$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft File: EK5_oM-c-qh-uthEzYxCasHDpec.mft (raw, json) Hash identifier: NkHL9uO8WhpKtdVQjR3nvYXEQZVMEV2efN122eLkFHg= Subject key identifier: 81:07:02:80:B5:76:E4:4D:E7:73:0F:AE:09:73:C5:AE:83:EE:7D:A6 Authority key identifier: 10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7 Certificate issuer: /CN=A9123BFF/serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7 Certificate serial: 20C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft Manifest number: 20BE Signing time: Tue 04 Nov 2025 16:03:15 +0000 Manifest this update: Tue 04 Nov 2025 16:03:15 +0000 Manifest next update: Tue 11 Nov 2025 16:03:15 +0000 Files and hashes: 1: EK5_oM-c-qh-uthEzYxCasHDpec.crl (hash: 1sxeRtiuDboZW02BSQpukXmFawNZLvqAb4nXJBTgp/k=) 2: 449C08948D1211EBB9548186C4F9AE02.roa (hash: 4cmAc73Ya3K4uXCXYcHrxMilUHhYgfgcQY7RcTrdD4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8390 (0x20c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123BFF, serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7 Validity Not Before: Nov 4 16:03:15 2025 GMT Not After : Nov 11 16:03:15 2025 GMT Subject: CN=690a23c3-324a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d0:b1:b1:1b:ea:c1:f7:79:0f:f4:36:27:2d: 30:58:9f:a9:bb:23:77:59:5f:ba:e1:af:7b:bc:63: 97:1a:38:b3:df:de:70:fa:76:aa:27:5c:84:6e:b2: e1:5f:f6:5a:8c:c4:c0:12:4e:0e:e0:6a:6b:ab:0a: 83:a0:ef:30:1a:21:3a:d0:95:7d:63:ce:a3:cb:7c: 39:11:2c:91:cd:76:89:21:bd:0b:f7:e9:a1:01:36: e0:71:dc:3e:51:bd:93:bb:be:5f:f9:7f:c8:12:f0: b8:36:c7:06:8a:f4:30:43:27:d5:bf:9e:b3:78:c0: 54:6c:ff:48:16:95:9e:5c:24:e0:77:04:3c:ee:cd: 0b:b8:f4:b5:63:01:d6:44:95:d8:5f:ff:2a:a1:df: cb:5a:09:da:8f:39:6d:38:ac:dc:f4:16:f3:27:07: 5f:ab:a8:ac:af:70:6b:65:6f:e5:3e:4c:c4:8a:a9: 68:d9:0d:e3:ee:dc:67:58:70:4e:0f:75:14:ec:08: c4:c0:ab:4c:1f:93:42:55:cf:cc:35:ff:95:5b:87: 7f:51:c2:a4:60:b3:7b:11:b7:ae:51:eb:17:79:69: 56:c9:90:ea:c7:31:01:26:bd:0f:5d:15:c7:0c:08: 4d:8d:d6:c7:1c:5a:34:e3:47:14:4c:6f:e7:31:68: 79:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:07:02:80:B5:76:E4:4D:E7:73:0F:AE:09:73:C5:AE:83:EE:7D:A6 X509v3 Authority Key Identifier: keyid:10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:bd:72:a6:21:8d:cd:a8:a4:fb:87:84:8c:d2:e6:43:d6:23: c4:9a:97:00:99:0a:f8:8d:35:4f:1f:5c:0d:a9:43:8d:d4:5f: 14:42:55:44:93:4d:5e:89:86:af:03:dd:83:a1:8e:9d:57:10: 69:25:ea:be:89:8b:94:3e:16:2e:87:d8:66:cb:11:c7:70:f5: 6a:f2:db:23:08:7b:42:43:bf:61:51:8f:9c:12:85:89:83:6c: 6c:84:a6:4e:1f:49:fa:ab:00:a0:d7:4c:3b:5f:d4:35:4a:d0: cf:f2:fc:b8:c0:ea:b1:e0:92:f1:10:5c:db:09:47:9e:54:e6: 35:34:1b:c6:c2:79:7a:fc:28:bd:dd:a8:a3:43:8c:d4:f2:5a: e6:ad:32:a6:52:a9:31:ef:52:c2:34:cd:38:ce:da:b9:b7:2c: 13:91:34:be:9a:75:26:fc:2f:36:5b:4d:be:33:62:5a:eb:30: 7a:9a:eb:34:0e:46:9a:f0:1d:60:dc:bf:00:e5:89:d7:0e:dc: f8:3a:77:36:12:e0:a3:b4:95:61:6b:01:63:89:81:4c:44:04: 05:40:f5:7d:dd:06:ec:ae:37:91:be:3d:20:1f:d8:2d:71:0c: 0f:9c:d7:28:3b:5d:87:81:e2:d9:d2:67:00:1b:c3:ae:e8:28: c9:e4:04:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCRkYxMTAvBgNVBAUTKDEwQUU3RkEwQ0Y5Q0ZBQTg3RUJBRDg0NENEOEM0MjZB QzFDM0E1RTcwHhcNMjUxMTA0MTYwMzE1WhcNMjUxMTExMTYwMzE1WjAYMRYwFAYD VQQDEw02OTBhMjNjMy0zMjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNCxsRvqwfd5D/Q2Jy0wWJ+puyN3WV+64a97vGOXGjiz395w+naqJ1yEbrLh X/ZajMTAEk4O4GprqwqDoO8wGiE60JV9Y86jy3w5ESyRzXaJIb0L9+mhATbgcdw+ Ub2Tu75f+X/IEvC4NscGivQwQyfVv56zeMBUbP9IFpWeXCTgdwQ87s0LuPS1YwHW RJXYX/8qod/LWgnajzltOKzc9BbzJwdfq6isr3BrZW/lPkzEiqlo2Q3j7txnWHBO D3UU7AjEwKtMH5NCVc/MNf+VW4d/UcKkYLN7EbeuUesXeWlWyZDqxzEBJr0PXRXH DAhNjdbHHFo040cUTG/nMWh5/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEHAoC1 duRN53MPrglzxa6D7n2mMB8GA1UdIwQYMBaAFBCuf6DPnPqofrrYRM2MQmrBw6Xn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0JGRi9GMjkwODI5QTEw REExMUU2ODVDNEJCM0RDNEY5QUUwMi9FSzVfb00tYy1xaC11dGhFell4Q2FzSERw ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VLNV9vTS1jLXFoLXV0aEV6WXhDYXNIRHBlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0JGRi9GMjkwODI5QTEwREExMUU2ODVDNEJCM0RDNEY5QUUwMi9FSzVfb00tYy1x aC11dGhFell4Q2FzSERwZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdvXKmIY3NqKT7h4SM0uZD1iPEmpcAmQr4jTVPH1wNqUON1F8UQlVE k01eiYavA92DoY6dVxBpJeq+iYuUPhYuh9hmyxHHcPVq8tsjCHtCQ79hUY+cEoWJ g2xshKZOH0n6qwCg10w7X9Q1StDP8vy4wOqx4JLxEFzbCUeeVOY1NBvGwnl6/Ci9 3aijQ4zU8lrmrTKmUqkx71LCNM04ztq5tywTkTS+mnUm/C82W02+M2Ja6zB6mus0 Dkaa8B1g3L8A5YnXDtz4Onc2EuCjtJVhawFjiYFMRAQFQPV93QbsrjeRvj0gH9gt cQwPnNcoO12HgeLZ0mcAG8Ou6CjJ5AR9 -----END CERTIFICATE-----Generated at Wed Nov 5 19:45:02 2025 by rpki-client