$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft File: EK5_oM-c-qh-uthEzYxCasHDpec.mft (raw, json) Hash identifier: W7oxS4/UPoovCVAMbIZGKhtPDJRvGNq8FTqvAdAKcuE= Subject key identifier: D2:52:35:13:86:1A:A1:76:8D:BC:43:BE:DF:72:27:67:89:51:89:B5 Authority key identifier: 10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7 Certificate issuer: /CN=A9123BFF/serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7 Certificate serial: 208F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft Manifest number: 2087 Signing time: Sun 20 Jul 2025 15:59:13 +0000 Manifest this update: Sun 20 Jul 2025 15:59:13 +0000 Manifest next update: Sun 27 Jul 2025 15:59:13 +0000 Files and hashes: 1: EK5_oM-c-qh-uthEzYxCasHDpec.crl (hash: PaF9A3lB/XqIC6soSoGdbjgkzd9fPU8zNjNLck1rwMA=) 2: 449C08948D1211EBB9548186C4F9AE02.roa (hash: 4cmAc73Ya3K4uXCXYcHrxMilUHhYgfgcQY7RcTrdD4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8335 (0x208f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123BFF, serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7 Validity Not Before: Jul 20 15:59:13 2025 GMT Not After : Jul 27 15:59:13 2025 GMT Subject: CN=687d1251-0be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8c:c7:6d:dd:d9:7d:01:d8:19:d5:3b:c2:1e: 0b:1f:cd:59:74:b1:64:c1:4d:ee:2b:0b:46:45:c6: c2:d4:f1:16:70:f3:f3:b6:ff:a9:0c:b6:ff:16:51: 24:a1:4d:b4:13:23:da:60:be:37:33:35:88:ca:df: 5f:95:6b:6f:7d:82:6e:29:ce:dc:22:32:1f:c6:9e: 15:c3:73:3a:69:61:6f:4a:83:cf:af:f0:32:93:fb: 72:cc:9f:41:af:72:fe:11:c1:90:b6:ef:c1:e4:b3: d2:ad:74:bb:e7:0f:6e:4c:26:7f:1c:3e:ac:d8:77: e9:ba:c9:37:a1:59:85:9a:ab:fe:70:e1:b5:f3:5a: 3a:8a:81:e5:b5:1e:9e:b5:5c:fb:61:1b:5b:19:d4: df:1d:86:9d:2d:47:dc:6e:09:e9:e9:50:9b:b7:50: b4:07:de:73:a6:3e:60:05:c3:ae:1e:f9:cc:47:2d: 08:a6:a9:f9:59:ea:15:88:db:3b:4d:59:af:97:d2: 70:f7:2e:79:63:83:90:f9:88:43:bc:f1:3c:6e:c4: b2:84:2b:45:be:2a:6c:74:46:64:89:18:7a:3f:63: fe:63:3e:b8:81:3e:23:af:d5:02:fa:8b:9d:24:92: 7d:1f:3d:07:dc:04:e1:0b:19:33:ee:d6:60:17:f6: 3c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:52:35:13:86:1A:A1:76:8D:BC:43:BE:DF:72:27:67:89:51:89:B5 X509v3 Authority Key Identifier: keyid:10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:51:4c:90:2d:41:57:c2:85:c1:f9:e9:6a:50:ca:f3:c9:4a: 9e:0b:12:f1:ae:d3:de:85:4e:9e:ca:78:7d:5d:8d:fd:9c:d3: af:2e:69:6f:60:b5:4f:4d:95:89:6a:fd:f4:de:84:f5:75:80: b7:5d:b5:92:94:21:bf:d7:26:cd:2f:80:74:95:8e:10:bc:c7: df:c7:fc:71:47:29:ad:f7:36:1b:d3:28:97:c3:5e:9e:a5:17: b2:d5:50:c4:52:e8:16:3b:c2:e1:56:6c:6d:84:d7:5c:05:cf: cc:25:57:33:9a:28:8d:e0:72:d6:1d:72:39:69:0b:25:62:4f: ea:5b:f5:c3:17:36:54:c8:1c:32:44:48:8e:ed:bd:90:67:66: 82:12:91:aa:30:cd:f9:8b:62:5a:59:74:b0:e7:87:1f:bf:19: 93:2f:07:82:80:10:4c:85:44:48:4f:50:36:ee:8a:e4:e5:47: cc:85:d4:2f:27:83:1e:bf:98:44:b3:5d:f2:fb:a7:6d:cc:a2: 7c:f7:01:7d:99:19:d2:b3:0f:1a:39:57:0f:63:2c:f2:4c:9a: f1:28:ac:00:c7:0f:06:b6:8d:40:1b:7a:10:40:68:5d:86:7c: b2:53:24:94:ce:6f:b3:d3:f5:82:e0:86:df:cd:aa:4c:5d:bc: ae:99:1e:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICII8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCRkYxMTAvBgNVBAUTKDEwQUU3RkEwQ0Y5Q0ZBQTg3RUJBRDg0NENEOEM0MjZB QzFDM0E1RTcwHhcNMjUwNzIwMTU1OTEzWhcNMjUwNzI3MTU1OTEzWjAYMRYwFAYD VQQDEw02ODdkMTI1MS0wYmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwozHbd3ZfQHYGdU7wh4LH81ZdLFkwU3uKwtGRcbC1PEWcPPztv+pDLb/FlEk oU20EyPaYL43MzWIyt9flWtvfYJuKc7cIjIfxp4Vw3M6aWFvSoPPr/Ayk/tyzJ9B r3L+EcGQtu/B5LPSrXS75w9uTCZ/HD6s2Hfpusk3oVmFmqv+cOG181o6ioHltR6e tVz7YRtbGdTfHYadLUfcbgnp6VCbt1C0B95zpj5gBcOuHvnMRy0Ipqn5WeoViNs7 TVmvl9Jw9y55Y4OQ+YhDvPE8bsSyhCtFvipsdEZkiRh6P2P+Yz64gT4jr9UC+oud JJJ9Hz0H3AThCxkz7tZgF/Y8TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJSNROG GqF2jbxDvt9yJ2eJUYm1MB8GA1UdIwQYMBaAFBCuf6DPnPqofrrYRM2MQmrBw6Xn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0JGRi9GMjkwODI5QTEw REExMUU2ODVDNEJCM0RDNEY5QUUwMi9FSzVfb00tYy1xaC11dGhFell4Q2FzSERw ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VLNV9vTS1jLXFoLXV0aEV6WXhDYXNIRHBlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0JGRi9GMjkwODI5QTEwREExMUU2ODVDNEJCM0RDNEY5QUUwMi9FSzVfb00tYy1x aC11dGhFell4Q2FzSERwZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5UUyQLUFXwoXB+elqUMrzyUqeCxLxrtPehU6eynh9XY39nNOvLmlv YLVPTZWJav303oT1dYC3XbWSlCG/1ybNL4B0lY4QvMffx/xxRymt9zYb0yiXw16e pRey1VDEUugWO8LhVmxthNdcBc/MJVczmiiN4HLWHXI5aQslYk/qW/XDFzZUyBwy REiO7b2QZ2aCEpGqMM35i2JaWXSw54cfvxmTLweCgBBMhURIT1A27ork5UfMhdQv J4Mev5hEs13y+6dtzKJ89wF9mRnSsw8aOVcPYyzyTJrxKKwAxw8Gto1AG3oQQGhd hnyyUySUzm+z0/WC4IbfzapMXbyumR7w -----END CERTIFICATE-----Generated at Mon Jul 21 12:42:42 2025 by rpki-client