$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft File: EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json) Hash identifier: h5Sos7iw8PE8LSyZyTShcZFE0/2OJnb8VkaJTAFhang= Subject key identifier: 04:EC:2E:74:4D:F6:09:C0:FD:AD:FF:BE:1E:1E:F6:19:50:8A:30:E6 Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 0461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft Manifest number: 03EA Signing time: Wed 25 Mar 2026 00:27:47 +0000 Manifest this update: Wed 25 Mar 2026 00:27:46 +0000 Manifest next update: Wed 01 Apr 2026 00:27:46 +0000 Files and hashes: 1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: nWVfA6zmHLSFwAgdHEJOv95Uq37gVtx/jcbpHsAqKVM=) 2: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: WxRqUacvVA6NIvqL4tzKH3OPAsoLWQLxol9FjYHJSPU=) 3: E2F3761026F711F1AF0DDFE09A833773.roa (hash: KvJp9/1v13YVV/oraphet/np4fZaB19AQnIg7wKUY88=) 4: 79186F1A039911F1BC7C88883B3D8C67.roa (hash: C8pVkBYnSVefXoeGXotgcKUylbtPsOzrObp6L/3rmVE=) 5: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: Ng6ZAHZjd8iEWPNufSxg02ATrLWYufmfc+mSm42j+M4=) 6: 78227BC8039911F1BC7C88883B3D8C67.roa (hash: f8lGC/TQI+v4wy9cX9FY3fSgK/i2T8wCtptDQYjU/lo=) 7: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: FHMw7TIkQ5w3jytcpOZYdMbiPYWeOiZ6Fey0Hmv9PZw=) 8: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: 0SOkm+BXSDSpdPzUTvjh1AEylkmoBHEkQgyOqkC+tHQ=) 9: 7CCE329266F711EF86880681C4F9AE02.roa (hash: P7aOwAoQCD24agMwYkDuPM/PBiY4l/nBmbknOmgKu4U=) 10: 4A27AA70305B11F08E81A33BC4F9AE02.roa (hash: 6gmB7e2/TTgQSWx3VnY7mRENxpPMfy8g2P+EnTlXmso=) 11: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: a0RqWFhlleo0IJ3svANvJek4iA+KU/t4gkcKeF2xAQk=) 12: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: /c+DOCRTYY/llMZH2mW34+F7qtixtEHbGr1z8QLrDSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: Mar 25 00:27:46 2026 GMT Not After : Apr 1 00:27:46 2026 GMT Subject: CN=69c32c03-5888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ff:2d:16:15:5e:fc:e6:dd:f2:3e:66:f6:f4: 12:15:2d:88:98:c1:2c:bd:a2:58:02:99:1e:73:93: ad:01:7b:36:05:49:36:be:f3:f4:5f:a7:46:0e:36: 00:04:7e:53:9c:b8:7b:38:23:d4:31:c0:f5:cb:e9: 5c:4c:d0:cc:28:c4:2d:85:70:bb:57:5f:50:b1:6a: e1:8e:1a:4f:6d:ba:f0:e1:32:9a:50:d9:a0:75:c0: 24:bd:5f:b7:49:cc:3a:79:df:8d:c2:98:c7:d9:b9: 8b:4c:c2:d3:d3:82:bc:7c:72:d7:39:57:07:69:b8: 43:7e:85:16:56:91:30:d6:12:07:03:2c:e8:b2:5c: ea:c2:20:9f:1c:94:7d:96:af:a7:2e:2e:c1:d2:cc: 8e:3a:cb:11:16:5a:69:a6:9f:d4:1e:e2:cd:1e:18: 