$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft File: es5to1-2pKn2-ZcMGLyvWydIEZ8.mft (raw, json) Hash identifier: aggct1OGYJWkUNiZOOwqjo38mitm9fTljRFS70EGIAM= Subject key identifier: E1:0B:0E:34:66:41:93:1E:F5:11:70:AA:0C:1E:9D:E2:C9:80:DF:67 Authority key identifier: 7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F Certificate issuer: /CN=A917E0A8/serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Certificate serial: 0B91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft Manifest number: 0B58 Signing time: Wed 22 Jul 2026 19:36:19 +0000 Manifest this update: Wed 22 Jul 2026 19:36:18 +0000 Manifest next update: Wed 29 Jul 2026 19:36:18 +0000 Files and hashes: 1: es5to1-2pKn2-ZcMGLyvWydIEZ8.crl (hash: EIQhPXobDrhAlJc0WULgletOnjTAyTuGYSNgmUdN/eY=) 2: D4EFA44673CD11EA8BE69127C4F9AE02.roa (hash: EJ0yALTK4BtZ12yVPRxK0huZzO9WF6oYQ/1FbxvX6i0=) 3: D94C07CAF5B211EFBD3CA23FC4F9AE02.roa (hash: mmhJOgJGH0p/EXPKugGpKlEEotFbKYBiFQkdKPR9puI=) 4: F90F9A403ACB11EC9FEBB367C4F9AE02.roa (hash: nflam170M8N5saRHiFErdBMQ++nspgUlYcwSqJKpTRk=) 5: C782AE14615911F08635B771C4F9AE02.roa (hash: iIrPkGOoXCcJm65/+MxDjrfNVS2l3AnmlhfuWABZ58M=) 6: 46F5BC3206A211EEBDA4D34BC4F9AE02.roa (hash: 9qbDEBiGv1lnc3TjdDbg+Lx2PzDD+usm+fulwQxlDi0=) 7: B24920940C6911EC90B57338C4F9AE02.roa (hash: BvEViq3TGdShOf2o0F2oIYa6vXku4o1jpVtmMA8vaTc=) 8: 495324CA39CB11EBB2F08020C4F9AE02.roa (hash: DkdU/sit6KEl/7goo/JItkVs9gPbSPhLgwioVJX99NA=) 9: 7E12F8DC4C0A11ECACB7F96AC4F9AE02.roa (hash: 6lVrS2lVBl+43cRAAzRseItd8EUIMOBsxWu2J7hhTds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2961 (0xb91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Validity Not Before: Jul 22 19:36:18 2026 GMT Not After : Jul 29 19:36:18 2026 GMT Subject: CN=6a611bb3-2a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fd:9e:02:c6:f9:5f:39:0d:f7:a7:4c:30:9e: 75:64:20:c3:ed:50:c9:32:5e:cd:92:34:d2:e0:c3: 6d:ce:18:77:03:c1:e1:1b:43:53:03:ae:1e:63:20: a3:14:46:78:a9:40:cd:c9:20:2d:67:82:f9:f8:32: 7b:43:55:2e:c1:1f:6b:17:54:92:ac:a8:bd:54:47: 0c:f6:a6:ff:6c:64:46:51:da:c6:2f:db:bd:d6:68: b2:db:1c:7c:19:8a:7f:33:68:f6:f7:e4:af:81:59: bd:82:84:0f:f2:a7:9d:bf:90:99:71:66:d7:d2:ca: 9a:af:a0:01:e9:0b:ee:ea:9e:37:d9:e5:59:eb:f0: d4:90:07:cb:32:40:eb:80:65:67:78:3d:9d:bc:db: 35:30:61:f9:20:12:46:2c:2b:91:c6:e8:40:35:fb: 51:1b:9a:c6:a4:17:3e:b6:4c:18:26:28:eb:37:bb: 47:08:0c:73:ea:80:e0:72:81:a0:55:e0:39:45:27: 66:14:84:60:84:92:63:ae:a2:fd:e3:54:1c:17:4a: 30:2e:9b:24:6d:13:55:c7:5c:04:77:79:ce:c8:c6: 4d:4a:28:d4:7a:2a:de:7c:1d:14:26:27:a1:44:de: 