
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
File: EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json)
Hash identifier: eb3K+TeDZgYh+Q8I0MWld3se8fT/4WgI9a2Z/4i/vjo=
Subject key identifier: 19:7A:94:B9:56:80:DC:A2:0C:6C:FE:CA:73:79:17:DE:D0:15:DC:09
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 04C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
Manifest number: 0447
Signing time: Sat 19 Sep 2026 00:22:14 +0000
Manifest this update: Sat 19 Sep 2026 00:22:13 +0000
Manifest next update: Sat 26 Sep 2026 00:22:13 +0000
Files and hashes: 1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: xy71sBV6JiL2a/ENJmfmXse01DEgCLEdU+SHFdgXV+k=)
2: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: d4fCzVRQrmt7gVdT0BQOi8hkz5v4FssHLuEAHna+Ml0=)
3: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: RaDvqbQpfLLb/dtrakTSbpiJKcS+OXOV5EoJAMjCew4=)
4: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: TavBer1uC8d5wuGGEXEnQan18tz5toD/VuJdhW827CY=)
5: 79186F1A039911F1BC7C88883B3D8C67.roa (hash: XxQo+QUj305IFxYiaDtWvhGfLyZQFcnSLCPDjpERk64=)
6: 78227BC8039911F1BC7C88883B3D8C67.roa (hash: iM0nSeXUrRmjFQctzMvPvZvPKZ9mt4uMDeOC6/UQnj4=)
7: 7CCE329266F711EF86880681C4F9AE02.roa (hash: aF3QJ0sOT0ZgMnSTdugaLAaBNbh1tfWZzQ4lccA0DY8=)
8: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: +3hQasWjCag/cMHiyoXiUBni3g6BDychTfyDRlqefpQ=)
9: 4A27AA70305B11F08E81A33BC4F9AE02.roa (hash: qzfl+Dr8Jhg7AA1ZKFSwkFzl0gx3OGghCATWZeWsNuQ=)
10: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: kd/9spe/o+bDbPVrkIMRDzSqrdnOeEarp6SCzpAAFBA=)
11: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: dmNt7Pa0p+rlb/NRYgL66whyumuc4SkL/FOCyj/7zDU=)
12: E2F3761026F711F1AF0DDFE09A833773.roa (hash: 9mAX4kjHaAPlJxVFKJY1GttpyULtZu2j1Zdo2ye7gQk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1225 (0x4c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Validity
Not Before: Sep 19 00:22:13 2026 GMT
Not After : Sep 26 00:22:13 2026 GMT
Subject: CN=6aadd5b6-fa99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:30:9a:de:02:29:53:d8:7f:3b:2a:2e:e7:
98:e5:0e:17:df:f6:73:16:19:de:aa:8e:c9:cc:80:
07:b3:ee:75:8e:53:bd:c6:31:50:ca:b6:60:c3:48:
4b:df:15:c6:51:8c:b5:49:84:29:07:54:7a:ab:0f:
93:9d:b0:fa:37:66:d0:65:3f:ce:22:df:dc:85:44:
33:29:84:2c:4a:7c:45:a1:ac:9e:4a:b2:cc:31:6a:
0e:e3:68:69:f6:30:fc:2f:48:c0:3b:ff:02:fc:0f:
ac:c3:39:ca:b4:f4:3f:fd:21:94:d8:22:19:15:62:
1a:79:46:c3:02:7c:47:b0:f7:f5:46:65:cd:93:0d:
e6:d3:3a:66:09:d9:8a:9c:25:63:83:0e:0b:2f:7f:
98:2a:e0:fe:6b:22:c2:eb:f7:bf:01:7f:0b:d0:af:
23:9b:70:29:49:a3:f4:f1:fc:6d:4a:f1:1e:3b:4a:
