
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
File: EK5_oM-c-qh-uthEzYxCasHDpec.mft (raw, json)
Hash identifier: QS617an6nFvKBr2pMwKqpVCJMe55o55isPzrwk+xZOI=
Subject key identifier: C2:96:FC:02:A9:DC:E3:73:B7:62:CC:F6:FA:7D:AE:68:EF:85:05:37
Authority key identifier: 10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7
Certificate issuer: /CN=A9123BFF/serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7
Certificate serial: 217C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
Manifest number: 2170
Signing time: Thu 08 Oct 2026 15:57:14 +0000
Manifest this update: Thu 08 Oct 2026 15:57:14 +0000
Manifest next update: Thu 15 Oct 2026 15:57:14 +0000
Files and hashes: 1: EK5_oM-c-qh-uthEzYxCasHDpec.crl (hash: eZFbm2wvvGJ8iqn8q4bbvQ/k8R/EXOH7YbfArp9YpqI=)
2: 449C08948D1211EBB9548186C4F9AE02.roa (hash: CbaVakrw0TtkU+Q7XuwXMaUsEoO5bFQk16pQPN02uwc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl
rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 15:57:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8572 (0x217c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123BFF, serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7
Validity
Not Before: Oct 8 15:57:14 2026 GMT
Not After : Oct 15 15:57:14 2026 GMT
Subject: CN=6ac7bd5a-6d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3a:f6:ca:f1:3e:85:c9:f9:72:ca:39:3e:20:
53:9f:1a:85:c8:a5:c4:6d:45:09:40:a0:20:c8:5a:
14:ec:0f:73:2c:71:0a:f3:70:4f:fd:5c:87:65:6a:
98:36:c6:da:b4:c6:41:28:a4:32:a6:c0:76:d4:57:
7c:f7:dc:ad:73:4c:82:1e:1a:85:f7:02:c0:53:6f:
f8:d9:60:c7:2e:9f:06:eb:14:ef:0e:96:5d:3a:27:
06:d1:df:4b:c8:4d:ff:07:50:77:58:74:5a:4d:62:
f1:35:ea:48:d3:0a:59:45:9b:58:2a:e4:cb:11:2f:
c1:69:c6:5c:1f:82:77:1d:ff:78:8e:0d:68:49:79:
b0:73:ab:65:ac:0e:ed:ff:95:79:9f:34:dc:c4:e3:
67:13:f0:3d:0b:77:1a:33:25:53:cf:e8:36:79:37:
02:31:59:0c:16:18:f2:b6:a6:98:1e:70:e6:38:79:
18:36:1b:14:08:2e:2b:ea:32:51:aa:9d:4c:b1:51:
fa:55:64:2b:8f:70:cc:47:e6:a8:fe:fd:06:b0:ef:
ae:94:57:ff:10:f2:9d:64:15:26:80:2a:78:c9:12:
b5:8f:e3:6e:e4:c4:c2:80:e6:a0:49:fd:80:c8:0b:
18:eb:3d:84:2f:11:3d:d4:8e:c0:cb:e5:f7:7e:a8:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:96:FC:02:A9:DC:E3:73:B7:62:CC:F6:FA:7D:AE:68:EF:85:05:37
X509v3 Authority Key Identifier:
keyid:10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6a:f6:ce:d0:b1:b8:66:e2:9a:ad:05:6c:c9:b9:dc:6c:74:
a8:b5:a0:4a:dd:cc:49:1a:48:bf:d7:83:ae:86:9d:f3:e5:e4:
df:b5:a7:9c:21:8f:1f:58:27:12:a0:f4:fd:10:6a:b6:96:3e:
f8:56:63:a0:4a:67:3a:9e:b7:b3:ca:9a:d2:26:9b:55:e5:53:
d9:ec:b4:bd:3d:9f:a1:d8:e3:d8:7e:01:2a:38:42:b2:f0:95:
58:ce:91:95:aa:b5:52:0a:db:1c:af:c9:ff:1b:33:98:b4:09:
43:9e:bf:33:68:d2:19:d2:c5:3e:b3:f5:08:36:b2:53:00:6a:
cb:48:f1:f7:92:35:f6:46:fe:93:40:a4:ff:ad:01:61:c2:6c:
04:92:ed:29:59:9c:1d:c8:50:78:2e:9e:81:c5:12:a6:5f:dc:
3a:8d:af:d2:cc:df:b3:92:10:e9:26:14:e1:ae:ec:9f:a0:d7:
6d:19:53:90:25:cf:29:75:82:e8:ed:c6:2a:09:07:ca:d2:0a:
5c:4e:1c:00:f1:09:c9:bf:64:9d:bf:00:7a:89:21:25:5b:12:
c0:06:15:74:73:ac:ca:16:b9:df:bc:5b:5f:9b:02:1e:42:e2:
00:a5:14:0e:ac:20:f6:19:7f:ec:5c:32:62:c8:47:35:d7:27:
2f:03:f4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:43:25 2026 by rpki-client