
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
File: EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json)
Hash identifier: Ehfzrq7EXS428m8bcwQqkMkGTU78D0Znu/o+hbGxFrU=
Subject key identifier: 6E:76:8A:EF:09:40:58:A5:E9:C5:94:13:03:CA:5D:8D:9B:F8:CC:FF
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 04E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
Manifest number: 0460
Signing time: Sat 07 Nov 2026 00:29:40 +0000
Manifest this update: Sat 07 Nov 2026 00:29:40 +0000
Manifest next update: Sat 14 Nov 2026 00:29:40 +0000
Files and hashes: 1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: L/p83Zcr8f6sfIAYP/RQwV1FYq6AsuXEnZ5K5Kpe4rk=)
2: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: kd/9spe/o+bDbPVrkIMRDzSqrdnOeEarp6SCzpAAFBA=)
3: 78227BC8039911F1BC7C88883B3D8C67.roa (hash: iM0nSeXUrRmjFQctzMvPvZvPKZ9mt4uMDeOC6/UQnj4=)
4: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: dmNt7Pa0p+rlb/NRYgL66whyumuc4SkL/FOCyj/7zDU=)
5: 79186F1A039911F1BC7C88883B3D8C67.roa (hash: XxQo+QUj305IFxYiaDtWvhGfLyZQFcnSLCPDjpERk64=)
6: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: d4fCzVRQrmt7gVdT0BQOi8hkz5v4FssHLuEAHna+Ml0=)
7: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: TavBer1uC8d5wuGGEXEnQan18tz5toD/VuJdhW827CY=)
8: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: +3hQasWjCag/cMHiyoXiUBni3g6BDychTfyDRlqefpQ=)
9: 4A27AA70305B11F08E81A33BC4F9AE02.roa (hash: qzfl+Dr8Jhg7AA1ZKFSwkFzl0gx3OGghCATWZeWsNuQ=)
10: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: RaDvqbQpfLLb/dtrakTSbpiJKcS+OXOV5EoJAMjCew4=)
11: E2F3761026F711F1AF0DDFE09A833773.roa (hash: 9mAX4kjHaAPlJxVFKJY1GttpyULtZu2j1Zdo2ye7gQk=)
12: 7CCE329266F711EF86880681C4F9AE02.roa (hash: aF3QJ0sOT0ZgMnSTdugaLAaBNbh1tfWZzQ4lccA0DY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Nov 2026 00:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1250 (0x4e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Validity
Not Before: Nov 7 00:29:40 2026 GMT
Not After : Nov 14 00:29:40 2026 GMT
Subject: CN=6aee70f4-2773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:2d:82:c4:03:9d:43:12:f4:d3:04:89:51:
2f:b0:37:4f:c9:15:98:22:a1:fc:a0:ca:74:68:37:
91:30:ad:6a:28:86:31:7c:59:ae:4c:7c:dd:f8:b4:
60:a7:c3:48:06:33:69:35:45:55:69:96:34:be:ac:
74:59:d5:50:50:38:3f:02:24:0e:8c:33:09:88:98:
e1:34:bc:7c:f6:fd:d7:65:02:62:e5:16:39:4a:a8:
93:43:fe:82:2d:d0:2d:29:b4:c5:16:fa:74:ef:e6:
04:31:a3:9c:e7:19:e9:fa:96:3e:de:ed:22:ec:50:
87:b3:b5:28:94:73:c1:f4:bf:cd:1c:55:77:ff:38:
db:a6:45:2b:96:65:53:84:16:d7:be:d0:c1:52:94:
dd:45:cf:47:b6:7c:1d:3b:57:81:3f:3a:ca:31:12:
ad:c1:3a:2a:28:a2:bb:2f:01:68:23:f9:bb:e9:a8:
7e:7d:40:e3:20:64:04:3c:b5:91:0d:3f:50:c0:ee:
6e:f2:06:e1:e2:a3:2f:bd:a9:d9:e4:a2:46:7d:06:
e9:47:15:06:87:30:d4:74:6c:8d:97:dc:fa:c2:1d:
42:fc:14:eb:70:2c:49:bb:b1:2b:63:6c:60:f9:3d:
48:a9:bf:37:56:14:e3:93:2d:42:94:b0:a8:e5:31:
1f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:76:8A:EF:09:40:58:A5:E9:C5:94:13:03:CA:5D:8D:9B:F8:CC:FF
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e6:57:2c:61:57:9c:1a:74:da:1d:93:8e:a2:a4:90:c6:a0:
86:9f:ec:9b:2a:6a:23:bf:79:69:a3:22:2c:04:89:16:2f:30:
57:e8:d5:bb:9a:6c:0f:2f:13:74:c4:8a:b9:b8:1d:f3:d9:52:
7d:9d:44:c5:6c:67:1f:21:16:35:d0:8f:34:90:68:aa:0e:69:
f2:0d:da:d6:0c:cd:b7:e6:0a:06:11:4e:19:db:31:8c:48:27:
8e:78:ef:63:3c:79:ab:99:20:10:77:b0:4b:d5:ea:2f:5b:b1:
c1:a7:61:48:5d:fb:5a:0d:d8:14:cd:c3:a3:63:c7:e2:e7:99:
b7:2c:64:b7:41:71:b5:1e:9e:92:df:eb:10:a4:d5:0a:c6:59:
59:ef:c9:7f:63:45:37:98:e0:a7:7a:58:a6:b8:0d:5b:13:50:
50:50:b8:9a:b4:89:4f:63:5d:0e:7f:bc:c1:a9:7f:53:76:6a:
7a:02:c1:95:c4:f4:43:45:26:df:94:93:1b:d7:c5:77:18:8b:
20:18:1c:89:03:63:51:5d:a2:e4:43:2a:bd:b6:dc:58:22:9a:
e6:97:6c:ef:c2:bd:ce:3b:08:3f:b1:9c:bb:b9:c3:57:bc:04:
23:9f:cc:79:8a:4c:40:ab:6e:94:ed:0d:d8:2c:7e:cd:c8:99:
be:ec:7c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 17:18:53 2026 by rpki-client