$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.mft File: RiOppNLqhemPtaEaDSywgDiHjw8.mft (raw, json) Hash identifier: u+Ro83IAGiCIVd+8/akN8lJIeHV52S0PuvtU16Q4n4c= Subject key identifier: F6:D9:FA:55:0D:CA:92:D5:0A:17:59:BF:0B:4F:F7:F4:74:AC:A8:AB Authority key identifier: 46:23:A9:A4:D2:EA:85:E9:8F:B5:A1:1A:0D:2C:B0:80:38:87:8F:0F Certificate issuer: /CN=A9128DE9/serialNumber=4623A9A4D2EA85E98FB5A11A0D2CB08038878F0F Certificate serial: 0CB3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RiOppNLqhemPtaEaDSywgDiHjw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.mft Manifest number: 0CA9 Signing time: Wed 22 Jul 2026 18:49:52 +0000 Manifest this update: Wed 22 Jul 2026 18:49:51 +0000 Manifest next update: Wed 29 Jul 2026 18:49:51 +0000 Files and hashes: 1: RiOppNLqhemPtaEaDSywgDiHjw8.crl (hash: 0G6BEoKiZDlLmcpFPW5slFIx3UP/k8iq0qnWofd4oB8=) 2: 75E6DD481BDA11EAB3F45D44C4F9AE02.roa (hash: 1pX+suWdvaKMGIWE2+J1hAusGSSmWNeIkojCLUq1N5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RiOppNLqhemPtaEaDSywgDiHjw8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3251 (0xcb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=4623A9A4D2EA85E98FB5A11A0D2CB08038878F0F Validity Not Before: Jul 22 18:49:51 2026 GMT Not After : Jul 29 18:49:51 2026 GMT Subject: CN=6a6110cf-dbbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:88:3d:52:66:da:1d:89:30:58:cd:ce:cd:23: c9:d7:43:ea:3e:38:a8:30:e1:4e:76:43:41:a1:63: 89:f3:e0:11:54:b7:32:4a:ba:0d:42:6f:ab:64:b1: 02:50:d0:60:f5:50:7a:58:70:89:f1:f8:f1:7d:e9: c7:82:b2:b8:19:63:be:f5:f7:e2:d6:7e:39:28:2a: ec:51:4c:a7:db:74:25:f3:00:b3:5f:ca:8f:ad:68: ed:3e:5f:d9:3b:55:fd:0d:49:3a:00:68:ae:60:7f: ae:37:09:58:ee:55:23:65:d6:16:9e:79:81:d6:db: 3a:83:a6:2c:2e:08:99:38:c1:ed:40:ac:3a:82:6f: 6f:d7:ba:81:c4:b8:2e:57:a0:a4:03:22:24:4b:66: 8a:c4:65:b9:0b:a3:e1:86:da:9e:37:93:9c:cc:71: f0:9c:aa:f7:55:80:9b:d2:d6:9f:76:80:4f:0c:33: 38:ac:96:58:53:ba:f2:1e:96:b5:82:ab:87:9f:83: 26:bd:29:d1:3a:a7:ce:df:57:f7:96:ca:92:f3:45: 99:31:e3:1a:c9:dc:08:2c:38:47:7e:bf:9e:57:3e: bb:4f:64:79:ec:c4:dd:17:48:de:40:de:4b:71:ee: 1f:fa:79:9f:d9:36:3e:15:16:d2:b9:b8:eb:49:e8: 9d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D9:FA:55:0D:CA:92:D5:0A:17:59:BF:0B:4F:F7:F4:74:AC:A8:AB X509v3 Authority Key Identifier: keyid:46:23:A9:A4:D2:EA:85:E9:8F:B5:A1:1A:0D:2C:B0:80:38:87:8F:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RiOppNLqhemPtaEaDSywgDiHjw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:9b:84:ac:1e:95:b6:09:57:04:33:4a:7f:62:7d:07:43:21: