$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft File: es5to1-2pKn2-ZcMGLyvWydIEZ8.mft (raw, json) Hash identifier: eYThFbLX2KqaYfVf7bgq0BSaDOCtdcsa/uM+9ujNhCw= Subject key identifier: 2B:B2:37:21:14:7D:12:75:ED:22:D3:B7:A5:96:34:AA:C9:32:40:5E Authority key identifier: 7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F Certificate issuer: /CN=A917E0A8/serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Certificate serial: 0BA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft Manifest number: 0B6F Signing time: Fri 04 Sep 2026 19:07:19 +0000 Manifest this update: Fri 04 Sep 2026 19:07:18 +0000 Manifest next update: Fri 11 Sep 2026 19:07:18 +0000 Files and hashes: 1: es5to1-2pKn2-ZcMGLyvWydIEZ8.crl (hash: PArDi6Hxa5gQrzqDeNUc/I4PPdme1H8uIAwW5FFvIQk=) 2: B24920940C6911EC90B57338C4F9AE02.roa (hash: BvEViq3TGdShOf2o0F2oIYa6vXku4o1jpVtmMA8vaTc=) 3: 46F5BC3206A211EEBDA4D34BC4F9AE02.roa (hash: 9qbDEBiGv1lnc3TjdDbg+Lx2PzDD+usm+fulwQxlDi0=) 4: C782AE14615911F08635B771C4F9AE02.roa (hash: iIrPkGOoXCcJm65/+MxDjrfNVS2l3AnmlhfuWABZ58M=) 5: D94C07CAF5B211EFBD3CA23FC4F9AE02.roa (hash: mmhJOgJGH0p/EXPKugGpKlEEotFbKYBiFQkdKPR9puI=) 6: 7E12F8DC4C0A11ECACB7F96AC4F9AE02.roa (hash: 6lVrS2lVBl+43cRAAzRseItd8EUIMOBsxWu2J7hhTds=) 7: D4EFA44673CD11EA8BE69127C4F9AE02.roa (hash: EJ0yALTK4BtZ12yVPRxK0huZzO9WF6oYQ/1FbxvX6i0=) 8: 495324CA39CB11EBB2F08020C4F9AE02.roa (hash: DkdU/sit6KEl/7goo/JItkVs9gPbSPhLgwioVJX99NA=) 9: F90F9A403ACB11EC9FEBB367C4F9AE02.roa (hash: nflam170M8N5saRHiFErdBMQ++nspgUlYcwSqJKpTRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 19:07:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2984 (0xba8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Validity Not Before: Sep 4 19:07:18 2026 GMT Not After : Sep 11 19:07:18 2026 GMT Subject: CN=6a9b16e7-9cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:de:71:c6:c5:da:65:08:e6:fc:45:3c:18:6a: b9:41:27:b9:35:f6:58:af:dc:b1:7f:10:8a:be:db: 49:7a:38:c3:12:b1:a1:ce:ab:af:d7:23:5f:e4:41: 98:9f:57:8e:47:c4:26:fd:58:39:32:16:58:9c:9d: 00:04:a8:a8:18:00:e9:20:21:e0:f0:a8:53:0a:8d: 47:28:1b:16:83:6d:16:f6:68:5c:b4:0f:1f:02:3d: 20:79:22:97:bd:9d:79:95:a7:54:ca:0b:93:55:4b: 32:c3:77:cb:a5:81:3a:6a:03:a7:b2:86:58:90:b9: 95:be:da:4d:ea:c1:82:e4:8a:58:df:bd:16:0b:e9: 97:0c:01:5e:70:3d:c5:33:31:9e:89:8d:40:67:ea: 51:09:1f:0d:94:6e:21:e5:5a:00:d7:ac:0d:df:fc: 92:c8:4f:bf:93:73:ea:04:3e:76:fa:cf:af:08:6b: cb:9b:d3:cb:f5:cf:c0:b3:d1:8e:d0:03:46:3e:28: c0:5d:6f:2f:3d:55:09:17:8c:8b:67:40:d1:3e:0e: d6:3d:4a:27:fd:cd:d7:a1:e3:d6:ba:d8:5d:02:90: 02:a8:39:7b:37:95:6b:05:6f:fe:b2:b8:06:ba:8d: d3:6b:7d:0e:cf:cd:76:e4:78:24:13:a4:41:8b:4c: 64:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B2:37:21:14:7D:12:75:ED:22:D3:B7:A5:96:34:AA:C9:32:40:5E X509v3 Authority Key Identifier: keyid:7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:77:38:85:cb:41:f7:3c:16:f1:ad:16:be:c6:0a:d2:9f:f8: f6:44:e5:6e:3a:da:29:ee:e1:c9:4a:68:84:d3:60:7a:6b:84: 2c:d4:67:79:3c:2e:25:d5:f8:11:ef:09:53:68:27:ad:79:7b: 69:18:7f:f5:1d:10:34:4c:c4:9b:de:87:0c:10:9d:2e:61:d5: c8:fb:ce:97:62:18:29:d2:a2:38:59:e0:12:fc:84:ae:b7:a7: 8b:62:f6:34:bd:21:87:4e:55:01:58:c6:2c:5c:07:ef:55:7e: d3:81:05:8f:bf:69:1d:23:a2:46:75:c9:88:a4:30:a8:ef:47: ae:70:c1:00:59:6c:b1:27:d2:28:70:e0:5b:44:aa:8a:8e:0f: 0f:1a:af:72:97:8e:30:ae:fc:69:9b:1c:00:0c:c2:94:35:92: b9:51:c8:a1:92:89:3e:a1:45:7e:2d:10:26:c3:c7:6f:c9:fd: c9:a8:ff:61:bc:f8:3d:55:b8:ea:3a:da:38:56:45:a3:f4:95: 92:4b:b2:4a:4d:13:9c:0b:38:c9:99:e3:10:a0:ba:e7:41:b5: c5:4d:bb:24:59:cf:bc:c3:4b:ac:fc:c8:5a:99:31:e3:c6:86: 5d:06:cf:62:78:6d:dd:c6:96:92:2d:9a:20:d1:7f:79:f9:a4: e5:56:82:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDdBQ0U2REEzNUZCNkE0QTlGNkY5OTcwQzE4QkNBRjVC Mjc0ODExOUYwHhcNMjYwOTA0MTkwNzE4WhcNMjYwOTExMTkwNzE4WjAYMRYwFAYD VQQDEw02YTliMTZlNy05Y2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApd5xxsXaZQjm/EU8GGq5QSe5NfZYr9yxfxCKvttJejjDErGhzquv1yNf5EGY n1eOR8Qm/Vg5MhZYnJ0ABKioGADpICHg8KhTCo1HKBsWg20W9mhctA8fAj0geSKX vZ15ladUyguTVUsyw3fLpYE6agOnsoZYkLmVvtpN6sGC5IpY370WC+mXDAFecD3F MzGeiY1AZ+pRCR8NlG4h5VoA16wN3/ySyE+/k3PqBD52+s+vCGvLm9PL9c/As9GO 0ANGPijAXW8vPVUJF4yLZ0DRPg7WPUon/c3XoePWuthdApACqDl7N5VrBW/+srgG uo3Ta30Oz8125HgkE6RBi0xkUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCuyNyEU fRJ17SLTt6WWNKrJMkBeMB8GA1UdIwQYMBaAFHrObaNftqSp9vmXDBi8r1snSBGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC9BMDU5QUY4QTY0 MEQxMUVBQjYzOTU1NzFDNEY5QUUwMi9lczV0bzEtMnBLbjItWmNNR0x5dld5ZElF WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzNXRvMS0ycEtuMi1aY01HTHl2V3lkSUVaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC9BMDU5QUY4QTY0MEQxMUVBQjYzOTU1NzFDNEY5QUUwMi9lczV0bzEtMnBL bjItWmNNR0x5dld5ZElFWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAInc4hctB9zwW8a0WvsYK0p/49kTlbjraKe7hyUpohNNgemuELNRneTwuJdX4 Ee8JU2gnrXl7aRh/9R0QNEzEm96HDBCdLmHVyPvOl2IYKdKiOFngEvyErreni2L2 NL0hh05VAVjGLFwH71V+04EFj79pHSOiRnXJiKQwqO9HrnDBAFlssSfSKHDgW0Sq io4PDxqvcpeOMK78aZscAAzClDWSuVHIoZKJPqFFfi0QJsPHb8n9yaj/Ybz4PVW4 6jraOFZFo/SVkkuySk0TnAs4yZnjEKC650G1xU27JFnPvMNLrPzIWpkx48aGXQbP Ynht3caWki2aINF/efmk5VaCdw== -----END CERTIFICATE-----Generated at Sat Sep 5 03:12:26 2026 by rpki-client