$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft File: EK5_oM-c-qh-uthEzYxCasHDpec.mft (raw, json) Hash identifier: BsVnOcm/C9Xxcnmh0+EmGTYXpuk6kyXgsVpzPrgCjP0= Subject key identifier: 76:38:9C:42:9F:27:D1:5D:D8:8A:0F:99:E9:3B:42:19:CF:78:33:40 Authority key identifier: 10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7 Certificate issuer: /CN=A9123BFF/serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7 Certificate serial: 2099 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft Manifest number: 2091 Signing time: Fri 08 Aug 2025 16:03:08 +0000 Manifest this update: Fri 08 Aug 2025 16:03:07 +0000 Manifest next update: Fri 15 Aug 2025 16:03:07 +0000 Files and hashes: 1: EK5_oM-c-qh-uthEzYxCasHDpec.crl (hash: 51uAicUnVK2QKx/6kWhHLSW4NkWYf61IsszuitgF3YY=) 2: 449C08948D1211EBB9548186C4F9AE02.roa (hash: 4cmAc73Ya3K4uXCXYcHrxMilUHhYgfgcQY7RcTrdD4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8345 (0x2099) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123BFF, serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7 Validity Not Before: Aug 8 16:03:07 2025 GMT Not After : Aug 15 16:03:07 2025 GMT Subject: CN=68961fbb-bc4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a6:34:0f:19:67:3f:49:f3:ef:76:7a:97:5b: 1f:3f:ef:fc:f9:58:d0:e7:ec:92:98:d9:1a:00:59: 5e:df:ce:05:2e:88:d0:4f:2f:b1:5f:3c:1a:8e:05: d4:8f:65:53:bb:02:82:f6:11:4a:a8:a4:67:aa:f6: bb:9b:af:63:01:f0:25:b0:17:d6:ea:6e:f8:fc:0c: 07:43:d5:5e:4f:4c:4a:25:31:64:1a:31:6f:4a:02: 48:cf:13:b6:f6:19:cf:f1:16:32:ba:46:9f:62:05: a6:88:44:c0:fa:0d:19:d9:63:d6:4d:61:7e:d6:79: ce:30:d4:36:10:d3:3a:25:98:65:38:39:7f:16:4f: 12:bd:89:4b:62:12:9b:39:bc:c0:67:a9:10:2d:d0: f0:77:b0:24:40:d1:be:ca:7f:1f:c4:fe:d9:23:e5: d0:41:89:e2:bd:e4:36:71:72:a3:c2:12:fc:78:48: ed:b2:19:f8:7d:c7:11:51:c1:b9:f9:db:73:84:5c: 05:b3:41:06:e1:39:4c:72:9b:ba:b0:18:da:1c:7a: ca:46:9f:a8:ab:f0:6d:0b:9d:90:c8:94:2e:0f:a7: 4a:00:5e:1f:ea:66:a2:af:4a:02:7c:6f:9f:f0:1c: c7:ee:26:b3:0a:35:20:72:2d:dd:83:e2:d8:33:ad: a4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:38:9C:42:9F:27:D1:5D:D8:8A:0F:99:E9:3B:42:19:CF:78:33:40 X509v3 Authority Key Identifier: keyid:10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:72:d8:54:00:dc:09:61:91:f3:cd:07:41:97:b7:37:ca:67: c3:9f:e2:f8:25:17:ff:a3:ad:00:d6:51:6e:74:34:9c:ec:19: 48:14:f8:c9:53:8c:4f:d3:4e:74:d4:87:6c:b3:9b:95:e3:66: 6c:08:32:a7:13:2b:a1:a5:72:23:d0:1c:08:a8:42:01:c4:a8: 2e:45:1e:1b:b3:5c:99:4d:bc:76:24:8e:f9:f8:a8:f3:06:f0: 38:1e:c9:22:c7:da:78:ed:8f:76:a0:47:c6:8f:a6:98:10:60: 57:9f:f5:b1:07:c1:5d:18:09:e3:bf:4b:ca:a9:37:20:9a:ec: c7:84:15:d8:8f:b4:b0:28:6c:53:fc:dd:fd:2c:ba:2c:64:69: 43:5a:6d:4d:cd:25:d3:97:4d:5c:bd:c1:c0:53:26:5c:7e:39: 7c:0f:8d:d5:bd:2d:98:b8:df:1c:80:4e:d3:62:9b:fc:29:6a: d2:bb:53:65:98:f4:5f:bd:37:3a:43:f7:bf:01:7e:f3:3c:ba: d5:70:e5:8b:83:2f:f2:15:2e:bd:df:13:29:55:fb:d2:e7:f4: fc:bc:c8:e0:1f:1b:23:9c:18:60:56:e2:0c:8a:b6:b3:a3:44: f6:46:7a:df:53:bc:4c:87:17:9c:c7:1e:3a:af:cc:7a:8c:7b: c7:44:f2:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCRkYxMTAvBgNVBAUTKDEwQUU3RkEwQ0Y5Q0ZBQTg3RUJBRDg0NENEOEM0MjZB QzFDM0E1RTcwHhcNMjUwODA4MTYwMzA3WhcNMjUwODE1MTYwMzA3WjAYMRYwFAYD VQQDEw02ODk2MWZiYi1iYzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KY0DxlnP0nz73Z6l1sfP+/8+VjQ5+ySmNkaAFle384FLojQTy+xXzwajgXU j2VTuwKC9hFKqKRnqva7m69jAfAlsBfW6m74/AwHQ9VeT0xKJTFkGjFvSgJIzxO2 9hnP8RYyukafYgWmiETA+g0Z2WPWTWF+1nnOMNQ2ENM6JZhlODl/Fk8SvYlLYhKb ObzAZ6kQLdDwd7AkQNG+yn8fxP7ZI+XQQYniveQ2cXKjwhL8eEjtshn4fccRUcG5 +dtzhFwFs0EG4TlMcpu6sBjaHHrKRp+oq/BtC52QyJQuD6dKAF4f6mair0oCfG+f 8BzH7iazCjUgci3dg+LYM62kPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHY4nEKf J9Fd2IoPmek7QhnPeDNAMB8GA1UdIwQYMBaAFBCuf6DPnPqofrrYRM2MQmrBw6Xn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0JGRi9GMjkwODI5QTEw REExMUU2ODVDNEJCM0RDNEY5QUUwMi9FSzVfb00tYy1xaC11dGhFell4Q2FzSERw ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VLNV9vTS1jLXFoLXV0aEV6WXhDYXNIRHBlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0JGRi9GMjkwODI5QTEwREExMUU2ODVDNEJCM0RDNEY5QUUwMi9FSzVfb00tYy1x aC11dGhFell4Q2FzSERwZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWcthUANwJYZHzzQdBl7c3ymfDn+L4JRf/o60A1lFudDSc7BlIFPjJ U4xP00501Idss5uV42ZsCDKnEyuhpXIj0BwIqEIBxKguRR4bs1yZTbx2JI75+Kjz BvA4Hskix9p47Y92oEfGj6aYEGBXn/WxB8FdGAnjv0vKqTcgmuzHhBXYj7SwKGxT /N39LLosZGlDWm1NzSXTl01cvcHAUyZcfjl8D43VvS2YuN8cgE7TYpv8KWrSu1Nl mPRfvTc6Q/e/AX7zPLrVcOWLgy/yFS693xMpVfvS5/T8vMjgHxsjnBhgVuIMiraz o0T2RnrfU7xMhxecxx46r8x6jHvHRPJc -----END CERTIFICATE-----Generated at Sat Aug 9 05:46:30 2025 by rpki-client