$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft File: es5to1-2pKn2-ZcMGLyvWydIEZ8.mft (raw, json) Hash identifier: VJE6ojOxCcOf5gH0qB6TczqFiHm/NCX0pNWIhdOIhq8= Subject key identifier: 2F:5F:E5:D7:B0:5E:0B:6D:AC:F2:A6:CF:23:94:EE:8D:1C:31:67:65 Authority key identifier: 7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F Certificate issuer: /CN=A917E0A8/serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Certificate serial: 0B90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft Manifest number: 0B57 Signing time: Mon 20 Jul 2026 19:37:23 +0000 Manifest this update: Mon 20 Jul 2026 19:37:23 +0000 Manifest next update: Mon 27 Jul 2026 19:37:23 +0000 Files and hashes: 1: es5to1-2pKn2-ZcMGLyvWydIEZ8.crl (hash: fOJvDL3UP93Zh3zQ5oL6zH4aJoxDDcJss1X0cmzHb8U=) 2: D4EFA44673CD11EA8BE69127C4F9AE02.roa (hash: EJ0yALTK4BtZ12yVPRxK0huZzO9WF6oYQ/1FbxvX6i0=) 3: C782AE14615911F08635B771C4F9AE02.roa (hash: iIrPkGOoXCcJm65/+MxDjrfNVS2l3AnmlhfuWABZ58M=) 4: 7E12F8DC4C0A11ECACB7F96AC4F9AE02.roa (hash: 6lVrS2lVBl+43cRAAzRseItd8EUIMOBsxWu2J7hhTds=) 5: 495324CA39CB11EBB2F08020C4F9AE02.roa (hash: DkdU/sit6KEl/7goo/JItkVs9gPbSPhLgwioVJX99NA=) 6: F90F9A403ACB11EC9FEBB367C4F9AE02.roa (hash: nflam170M8N5saRHiFErdBMQ++nspgUlYcwSqJKpTRk=) 7: B24920940C6911EC90B57338C4F9AE02.roa (hash: BvEViq3TGdShOf2o0F2oIYa6vXku4o1jpVtmMA8vaTc=) 8: D94C07CAF5B211EFBD3CA23FC4F9AE02.roa (hash: mmhJOgJGH0p/EXPKugGpKlEEotFbKYBiFQkdKPR9puI=) 9: 46F5BC3206A211EEBDA4D34BC4F9AE02.roa (hash: 9qbDEBiGv1lnc3TjdDbg+Lx2PzDD+usm+fulwQxlDi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 19:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2960 (0xb90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Validity Not Before: Jul 20 19:37:23 2026 GMT Not After : Jul 27 19:37:23 2026 GMT Subject: CN=6a5e78f3-a3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:49:0f:a5:4e:dd:b6:22:7d:56:a7:35:17:a3: a6:b1:39:8c:b7:95:04:8d:92:51:42:85:0c:9e:f9: 63:b8:5e:48:19:62:05:a5:16:67:97:37:21:62:5a: 27:cd:85:8b:d7:5a:39:67:02:91:8f:5d:29:4d:b9: 7b:46:7a:b9:c0:0b:b7:22:e8:d9:9e:ff:ee:83:c5: 05:24:c4:b4:e4:da:2c:c8:74:6c:8d:f3:84:a1:94: be:7d:8d:99:8a:a3:16:80:a3:30:ed:05:cf:2a:ed: 7d:fc:bf:d2:c5:1e:05:c9:20:bb:f0:45:d6:1b:3f: b0:15:46:dd:4a:31:a0:cf:04:ef:72:33:ff:a7:d6: b9:f8:8a:7b:da:82:17:8c:40:bf:93:cf:5d:3f:c8: a5:4e:ca:16:83:d0:16:ed:1d:8e:0c:38:29:8d:e6: 99:9c:be:5a:32:80:42:56:a5:aa:f7:18:d7:e1:04: d3:d2:6a:88:9e:09:79:f0:82:80:be:c0:f3:9d:23: 1b:97:50:fa:91:45:88:ab:5c:04:3d:dd:9a:c7:85: a3:5c:45:47:28:7b:e9:9c:3a:1b:d9:c2:c2:32:c9: fb:c9:a3:e4:45:3e:4e:a3:40:c8:ee:db:12:0a:c8: 