$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft File: opgFnwZTffjAi4klX3lZQaMcGAA.mft (raw, json) Hash identifier: fCOJewWOPS/f3ZgHusWw+la/0i4C6jItZsMhdMI/MeY= Subject key identifier: CC:02:1B:70:BB:FE:E5:BA:DD:EB:52:20:DB:D2:A8:58:37:E4:E0:17 Authority key identifier: A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00 Certificate issuer: /CN=A9144CB7/serialNumber=A298059F06537DF8C08B89255F795941A31C1800 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft Manifest number: 0138 Signing time: Sun 27 Sep 2026 06:03:15 +0000 Manifest this update: Sun 27 Sep 2026 06:03:14 +0000 Manifest next update: Sun 04 Oct 2026 06:03:14 +0000 Files and hashes: 1: opgFnwZTffjAi4klX3lZQaMcGAA.crl (hash: PmFVhWaLzXO3zlMjdFU1EqC+sOJxevNs9kAYt7MSqgg=) 2: 903E0F1652BD11F0A9261F57C4F9AE02.roa (hash: dmB1cr7byswXq/X1M5OhCF6oVNLPlMisHj2PV9sIXP0=) 3: E8716FD4EA3511EF89116C52C4F9AE02.roa (hash: 0FCY4nM/xiPTvsko2lPHjPRBl+NB5R5liczHspFuXXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 06:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144CB7, serialNumber=A298059F06537DF8C08B89255F795941A31C1800 Validity Not Before: Sep 27 06:03:14 2026 GMT Not After : Oct 4 06:03:14 2026 GMT Subject: CN=6ab8b1a3-5e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d2:c9:b6:1a:34:68:5f:44:48:13:c1:47:3a: d6:62:e1:20:f3:59:36:93:35:16:48:60:88:44:44: ef:55:fd:1e:cb:63:7c:de:c6:db:46:bf:8e:a4:35: ed:01:7b:b7:4f:8a:62:ea:f5:f9:f5:6a:53:bf:e1: 20:97:77:29:fe:67:e2:ca:d9:fb:43:4a:6f:c6:66: 44:c0:dc:33:31:f3:07:16:de:75:c3:8f:ff:f7:66: b1:9f:2c:59:03:02:e5:b2:a6:a6:0a:45:55:f7:c9: bb:49:f3:db:7c:13:24:68:64:41:5a:98:14:48:62: e0:40:21:1c:e6:9d:0d:9a:db:ae:76:92:6e:cb:7d: c8:e5:3d:58:a8:4a:54:a2:04:ac:1d:2c:3c:92:ec: 16:64:1c:d7:61:7e:8f:e9:78:c7:34:97:ea:5c:92: e8:50:a5:ca:e4:ae:58:f3:d8:87:18:42:37:d2:cc: 77:c1:54:23:f8:50:f3:66:a8:b6:a5:1b:9d:cd:fd: 2c:88:70:12:37:56:c5:66:3f:07:b1:0c:7e:2b:b4: 31:b5:1d:6d:5c:b0:7b:de:d4:df:c5:7b:d5:87:69: e2:4f:d9:e4:2a:e1:01:7b:88:a9:04:24:42:e2:a4: 0a:7b:f1:36:6c:5a:8e:e1:69:9f:85:00:5a:1c:bd: 4e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:02:1B:70:BB:FE:E5:BA:DD:EB:52:20:DB:D2:A8:58:37:E4:E0:17 X509v3 Authority Key Identifier: keyid:A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:de:67:9e:14:3a:41:f5:14:3f:63:23:40:ef:bc:38:92:a6: 