$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft File: es5to1-2pKn2-ZcMGLyvWydIEZ8.mft (raw, json) Hash identifier: 2WE875rpyRFs+sHbB21a93drPfoQEK91Jpo996rG0JE= Subject key identifier: 02:9C:53:3D:72:DC:9B:B1:AA:4A:39:AF:01:C6:06:7C:15:A6:54:BC Authority key identifier: 7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F Certificate issuer: /CN=A917E0A8/serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Certificate serial: 0BB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft Manifest number: 0B7A Signing time: Sat 26 Sep 2026 19:17:20 +0000 Manifest this update: Sat 26 Sep 2026 19:17:19 +0000 Manifest next update: Sat 03 Oct 2026 19:17:19 +0000 Files and hashes: 1: es5to1-2pKn2-ZcMGLyvWydIEZ8.crl (hash: R3ozVxbJi1+MWeClNQ2QB00rtkec5TC+MBXwHEle4VQ=) 2: D94C07CAF5B211EFBD3CA23FC4F9AE02.roa (hash: mmhJOgJGH0p/EXPKugGpKlEEotFbKYBiFQkdKPR9puI=) 3: 7E12F8DC4C0A11ECACB7F96AC4F9AE02.roa (hash: 6lVrS2lVBl+43cRAAzRseItd8EUIMOBsxWu2J7hhTds=) 4: 46F5BC3206A211EEBDA4D34BC4F9AE02.roa (hash: 9qbDEBiGv1lnc3TjdDbg+Lx2PzDD+usm+fulwQxlDi0=) 5: 495324CA39CB11EBB2F08020C4F9AE02.roa (hash: DkdU/sit6KEl/7goo/JItkVs9gPbSPhLgwioVJX99NA=) 6: F90F9A403ACB11EC9FEBB367C4F9AE02.roa (hash: nflam170M8N5saRHiFErdBMQ++nspgUlYcwSqJKpTRk=) 7: C782AE14615911F08635B771C4F9AE02.roa (hash: iIrPkGOoXCcJm65/+MxDjrfNVS2l3AnmlhfuWABZ58M=) 8: D4EFA44673CD11EA8BE69127C4F9AE02.roa (hash: EJ0yALTK4BtZ12yVPRxK0huZzO9WF6oYQ/1FbxvX6i0=) 9: B24920940C6911EC90B57338C4F9AE02.roa (hash: BvEViq3TGdShOf2o0F2oIYa6vXku4o1jpVtmMA8vaTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 19:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2995 (0xbb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Validity Not Before: Sep 26 19:17:19 2026 GMT Not After : Oct 3 19:17:19 2026 GMT Subject: CN=6ab81a40-ee63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:62:ee:d3:70:ad:94:98:27:0e:6b:d0:9b:72: b0:37:5a:42:03:39:63:a7:83:dd:15:92:a5:69:8f: 4d:70:82:66:33:de:b4:1d:af:8b:66:c9:07:90:b3: d8:a6:fb:9a:d3:30:a1:d2:83:e4:14:02:78:27:6b: 6a:dd:06:dd:7d:ea:69:76:60:77:41:a4:fe:42:d1: 84:87:b3:bd:46:7c:06:97:a2:f7:a6:72:1c:8c:08: 9a:4d:ea:fc:81:7f:89:b8:6e:13:72:92:19:06:aa: a5:52:12:db:ff:8e:bd:8b:80:69:51:18:7d:04:d1: 46:dd:82:3a:8f:b5:13:0c:ac:af:45:56:6a:85:f0: 8f:f5:14:ef:86:f8:69:a8:0b:c5:e8:f8:0b:15:e2: 2d:e0:c9:07:5c:40:52:c0:3f:32:bd:89:ad:9f:5c: 4d:5e:38:6c:d2:95:ef:3b:49:71:7c:3e:67:36:3a: e5:a6:17:76:26:0d:72:80:0f:9d:0c:dc:f0:f4:56: 30:a5:ec:9d:55:82:af:78:c9:81:e0:3c:e9:f2:ed: 4c:94:d5:e5:0e:1a:06:55:96:5b:2f:48:f3:14:85: 24:6a:ba:57:2a:83:cf:22:3c:0a:7b:1f:06:07:c4: 