$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft File: es5to1-2pKn2-ZcMGLyvWydIEZ8.mft (raw, json) Hash identifier: L3oFCw1MqIq0zJE3hisS46KUXkzwNGhHP5KhE9aMXuc= Subject key identifier: BE:84:7F:DE:F5:A6:83:A7:36:68:44:A6:6A:6F:9A:BD:7D:33:9D:8C Authority key identifier: 7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F Certificate issuer: /CN=A917E0A8/serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Certificate serial: 0B94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft Manifest number: 0B5B Signing time: Tue 28 Jul 2026 19:31:30 +0000 Manifest this update: Tue 28 Jul 2026 19:31:29 +0000 Manifest next update: Tue 04 Aug 2026 19:31:29 +0000 Files and hashes: 1: es5to1-2pKn2-ZcMGLyvWydIEZ8.crl (hash: ifzpG/wO5xyH8owvlxOH+ZFaF+pV79LKnmaP5YUaH7Y=) 2: 495324CA39CB11EBB2F08020C4F9AE02.roa (hash: DkdU/sit6KEl/7goo/JItkVs9gPbSPhLgwioVJX99NA=) 3: 7E12F8DC4C0A11ECACB7F96AC4F9AE02.roa (hash: 6lVrS2lVBl+43cRAAzRseItd8EUIMOBsxWu2J7hhTds=) 4: D4EFA44673CD11EA8BE69127C4F9AE02.roa (hash: EJ0yALTK4BtZ12yVPRxK0huZzO9WF6oYQ/1FbxvX6i0=) 5: B24920940C6911EC90B57338C4F9AE02.roa (hash: BvEViq3TGdShOf2o0F2oIYa6vXku4o1jpVtmMA8vaTc=) 6: C782AE14615911F08635B771C4F9AE02.roa (hash: iIrPkGOoXCcJm65/+MxDjrfNVS2l3AnmlhfuWABZ58M=) 7: F90F9A403ACB11EC9FEBB367C4F9AE02.roa (hash: nflam170M8N5saRHiFErdBMQ++nspgUlYcwSqJKpTRk=) 8: D94C07CAF5B211EFBD3CA23FC4F9AE02.roa (hash: mmhJOgJGH0p/EXPKugGpKlEEotFbKYBiFQkdKPR9puI=) 9: 46F5BC3206A211EEBDA4D34BC4F9AE02.roa (hash: 9qbDEBiGv1lnc3TjdDbg+Lx2PzDD+usm+fulwQxlDi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2964 (0xb94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Validity Not Before: Jul 28 19:31:29 2026 GMT Not After : Aug 4 19:31:29 2026 GMT Subject: CN=6a690392-b22d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:59:e2:a4:6e:91:2b:6a:df:2b:e3:ba:59:c1: 9c:7d:7b:91:f0:08:d8:6c:65:6e:1c:97:0f:27:e5: 58:e7:2e:e2:e3:fd:65:81:37:91:fd:28:58:c3:f4: 7d:cc:8a:c3:fd:62:79:f5:b0:3e:01:0b:b4:2c:24: 8c:68:2f:94:e4:64:04:6a:30:f7:68:7a:40:b4:87: 8d:bb:5b:85:a3:33:17:fa:c8:50:93:13:99:42:3e: 4e:4a:e0:3e:46:cf:a8:4e:7f:41:ac:2d:35:6c:a1: 0b:b8:5a:9f:d7:d3:18:8e:ee:58:23:a8:c7:ed:ba: fa:db:b7:35:ae:85:88:89:92:c6:8a:45:f2:86:b0: 16:34:f3:cf:de:b6:94:48:0c:39:d3:d7:e6:cd:28: 2f:e8:f7:2a:85:be:da:d3:69:59:74:53:c6:42:7e: d3:5d:4e:a6:4d:94:cd:f0:38:40:32:9b:1d:45:64: dc:26:cf:8b:53:cb:c3:5d:66:82:0c:d4:51:2f:ef: 58:79:0b:31:1c:af:ea:e7:eb:a5:f7:03:c7:25:28: f3:df:cd:14:f5:fd:e7:a8:4c:4f:cd:23:b9:78:6e: b9:30:b8:68:cb:3a:3a:19:e6:a0:59:db:bd:61:fb: 