34:c0:9c:18:79:fa:60:8a:f6:e8:f9:03:92:57:f5: de:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0B:0E:34:66:41:93:1E:F5:11:70:AA:0C:1E:9D:E2:C9:80:DF:67 X509v3 Authority Key Identifier: keyid:7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:2b:f9:29:3b:74:7c:be:2d:57:46:b4:ce:96:44:55:89:53: 3d:24:f7:df:de:67:ff:a1:a8:70:b0:36:d9:9e:b1:34:27:37: 7c:10:6c:c1:82:14:f7:c3:57:ac:2c:b4:12:de:b9:e7:c9:50: 8f:17:94:68:2d:60:a5:ac:e2:04:66:b2:40:3a:f1:82:fd:34: dd:2f:af:bf:62:70:19:17:46:9a:c7:f1:64:10:1e:39:2b:86: 61:1c:ed:17:60:84:dd:da:56:5d:6d:9b:da:aa:d1:43:b6:e8: 92:6d:54:88:5a:03:9c:a3:a9:3a:bb:33:d3:3e:4d:22:89:26: 5a:1c:8e:01:ba:d0:f9:26:d2:88:e8:f4:a9:42:f7:59:d3:ec: d3:87:9e:14:c6:0d:43:b0:f3:dc:d5:ab:f4:95:d5:8b:ed:e6: 49:51:97:65:c4:05:71:be:fa:6e:37:d7:b6:a9:e7:8a:71:63: cc:84:cd:97:a1:55:19:db:b7:b2:01:ae:a8:03:8f:b4:8e:6d: d5:df:f2:ab:4c:ee:2c:9c:be:86:26:6b:a6:0c:a0:c7:94:b3: e4:73:ff:d0:e2:47:bf:ec:33:93:f3:f0:ec:87:d3:3a:62:53: 6a:d7:ba:10:50:f1:12:3e:94:58:20:b4:71:0e:68:8a:0c:91: f8:8b:e1:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDdBQ0U2REEzNUZCNkE0QTlGNkY5OTcwQzE4QkNBRjVC Mjc0ODExOUYwHhcNMjYwNzIyMTkzNjE4WhcNMjYwNzI5MTkzNjE4WjAYMRYwFAYD VQQDEw02YTYxMWJiMy0yYTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwP2eAsb5XzkN96dMMJ51ZCDD7VDJMl7NkjTS4MNtzhh3A8HhG0NTA64eYyCj FEZ4qUDNySAtZ4L5+DJ7Q1UuwR9rF1SSrKi9VEcM9qb/bGRGUdrGL9u91miy2xx8 GYp/M2j29+SvgVm9goQP8qedv5CZcWbX0sqar6AB6Qvu6p432eVZ6/DUkAfLMkDr gGVneD2dvNs1MGH5IBJGLCuRxuhANftRG5rGpBc+tkwYJijrN7tHCAxz6oDgcoGg VeA5RSdmFIRghJJjrqL941QcF0owLpskbRNVx1wEd3nOyMZNSijUeirefB0UJieh RN40wJwYefpgivbo+QOSV/XeOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOELDjRm QZMe9RFwqgweneLJgN9nMB8GA1UdIwQYMBaAFHrObaNftqSp9vmXDBi8r1snSBGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC9BMDU5QUY4QTY0 MEQxMUVBQjYzOTU1NzFDNEY5QUUwMi9lczV0bzEtMnBLbjItWmNNR0x5dld5ZElF WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzNXRvMS0ycEtuMi1aY01HTHl2V3lkSUVaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC9BMDU5QUY4QTY0MEQxMUVBQjYzOTU1NzFDNEY5QUUwMi9lczV0bzEtMnBL bjItWmNNR0x5dld5ZElFWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAACv5KTt0fL4tV0a0zpZEVYlTPST3395n/6GocLA22Z6xNCc3fBBswYIU98NX rCy0Et6558lQjxeUaC1gpaziBGayQDrxgv003S+vv2JwGRdGmsfxZBAeOSuGYRzt F2CE3dpWXW2b2qrRQ7bokm1UiFoDnKOpOrsz0z5NIokmWhyOAbrQ+SbSiOj0qUL3 WdPs04eeFMYNQ7Dz3NWr9JXVi+3mSVGXZcQFcb76bjfXtqnninFjzITNl6FVGdu3 sgGuqAOPtI5t1d/yq0zuLJy+hiZrpgygx5Sz5HP/0OJHv+wzk/Pw7IfTOmJTate6 EFDxEj6UWCC0cQ5oigyR+IvhTg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:45:25 2026 by rpki-client