$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft File: opgFnwZTffjAi4klX3lZQaMcGAA.mft (raw, json) Hash identifier: R7Tq1E/WaPN9EB0epJTSmzu7kqVqoKjTvBaHIF/Ku9E= Subject key identifier: 4B:7B:7B:86:68:53:CC:C9:FB:E3:D7:57:79:FD:9E:35:0D:AA:36:FD Authority key identifier: A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00 Certificate issuer: /CN=A9144CB7/serialNumber=A298059F06537DF8C08B89255F795941A31C1800 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft Manifest number: F3 Signing time: Wed 13 May 2026 06:29:14 +0000 Manifest this update: Wed 13 May 2026 06:29:13 +0000 Manifest next update: Wed 20 May 2026 06:29:13 +0000 Files and hashes: 1: opgFnwZTffjAi4klX3lZQaMcGAA.crl (hash: f7OVPO5mt6K+ximGsqjXyDGdNnDxlUGqDt+LMfcP00w=) 2: E8716FD4EA3511EF89116C52C4F9AE02.roa (hash: 0FCY4nM/xiPTvsko2lPHjPRBl+NB5R5liczHspFuXXU=) 3: 903E0F1652BD11F0A9261F57C4F9AE02.roa (hash: dmB1cr7byswXq/X1M5OhCF6oVNLPlMisHj2PV9sIXP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 06:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CB7, serialNumber=A298059F06537DF8C08B89255F795941A31C1800 Validity Not Before: May 13 06:29:13 2026 GMT Not After : May 20 06:29:13 2026 GMT Subject: CN=6a041a39-5bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cb:9f:43:b8:8d:d6:7c:fb:fd:e1:6d:0b:62: 73:e1:71:e8:97:28:e6:01:a7:89:5f:1c:8c:b3:25: f5:b0:51:33:04:c4:7f:6a:86:3d:a4:72:dd:7f:a4: a5:47:16:7f:91:b4:99:2f:fe:f5:9c:83:76:d6:6b: 42:89:09:04:e8:2d:4d:d0:eb:c1:15:90:44:1b:13: 04:cc:20:72:11:a6:e5:ea:3d:a2:32:54:ed:bf:09: 49:8c:dc:cb:63:45:c9:e6:35:06:29:35:b2:83:20: d5:91:d1:71:24:4a:7c:7a:2c:25:cb:8b:9b:ad:7f: de:9e:3e:8c:37:ae:ab:a3:cd:71:53:c9:25:5e:f2: bd:b2:52:12:2d:6b:b4:9e:99:ed:39:4d:07:70:c9: 61:d1:20:0a:1e:19:1c:c6:10:7e:e8:0f:8c:18:cb: 67:ff:34:3f:11:51:35:97:9d:5a:25:dd:06:55:5d: 98:95:55:fd:3b:a2:2a:48:d3:df:e7:cb:c5:be:ab: b2:f3:23:24:d5:60:3f:30:47:1e:75:7e:20:cb:97: 15:96:c0:4e:c0:8e:25:de:c8:cc:26:17:b1:0f:d2: 26:db:99:fa:53:51:1c:20:1c:d7:24:5e:8f:53:43: 07:fb:15:53:98:3e:75:7d:62:d8:37:e7:46:1d:e7: 8d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7B:7B:86:68:53:CC:C9:FB:E3:D7:57:79:FD:9E:35:0D:AA:36:FD X509v3 Authority Key Identifier: keyid:A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:6e:85:4c:4f:d1:a1:7b:28:7a:ee:9a:a8:96:65:86:19:0e: