
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft
File: EW-SD4cwZnR6jO3a_-hLz72wNRo.mft (raw, json)
Hash identifier: prax9y6Vsih3ypSaGcNpuaG7NSNLccVEk2O3+1WrFuY=
Subject key identifier: 42:27:2E:90:17:E0:F8:67:24:FA:7D:1A:BD:33:E0:99:78:A9:EC:80
Authority key identifier: 11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A
Certificate issuer: /CN=A9120CDE/serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A
Certificate serial: 129A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft
Manifest number: 128B
Signing time: Sun 04 Oct 2026 17:06:15 +0000
Manifest this update: Sun 04 Oct 2026 17:06:14 +0000
Manifest next update: Sun 11 Oct 2026 17:06:14 +0000
Files and hashes: 1: EW-SD4cwZnR6jO3a_-hLz72wNRo.crl (hash: 6zY0djFgN3Fvqfw18oQ7VlFCWOONFBtt0o/oHe+CjXE=)
2: D8D63660B9A811ECB7EE5A71C4F9AE02.roa (hash: 72MUrn7tnvmneOqEgTntxjtIs1ZcTEVLT5WbrHCVP04=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl
rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 17:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4762 (0x129a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120CDE, serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A
Validity
Not Before: Oct 4 17:06:14 2026 GMT
Not After : Oct 11 17:06:14 2026 GMT
Subject: CN=6ac28787-9143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f2:e4:88:bc:82:a5:29:3f:af:52:64:15:43:
56:e0:47:be:ae:e5:1e:1e:08:c1:9b:e4:af:c1:da:
55:83:c5:84:7d:24:01:e3:00:45:98:46:9d:55:eb:
58:6b:36:57:0d:ff:10:dd:19:c7:45:90:c2:fd:7b:
42:cd:5e:c6:b6:a6:13:d8:e9:03:f1:16:27:a9:93:
8a:d5:67:b7:4a:1b:f5:71:98:de:1b:c9:8f:6c:e9:
bb:08:08:97:83:7f:75:d4:89:0e:44:96:cf:70:86:
e8:39:4e:93:ac:93:5a:db:55:0d:ec:9c:70:1c:aa:
d4:bf:d1:5f:10:9c:ed:06:19:44:0f:29:25:77:ad:
ff:6e:dd:49:c9:18:c3:4d:42:89:f5:df:e6:a7:47:
fa:8a:26:7d:ec:42:59:89:2f:41:70:e8:5f:e5:87:
74:ce:9d:12:6c:84:7b:16:f5:48:ed:f6:04:b4:b9:
85:b4:7d:bd:39:98:06:db:7f:81:0c:b4:31:76:66:
b9:26:8f:62:95:61:3e:af:f2:b3:55:e7:ea:66:b7:
0f:d9:ec:e5:88:33:cd:0c:8e:6a:52:d2:ce:1c:e2:
a0:1a:78:3b:de:16:68:65:95:71:8f:32:c1:d9:b5:
d6:70:15:6f:1f:30:16:80:32:72:79:8b:16:b6:a8:
30:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:27:2E:90:17:E0:F8:67:24:FA:7D:1A:BD:33:E0:99:78:A9:EC:80
X509v3 Authority Key Identifier:
keyid:11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:63:ea:70:fe:22:26:43:fa:e4:e1:d6:65:e4:75:6e:a1:74:
ae:c1:05:70:0c:72:b2:f0:d5:56:e1:9d:38:73:3a:6d:4c:69:
39:16:40:fe:9f:42:57:33:23:0f:51:95:40:72:fd:a5:76:0f:
ef:9b:d7:79:61:18:b7:f0:1d:24:48:9e:cb:b3:ba:9c:8c:cd:
32:9c:b7:5d:e2:7b:8c:c8:ff:8d:a3:e2:10:af:ec:69:68:2c:
47:0f:e0:a0:7e:c0:4c:ca:11:82:67:9f:7e:e6:33:f3:e2:77:
06:36:1a:d4:d3:73:3f:69:1a:91:19:f0:5c:55:01:51:7e:5c:
a4:ac:b4:83:2b:dc:6c:62:25:a3:ab:4c:33:12:ce:ce:da:e0:
db:98:66:59:49:b3:d8:c2:9e:04:cb:d7:3f:15:87:0e:5c:d0:
22:77:5f:55:86:ea:9a:f4:6d:0b:93:a2:59:98:de:dc:c0:24:
27:d8:31:d9:bc:93:84:58:1f:d9:64:08:1f:f9:41:ab:19:9e:
6d:73:ad:da:3f:1a:c9:b0:39:da:24:26:39:5f:9c:c9:86:79:
56:ec:31:f5:84:81:85:0d:bf:4d:91:91:5e:60:35:c9:ee:59:
37:d0:ad:42:f3:2c:73:f7:b8:ec:ef:a3:35:98:36:7a:3d:c8:
45:37:46:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:37:45 2026 by rpki-client