2c:46:36:d7:ef:f0:6a:b6:31:66:5c:b6:98:01:81:bb:4b:af: c0:e8:14:6c:9f:5e:3f:71:dc:f2:74:f1:af:ac:54:5e:11:93: 13:4b:8f:ea:19:0b:8b:fe:8a:0c:ce:9e:8d:6a:e6:67:50:f4: c9:3f:31:95:82:71:b0:5d:e0:09:bd:19:19:6b:7d:eb:bd:94: 96:a3:d9:ba:32:b2:9c:33:b6:b6:60:41:7f:45:19:9e:3b:60: 3c:7a:f1:6b:4e:91:a4:8d:a4:30:4f:18:5e:e5:cf:3c:e0:f7: 1b:dd:b8:13:f3:d6:be:15:ec:2a:8c:ab:35:e8:9b:9f:3e:0b: d9:bc:ea:01:d8:69:00:63:7d:e4:ff:8b:c1:9c:9c:bd:fa:a9: b9:2b:03:ab:66:b7:84:76:37:a5:f7:39:07:79:28:30:83:f2: ac:db:f1:88:63:82:7c:d0:be:a2:ca:2a:ca:cb:c9:e6:cc:02: 78:76:4f:c7:25:5d:a1:41:ac:7f:2c:3d:fe:a9:cf:12:24:a1: 54:87:06:f7:62:8c:47:3e:47:2d:60:05:d5:48:a9:26:a4:7d: 34:96:d1:cd:ca:2e:5b:d0:2d:78:c7:b5:05:09:c6:24:d7:4d: 19:82:d6:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRDQjcxMTAvBgNVBAUTKEEyOTgwNTlGMDY1MzdERjhDMDhCODkyNTVGNzk1OTQx QTMxQzE4MDAwHhcNMjYwOTI3MDYwMzE0WhcNMjYxMDA0MDYwMzE0WjAYMRYwFAYD VQQDEw02YWI4YjFhMy01ZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNLJtho0aF9ESBPBRzrWYuEg81k2kzUWSGCIRETvVf0ey2N83sbbRr+OpDXt AXu3T4pi6vX59WpTv+Egl3cp/mfiytn7Q0pvxmZEwNwzMfMHFt51w4//92axnyxZ AwLlsqamCkVV98m7SfPbfBMkaGRBWpgUSGLgQCEc5p0NmtuudpJuy33I5T1YqEpU ogSsHSw8kuwWZBzXYX6P6XjHNJfqXJLoUKXK5K5Y89iHGEI30sx3wVQj+FDzZqi2 pRudzf0siHASN1bFZj8HsQx+K7QxtR1tXLB73tTfxXvVh2niT9nkKuEBe4ipBCRC 4qQKe/E2bFqO4WmfhQBaHL1OuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMwCG3C7 /uW63etSINvSqFg35OAXMB8GA1UdIwQYMBaAFKKYBZ8GU334wIuJJV95WUGjHBgA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NENCNy84QzkzRjc2Q0Ux NzYxMUVGQjc5ODFCMTlDNEY5QUUwMi9vcGdGbndaVGZmakFpNGtsWDNsWlFhTWNH QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29wZ0Zud1pUZmZqQWk0a2xYM2xaUWFNY0dBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NENCNy84QzkzRjc2Q0UxNzYxMUVGQjc5ODFCMTlDNEY5QUUwMi9vcGdGbndaVGZm akFpNGtsWDNsWlFhTWNHQUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkd5nnhQ6QfUUP2MjQO+8OJKmLEY21+/warYxZly2mAGBu0uvwOgUbJ9eP3Hc 8nTxr6xUXhGTE0uP6hkLi/6KDM6ejWrmZ1D0yT8xlYJxsF3gCb0ZGWt9672UlqPZ ujKynDO2tmBBf0UZnjtgPHrxa06RpI2kME8YXuXPPOD3G924E/PWvhXsKoyrNeib nz4L2bzqAdhpAGN95P+LwZycvfqpuSsDq2a3hHY3pfc5B3koMIPyrNvxiGOCfNC+ osoqysvJ5swCeHZPxyVdoUGsfyw9/qnPEiShVIcG92KMRz5HLWAF1UipJqR9NJbR zcouW9AteMe1BQnGJNdNGYLWFw== -----END CERTIFICATE-----Generated at Sun Sep 27 17:13:55 2026 by rpki-client