$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft File: EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json) Hash identifier: ghIFSPDiDNG9uxTEOa9nOjKhP54uCa+uVIar868KRjU= Subject key identifier: 4E:DC:25:2F:73:CB:16:FD:58:93:49:AE:B5:23:9A:3D:7A:0E:A0:89 Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 04E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft Manifest number: 0463 Signing time: Fri 13 Nov 2026 00:08:54 +0000 Manifest this update: Fri 13 Nov 2026 00:08:54 +0000 Manifest next update: Fri 20 Nov 2026 00:08:54 +0000 Files and hashes: 1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: wud34Q1z9lWxunEoPObrkroQifnMPftbYJsS1Pkoa7U=) 2: 79186F1A039911F1BC7C88883B3D8C67.roa (hash: XxQo+QUj305IFxYiaDtWvhGfLyZQFcnSLCPDjpERk64=) 3: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: kd/9spe/o+bDbPVrkIMRDzSqrdnOeEarp6SCzpAAFBA=) 4: 78227BC8039911F1BC7C88883B3D8C67.roa (hash: iM0nSeXUrRmjFQctzMvPvZvPKZ9mt4uMDeOC6/UQnj4=) 5: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: TavBer1uC8d5wuGGEXEnQan18tz5toD/VuJdhW827CY=) 6: 7CCE329266F711EF86880681C4F9AE02.roa (hash: aF3QJ0sOT0ZgMnSTdugaLAaBNbh1tfWZzQ4lccA0DY8=) 7: E2F3761026F711F1AF0DDFE09A833773.roa (hash: 9mAX4kjHaAPlJxVFKJY1GttpyULtZu2j1Zdo2ye7gQk=) 8: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: RaDvqbQpfLLb/dtrakTSbpiJKcS+OXOV5EoJAMjCew4=) 9: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: d4fCzVRQrmt7gVdT0BQOi8hkz5v4FssHLuEAHna+Ml0=) 10: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: +3hQasWjCag/cMHiyoXiUBni3g6BDychTfyDRlqefpQ=) 11: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: dmNt7Pa0p+rlb/NRYgL66whyumuc4SkL/FOCyj/7zDU=) 12: 4A27AA70305B11F08E81A33BC4F9AE02.roa (hash: qzfl+Dr8Jhg7AA1ZKFSwkFzl0gx3OGghCATWZeWsNuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 00:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1253 (0x4e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: Nov 13 00:08:54 2026 GMT Not After : Nov 20 00:08:54 2026 GMT Subject: CN=6af65516-76a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8d:2e:8a:79:ea:1a:69:5b:c5:63:eb:ec:40: 00:4e:4c:df:0f:0f:e9:0a:38:d1:a1:07:96:8d:e0: a2:b2:5f:74:32:45:91:9a:ac:c9:42:b6:3d:ae:4d: 07:b1:a9:c9:0e:c7:ec:ed:0e:98:32:d0:d3:98:e9: 39:ac:36:0a:09:e9:db:dd:c7:4c:c9:09:33:c8:67: 48:41:6c:38:1b:2c:1a:2c:3c:d9:b4:69:b1:fb:37: 31:3d:ca:84:90:83:1b:da:89:ef:e4:21:2e:4a:d6: aa:74:b6:c5:b9:69:7f:31:29:3d:5c:c3:84:eb:f0: 80:d6:f2:22:aa:7c:e9:7d:2f:b4:95:71:38:31:63: 91:ca:73:b8:c5:73:7d:0c:53:95:e7:ff:29:cb:8b: