
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
File: EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json)
Hash identifier: /81FNZC8QxNbm3K9J0INvF03B4LAH2FeOhxs+nQFi4U=
Subject key identifier: C2:F8:91:EE:13:74:F2:ED:26:FD:D8:AC:A4:2C:CB:54:B4:E2:1E:8A
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 04AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
Manifest number: 0429
Signing time: Thu 23 Jul 2026 01:30:23 +0000
Manifest this update: Thu 23 Jul 2026 01:30:22 +0000
Manifest next update: Thu 30 Jul 2026 01:30:22 +0000
Files and hashes: 1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: wqIwLbCxlzLEW37cTJiUdC0xG7Nk9TOeqgnuOLcDPzY=)
2: 7CCE329266F711EF86880681C4F9AE02.roa (hash: aF3QJ0sOT0ZgMnSTdugaLAaBNbh1tfWZzQ4lccA0DY8=)
3: 78227BC8039911F1BC7C88883B3D8C67.roa (hash: iM0nSeXUrRmjFQctzMvPvZvPKZ9mt4uMDeOC6/UQnj4=)
4: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: d4fCzVRQrmt7gVdT0BQOi8hkz5v4FssHLuEAHna+Ml0=)
5: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: dmNt7Pa0p+rlb/NRYgL66whyumuc4SkL/FOCyj/7zDU=)
6: 79186F1A039911F1BC7C88883B3D8C67.roa (hash: XxQo+QUj305IFxYiaDtWvhGfLyZQFcnSLCPDjpERk64=)
7: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: kd/9spe/o+bDbPVrkIMRDzSqrdnOeEarp6SCzpAAFBA=)
8: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: RaDvqbQpfLLb/dtrakTSbpiJKcS+OXOV5EoJAMjCew4=)
9: 4A27AA70305B11F08E81A33BC4F9AE02.roa (hash: qzfl+Dr8Jhg7AA1ZKFSwkFzl0gx3OGghCATWZeWsNuQ=)
10: E2F3761026F711F1AF0DDFE09A833773.roa (hash: 9mAX4kjHaAPlJxVFKJY1GttpyULtZu2j1Zdo2ye7gQk=)
11: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: +3hQasWjCag/cMHiyoXiUBni3g6BDychTfyDRlqefpQ=)
12: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: TavBer1uC8d5wuGGEXEnQan18tz5toD/VuJdhW827CY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1195 (0x4ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Validity
Not Before: Jul 23 01:30:22 2026 GMT
Not After : Jul 30 01:30:22 2026 GMT
Subject: CN=6a616eaf-92e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:f5:e0:6a:a3:a5:05:b0:da:6e:8b:37:55:
bc:65:52:2b:7d:d8:2a:72:56:4f:54:cd:48:ea:5e:
ef:b4:e1:fb:30:18:e6:6e:b1:cf:36:1a:b5:dc:e7:
43:b2:b9:96:3c:89:7d:de:d6:e5:bd:bb:44:9b:fc:
b3:db:17:0f:87:81:79:ab:a2:d0:97:47:c7:a3:84:
99:4d:93:4c:e4:7c:58:28:59:d7:4c:f1:c5:f5:57:
67:63:2b:85:77:5a:cb:a1:98:c7:41:30:63:e3:3b:
f3:93:d2:1f:13:c9:db:7a:f9:67:3e:1e:fa:08:a7:
33:c2:3c:4e:90:5a:8e:21:7f:92:00:28:07:d3:c8:
56:37:b9:2d:a8:8a:c2:96:63:20:a9:c8:66:cc:7d:
70:75:29:42:06:5b:d3:47:e4:e0:1e:48:f6:3e:ad:
12:94:20:ea:56:63:74:e3:57:fe:92:1b:d6:8e:a1:
a9:df:b1:e8:eb:77:4d:f1:df:ad:e4:b2:ea:fb:ff:
27:3f:81:71:89:23:6a:8f:75:85:d3:01:54:15:5b:
17:6b:ed:e5:80:73:3d:ae:22:d3:20:eb:14:1f:56:
7a:82:53:81:b5:46:de:5c:3b:d2:25:92:cd:29:d2:
08:8f:75:f7:b9:20:b6:0b:66:96:dd:b0:b1:2e:f3:
37:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F8:91:EE:13:74:F2:ED:26:FD:D8:AC:A4:2C:CB:54:B4:E2:1E:8A
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:52:56:0b:3b:58:dd:34:b2:4f:54:90:4a:b0:e5:7a:51:19:
46:59:94:e9:49:aa:3b:4e:fc:b7:82:40:95:2a:5e:30:c1:cc:
bf:24:5d:b4:f5:44:b9:af:3b:0b:c6:b5:cc:1a:00:08:38:05:
c1:78:93:45:9b:44:62:5e:f2:8b:56:5f:6f:82:86:a4:d2:17:
8e:44:99:eb:e7:65:4a:b8:c4:55:05:a4:5c:80:c9:5e:eb:70:
04:17:d2:28:18:3f:42:fc:4d:8f:13:3c:00:c4:a3:68:96:56:
18:d0:ab:94:19:65:a0:ac:5f:20:71:4e:1c:c2:cf:e0:dd:19:
a0:db:88:7c:c7:64:cb:02:1c:3d:91:d0:2d:c9:dd:ca:86:95:
cd:81:49:c3:6b:40:f2:86:5d:43:80:19:76:5f:b7:ba:0c:ad:
d8:e0:b4:1c:7f:d0:e9:43:93:4a:4a:f2:0b:a6:95:f7:e8:95:
5c:86:fd:fb:52:a1:37:94:a6:2e:35:3f:5d:7c:74:c7:94:5f:
77:7b:d9:0e:15:bb:34:70:79:77:d4:3b:a9:fd:ef:7a:f9:3e:
aa:f3:df:29:33:25:b5:20:ec:8d:ee:8c:38:81:78:2e:8d:7f:
ba:ca:c3:0d:3c:32:d4:75:90:de:63:a4:4e:f0:3a:93:fb:dc:
f2:43:7f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:03:42 2026 by rpki-client