$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft File: EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json) Hash identifier: cNMFBtHukeLYhtzwUXfnD3H+//uWn7uu3+LF+hkDd48= Subject key identifier: AD:27:A8:AC:39:E5:4A:8A:2A:BC:21:23:33:08:53:1E:6A:6F:99:7D Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 04C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft Manifest number: 0441 Signing time: Mon 07 Sep 2026 00:11:06 +0000 Manifest this update: Mon 07 Sep 2026 00:11:06 +0000 Manifest next update: Mon 14 Sep 2026 00:11:06 +0000 Files and hashes: 1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: eHWLJTuT20r5bOX5lNYUaJIHVFbjtTD30RBzoo2LzTQ=) 2: 78227BC8039911F1BC7C88883B3D8C67.roa (hash: iM0nSeXUrRmjFQctzMvPvZvPKZ9mt4uMDeOC6/UQnj4=) 3: 4A27AA70305B11F08E81A33BC4F9AE02.roa (hash: qzfl+Dr8Jhg7AA1ZKFSwkFzl0gx3OGghCATWZeWsNuQ=) 4: 79186F1A039911F1BC7C88883B3D8C67.roa (hash: XxQo+QUj305IFxYiaDtWvhGfLyZQFcnSLCPDjpERk64=) 5: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: +3hQasWjCag/cMHiyoXiUBni3g6BDychTfyDRlqefpQ=) 6: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: TavBer1uC8d5wuGGEXEnQan18tz5toD/VuJdhW827CY=) 7: 7CCE329266F711EF86880681C4F9AE02.roa (hash: aF3QJ0sOT0ZgMnSTdugaLAaBNbh1tfWZzQ4lccA0DY8=) 8: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: RaDvqbQpfLLb/dtrakTSbpiJKcS+OXOV5EoJAMjCew4=) 9: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: kd/9spe/o+bDbPVrkIMRDzSqrdnOeEarp6SCzpAAFBA=) 10: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: dmNt7Pa0p+rlb/NRYgL66whyumuc4SkL/FOCyj/7zDU=) 11: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: d4fCzVRQrmt7gVdT0BQOi8hkz5v4FssHLuEAHna+Ml0=) 12: E2F3761026F711F1AF0DDFE09A833773.roa (hash: 9mAX4kjHaAPlJxVFKJY1GttpyULtZu2j1Zdo2ye7gQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Sep 2026 00:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1219 (0x4c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: Sep 7 00:11:06 2026 GMT Not After : Sep 14 00:11:06 2026 GMT Subject: CN=6a9e011a-b668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:37:b8:c1:39:dd:fa:27:2b:6d:06:98:06:e6: 6c:13:9d:0a:2b:2e:7d:97:1a:62:04:ff:a3:91:eb: c1:89:62:be:9e:32:54:7e:3d:a4:f5:97:ae:d1:31: 16:ae:3f:39:78:0c:be:93:0a:1a:e8:32:e2:dd:ac: 19:8d:76:16:12:29:bb:27:7a:b9:21:d0:5f:1b:9a: 40:2a:41:02:60:e3:37:92:7c:c7:fc:ed:f1:43:ec: 33:44:b7:62:e8:9f:b5:40:14:b0:78:3c:b0:ce:4a: e6:73:19:00:84:95:75:56:dc:e0:c4:9e:1f:ca:89: cc:39:2a:7c:dd:d1:7a:7f:c5:21:0b:5a:48:59:96: 62:b1:e4:a0:56:6e:0f:89:4c:6f:f4:54:28:24:15: ed:73:7a:55:7d:ea:4f:6f:d0:b1:a9:b8:a7:16:ef: 1e:20:70:e9:b7:f9:57:1f:34:ca:96:98:78:20:37: 1b:6a:d4:02:31:c7:0b:ed:6d:a4:f9:7b:b5:7d:48: ec:1b:50:32:0b:a6:d2:d2:b5:30:6c:b0:88:09:17: e5:65:7f:bf:a2:96:89:b6:9b:cb:6a:a3:82:20:b5: 33:1f:e7:55:3d:9c:51:25:df:20:71:33:9d:2f:38: c4:46:2c:3f:67:b9:4c:73:41:6d:28:d7:7f:71:90: 02:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:27:A8:AC:39:E5:4A:8A:2A:BC:21:23:33:08:53:1E:6A:6F:99:7D X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:fd:71:b1:90:9e:db:1a:20:2e:15:e3:a7:5b:51:6f:b4:a7: d1:59:ba:f5:bd:02:cc:4a:6b:5d:9e:73:52:a6:44:90:9a:8b: f1:ab:f7:83:3e:22:11:5b:4f:1a:e5:8c:f1:cd:47:ee:ac:63: 1e:7c:b5:81:3c:e1:43:bf:42:a9:cc:f2:c5:25:64:ef:a7:47: ac:46:3a:f9:a9:cb:95:18:13:1d:5a:39:2d:5c:43:97:f4:3d: 39:2d:81:d8:ca:3b:f0:a5:aa:7b:15:e9:ce:97:20:51:de:d6: a8:46:65:86:ea:30:bb:23:99:04:3c:48:48:c0:7e:eb:60:4b: e7:4e:e5:59:66:08:b1:50:73:e4:fd:ac:12:cd:b7:8c:81:98: 7e:61:1a:01:ad:5f:56:14:5d:41:7f:63:c2:47:34:15:4e:6b: a8:8e:40:b1:27:04:3a:ac:5a:98:13:9d:02:78:83:90:f0:bf: bc:c3:de:e0:e7:bd:2e:6c:4b:ec:e0:a7:29:41:4d:b0:ec:57: e2:47:98:be:e0:f1:43:1c:63:39:9a:f7:50:e7:5f:a8:de:c0: 59:43:e3:c6:61:33:ba:51:d4:5c:94:20:fd:c2:f4:e2:87:ce: 70:29:1b:99:23:f0:93:55:e7:1c:25:42:73:04:4b:12:49:a0: cf:2c:d2:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjYwOTA3MDAxMTA2WhcNMjYwOTE0MDAxMTA2WjAYMRYwFAYD VQQDEw02YTllMDExYS1iNjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0De4wTnd+icrbQaYBuZsE50KKy59lxpiBP+jkevBiWK+njJUfj2k9Zeu0TEW rj85eAy+kwoa6DLi3awZjXYWEim7J3q5IdBfG5pAKkECYOM3knzH/O3xQ+wzRLdi 6J+1QBSweDywzkrmcxkAhJV1VtzgxJ4fyonMOSp83dF6f8UhC1pIWZZiseSgVm4P iUxv9FQoJBXtc3pVfepPb9CxqbinFu8eIHDpt/lXHzTKlph4IDcbatQCMccL7W2k +Xu1fUjsG1AyC6bS0rUwbLCICRflZX+/opaJtpvLaqOCILUzH+dVPZxRJd8gcTOd LzjERiw/Z7lMc0FtKNd/cZACIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK0nqKw5 5UqKKrwhIzMIUx5qb5l9MB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEFGMi83M0M4ODc5MkUwNjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01Q dXByZFBTZjRYYU9QRS1RWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKP1xsZCe2xogLhXjp1tRb7Sn0Vm69b0CzEprXZ5zUqZEkJqL8av3gz4iEVtP GuWM8c1H7qxjHny1gTzhQ79CqczyxSVk76dHrEY6+anLlRgTHVo5LVxDl/Q9OS2B 2Mo78KWqexXpzpcgUd7WqEZlhuowuyOZBDxISMB+62BL507lWWYIsVBz5P2sEs23 jIGYfmEaAa1fVhRdQX9jwkc0FU5rqI5AsScEOqxamBOdAniDkPC/vMPe4Oe9LmxL 7OCnKUFNsOxX4keYvuDxQxxjOZr3UOdfqN7AWUPjxmEzulHUXJQg/cL04ofOcCkb mSPwk1XnHCVCcwRLEkmgzyzSPw== -----END CERTIFICATE-----Generated at Wed Sep 9 01:11:20 2026 by rpki-client