$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft File: opsbaAnOwakkcMWcbDa_pc84cYY.mft (raw, json) Hash identifier: 1/MGXbJQe3WdHniOepax9r9m9SwQ1YHKLaUA7wBe3J0= Subject key identifier: 5F:05:E9:B4:D6:A8:B3:F5:30:86:99:C7:3C:11:DE:C1:20:A9:7C:13 Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 Certificate issuer: /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft Manifest number: 5C Signing time: Sun 29 Jun 2025 06:12:29 +0000 Manifest this update: Sun 29 Jun 2025 06:12:29 +0000 Manifest next update: Sun 06 Jul 2025 06:12:29 +0000 Files and hashes: 1: opsbaAnOwakkcMWcbDa_pc84cYY.crl (hash: apG8fajhRznABP0PWzfxFd0seuFYZ4XCUayOnZVSRGM=) 2: 7404496836E411F0A95FB239C4F9AE02.roa (hash: WHGMZh9P2RExWIeMMaDkbGi0VRoxW1Iai0A3Zb9yWT4=) 3: 7375238236E411F0A95FB239C4F9AE02.roa (hash: 6GqewoLZaVKTqsSzxgnIGXRwmj2ShKpEerZMfS7j+UE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Validity Not Before: Jun 29 06:12:29 2025 GMT Not After : Jul 6 06:12:29 2025 GMT Subject: CN=6860d94d-ad6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c9:a8:e4:32:9c:0e:5a:cf:19:3d:05:65:16: 9d:99:c0:db:89:e6:c9:40:22:17:ae:4b:08:e8:79: a2:d2:33:91:95:14:cf:50:27:c2:aa:5e:5f:cd:ab: e2:f4:28:d4:60:39:d9:0d:5d:ea:4b:a9:a3:11:08: 0a:33:33:66:c8:f3:74:2d:b7:44:80:e2:b3:5c:62: 04:45:f3:f2:3b:80:90:d1:50:84:37:26:6c:d2:4b: f1:68:a1:96:1b:92:5c:d6:75:85:fb:0a:e8:dc:5d: ac:20:06:e4:3e:d0:39:3f:42:d7:39:d1:3b:e6:99: f4:d8:f5:3d:cf:18:db:06:ff:c9:bc:09:9d:a8:46: 31:06:08:62:37:2e:87:eb:5c:a0:b7:5d:b9:10:8f: c3:5d:ce:a5:20:c6:d1:cb:30:93:26:c2:32:3a:b8: a2:d9:67:1a:3c:8f:88:fd:4d:43:b4:06:c2:c0:5f: 4d:19:f4:36:2e:ae:c4:1f:ed:44:63:33:36:e9:d6: ec:8e:71:22:d7:df:fc:d6:96:be:4f:c6:35:d2:c2: 25:ce:0d:2b:a6:ea:95:37:f1:89:eb:88:c0:9b:63: d6:11:43:e5:89:88:fd:9c:ea:b7:9a:01:ae:9d:b5: 20:3e:5a:04:3c:07:83:ab:1f:96:19:bf:57:b8:e0: 39:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:05:E9:B4:D6:A8:B3:F5:30:86:99:C7:3C:11:DE:C1:20:A9:7C:13 X509v3 Authority Key Identifier: keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:37:82:51:a8:6e:36:ef:51:eb:59:66:4d:3a:26:ae:ec:5d: ab:8d:37:2a:66:f1:99:dc:94:5a:0a:a8:79:c6:ec:64:40:b9: fa:f2:bc:70:b5:18:3e:8b:96:23:ca:2d:b8:82:56:c1:96:00: 