cb:c8:6a:22:d8:95:ac:5c:53:fa:e7:71:87:2c:b9:29:f1:b1: 23:48:b0:01:e5:60:c6:e8:d2:4f:23:a9:5e:a1:03:54:7c:75: 68:a6:8e:3a:3f:38:e5:64:4d:6e:0b:22:db:ae:2d:32:12:34: 20:b7:0e:73:c8:60:c7:b9:06:56:1c:d7:d8:18:cf:fe:75:70: a9:3a:70:f0:95:6e:e6:35:1d:cc:58:0f:65:2d:74:b5:23:b1: 1e:5d:da:b9:6f:26:25:eb:10:e4:3f:e7:10:eb:09:bb:95:75: 9f:eb:25:f1:76:b4:66:96:2f:24:0d:3d:3a:0f:f8:da:80:8c: 51:f9:58:f1:8b:2e:27:cb:42:a5:04:c4:8d:8b:7c:c2:0f:b2: ae:d4:cd:44:63:36:05:dd:fc:2d:56:b2:41:14:7e:f8:ef:39: 24:f1:43:58:45:8f:dc:c4:e5:de:58:11:1b:b1:b8:1d:08:86: 44:79:6b:7d:b7:f1:13:b8:15:d6:1e:e1:9a:fe:95:d7:77:89: e1:27:50:0e:cb:81:8d:a1:3d:21:85:30:77:df:ae:ee:ff:37: 5d:da:6d:2d:a7:9e:76:fe:f3:b5:f6:99:06:79:ec:5f:4b:17: 45:fd:a8:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRDQjcxMTAvBgNVBAUTKEEyOTgwNTlGMDY1MzdERjhDMDhCODkyNTVGNzk1OTQx QTMxQzE4MDAwHhcNMjYwNTEzMDYyOTEzWhcNMjYwNTIwMDYyOTEzWjAYMRYwFAYD VQQDEw02YTA0MWEzOS01YmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk8ufQ7iN1nz7/eFtC2Jz4XHolyjmAaeJXxyMsyX1sFEzBMR/aoY9pHLdf6Sl RxZ/kbSZL/71nIN21mtCiQkE6C1N0OvBFZBEGxMEzCByEabl6j2iMlTtvwlJjNzL Y0XJ5jUGKTWygyDVkdFxJEp8eiwly4ubrX/enj6MN66ro81xU8klXvK9slISLWu0 npntOU0HcMlh0SAKHhkcxhB+6A+MGMtn/zQ/EVE1l51aJd0GVV2YlVX9O6IqSNPf 58vFvquy8yMk1WA/MEcedX4gy5cVlsBOwI4l3sjMJhexD9Im25n6U1EcIBzXJF6P U0MH+xVTmD51fWLYN+dGHeeNDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEt7e4Zo U8zJ++PXV3n9njUNqjb9MB8GA1UdIwQYMBaAFKKYBZ8GU334wIuJJV95WUGjHBgA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NENCNy84QzkzRjc2Q0Ux NzYxMUVGQjc5ODFCMTlDNEY5QUUwMi9vcGdGbndaVGZmakFpNGtsWDNsWlFhTWNH QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29wZ0Zud1pUZmZqQWk0a2xYM2xaUWFNY0dBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NENCNy84QzkzRjc2Q0UxNzYxMUVGQjc5ODFCMTlDNEY5QUUwMi9vcGdGbndaVGZm akFpNGtsWDNsWlFhTWNHQUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM26FTE/RoXsoeu6aqJZlhhkOy8hqItiVrFxT+udxhyy5KfGxI0iwAeVgxujS TyOpXqEDVHx1aKaOOj845WRNbgsi264tMhI0ILcOc8hgx7kGVhzX2BjP/nVwqTpw 8JVu5jUdzFgPZS10tSOxHl3auW8mJesQ5D/nEOsJu5V1n+sl8Xa0ZpYvJA09Og/4 2oCMUflY8YsuJ8tCpQTEjYt8wg+yrtTNRGM2Bd38LVayQRR++O85JPFDWEWP3MTl 3lgRG7G4HQiGRHlrfbfxE7gV1h7hmv6V13eJ4SdQDsuBjaE9IYUwd9+u7v83Xdpt Laeedv7ztfaZBnnsX0sXRf2o0g== -----END CERTIFICATE-----Generated at Wed May 13 11:04:31 2026 by rpki-client