7a:39:6a:9c:1a:b5:96:a1:cd:a1:75:ff:d7:4d:37: 9a:7f:bb:3d:f6:9d:30:e1:a5:42:cb:24:22:a2:09: e1:f2:58:03:f5:24:6d:84:10:39:31:e6:0d:aa:42: c2:7c:a3:c7:6a:de:28:13:87:2c:0a:53:bd:95:4b: 0f:71:92:6d:7f:a1:08:8c:13:e6:22:83:3b:17:e2: bc:0f:2d:49:31:3d:bf:05:1c:58:a3:15:71:39:31: 76:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EC:2E:74:4D:F6:09:C0:FD:AD:FF:BE:1E:1E:F6:19:50:8A:30:E6 X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:40:e7:81:2c:37:69:4f:45:22:77:3f:03:67:95:da:68:d2: b9:50:90:17:57:22:39:a4:09:2f:65:bf:e6:b1:a0:51:10:a8: c9:cc:d6:5a:dc:8b:60:16:c7:99:fa:d4:c8:b0:ce:a3:3a:c0: 90:6d:fc:c9:58:c1:70:19:86:38:b2:33:ac:c0:d3:be:39:c0: 24:b4:79:17:9f:58:67:e8:2c:86:23:cc:ab:2f:09:b3:0f:bf: 86:d0:75:e2:96:a4:74:47:71:e4:a2:d1:03:4b:bb:66:de:6c: e9:8d:06:71:70:2e:49:67:da:3b:1d:4f:a2:1f:e3:71:90:09: ef:a4:37:e6:40:2b:b6:28:fc:62:16:b3:f7:28:1e:47:b5:ae: be:cb:08:1f:09:06:87:98:87:d2:3e:fe:77:58:62:79:2c:cf: d6:04:20:84:2e:1d:d8:6f:58:4f:4b:52:cc:ec:34:dd:88:e8: 70:12:68:64:38:90:ef:2c:c8:98:e0:d3:ab:72:ee:30:c6:98: 3b:3d:33:78:81:d4:2f:48:a4:8a:fb:e2:ad:07:8f:6a:7d:f8: 4a:ce:b0:4e:c9:dd:23:2f:04:48:eb:91:7c:d6:da:d3:eb:28: fb:d4:8c:4e:b9:3a:7f:46:1d:9a:e2:21:02:68:2e:09:f5:72: f6:90:1c:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjYwMzI1MDAyNzQ2WhcNMjYwNDAxMDAyNzQ2WjAYMRYwFAYD VQQDEw02OWMzMmMwMy01ODg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/8tFhVe/Obd8j5m9vQSFS2ImMEsvaJYApkec5OtAXs2BUk2vvP0X6dGDjYA BH5TnLh7OCPUMcD1y+lcTNDMKMQthXC7V19QsWrhjhpPbbrw4TKaUNmgdcAkvV+3 Scw6ed+NwpjH2bmLTMLT04K8fHLXOVcHabhDfoUWVpEw1hIHAyzoslzqwiCfHJR9 lq+nLi7B0syOOssRFlpppp/UHuLNHhh6OWqcGrWWoc2hdf/XTTeaf7s99p0w4aVC yyQiognh8lgD9SRthBA5MeYNqkLCfKPHat4oE4csClO9lUsPcZJtf6EIjBPmIoM7 F+K8Dy1JMT2/BRxYoxVxOTF2SQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFATsLnRN 9gnA/a3/vh4e9hlQijDmMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEFGMi83M0M4ODc5MkUwNjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01Q dXByZFBTZjRYYU9QRS1RWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfUDngSw3aU9FInc/A2eV2mjSuVCQF1ciOaQJL2W/5rGgURCoyczWWtyLYBbH mfrUyLDOozrAkG38yVjBcBmGOLIzrMDTvjnAJLR5F59YZ+gshiPMqy8Jsw+/htB1 4pakdEdx5KLRA0u7Zt5s6Y0GcXAuSWfaOx1Poh/jcZAJ76Q35kArtij8Yhaz9yge R7WuvssIHwkGh5iH0j7+d1hieSzP1gQghC4d2G9YT0tSzOw03YjocBJoZDiQ7yzI mODTq3LuMMaYOz0zeIHUL0ikivvirQePan34Ss6wTsndIy8ESOuRfNba0+so+9SM Trk6f0YdmuIhAmguCfVy9pAcXA== -----END CERTIFICATE-----Generated at Thu Mar 26 09:01:37 2026 by rpki-client