85:42:bb:58:5b:54:fc:12:8a:a0:c7:a6:58:64:8b:77:09:8b: 51:29:53:6e:b5:32:74:4f:18:dd:82:58:85:94:56:31:db:3a: 79:ab:b7:91:ec:fc:86:91:56:33:8f:c7:bd:66:b4:a9:11:10: de:a4:ba:a8:4a:d1:ba:c1:64:7f:11:5e:c0:e2:2c:64:fc:dd: c9:30:94:ca:ed:0e:1b:cb:c0:7a:bb:49:6e:1d:fe:07:59:66: 77:c1:a5:df:e6:ea:2e:5b:44:71:6a:e4:e4:5b:06:a2:e3:96: 95:f0:62:d5:e0:02:30:84:ca:ca:aa:d8:3d:df:70:eb:40:a0: 13:6a:59:0a:e4:77:7b:42:87:f1:3e:38:9d:69:53:dc:96:a3: 9b:41:16:9f:4a:2a:b1:7e:dd:ee:eb:18:87:d0:32:26:ad:5a: de:35:d4:a4:fa:df:ca:66:57:da:de:a2:93:cf:bb:75:20:79: a5:de:10:d8:2f:8a:1b:93:15:fb:ae:cd:c9:ca:79:92:24:9c: 2f:cc:ff:10 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0JBQzExMC8GA1UEBRMoQTI5QjFCNjgwOUNFQzFBOTI0NzBDNTlDNkMzNkJGQTVD RjM4NzE4NjAeFw0yNTA2MjkwNjEyMjlaFw0yNTA3MDYwNjEyMjlaMBgxFjAUBgNV BAMTDTY4NjBkOTRkLWFkNmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJyajkMpwOWs8ZPQVlFp2ZwNuJ5slAIheuSwjoeaLSM5GVFM9QJ8KqXl/Nq+L0 KNRgOdkNXepLqaMRCAozM2bI83Qtt0SA4rNcYgRF8/I7gJDRUIQ3JmzSS/FooZYb klzWdYX7CujcXawgBuQ+0Dk/Qtc50TvmmfTY9T3PGNsG/8m8CZ2oRjEGCGI3Lofr XKC3XbkQj8NdzqUgxtHLMJMmwjI6uKLZZxo8j4j9TUO0BsLAX00Z9DYursQf7URj Mzbp1uyOcSLX3/zWlr5PxjXSwiXODSum6pU38YnriMCbY9YRQ+WJiP2c6reaAa6d tSA+WgQ8B4OrH5YZv1e44DlZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXwXptNao s/UwhpnHPBHewSCpfBMwHwYDVR0jBBgwFoAUopsbaAnOwakkcMWcbDa/pc84cYYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3QkFDL0M2QUQzRTBBRDAy QzExRUZCNTU4NDkxNUM0RjlBRTAyL29wc2JhQW5Pd2Fra2NNV2NiRGFfcGM4NGNZ WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3BzYmFBbk93YWtrY01XY2JEYV9wYzg0Y1lZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 QkFDL0M2QUQzRTBBRDAyQzExRUZCNTU4NDkxNUM0RjlBRTAyL29wc2JhQW5Pd2Fr a2NNV2NiRGFfcGM4NGNZWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ03glGobjbvUetZZk06Jq7sXauNNypm8ZnclFoKqHnG7GRAufryvHC1 GD6LliPKLbiCVsGWAIVCu1hbVPwSiqDHplhki3cJi1EpU261MnRPGN2CWIWUVjHb Onmrt5Hs/IaRVjOPx71mtKkREN6kuqhK0brBZH8RXsDiLGT83ckwlMrtDhvLwHq7 SW4d/gdZZnfBpd/m6i5bRHFq5ORbBqLjlpXwYtXgAjCEysqq2D3fcOtAoBNqWQrk d3tCh/E+OJ1pU9yWo5tBFp9KKrF+3e7rGIfQMiatWt411KT638pmV9reopPPu3Ug eaXeENgvihuTFfuuzcnKeZIknC/M/xA= -----END CERTIFICATE-----Generated at Sun Jun 29 14:05:56 2025 by rpki-client