
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
File: EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json)
Hash identifier: F9rChFYYrsgs58gMgCE5lHAD/uhufUFMizxFJOi0v8c=
Subject key identifier: D0:FA:1E:44:10:A0:CB:A8:32:DD:0C:1E:1E:2D:52:F3:73:1F:EB:1D
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 04AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
Manifest number: 042B
Signing time: Mon 27 Jul 2026 01:40:50 +0000
Manifest this update: Mon 27 Jul 2026 01:40:50 +0000
Manifest next update: Mon 03 Aug 2026 01:40:50 +0000
Files and hashes: 1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: /rJ8HhDPflZPZvkRd0kgVJHdDYHgN2NK1iudruQVho4=)
2: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: +3hQasWjCag/cMHiyoXiUBni3g6BDychTfyDRlqefpQ=)
3: 7CCE329266F711EF86880681C4F9AE02.roa (hash: aF3QJ0sOT0ZgMnSTdugaLAaBNbh1tfWZzQ4lccA0DY8=)
4: 4A27AA70305B11F08E81A33BC4F9AE02.roa (hash: qzfl+Dr8Jhg7AA1ZKFSwkFzl0gx3OGghCATWZeWsNuQ=)
5: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: TavBer1uC8d5wuGGEXEnQan18tz5toD/VuJdhW827CY=)
6: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: kd/9spe/o+bDbPVrkIMRDzSqrdnOeEarp6SCzpAAFBA=)
7: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: dmNt7Pa0p+rlb/NRYgL66whyumuc4SkL/FOCyj/7zDU=)
8: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: RaDvqbQpfLLb/dtrakTSbpiJKcS+OXOV5EoJAMjCew4=)
9: 78227BC8039911F1BC7C88883B3D8C67.roa (hash: iM0nSeXUrRmjFQctzMvPvZvPKZ9mt4uMDeOC6/UQnj4=)
10: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: d4fCzVRQrmt7gVdT0BQOi8hkz5v4FssHLuEAHna+Ml0=)
11: 79186F1A039911F1BC7C88883B3D8C67.roa (hash: XxQo+QUj305IFxYiaDtWvhGfLyZQFcnSLCPDjpERk64=)
12: E2F3761026F711F1AF0DDFE09A833773.roa (hash: 9mAX4kjHaAPlJxVFKJY1GttpyULtZu2j1Zdo2ye7gQk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1197 (0x4ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Validity
Not Before: Jul 27 01:40:50 2026 GMT
Not After : Aug 3 01:40:50 2026 GMT
Subject: CN=6a66b722-b1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:6b:13:f1:ff:87:66:dd:62:03:ff:bd:7e:
5d:3d:08:87:51:dd:01:ea:42:ed:a8:13:f9:dd:a1:
7f:bc:0f:7c:7b:63:dd:37:c6:03:cd:87:e4:c4:c2:
8d:47:87:bf:c5:80:f0:61:c5:2e:3d:c7:e8:30:d7:
21:5f:c8:35:9a:e5:11:fe:e8:80:fa:18:67:61:8a:
c8:58:22:aa:3c:e6:a5:d9:72:f2:1a:80:b5:d9:53:
be:f0:51:8e:92:9d:8a:e2:4a:43:df:35:76:8c:28:
b5:85:ce:47:ae:3d:01:4e:27:70:5e:95:53:ce:bf:
96:df:d1:ce:82:3b:af:78:bd:03:02:9a:ae:bd:dd:
89:62:41:48:6d:cd:15:f3:dc:64:c4:0e:eb:27:b6:
cb:73:39:ae:70:86:d6:09:7a:7e:c6:fe:ae:e7:35:
c3:6a:da:a7:32:fa:f8:e5:d2:36:29:2e:67:0c:61:
