
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
File: EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json)
Hash identifier: vCq81b6mUe73NpwKiVQxOeGarWo6cRPVez4RL741tLA=
Subject key identifier: 0F:F6:2B:70:07:DC:CC:B4:A2:73:F9:40:37:4F:AA:7B:F2:E7:CB:68
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 04DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
Manifest number: 0459
Signing time: Sun 25 Oct 2026 00:22:52 +0000
Manifest this update: Sun 25 Oct 2026 00:22:51 +0000
Manifest next update: Sun 01 Nov 2026 00:22:51 +0000
Files and hashes: 1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: Q5MNEUweNVXCgKJkeDYSckgBrUh/JITvtF44qsTBHw4=)
2: 79186F1A039911F1BC7C88883B3D8C67.roa (hash: XxQo+QUj305IFxYiaDtWvhGfLyZQFcnSLCPDjpERk64=)
3: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: +3hQasWjCag/cMHiyoXiUBni3g6BDychTfyDRlqefpQ=)
4: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: d4fCzVRQrmt7gVdT0BQOi8hkz5v4FssHLuEAHna+Ml0=)
5: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: RaDvqbQpfLLb/dtrakTSbpiJKcS+OXOV5EoJAMjCew4=)
6: E2F3761026F711F1AF0DDFE09A833773.roa (hash: 9mAX4kjHaAPlJxVFKJY1GttpyULtZu2j1Zdo2ye7gQk=)
7: 78227BC8039911F1BC7C88883B3D8C67.roa (hash: iM0nSeXUrRmjFQctzMvPvZvPKZ9mt4uMDeOC6/UQnj4=)
8: 4A27AA70305B11F08E81A33BC4F9AE02.roa (hash: qzfl+Dr8Jhg7AA1ZKFSwkFzl0gx3OGghCATWZeWsNuQ=)
9: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: TavBer1uC8d5wuGGEXEnQan18tz5toD/VuJdhW827CY=)
10: 7CCE329266F711EF86880681C4F9AE02.roa (hash: aF3QJ0sOT0ZgMnSTdugaLAaBNbh1tfWZzQ4lccA0DY8=)
11: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: kd/9spe/o+bDbPVrkIMRDzSqrdnOeEarp6SCzpAAFBA=)
12: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: dmNt7Pa0p+rlb/NRYgL66whyumuc4SkL/FOCyj/7zDU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 00:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1243 (0x4db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Validity
Not Before: Oct 25 00:22:51 2026 GMT
Not After : Nov 1 00:22:51 2026 GMT
Subject: CN=6add4bdb-9b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:89:6c:0e:50:37:a7:19:c6:8c:9b:78:eb:27:
53:de:5b:bb:de:95:49:fc:08:f3:57:02:cb:42:15:
8a:c4:bc:10:28:3d:a5:b4:2e:c7:56:91:08:b5:eb:
31:c3:44:35:aa:49:4d:c4:5f:ff:c1:80:12:82:ee:
91:95:5a:f5:62:91:2e:5b:9c:43:26:31:ce:31:71:
b5:86:16:47:22:6b:f7:a4:14:8d:c4:05:15:64:21:
4b:d2:e6:72:3b:8d:58:9f:52:89:af:36:50:2e:7d:
94:72:23:eb:0a:6b:46:92:fa:66:54:79:54:79:c5:
12:e3:24:6b:1b:48:a4:f8:24:a3:b8:a7:bf:4c:17:
16:ce:64:ac:6f:5d:73:a4:12:94:ab:ee:ef:91:06:
ff:b1:23:7c:f5:df:0f:68:f3:40:c7:1b:28:cf:4f:
02:94:c7:54:cc:0f:2a:1e:d1:1f:41:f8:f2:1e:f3:
89:9b:e7:7a:ae:f2:a7:49:51:e9:7f:45:48:b7:a4:
a2:1a:bd:0c:aa:0f:41:31:83:c8:18:59:a4:ff:58:
5b:1e:48:4f:de:24:3f:0c:db:2b:88:38:76:55:e6:
0b:0d:98:6e:40:f6:d5:1a:dd:50:b8:98:a0:6e:d4:
c8:b4:f2:9f:08:b6:c0:65:35:30:ab:7b:73:03:3c:
2b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F6:2B:70:07:DC:CC:B4:A2:73:F9:40:37:4F:AA:7B:F2:E7:CB:68
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:6f:a0:93:23:8b:76:74:64:23:29:54:4d:91:f4:03:63:32:
63:08:5a:a6:b3:38:da:13:48:8c:05:21:65:93:c2:09:d6:50:
18:dd:d3:91:15:d9:11:1e:f5:ee:4b:f5:38:63:86:50:aa:c4:
11:60:27:69:04:60:4d:8c:a4:ad:31:12:c8:78:39:48:27:30:
c1:93:94:7f:da:d7:3e:b8:5f:98:5c:82:83:ef:64:74:03:84:
0b:85:f6:8a:59:62:ac:5e:d6:6f:cc:cb:99:8b:de:2a:ff:c8:
e2:a8:81:64:f1:63:f8:ec:67:31:9c:a6:4c:b0:88:b2:72:44:
1f:f3:28:65:3c:d6:59:3c:31:6a:2a:9c:86:55:c6:56:54:b0:
74:bb:9c:4b:06:bf:76:11:e7:e9:22:ea:fb:97:cf:c6:83:76:
51:16:ea:03:80:d5:52:19:43:bc:a6:d2:31:34:9d:3c:66:b3:
57:a1:e4:e7:76:e9:2e:8b:91:c4:43:1f:f4:bb:e2:97:71:67:
50:9a:89:5c:8f:27:56:a3:be:3c:2b:07:5a:4c:3f:fa:c1:70:
d7:32:77:b6:74:7d:ab:8c:0d:4a:58:cf:81:bd:34:de:27:b0:
0e:4f:af:1c:45:80:19:f0:32:b9:a6:fe:33:b9:db:91:d3:16:
4a:f4:a5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:33:20 2026 by rpki-client