DPmDDPdtRIVo+yh0II3jpQXEb/F MbozxpQEtqD1XdglAU0z6bJFWrizalGYF9ZznZ8124MQlEQVLJ8Pto9V2Be6iRY/ wWRSelzXkUutT087gby5ojtWQ6DaixO+oXVC30WtJSxpOeUPcLat5SvTap8iYWqu AuFiWWGMe955dYwK7pF0zNfeJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDArpN5+ A5Z/DQ8jkpBf15/NnLMEMB8GA1UdIwQYMBaAFBFvkg+HMGZ0eozt2v/oS8+9sDUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMENERS8yM0Q4NTY2RUZC REIxMUU4OTIwQ0IwNDRDNEY5QUUwMi9FVy1TRDRjd1puUjZqTzNhXy1oTHo3MndO Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VXLVNENGN3Wm5SNmpPM2FfLWhMejcyd05Sby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MENERS8yM0Q4NTY2RUZCREIxMUU4OTIwQ0IwNDRDNEY5QUUwMi9FVy1TRDRjd1pu UjZqTzNhXy1oTHo3MndOUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiD3+8g1H9dlNKVbxbuiUHsTmaJmh663nSYc6Yp5pRlfZa7BdpR9ERCO6MrE8 CWBeoD5cDmTnk6EIcvAPTuSw8DCs6uKFtLeWBIhE7Dd54jBpvDI/zNbu0TnHl0VW M2MeV/mJHUcRVj43lQGqKkloMXU3VBm6/CB0tz3+h/lUek/WmD8UicKcT7qBk8gw z58+9fl/1OgOqC7omKxnYMTyNfuqL2OxRBsWUvbdiSc7vJXLW+ahoF0CAf2RIS5z CZbMb6LHHHN348xV47W4svv9nh0xoXSzPVPuYfXAbFDqPmeWym0XuT8rjH/Bnagu CJNUimEzKNJeNApe07uI5SP81A== -----END CERTIFICATE-----Generated at Wed May 13 10:03:33 2026 by rpki-client