
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft
File: EW-SD4cwZnR6jO3a_-hLz72wNRo.mft (raw, json)
Hash identifier: Oo8rsAX8RBCbfYoBtgxxiMtwqSgAUjLxWRCEPkA4+MQ=
Subject key identifier: 17:FA:AD:82:55:C5:C9:F0:77:63:2E:F9:3D:23:06:E3:E4:AD:12:91
Authority key identifier: 11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A
Certificate issuer: /CN=A9120CDE/serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A
Certificate serial: 1260
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft
Manifest number: 1251
Signing time: Fri 12 Jun 2026 17:04:09 +0000
Manifest this update: Fri 12 Jun 2026 17:04:08 +0000
Manifest next update: Fri 19 Jun 2026 17:04:08 +0000
Files and hashes: 1: EW-SD4cwZnR6jO3a_-hLz72wNRo.crl (hash: yglxLj2i4BIxHrJUlfosissc9J8S2LxR8djcQkh9bzA=)
2: D8D63660B9A811ECB7EE5A71C4F9AE02.roa (hash: 72MUrn7tnvmneOqEgTntxjtIs1ZcTEVLT5WbrHCVP04=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl
rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4704 (0x1260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120CDE, serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A
Validity
Not Before: Jun 12 17:04:08 2026 GMT
Not After : Jun 19 17:04:08 2026 GMT
Subject: CN=6a2c3c09-d6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3b:d1:71:28:7a:f6:ca:34:5d:40:9c:81:c2:
99:5f:77:e9:2e:49:f5:36:92:cb:ba:e2:12:f9:4c:
a8:1a:19:15:2d:e6:93:3b:6b:23:ef:bb:6e:9e:d1:
22:5b:89:a9:d7:87:24:6a:02:fe:89:f8:91:b8:bb:
4b:63:b0:9b:c8:5b:5a:93:67:f0:2c:1f:5a:e0:02:
5c:21:87:c4:67:63:75:87:dd:88:51:aa:ac:7c:aa:
cc:1f:ab:66:a7:36:df:ea:e8:b9:68:23:2a:fe:fe:
cd:7d:f3:50:16:ab:d4:15:da:ce:9d:99:b1:68:0f:
e0:41:c9:79:9f:d2:80:9c:20:d4:03:21:bd:ed:6c:
ab:6d:36:12:61:a3:be:a3:87:83:29:7c:0f:95:dc:
e2:72:06:38:1c:36:19:b6:9a:9d:2f:e5:f8:ad:eb:
a1:5e:df:8b:04:c7:8f:2b:3a:6d:50:dd:d2:1c:5a:
06:ac:6b:01:d2:37:b2:83:1c:a1:ab:7c:65:27:ff:
1f:2b:7f:38:bd:d8:2b:13:86:ce:5b:78:8d:32:90:
39:bf:92:47:4b:ba:72:c7:cd:21:69:a8:d3:99:88:
75:bc:ce:d8:6e:73:38:e3:4c:bd:bc:63:59:bc:97:
26:90:15:98:6b:87:70:c5:5e:b5:67:bc:a9:6d:7d:
0b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FA:AD:82:55:C5:C9:F0:77:63:2E:F9:3D:23:06:E3:E4:AD:12:91
X509v3 Authority Key Identifier:
keyid:11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:11:60:8e:91:ed:47:9a:4c:fa:88:22:77:84:a1:93:9d:64:
34:27:b0:e0:be:62:e3:66:a4:e5:68:28:55:18:18:ff:30:4f:
59:3e:d1:00:e4:a0:cc:8f:dc:16:1e:8d:9e:dc:62:92:a8:a8:
f9:af:8e:e6:e9:08:2a:47:8f:b7:8a:ce:9c:20:c1:90:1f:15:
e1:2c:9f:87:3e:0f:ad:c6:1c:37:d4:e7:d5:d8:eb:8f:08:e1:
a1:a0:97:ea:1c:05:9e:18:b2:02:b0:cd:ff:53:e9:69:9c:d5:
e4:a1:89:d4:c1:1d:cd:60:33:5c:e3:b3:d6:43:08:b6:a9:e0:
27:15:9b:29:12:b2:3e:3d:ad:b0:d8:42:46:54:27:63:c6:cd:
8b:c1:63:95:25:9f:cf:d7:e0:0d:00:e1:ae:ed:54:5f:6e:9e:
91:79:46:bf:70:ba:27:e9:ad:b0:2d:02:0b:30:3e:de:21:42:
91:76:63:d3:22:3f:d1:0d:b2:b0:38:0f:d6:56:36:6c:4e:16:
37:bd:c4:f8:62:90:84:37:21:76:9e:d6:a2:67:24:91:a6:21:
d2:58:4f:2c:cf:06:cd:51:c3:a2:ba:79:17:93:f3:aa:41:be:
11:08:0b:44:b5:15:0e:88:12:f4:1d:2c:ee:75:37:cb:04:48:
57:36:74:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:22:55 2026 by rpki-client