
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
File: EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json)
Hash identifier: 13TmpX+s921GTAUDSv3qZ5/qK3ZTJHtrgirzSr2H0uk=
Subject key identifier: FF:18:18:87:87:E6:26:90:16:27:7A:5C:2F:0E:78:99:00:F6:52:FB
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 0495
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
Manifest number: 0413
Signing time: Tue 09 Jun 2026 00:46:04 +0000
Manifest this update: Tue 09 Jun 2026 00:46:04 +0000
Manifest next update: Tue 16 Jun 2026 00:46:04 +0000
Files and hashes: 1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: fTjBgzqkrmZ06k5OHL9zLcRlIbiCImFjsN6Z3EvPmsY=)
2: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: TavBer1uC8d5wuGGEXEnQan18tz5toD/VuJdhW827CY=)
3: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: kd/9spe/o+bDbPVrkIMRDzSqrdnOeEarp6SCzpAAFBA=)
4: 7CCE329266F711EF86880681C4F9AE02.roa (hash: aF3QJ0sOT0ZgMnSTdugaLAaBNbh1tfWZzQ4lccA0DY8=)
5: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: d4fCzVRQrmt7gVdT0BQOi8hkz5v4FssHLuEAHna+Ml0=)
6: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: RaDvqbQpfLLb/dtrakTSbpiJKcS+OXOV5EoJAMjCew4=)
7: E2F3761026F711F1AF0DDFE09A833773.roa (hash: 9mAX4kjHaAPlJxVFKJY1GttpyULtZu2j1Zdo2ye7gQk=)
8: 78227BC8039911F1BC7C88883B3D8C67.roa (hash: iM0nSeXUrRmjFQctzMvPvZvPKZ9mt4uMDeOC6/UQnj4=)
9: 79186F1A039911F1BC7C88883B3D8C67.roa (hash: XxQo+QUj305IFxYiaDtWvhGfLyZQFcnSLCPDjpERk64=)
10: 4A27AA70305B11F08E81A33BC4F9AE02.roa (hash: qzfl+Dr8Jhg7AA1ZKFSwkFzl0gx3OGghCATWZeWsNuQ=)
11: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: dmNt7Pa0p+rlb/NRYgL66whyumuc4SkL/FOCyj/7zDU=)
12: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: +3hQasWjCag/cMHiyoXiUBni3g6BDychTfyDRlqefpQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Jun 2026 00:46:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1173 (0x495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Validity
Not Before: Jun 9 00:46:04 2026 GMT
Not After : Jun 16 00:46:04 2026 GMT
Subject: CN=6a27624c-1a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:d3:f7:cf:98:5f:9f:d2:69:27:9a:16:10:
f1:91:20:ed:da:e5:b1:28:e7:68:6a:03:b1:5c:d0:
bd:d6:4a:f1:2a:69:e5:c6:f7:43:d5:e5:4c:eb:9f:
06:62:25:ed:74:b9:03:bc:c5:2a:57:02:19:7e:96:
54:0f:ec:98:59:77:6b:22:44:e0:14:88:bd:71:7d:
3a:aa:a9:16:bf:b4:9b:6c:e6:a7:5b:69:d2:09:0f:
40:13:6d:ec:ea:bb:2f:c2:6b:56:79:b8:10:70:1d:
e1:de:7b:c7:42:ee:af:b2:65:e6:2b:71:4a:ab:50:
7c:de:54:97:a4:17:f7:c3:c7:64:30:64:81:5e:4d:
b1:1d:69:a1:b5:cd:02:e7:5f:f1:66:c9:f9:84:79:
52:3d:60:f0:82:37:aa:26:05:6b:71:00:8d:8d:62:
39:21:b8:6b:73:f3:18:4e:c5:b9:a0:71:a6:f6:fe:
c5:a0:84:67:68:26:01:69:61:f1:a5:ac:f5:27:57:
d4:c9:e9:bf:53:f1:03:ea:40:fd:58:c2:52:24:9e:
55:44:f1:f6:64:3a:65:5d:67:01:3e:a7:6a:88:88:
01:5b:d4:31:e7:54:76:d7:5c:a4:b5:63:6a:6e:14:
9f:8d:b6:e5:30:a4:b3:04:31:3b:15:74:a4:5f:09:
68:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:18:18:87:87:E6:26:90:16:27:7A:5C:2F:0E:78:99:00:F6:52:FB
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:41:7d:d4:42:52:dc:11:47:cf:80:85:78:06:52:df:76:02:
37:0c:60:2a:0d:a6:52:d4:07:5f:b9:e7:16:9c:86:88:33:8b:
19:85:5d:15:c4:ef:b1:30:dd:2f:15:b1:db:98:c4:fc:60:9a:
09:ca:25:d4:c0:2c:4a:cc:75:35:de:79:55:22:9e:eb:22:42:
96:15:a4:6d:cd:35:68:00:95:1f:34:0b:d8:71:45:d7:ac:c7:
89:83:6f:4f:68:66:12:6b:f2:56:d8:97:1b:ba:aa:d4:0c:bd:
55:36:5a:0c:ec:71:79:e6:44:a4:f3:05:06:12:be:3e:08:d6:
93:ed:3b:0f:3b:b0:bd:bc:6c:f3:87:f5:45:58:db:06:fe:ad:
4e:6f:bd:b2:d0:65:34:33:e8:81:eb:0a:9b:ea:89:5a:db:b5:
49:ce:2b:ff:7f:d1:12:1b:f0:b9:c0:32:ef:04:c2:8c:2a:d4:
0e:ad:28:50:2f:ea:7c:fd:bb:a9:f9:4d:9f:0e:6a:b4:66:45:
23:26:66:68:ea:75:98:b8:b6:4a:b0:12:80:9b:8f:ad:2c:21:
bf:62:f2:d8:4e:42:a9:c7:0a:b8:6f:82:c2:56:ba:99:1e:fd:
b0:5f:80:6c:7a:49:df:37:b3:e3:85:db:ce:5b:df:34:ee:82:
7c:7a:85:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 09:22:04 2026 by rpki-client