5c:ee:b1:a0:32:c2:a3:6b:dd:23:c4:a0:9c:8f:37:
39:02:3b:c2:db:4c:99:7e:8e:04:99:1a:18:20:e6:
a3:4c:c5:27:f8:69:30:29:25:4f:bd:b4:72:d7:a9:
67:ac:c4:29:02:b0:17:ce:a8:7b:3a:8c:f7:47:a0:
10:4d:73:cd:97:5a:e7:2f:b5:3f:c8:48:4c:94:da:
e6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7A:94:B9:56:80:DC:A2:0C:6C:FE:CA:73:79:17:DE:D0:15:DC:09
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:58:17:04:52:eb:d4:eb:3f:18:c5:de:87:ae:2d:a2:2b:2a:
71:bf:c4:46:a0:0f:2a:bf:2f:2b:00:b5:02:5f:0e:9d:6f:d5:
8a:f5:fb:ab:fc:8e:2e:d6:8d:47:00:2a:3c:67:d6:10:04:b0:
b6:eb:6b:9b:06:2d:9c:39:26:10:39:46:b1:11:92:8a:92:c0:
11:c1:6f:1d:c4:97:58:3c:fa:47:34:1c:06:c9:34:fa:1d:00:
87:e2:02:97:13:ef:59:1e:bb:28:f8:02:36:18:ad:b9:d9:7b:
c5:cf:4f:60:1d:ee:6b:64:5a:0e:a4:f4:95:ee:33:2f:06:ce:
e2:b5:e4:8a:9c:b8:3d:70:10:78:68:6c:a4:c1:49:36:78:c4:
fc:9b:26:05:a7:e7:02:cc:85:dd:1e:ce:c1:8c:c1:ac:e9:1b:
ac:f8:8d:62:e2:88:d3:a2:03:1c:4a:3c:dc:f5:e7:41:23:86:
cf:ec:85:6e:fa:68:80:3a:a1:83:15:69:75:01:51:db:6d:64:
17:2f:16:40:c1:5d:43:99:a4:f7:51:3e:13:43:68:a8:81:2b:
3a:8e:22:14:ab:25:d9:d3:9a:69:db:5c:1e:79:0a:87:70:b4:
f4:30:e6:60:a9:5f:8d:cd:93:bd:2b:24:da:86:ed:61:0a:38:
b6:c6:11:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4
RjEzRTQxNzIwHhcNMjYwOTE5MDAyMjEzWhcNMjYwOTI2MDAyMjEzWjAYMRYwFAYD
VQQDEw02YWFkZDViNi1mYTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnl8wmt4CKVPYfzsqLueY5Q4X3/ZzFhneqo7JzIAHs+51jlO9xjFQyrZgw0hL
3xXGUYy1SYQpB1R6qw+TnbD6N2bQZT/OIt/chUQzKYQsSnxFoayeSrLMMWoO42hp
9jD8L0jAO/8C/A+swznKtPQ//SGU2CIZFWIaeUbDAnxHsPf1RmXNkw3m0zpmCdmK
nCVjgw4LL3+YKuD+ayLC6/e/AX8L0K8jm3ApSaP08fxtSvEeO0pc7rGgMsKja90j
xKCcjzc5AjvC20yZfo4EmRoYIOajTMUn+GkwKSVPvbRy16lnrMQpArAXzqh7Ooz3
R6AQTXPNl1rnL7U/yEhMlNrmmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBl6lLlW
gNyiDGz+ynN5F97QFdwJMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw
NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R
WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OEFGMi83M0M4ODc5MkUwNjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01Q
dXByZFBTZjRYYU9QRS1RWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP1gXBFLr1Os/GMXeh64toisqcb/ERqAPKr8vKwC1Al8OnW/VivX7q/yOLtaN
RwAqPGfWEASwtutrmwYtnDkmEDlGsRGSipLAEcFvHcSXWDz6RzQcBsk0+h0Ah+IC
lxPvWR67KPgCNhitudl7xc9PYB3ua2RaDqT0le4zLwbO4rXkipy4PXAQeGhspMFJ
NnjE/JsmBafnAsyF3R7OwYzBrOkbrPiNYuKI06IDHEo83PXnQSOGz+yFbvpogDqh
gxVpdQFR221kFy8WQMFdQ5mk91E+E0NoqIErOo4iFKsl2dOaadtcHnkKh3C09DDm
YKlfjc2TvSsk2obtYQo4tsYR8Q==
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:34:40 2026 by rpki-client