34:c0:7b:a4:dd:7b:5f:01:9f:8d:2f:9e:06:37:64: 55:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:5F:E5:D7:B0:5E:0B:6D:AC:F2:A6:CF:23:94:EE:8D:1C:31:67:65 X509v3 Authority Key Identifier: keyid:7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f4:07:81:7b:95:44:28:59:7d:03:8f:51:e8:05:b1:8c:9e: 2b:1f:b5:d5:35:8d:06:50:49:36:e2:85:a2:49:58:4e:dc:c8: 61:ff:f5:04:9e:14:a6:cb:38:c9:53:16:a1:6f:18:73:c1:d9: 61:d4:6a:77:a1:6d:3f:a3:0b:52:63:d6:07:f9:80:47:6d:a3: bd:b6:d8:03:cf:9b:76:d7:86:50:ac:37:22:36:5a:ca:f5:f2: fc:5f:6c:3a:ad:3b:aa:e6:c7:82:dd:d7:a0:61:8d:3e:94:b8: 2a:1b:b6:64:fa:56:22:26:76:1d:3d:0a:0e:20:ad:a8:e8:e6: d5:f3:89:7d:50:c3:8b:c0:ad:36:fc:5f:e7:53:b9:0e:3d:2e: cc:5f:7b:42:f6:c7:b1:7b:03:a9:f7:5a:9e:a7:cd:29:0b:2a: a2:7e:30:91:e9:1b:20:a8:11:11:94:eb:de:33:d8:f6:16:33: d5:37:5f:0d:a7:52:23:1a:bc:71:9d:27:3c:aa:a8:0e:06:32: 47:f9:4a:67:01:f6:d7:90:8f:6e:29:70:0b:1f:18:42:13:3a: 23:9d:88:0f:6d:db:d8:4e:9e:2c:b4:e8:d3:da:68:64:57:8d: 8f:a8:86:cd:8f:59:ef:6a:af:c7:23:75:16:dd:4d:76:d2:ad: d4:e2:1b:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDdBQ0U2REEzNUZCNkE0QTlGNkY5OTcwQzE4QkNBRjVC Mjc0ODExOUYwHhcNMjYwNzIwMTkzNzIzWhcNMjYwNzI3MTkzNzIzWjAYMRYwFAYD VQQDEw02YTVlNzhmMy1hM2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20kPpU7dtiJ9Vqc1F6OmsTmMt5UEjZJRQoUMnvljuF5IGWIFpRZnlzchYlon zYWL11o5ZwKRj10pTbl7Rnq5wAu3IujZnv/ug8UFJMS05NosyHRsjfOEoZS+fY2Z iqMWgKMw7QXPKu19/L/SxR4FySC78EXWGz+wFUbdSjGgzwTvcjP/p9a5+Ip72oIX jEC/k89dP8ilTsoWg9AW7R2ODDgpjeaZnL5aMoBCVqWq9xjX4QTT0mqIngl58IKA vsDznSMbl1D6kUWIq1wEPd2ax4WjXEVHKHvpnDob2cLCMsn7yaPkRT5Oo0DI7tsS Csg0wHuk3XtfAZ+NL54GN2RVuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC9f5dew XgttrPKmzyOU7o0cMWdlMB8GA1UdIwQYMBaAFHrObaNftqSp9vmXDBi8r1snSBGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC9BMDU5QUY4QTY0 MEQxMUVBQjYzOTU1NzFDNEY5QUUwMi9lczV0bzEtMnBLbjItWmNNR0x5dld5ZElF WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzNXRvMS0ycEtuMi1aY01HTHl2V3lkSUVaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC9BMDU5QUY4QTY0MEQxMUVBQjYzOTU1NzFDNEY5QUUwMi9lczV0bzEtMnBL bjItWmNNR0x5dld5ZElFWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHvQHgXuVRChZfQOPUegFsYyeKx+11TWNBlBJNuKFoklYTtzIYf/1BJ4Upss4 yVMWoW8Yc8HZYdRqd6FtP6MLUmPWB/mAR22jvbbYA8+bdteGUKw3IjZayvXy/F9s Oq07qubHgt3XoGGNPpS4Khu2ZPpWIiZ2HT0KDiCtqOjm1fOJfVDDi8CtNvxf51O5 Dj0uzF97QvbHsXsDqfdanqfNKQsqon4wkekbIKgREZTr3jPY9hYz1TdfDadSIxq8 cZ0nPKqoDgYyR/lKZwH215CPbilwCx8YQhM6I52ID23b2E6eLLTo09poZFeNj6iG zY9Z72qvxyN1Ft1NdtKt1OIb1g== -----END CERTIFICATE-----Generated at Tue Jul 21 22:17:23 2026 by rpki-client