
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
File: EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json)
Hash identifier: 4AbjFa+4zb2w3CQeC9IId6w5DTj9D8egGsY2cPUE0mY=
Subject key identifier: 5C:64:0C:0D:1E:B9:60:F2:E4:6B:C4:5E:E6:0C:AE:93:A9:FE:8A:2D
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 04AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
Manifest number: 042A
Signing time: Sat 25 Jul 2026 01:34:13 +0000
Manifest this update: Sat 25 Jul 2026 01:34:13 +0000
Manifest next update: Sat 01 Aug 2026 01:34:13 +0000
Files and hashes: 1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: ogV1IP9CjChmntZSQ+hqiJUgWZN0GqN83WOkSYIPmvc=)
2: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: TavBer1uC8d5wuGGEXEnQan18tz5toD/VuJdhW827CY=)
3: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: RaDvqbQpfLLb/dtrakTSbpiJKcS+OXOV5EoJAMjCew4=)
4: E2F3761026F711F1AF0DDFE09A833773.roa (hash: 9mAX4kjHaAPlJxVFKJY1GttpyULtZu2j1Zdo2ye7gQk=)
5: 79186F1A039911F1BC7C88883B3D8C67.roa (hash: XxQo+QUj305IFxYiaDtWvhGfLyZQFcnSLCPDjpERk64=)
6: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: +3hQasWjCag/cMHiyoXiUBni3g6BDychTfyDRlqefpQ=)
7: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: d4fCzVRQrmt7gVdT0BQOi8hkz5v4FssHLuEAHna+Ml0=)
8: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: dmNt7Pa0p+rlb/NRYgL66whyumuc4SkL/FOCyj/7zDU=)
9: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: kd/9spe/o+bDbPVrkIMRDzSqrdnOeEarp6SCzpAAFBA=)
10: 78227BC8039911F1BC7C88883B3D8C67.roa (hash: iM0nSeXUrRmjFQctzMvPvZvPKZ9mt4uMDeOC6/UQnj4=)
11: 4A27AA70305B11F08E81A33BC4F9AE02.roa (hash: qzfl+Dr8Jhg7AA1ZKFSwkFzl0gx3OGghCATWZeWsNuQ=)
12: 7CCE329266F711EF86880681C4F9AE02.roa (hash: aF3QJ0sOT0ZgMnSTdugaLAaBNbh1tfWZzQ4lccA0DY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Aug 2026 01:34:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1196 (0x4ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Validity
Not Before: Jul 25 01:34:13 2026 GMT
Not After : Aug 1 01:34:13 2026 GMT
Subject: CN=6a641295-6d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ff:89:28:d6:47:b0:26:5d:0b:64:12:b2:46:
c7:4e:86:79:98:c5:65:78:79:fe:25:68:73:57:aa:
83:18:ca:ae:bf:bd:03:ab:33:27:8c:7f:57:c6:61:
c0:ef:59:6c:ff:1e:9d:3d:35:16:db:4b:70:de:9e:
19:f9:e0:c3:7e:95:ec:90:cf:f9:75:c8:4b:47:76:
6c:44:1e:e0:ef:77:75:0f:ae:db:b8:ed:02:33:67:
04:21:f7:c4:c5:0d:bd:e2:ba:41:27:4e:25:a1:25:
d8:be:37:5c:b4:89:1a:9f:57:e2:14:1f:54:19:b5:
c1:da:4d:a6:4c:3b:65:66:99:da:f5:57:26:65:8c:
93:b5:3f:d2:1a:6e:a4:bd:18:54:e9:f1:f8:cc:74:
b7:00:86:c9:a1:10:2e:ea:65:ef:c3:90:85:b3:99:
e9:54:be:1a:f7:95:29:f5:a5:b8:f2:fa:9a:fc:db:
66:91:d7:00:4a:fe:6b:44:e8:ff:93:ba:1e:f3:57:
64:c8:a9:0a:b7:44:87:de:13:23:4b:3b:e5:64:00:
fe:91:56:81:12:42:65:df:45:90:7f:ce:2c:ec:64:
c3:8c:66:5d:55:6e:52:b0:ed:bd:e7:8f:f9:3b:9c:
f3:1a:48:f6:01:2c:37:c0:61:17:7a:cb:cf:76:3c:
e0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:64:0C:0D:1E:B9:60:F2:E4:6B:C4:5E:E6:0C:AE:93:A9:FE:8A:2D
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:12:33:58:63:35:9c:20:a1:7e:41:bf:96:ac:fb:95:60:b9:
15:2a:60:b9:e6:4a:85:33:e8:25:97:f1:86:42:16:a0:9c:da:
29:c4:b7:af:50:ed:c1:05:4d:f1:c2:b0:7d:2f:b0:b8:ec:b6:
a2:6c:6b:3b:8f:22:ce:4c:5f:5c:03:81:ac:77:e5:1d:ea:bd:
04:69:78:a8:df:50:78:cf:3a:44:de:c9:5c:79:ec:cc:92:75:
c3:6a:d2:cc:d3:eb:f7:6e:14:fa:31:00:04:21:b7:79:b7:d9:
ac:9b:7f:ca:b3:08:23:db:12:df:2f:cb:0a:80:1f:a2:91:aa:
86:2d:21:c7:d3:c3:c9:57:cf:5b:26:8a:fd:58:9b:2f:0b:63:
de:e7:e1:c5:93:40:8c:4d:54:6b:88:4e:29:3f:4e:88:17:25:
2f:9d:c9:68:4a:1a:e4:7d:a3:9c:04:c6:a2:b4:ab:92:e0:4b:
64:fe:d3:89:ae:9e:05:69:d3:09:59:1e:d9:27:54:90:31:a1:
8e:14:80:47:a0:9b:f5:14:90:42:a5:bd:d8:b8:47:84:3e:74:
e7:9e:1d:e5:3c:5c:11:f9:1e:88:08:71:10:91:36:b7:62:88:
9a:0c:20:89:11:72:a4:ad:c6:71:73:42:3f:d8:6f:36:c0:03:
10:45:33:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 08:33:19 2026 by rpki-client