02:08:33:ac:a6:e1:70:81:25:27:1e:52:30:04:f2:
c9:b8:60:02:ab:98:c3:9c:c4:0b:bc:19:c4:2b:d5:
c0:b4:d6:a5:29:6f:fd:dd:e6:15:a4:e1:ea:c1:c8:
26:33:25:c7:1d:c3:f6:82:9c:d9:11:8d:94:d7:fd:
83:5d:ad:21:94:58:f7:1f:05:13:9d:87:c3:d6:38:
39:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FA:1E:44:10:A0:CB:A8:32:DD:0C:1E:1E:2D:52:F3:73:1F:EB:1D
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:1e:3a:ce:7a:05:ce:86:ea:98:20:f5:fa:09:9c:d8:de:db:
5b:8d:3b:51:94:3a:ef:f6:56:92:dd:0a:df:34:1b:74:09:98:
ab:ef:d7:d5:72:6f:c4:a1:ef:f7:2b:d8:1b:c9:d7:8e:1a:08:
54:6b:6e:74:e9:ca:64:a8:21:4e:6b:e7:6d:20:66:79:bd:d3:
4e:b9:f1:a2:3d:94:7c:b1:d5:ba:b8:44:6f:57:8a:49:ab:12:
f7:9b:25:0d:80:e4:8e:8c:53:13:9d:47:d8:90:7c:b7:1e:db:
26:2c:7b:3b:ec:c0:9d:60:3b:ad:df:6f:01:d8:ca:e7:a3:a3:
a2:9f:de:cb:10:c6:9a:6a:11:99:bc:c1:64:83:11:c5:30:2d:
9b:0b:85:a3:58:96:ee:f3:f6:99:d2:6c:77:13:82:22:f3:a2:
cd:42:5e:08:91:4e:43:4d:62:a7:e7:5e:15:4b:57:ed:e1:17:
04:d5:ac:ba:88:81:01:b4:4b:45:fa:d2:da:e7:f5:d8:30:ab:
75:11:cd:14:f5:84:0a:e1:90:00:86:ba:0a:47:5c:34:fa:c7:
ee:23:3e:41:12:81:9b:34:f3:1f:44:ea:d7:28:35:90:a8:54:
7b:6c:2c:49:d1:1e:83:a3:8b:25:0e:77:97:72:fd:c8:71:5d:
3d:95:bb:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4
RjEzRTQxNzIwHhcNMjYwNzI3MDE0MDUwWhcNMjYwODAzMDE0MDUwWjAYMRYwFAYD
VQQDEw02YTY2YjcyMi1iMWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs5hrE/H/h2bdYgP/vX5dPQiHUd0B6kLtqBP53aF/vA98e2PdN8YDzYfkxMKN
R4e/xYDwYcUuPcfoMNchX8g1muUR/uiA+hhnYYrIWCKqPOal2XLyGoC12VO+8FGO
kp2K4kpD3zV2jCi1hc5Hrj0BTidwXpVTzr+W39HOgjuveL0DApquvd2JYkFIbc0V
89xkxA7rJ7bLczmucIbWCXp+xv6u5zXDatqnMvr45dI2KS5nDGECCDOspuFwgSUn
HlIwBPLJuGACq5jDnMQLvBnEK9XAtNalKW/93eYVpOHqwcgmMyXHHcP2gpzZEY2U
1/2DXa0hlFj3HwUTnYfD1jg5gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFND6HkQQ
oMuoMt0MHh4tUvNzH+sdMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw
NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R
WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OEFGMi83M0M4ODc5MkUwNjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01Q
dXByZFBTZjRYYU9QRS1RWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhx46znoFzobqmCD1+gmc2N7bW407UZQ67/ZWkt0K3zQbdAmYq+/X1XJvxKHv
9yvYG8nXjhoIVGtudOnKZKghTmvnbSBmeb3TTrnxoj2UfLHVurhEb1eKSasS95sl
DYDkjoxTE51H2JB8tx7bJix7O+zAnWA7rd9vAdjK56Ojop/eyxDGmmoRmbzBZIMR
xTAtmwuFo1iW7vP2mdJsdxOCIvOizUJeCJFOQ01ip+deFUtX7eEXBNWsuoiBAbRL
RfrS2uf12DCrdRHNFPWECuGQAIa6CkdcNPrH7iM+QRKBmzTzH0Tq1yg1kKhUe2ws
SdEeg6OLJQ53l3L9yHFdPZW7Jw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:43:47 2026 by rpki-client