fa:fd:76:9f:4f:17:7c:39:17:f6:95:3a:54:98:a9: 12:04:6c:80:a5:22:00:c4:2e:55:11:08:50:04:67: 6b:40:70:34:d9:89:d5:39:fd:8b:2e:21:ff:de:2a: 5b:28:63:f8:59:86:82:54:c9:18:0f:bc:b6:5d:0e: c0:59:c6:a6:d4:bc:92:88:fc:c6:87:c5:dc:31:9b: e6:65:72:17:79:ad:ca:00:1c:9b:2c:43:f9:31:a7: a7:65:97:34:2b:bb:08:ea:12:03:9a:35:94:ce:bd: 71:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DC:25:2F:73:CB:16:FD:58:93:49:AE:B5:23:9A:3D:7A:0E:A0:89 X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:77:a5:02:48:69:3d:84:81:16:04:d0:db:95:78:fb:b9:52: 27:70:36:65:1b:f8:53:85:7b:3f:e8:9a:c6:41:9d:41:4b:36: e7:5d:49:86:9f:8a:b2:e1:bb:3d:5b:47:75:48:d1:ee:f7:f1: da:09:b5:1e:96:11:cc:bf:28:b2:94:83:41:7f:db:31:11:b4: 04:21:74:52:2c:d9:a4:cc:18:0e:aa:70:0e:13:28:9c:c0:05: cb:32:19:72:94:89:a1:1c:73:aa:ec:0a:18:25:8d:91:0a:7e: 95:0e:42:cc:c1:d8:78:0c:d9:26:69:f0:b6:3b:0f:d3:b8:b4: 7e:6f:72:30:6a:03:38:04:c5:85:51:ed:a6:4f:68:7d:a3:48: 79:95:71:2a:4a:26:56:20:d8:9d:4c:75:80:f8:a4:07:6a:80: bc:a4:97:19:a4:8c:06:20:a1:19:1c:69:24:e8:56:45:af:39: f4:cf:9f:88:12:1b:e1:fc:e3:07:31:89:e9:53:c1:b6:df:8c: 2a:6a:72:8a:c6:01:fa:f0:77:f5:7b:84:11:bd:cb:61:b4:57: a8:07:59:96:80:b5:c9:23:38:3e:46:a8:86:fc:62:a7:89:10: e5:36:32:c3:77:6a:82:eb:49:0b:9d:03:93:70:70:b1:78:b7: 3e:4e:c7:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjYxMTEzMDAwODU0WhcNMjYxMTIwMDAwODU0WjAYMRYwFAYD VQQDEw02YWY2NTUxNi03NmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Y0uinnqGmlbxWPr7EAATkzfDw/pCjjRoQeWjeCisl90MkWRmqzJQrY9rk0H sanJDsfs7Q6YMtDTmOk5rDYKCenb3cdMyQkzyGdIQWw4GywaLDzZtGmx+zcxPcqE kIMb2onv5CEuStaqdLbFuWl/MSk9XMOE6/CA1vIiqnzpfS+0lXE4MWORynO4xXN9 DFOV5/8py4v6/XafTxd8ORf2lTpUmKkSBGyApSIAxC5VEQhQBGdrQHA02YnVOf2L LiH/3ipbKGP4WYaCVMkYD7y2XQ7AWcam1LySiPzGh8XcMZvmZXIXea3KABybLEP5 MaenZZc0K7sI6hIDmjWUzr1xFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7cJS9z yxb9WJNJrrUjmj16DqCJMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEFGMi83M0M4ODc5MkUwNjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01Q dXByZFBTZjRYYU9QRS1RWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU3elAkhpPYSBFgTQ25V4+7lSJ3A2ZRv4U4V7P+iaxkGdQUs2511Jhp+KsuG7 PVtHdUjR7vfx2gm1HpYRzL8ospSDQX/bMRG0BCF0UizZpMwYDqpwDhMonMAFyzIZ cpSJoRxzquwKGCWNkQp+lQ5CzMHYeAzZJmnwtjsP07i0fm9yMGoDOATFhVHtpk9o faNIeZVxKkomViDYnUx1gPikB2qAvKSXGaSMBiChGRxpJOhWRa859M+fiBIb4fzj BzGJ6VPBtt+MKmpyisYB+vB39XuEEb3LYbRXqAdZloC1ySM4Pkaohvxip4kQ5TYy w3dqgutJC50Dk3BwsXi3Pk7HCw== -----END CERTIFICATE-----Generated at Sun Nov 15 01:23:14 2026 by rpki-client