37:54:5f:df:2b:8a:bf:6c:ef:4a:69:a9:e3:c8:85: f8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:84:7F:DE:F5:A6:83:A7:36:68:44:A6:6A:6F:9A:BD:7D:33:9D:8C X509v3 Authority Key Identifier: keyid:7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:9e:d1:0c:11:9c:b9:12:22:9d:77:97:ac:18:fd:95:31:64: 06:6e:1c:cc:47:d7:f5:d7:c7:7d:bd:ee:c9:a5:e2:d1:53:4b: 5d:9b:e0:13:3d:cb:e1:dd:32:60:b4:94:f3:e2:45:cb:41:1e: 50:47:d1:44:a8:7f:20:94:35:c7:40:9d:2c:24:45:be:c2:d8: 85:a6:ed:3c:da:15:a8:b5:d0:27:b1:58:e6:81:42:66:c3:36: 7c:2f:b1:a6:2e:a8:85:c3:2b:25:ab:a9:51:30:63:60:1f:75: e9:de:78:0e:7c:98:a7:7d:11:7c:0c:d5:ef:29:d6:f0:a9:9f: 27:8d:60:ed:07:43:1f:c3:08:71:6e:cd:a3:15:0c:35:51:5b: 38:78:13:7a:b2:25:4c:00:d1:06:ce:11:23:6c:6f:74:29:9e: 8c:65:15:fe:73:83:dc:a6:47:bb:9c:73:b6:4c:49:54:f6:d7: 11:6f:84:e6:2a:0e:fb:e5:28:62:3a:9b:a5:24:b9:b0:b5:1d: 21:b2:f5:dd:c5:ae:cb:3e:53:cb:a7:25:e8:aa:73:55:50:73: cd:9a:12:44:42:47:47:b2:a8:f6:af:4c:ca:aa:a5:f4:39:1c: f4:94:f6:67:1f:43:cd:59:07:fa:15:02:70:dd:7e:0e:7a:fc: d8:3c:66:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDdBQ0U2REEzNUZCNkE0QTlGNkY5OTcwQzE4QkNBRjVC Mjc0ODExOUYwHhcNMjYwNzI4MTkzMTI5WhcNMjYwODA0MTkzMTI5WjAYMRYwFAYD VQQDEw02YTY5MDM5Mi1iMjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1nipG6RK2rfK+O6WcGcfXuR8AjYbGVuHJcPJ+VY5y7i4/1lgTeR/ShYw/R9 zIrD/WJ59bA+AQu0LCSMaC+U5GQEajD3aHpAtIeNu1uFozMX+shQkxOZQj5OSuA+ Rs+oTn9BrC01bKELuFqf19MYju5YI6jH7br627c1roWIiZLGikXyhrAWNPPP3raU SAw509fmzSgv6Pcqhb7a02lZdFPGQn7TXU6mTZTN8DhAMpsdRWTcJs+LU8vDXWaC DNRRL+9YeQsxHK/q5+ul9wPHJSjz380U9f3nqExPzSO5eG65MLhoyzo6GeagWdu9 Yfs3VF/fK4q/bO9KaanjyIX4uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL6Ef971 poOnNmhEpmpvmr19M52MMB8GA1UdIwQYMBaAFHrObaNftqSp9vmXDBi8r1snSBGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC9BMDU5QUY4QTY0 MEQxMUVBQjYzOTU1NzFDNEY5QUUwMi9lczV0bzEtMnBLbjItWmNNR0x5dld5ZElF WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzNXRvMS0ycEtuMi1aY01HTHl2V3lkSUVaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC9BMDU5QUY4QTY0MEQxMUVBQjYzOTU1NzFDNEY5QUUwMi9lczV0bzEtMnBL bjItWmNNR0x5dld5ZElFWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArZ7RDBGcuRIinXeXrBj9lTFkBm4czEfX9dfHfb3uyaXi0VNLXZvgEz3L4d0y YLSU8+JFy0EeUEfRRKh/IJQ1x0CdLCRFvsLYhabtPNoVqLXQJ7FY5oFCZsM2fC+x pi6ohcMrJaupUTBjYB916d54DnyYp30RfAzV7ynW8KmfJ41g7QdDH8MIcW7NoxUM NVFbOHgTerIlTADRBs4RI2xvdCmejGUV/nOD3KZHu5xztkxJVPbXEW+E5ioO++Uo YjqbpSS5sLUdIbL13cWuyz5Ty6cl6KpzVVBzzZoSREJHR7Ko9q9Myqql9Dkc9JT2 Zx9DzVkH+hUCcN1+Dnr82Dxmvg== -----END CERTIFICATE-----Generated at Wed Jul 29 01:14:58 2026 by rpki-client