$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft File: EK5_oM-c-qh-uthEzYxCasHDpec.mft (raw, json) Hash identifier: pYeJd+VjAWJZDt3uBdNG6WZoHKsJG2R2GlMr8uJsSkY= Subject key identifier: B5:A5:83:68:34:77:64:3D:67:D7:9B:7E:47:01:3C:7C:6D:55:9B:E9 Authority key identifier: 10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7 Certificate issuer: /CN=A9123BFF/serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7 Certificate serial: 2126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft Manifest number: 211B Signing time: Tue 28 Apr 2026 15:58:42 +0000 Manifest this update: Tue 28 Apr 2026 15:58:41 +0000 Manifest next update: Tue 05 May 2026 15:58:41 +0000 Files and hashes: 1: EK5_oM-c-qh-uthEzYxCasHDpec.crl (hash: 4zjcWyzkba06BZBER6RQBupUs48UJ1veSCjFlDT/9Dc=) 2: 449C08948D1211EBB9548186C4F9AE02.roa (hash: CkrD7mjSYB1KxMhffEe1r6e55NIjcWqRcIt0BrrvQjw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 May 2026 15:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8486 (0x2126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123BFF, serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7 Validity Not Before: Apr 28 15:58:41 2026 GMT Not After : May 5 15:58:41 2026 GMT Subject: CN=69f0d932-daa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a6:9e:9e:c3:11:4c:4d:cf:90:68:e0:69:07: cd:6d:8d:a0:19:78:39:d9:89:1e:24:7c:e4:10:2c: 37:3c:49:f7:a5:54:8e:1b:46:cc:40:2d:d4:1e:fb: d7:12:93:85:e8:02:e4:5f:f1:b8:4d:5d:14:e6:87: dc:65:0e:bf:7e:30:8a:b9:f2:8f:95:b0:1e:00:3e: e3:03:06:16:8e:f9:14:56:8e:11:fd:bb:84:42:13: c9:10:01:67:f0:04:f1:7e:5f:0b:79:71:7d:0b:cd: b5:e5:be:79:27:b3:08:67:3e:ca:02:fb:cb:f5:a0: ef:84:2b:66:26:5f:7c:b6:fc:40:c3:98:38:3f:72: cf:7f:60:bb:0c:96:a2:dd:da:63:04:1e:64:c6:f9: 27:64:f4:04:f0:36:0a:ae:05:9d:fb:83:54:92:86: 7e:69:be:7e:34:0b:a5:28:2f:45:28:92:d6:8d:6b: 8d:ef:77:c2:71:9d:83:54:44:8b:7b:73:a5:7d:df: b9:bc:f3:a2:98:3c:07:d2:a1:fd:b5:ca:70:f1:02: 7a:79:33:43:e7:09:2e:17:a2:b8:61:12:83:07:d9: 07:a8:23:f2:3e:54:83:dd:8a:0e:9c:92:03:15:cf: 7d:b5:99:9d:19:17:14:90:44:ae:24:71:68:53:5c: e0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A5:83:68:34:77:64:3D:67:D7:9B:7E:47:01:3C:7C:6D:55:9B:E9 X509v3 Authority Key Identifier: keyid:10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:99:a2:3a:28:9c:d1:1a:76:85:4a:e7:48:41:9d:9e:24:11: c3:b7:40:0e:88:85:99:90:9a:1a:f0:e2:db:39:03:8e:33:79: 15:a8:70:9c:c7:4f:7c:61:47:90:a9:87:e3:bb:a9:8b:23:8d: 09:1d:2f:1a:f2:56:7c:b4:73:e2:b6:71:11:16:78:7a:ab:91: 6a:98:a2:3b:be:f5:77:c8:f0:d1:32:0b:79:bf:19:52:ad:96: bd:64:25:58:cd:46:b6:ec:93:26:e1:56:5c:68:1b:2b:f9:01: fe:6e:b9:b1:10:75:ec:4a:4a:57:62:82:9f:d1:1c:3f:0a:ca: 8e:18:29:18:5e:10:70:ff:ce:23:1a:91:02:c2:f5:d9:08:57: e2:9f:ba:de:b2:e5:f9:08:45:3a:a7:b0:a0:04:88:f0:3b:bb: 22:0e:9f:63:28:13:b0:6a:e0:b1:e1:c3:d2:d1:d6:eb:3f:d6: f0:66:ea:00:c1:4e:4b:5d:a6:56:50:cd:1c:b1:0b:c2:fc:50: 82:3a:5f:8d:06:7e:5e:11:65:25:44:4e:2c:59:9f:65:48:ad: b0:6e:09:57:26:b0:10:68:ec:a4:a1:ca:4b:d0:85:34:f0:28: 0a:e4:66:fc:a5:ff:d6:40:a6:ae:80:1e:6b:d8:ed:4b:3d:7b: 85:f1:8a:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICISYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCRkYxMTAvBgNVBAUTKDEwQUU3RkEwQ0Y5Q0ZBQTg3RUJBRDg0NENEOEM0MjZB QzFDM0E1RTcwHhcNMjYwNDI4MTU1ODQxWhcNMjYwNTA1MTU1ODQxWjAYMRYwFAYD VQQDEw02OWYwZDkzMi1kYWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm6aensMRTE3PkGjgaQfNbY2gGXg52YkeJHzkECw3PEn3pVSOG0bMQC3UHvvX EpOF6ALkX/G4TV0U5ofcZQ6/fjCKufKPlbAeAD7jAwYWjvkUVo4R/buEQhPJEAFn 8ATxfl8LeXF9C8215b55J7MIZz7KAvvL9aDvhCtmJl98tvxAw5g4P3LPf2C7DJai 3dpjBB5kxvknZPQE8DYKrgWd+4NUkoZ+ab5+NAulKC9FKJLWjWuN73fCcZ2DVESL e3Olfd+5vPOimDwH0qH9tcpw8QJ6eTND5wkuF6K4YRKDB9kHqCPyPlSD3YoOnJID Fc99tZmdGRcUkESuJHFoU1zg0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLWlg2g0 d2Q9Z9ebfkcBPHxtVZvpMB8GA1UdIwQYMBaAFBCuf6DPnPqofrrYRM2MQmrBw6Xn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0JGRi9GMjkwODI5QTEw REExMUU2ODVDNEJCM0RDNEY5QUUwMi9FSzVfb00tYy1xaC11dGhFell4Q2FzSERw ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VLNV9vTS1jLXFoLXV0aEV6WXhDYXNIRHBlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0JGRi9GMjkwODI5QTEwREExMUU2ODVDNEJCM0RDNEY5QUUwMi9FSzVfb00tYy1x aC11dGhFell4Q2FzSERwZWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP5miOiic0Rp2hUrnSEGdniQRw7dADoiFmZCaGvDi2zkDjjN5FahwnMdPfGFH kKmH47upiyONCR0vGvJWfLRz4rZxERZ4equRapiiO771d8jw0TILeb8ZUq2WvWQl WM1GtuyTJuFWXGgbK/kB/m65sRB17EpKV2KCn9EcPwrKjhgpGF4QcP/OIxqRAsL1 2QhX4p+63rLl+QhFOqewoASI8Du7Ig6fYygTsGrgseHD0tHW6z/W8GbqAMFOS12m VlDNHLELwvxQgjpfjQZ+XhFlJUROLFmfZUitsG4JVyawEGjspKHKS9CFNPAoCuRm /KX/1kCmroAea9jtSz17hfGKSQ== -----END CERTIFICATE-----Generated at Wed Apr 29 02:57:29 2026 by rpki-client