d2:7c:a5:a1:62:47:62:b9:30:59:67:e5:a9:a3:33:18:7d:e0: 25:eb:00:b8:f8:3f:5c:e3:ca:42:58:e7:b5:7a:d7:e6:14:76: eb:9d:57:ed:b9:2e:80:fd:6f:54:47:4f:d7:26:3e:01:66:3b: 51:45:a5:ee:71:98:23:4d:3c:b8:65:53:3f:fa:f7:89:db:9c: fc:45:25:26:f0:cb:94:ab:3b:84:bf:c2:e4:8f:a0:92:ae:61: 84:cd:d6:23:d0:ec:c9:5e:05:95:6c:68:ea:0a:bd:0e:75:36: db:12:f4:17:82:31:4c:1d:a2:44:ca:ab:67:3a:3b:00:5d:33: e5:81:ce:70:d3:bc:8f:2e:7b:5a:81:16:37:a2:75:e2:c2:ad: 8e:1a:a8:ba:15:07:6d:e7:40:da:b4:98:9e:01:27:e2:a1:d0: 93:37:2e:cf:af:75:4c:bd:5d:6f:a1:4d:ac:b5:43:06:41:8a: 24:ee:6c:aa:92:91:ea:45:05:5f:e3:79:a2:39:07:02:cb:3b: 0f:c2:2e:4d:ed:f8:1f:c4:7b:0c:73:b0:d3:8f:7b:0c:fe:e7: ca:64:cd:18:bd:fb:e2:e3:25:4b:5f:6d:ba:4d:5e:4a:ba:2a: ef:b9:33:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDQ2MjNBOUE0RDJFQTg1RTk4RkI1QTExQTBEMkNCMDgw Mzg4NzhGMEYwHhcNMjYwNzIyMTg0OTUxWhcNMjYwNzI5MTg0OTUxWjAYMRYwFAYD VQQDEw02YTYxMTBjZi1kYmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ig9UmbaHYkwWM3OzSPJ10PqPjioMOFOdkNBoWOJ8+ARVLcySroNQm+rZLEC UNBg9VB6WHCJ8fjxfenHgrK4GWO+9ffi1n45KCrsUUyn23Ql8wCzX8qPrWjtPl/Z O1X9DUk6AGiuYH+uNwlY7lUjZdYWnnmB1ts6g6YsLgiZOMHtQKw6gm9v17qBxLgu V6CkAyIkS2aKxGW5C6PhhtqeN5OczHHwnKr3VYCb0tafdoBPDDM4rJZYU7ryHpa1 gquHn4MmvSnROqfO31f3lsqS80WZMeMaydwILDhHfr+eVz67T2R57MTdF0jeQN5L ce4f+nmf2TY+FRbSubjrSeidcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPbZ+lUN ypLVChdZvwtP9/R0rKirMB8GA1UdIwQYMBaAFEYjqaTS6oXpj7WhGg0ssIA4h48P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9EMDA0OUY4NjFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9SaU9wcE5McWhlbVB0YUVhRFN5d2dEaUhq dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JpT3BwTkxxaGVtUHRhRWFEU3l3Z0RpSGp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OERFOS9EMDA0OUY4NjFCRDUxMUVBODBDQkNGMzZDNEY5QUUwMi9SaU9wcE5McWhl bVB0YUVhRFN5d2dEaUhqdzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUJuErB6VtglXBDNKf2J9B0Mh0nyloWJHYrkwWWflqaMzGH3gJesAuPg/XOPK QljntXrX5hR2651X7bkugP1vVEdP1yY+AWY7UUWl7nGYI008uGVTP/r3iduc/EUl JvDLlKs7hL/C5I+gkq5hhM3WI9DsyV4FlWxo6gq9DnU22xL0F4IxTB2iRMqrZzo7 AF0z5YHOcNO8jy57WoEWN6J14sKtjhqouhUHbedA2rSYngEn4qHQkzcuz691TL1d b6FNrLVDBkGKJO5sqpKR6kUFX+N5ojkHAss7D8IuTe34H8R7DHOw0497DP7nymTN GL374uMlS19tuk1eSroq77kz8A== -----END CERTIFICATE-----Generated at Thu Jul 23 21:50:41 2026 by rpki-client