$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft File: EK5_oM-c-qh-uthEzYxCasHDpec.mft (raw, json) Hash identifier: SKO3irabm7rWJ8alXCVBVB1PvRB22bB42k0FlwhuPlo= Subject key identifier: FD:E3:BE:EE:E7:3A:34:2E:8B:43:85:5C:88:F2:3B:37:B1:B2:D4:8C Authority key identifier: 10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7 Certificate issuer: /CN=A9123BFF/serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7 Certificate serial: 2060 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft Manifest number: 2059 Signing time: Thu 24 Apr 2025 15:59:28 +0000 Manifest this update: Thu 24 Apr 2025 15:59:28 +0000 Manifest next update: Thu 01 May 2025 15:59:28 +0000 Files and hashes: 1: EK5_oM-c-qh-uthEzYxCasHDpec.crl (hash: ukvfJMMGR11TOIxpFkNXmhaOIlQ7XYI0IORfWu0KoOI=) 2: 449C08948D1211EBB9548186C4F9AE02.roa (hash: hFvoTK4OtAWXeUzfRY08E0R6vhbINiOuVhDEOiD6rEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:59:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8288 (0x2060) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123BFF, serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7 Validity Not Before: Apr 24 15:59:28 2025 GMT Not After : May 1 15:59:28 2025 GMT Subject: CN=680a5fe0-0de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:98:3d:53:06:06:06:34:7e:23:0b:84:f8:0d: 9a:b1:ed:7c:18:88:13:47:fb:da:89:82:06:16:6d: 52:86:e3:e7:24:c4:d3:b5:aa:c0:74:4f:02:6c:fc: 6d:fe:6b:cb:22:26:7f:d9:57:29:30:02:8b:91:2e: 35:bb:45:22:95:8e:42:71:18:ae:1c:7e:c0:94:f6: 72:a9:c2:35:ab:bf:71:d2:38:95:29:6a:41:15:b5: cd:35:c6:cb:8e:a1:fa:4f:18:04:2f:13:1e:c0:a3: 36:ef:5f:96:a4:93:0f:a8:ec:65:3f:a6:dd:9b:b6: d5:44:1c:ae:b3:f2:83:72:02:e5:aa:99:00:f2:28: b2:20:ce:e6:19:1f:02:69:78:60:77:40:24:6b:5a: e2:cd:65:9a:81:be:df:39:83:71:48:f8:31:8c:dc: f7:71:b7:ad:4b:54:06:8d:86:3f:2f:27:a8:30:7d: 63:d2:9f:6e:ed:ce:4b:17:fb:2f:ea:4c:60:01:f9: 1c:ab:fe:26:ef:05:86:06:b6:16:a4:4a:bf:24:c5: 86:36:67:7b:9e:39:30:0b:dc:34:16:80:f8:0f:73: 17:f8:b9:41:b5:08:80:a5:88:87:10:b6:e1:da:4b: 32:a6:b6:ce:02:1e:a3:2e:bc:44:d9:bb:a3:73:ff: 72:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E3:BE:EE:E7:3A:34:2E:8B:43:85:5C:88:F2:3B:37:B1:B2:D4:8C X509v3 Authority Key Identifier: keyid:10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:03:43:ce:7d:85:00:37:f7:78:2f:34:75:48:07:ce:b1:9f: 7d:c2:74:57:b0:0a:c5:ca:ba:cc:37:0b:77:3b:71:64:5f:7d: ca:5a:f7:a1:3a:9b:f0:b0:a9:9e:e3:36:39:98:8a:62:98:5b: 4b:6a:ce:32:c7:cb:2e:8d:dd:dd:d9:0d:f1:d2:b3:84:c6:87: 10:bf:50:cf:9b:57:e5:15:4a:03:ef:5c:b3:60:87:71:d8:f7: eb:1b:b1:be:7e:fb:aa:91:3c:2c:f0:c9:e2:61:a8:bd:9a:4c: 04:dd:cf:b8:67:4c:87:3a:45:d0:c6:bf:8f:1e:cd:83:08:83: 6a:77:cf:39:87:fd:fa:a7:b9:a1:a6:f3:8c:ae:a9:72:51:b9: 0b:4c:f4:b9:7d:71:ea:e7:da:ec:9d:af:83:b2:41:af:58:ba: 6f:85:ca:3c:f4:5f:38:5b:3e:6c:d3:ee:f7:d0:9d:89:ae:53: 0c:36:cc:98:23:bf:3f:2d:de:57:81:42:de:33:b9:5d:4d:b3: 96:53:fb:04:d2:05:47:f9:b4:a0:dc:34:56:ab:9c:72:f4:f6: 7b:17:3b:18:59:0d:03:f5:0d:4b:56:4e:54:92:49:95:5a:37: 98:89:d4:85:67:8a:8c:53:b0:cc:23:60:82:d3:11:e8:cd:02: 52:18:b6:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCRkYxMTAvBgNVBAUTKDEwQUU3RkEwQ0Y5Q0ZBQTg3RUJBRDg0NENEOEM0MjZB QzFDM0E1RTcwHhcNMjUwNDI0MTU1OTI4WhcNMjUwNTAxMTU1OTI4WjAYMRYwFAYD VQQDEw02ODBhNWZlMC0wZGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5g9UwYGBjR+IwuE+A2ase18GIgTR/vaiYIGFm1ShuPnJMTTtarAdE8CbPxt /mvLIiZ/2VcpMAKLkS41u0UilY5CcRiuHH7AlPZyqcI1q79x0jiVKWpBFbXNNcbL jqH6TxgELxMewKM271+WpJMPqOxlP6bdm7bVRByus/KDcgLlqpkA8iiyIM7mGR8C aXhgd0Aka1rizWWagb7fOYNxSPgxjNz3cbetS1QGjYY/LyeoMH1j0p9u7c5LF/sv 6kxgAfkcq/4m7wWGBrYWpEq/JMWGNmd7njkwC9w0FoD4D3MX+LlBtQiApYiHELbh 2ksyprbOAh6jLrxE2bujc/9y8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3jvu7n OjQui0OFXIjyOzexstSMMB8GA1UdIwQYMBaAFBCuf6DPnPqofrrYRM2MQmrBw6Xn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0JGRi9GMjkwODI5QTEw REExMUU2ODVDNEJCM0RDNEY5QUUwMi9FSzVfb00tYy1xaC11dGhFell4Q2FzSERw ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VLNV9vTS1jLXFoLXV0aEV6WXhDYXNIRHBlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0JGRi9GMjkwODI5QTEwREExMUU2ODVDNEJCM0RDNEY5QUUwMi9FSzVfb00tYy1x aC11dGhFell4Q2FzSERwZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEA0POfYUAN/d4LzR1SAfOsZ99wnRXsArFyrrMNwt3O3FkX33KWveh OpvwsKme4zY5mIpimFtLas4yx8sujd3d2Q3x0rOExocQv1DPm1flFUoD71yzYIdx 2PfrG7G+fvuqkTws8MniYai9mkwE3c+4Z0yHOkXQxr+PHs2DCINqd885h/36p7mh pvOMrqlyUbkLTPS5fXHq59rsna+DskGvWLpvhco89F84Wz5s0+730J2JrlMMNsyY I78/Ld5XgULeM7ldTbOWU/sE0gVH+bSg3DRWq5xy9PZ7FzsYWQ0D9Q1LVk5UkkmV WjeYidSFZ4qMU7DMI2CC0xHozQJSGLZF -----END CERTIFICATE-----Generated at Sat Apr 26 05:18:04 2025 by rpki-client