7e:29:f6:15:49:8a:c2:8f:9d:9a:9e:a2:ec:ee:f1: e7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9C:53:3D:72:DC:9B:B1:AA:4A:39:AF:01:C6:06:7C:15:A6:54:BC X509v3 Authority Key Identifier: keyid:7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:9f:b9:51:e3:54:94:2f:08:44:f7:88:d9:bc:66:1f:ec:b8: f2:c6:af:2b:b3:87:89:17:d9:80:6b:8f:9a:4b:4a:20:21:3c: d6:b4:a5:22:d5:92:9b:ab:05:fe:1f:7b:fa:82:62:6a:9c:03: f9:e6:bc:bf:fa:be:62:65:73:76:18:58:50:c9:ba:98:1b:85: e4:ae:91:81:46:9c:48:fa:12:52:5f:21:2f:a0:93:f1:31:0d: e6:54:3e:3c:ea:94:18:55:4d:6c:a7:b8:6f:cc:d7:cb:1a:53: f3:12:7a:b8:24:df:6b:b8:77:d2:6d:ea:fe:47:61:48:f0:74: 53:c9:0f:d4:e6:e9:6a:2e:2a:ae:b9:b0:9a:0b:65:0c:a5:e6: 61:c9:e4:8a:36:a6:58:5e:47:c9:71:94:c5:b7:8c:bd:97:f7: 03:04:e4:d9:0d:28:32:79:25:2b:3c:42:a2:70:a6:e2:99:38: 86:94:d0:6f:8d:a7:92:5e:0c:f7:0c:30:18:05:07:93:e9:f1: 44:47:74:92:f1:14:f2:f8:f3:26:8a:9f:f1:52:46:73:b5:7a: f4:b1:b7:f1:b9:b8:27:8a:4f:73:50:e5:d3:38:bc:d2:4f:d1: d5:7e:b0:8b:1e:89:96:20:36:bd:a6:ac:24:17:80:66:c9:93: 6c:54:d9:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDdBQ0U2REEzNUZCNkE0QTlGNkY5OTcwQzE4QkNBRjVC Mjc0ODExOUYwHhcNMjYwOTI2MTkxNzE5WhcNMjYxMDAzMTkxNzE5WjAYMRYwFAYD VQQDEw02YWI4MWE0MC1lZTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmLu03CtlJgnDmvQm3KwN1pCAzljp4PdFZKlaY9NcIJmM960Ha+LZskHkLPY pvua0zCh0oPkFAJ4J2tq3QbdfeppdmB3QaT+QtGEh7O9RnwGl6L3pnIcjAiaTer8 gX+JuG4TcpIZBqqlUhLb/469i4BpURh9BNFG3YI6j7UTDKyvRVZqhfCP9RTvhvhp qAvF6PgLFeIt4MkHXEBSwD8yvYmtn1xNXjhs0pXvO0lxfD5nNjrlphd2Jg1ygA+d DNzw9FYwpeydVYKveMmB4Dzp8u1MlNXlDhoGVZZbL0jzFIUkarpXKoPPIjwKex8G B8R+KfYVSYrCj52anqLs7vHnfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAKcUz1y 3Juxqko5rwHGBnwVplS8MB8GA1UdIwQYMBaAFHrObaNftqSp9vmXDBi8r1snSBGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC9BMDU5QUY4QTY0 MEQxMUVBQjYzOTU1NzFDNEY5QUUwMi9lczV0bzEtMnBLbjItWmNNR0x5dld5ZElF WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzNXRvMS0ycEtuMi1aY01HTHl2V3lkSUVaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC9BMDU5QUY4QTY0MEQxMUVBQjYzOTU1NzFDNEY5QUUwMi9lczV0bzEtMnBL bjItWmNNR0x5dld5ZElFWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ5+5UeNUlC8IRPeI2bxmH+y48savK7OHiRfZgGuPmktKICE81rSlItWSm6sF /h97+oJiapwD+ea8v/q+YmVzdhhYUMm6mBuF5K6RgUacSPoSUl8hL6CT8TEN5lQ+ POqUGFVNbKe4b8zXyxpT8xJ6uCTfa7h30m3q/kdhSPB0U8kP1Obpai4qrrmwmgtl DKXmYcnkijamWF5HyXGUxbeMvZf3AwTk2Q0oMnklKzxConCm4pk4hpTQb42nkl4M 9wwwGAUHk+nxREd0kvEU8vjzJoqf8VJGc7V69LG38bm4J4pPc1Dl0zi80k/R1X6w ix6JliA2vaasJBeAZsmTbFTZdg== -----END CERTIFICATE-----Generated at Mon Sep 28 04:34:23 2026 by rpki-client