
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
File: EK5_oM-c-qh-uthEzYxCasHDpec.mft (raw, json)
Hash identifier: /jTXydOGkJj2sDPRWkeFjFWHPOv26xdP4LidahQbm6Y=
Subject key identifier: 8E:5C:77:41:BB:34:5C:FC:9B:4A:5B:5F:EA:FB:D7:72:CB:20:AD:95
Authority key identifier: 10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7
Certificate issuer: /CN=A9123BFF/serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7
Certificate serial: 2130
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
Manifest number: 2124
Signing time: Tue 12 May 2026 15:56:17 +0000
Manifest this update: Tue 12 May 2026 15:56:17 +0000
Manifest next update: Tue 19 May 2026 15:56:17 +0000
Files and hashes: 1: EK5_oM-c-qh-uthEzYxCasHDpec.crl (hash: UpUlp74MxvIhxB5yPT/rcTs059nygnJYh0RJ5VOx57Q=)
2: 449C08948D1211EBB9548186C4F9AE02.roa (hash: CbaVakrw0TtkU+Q7XuwXMaUsEoO5bFQk16pQPN02uwc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl
rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8496 (0x2130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123BFF, serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7
Validity
Not Before: May 12 15:56:17 2026 GMT
Not After : May 19 15:56:17 2026 GMT
Subject: CN=6a034da1-4468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dc:a5:a8:58:a0:20:2d:7c:e5:58:2a:ca:db:
4c:73:d1:46:f8:89:83:ea:52:19:b7:c2:30:38:59:
59:0f:bc:2a:e2:31:bc:5b:34:50:5b:39:73:4f:c9:
e9:02:4b:f1:95:a6:c3:0a:ce:bd:1d:5b:7e:a5:0e:
06:af:3b:bb:51:b5:48:2d:68:5d:94:ac:72:1e:3a:
eb:87:27:45:5a:72:14:af:34:1a:09:cc:06:3f:8e:
09:87:12:8e:af:7d:91:e0:e6:59:2c:1b:9c:c6:e3:
19:14:a3:b8:66:82:03:3e:27:e5:99:c2:fc:15:c7:
6a:6a:36:8c:29:a2:e8:8e:ef:75:1a:2b:20:2e:14:
f2:04:47:80:14:a6:8b:64:2e:4f:75:34:22:55:c6:
09:36:bd:7d:04:cf:c8:3d:ba:71:33:31:dd:4d:e9:
18:8d:2d:dd:bc:11:c5:06:33:bc:0f:66:d7:5d:f0:
60:c3:21:b2:68:51:66:99:4b:70:e2:7e:a7:01:12:
87:50:0d:e7:45:3b:b7:86:d2:60:9d:c3:54:79:3c:
26:8c:a7:78:0a:58:aa:e1:d1:ed:69:42:4f:f5:38:
7f:71:fe:dd:e4:7b:2c:d5:88:fe:26:c0:57:47:73:
3f:39:e3:e2:28:4b:21:36:af:4e:19:2b:b1:74:e8:
09:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5C:77:41:BB:34:5C:FC:9B:4A:5B:5F:EA:FB:D7:72:CB:20:AD:95
X509v3 Authority Key Identifier:
keyid:10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:ff:93:68:81:df:f9:6e:16:7e:c2:04:45:ab:bd:74:70:a4:
af:18:05:76:4e:89:48:2e:56:a2:fd:76:37:b9:25:62:9b:94:
22:6c:e3:81:a7:d5:02:14:c1:6e:86:1c:7e:f3:3f:ec:de:e3:
ae:50:0c:c4:ce:a4:8c:22:6c:13:ae:4c:5a:c9:89:0c:18:3a:
03:f5:ca:fd:f2:07:8f:4b:43:b6:e4:04:98:01:0f:e2:96:3a:
58:0d:64:6d:ad:34:6f:32:9b:21:88:fe:02:62:5b:29:cf:a7:
fc:e8:9e:4e:3a:56:7c:59:d0:df:dc:9c:52:23:e2:06:d7:88:
b8:d3:9e:71:f5:2b:79:9a:3d:b2:4a:2f:da:d5:56:0c:81:39:
d2:aa:f0:0c:06:cf:4d:cd:9c:90:cc:30:ca:a6:12:12:db:e4:
94:c0:78:b5:82:ad:2f:db:4e:92:91:e0:54:d0:90:f1:61:69:
a2:fd:3c:35:d6:a1:0d:99:e9:6b:16:aa:93:d8:a8:6b:1a:0f:
c7:c1:f3:91:03:a8:5a:b0:09:69:08:6f:09:33:8c:b4:72:a3:
6c:73:3d:34:df:82:05:fb:bb:36:61:2c:a1:61:f6:a6:86:81:
bd:7d:85:6b:ac:f2:69:9c:62:a8:2f:04:c3:54:63:61:20:b5:
f2:8e:5f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:29:56 2026 by rpki-client