$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft File: opsbaAnOwakkcMWcbDa_pc84cYY.mft (raw, json) Hash identifier: FHUaPdSg2vLKRnbZnSXsvPHo7gWLWy7LRw/drSp+HO4= Subject key identifier: 8C:75:16:EC:72:34:7B:55:DC:C5:58:7F:C3:50:72:7D:36:2D:7D:04 Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 Certificate issuer: /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft Manifest number: 0127 Signing time: Thu 23 Jul 2026 07:28:27 +0000 Manifest this update: Thu 23 Jul 2026 07:28:27 +0000 Manifest next update: Thu 30 Jul 2026 07:28:27 +0000 Files and hashes: 1: opsbaAnOwakkcMWcbDa_pc84cYY.crl (hash: hgYePKn7TwQvAclPhgJIdw6Ps6c3hk2OwmtfY9mICZc=) 2: 7404496836E411F0A95FB239C4F9AE02.roa (hash: qJ7524YAscm+xf2ckiU9VWuAvVs5iHMseuM90BOMC/0=) 3: B1532E06F5FC11F08D6378D9536F56BC.roa (hash: 3XmkQBDW/VzAvHD7muWFlcJMnKZTQS3L1LZ6CKtf888=) 4: 7375238236E411F0A95FB239C4F9AE02.roa (hash: IahlFKvuUvZTPl7dK0sCB7M+yoIRvnKGTDIQMSq4hWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Validity Not Before: Jul 23 07:28:27 2026 GMT Not After : Jul 30 07:28:27 2026 GMT Subject: CN=6a61c29b-eccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:42:65:5d:da:3a:f7:61:45:3c:41:14:19:63: 45:de:81:be:ca:ff:36:c3:e3:8a:89:5e:04:a0:a3: ab:d9:3d:4e:be:e1:ca:e5:c3:1b:1e:23:54:20:90: 42:8c:ae:6d:f8:d0:07:75:ca:f2:cf:f6:e4:51:92: af:f9:0b:32:2d:7f:57:03:b8:c6:98:34:be:af:46: 71:3e:ab:3d:c8:28:35:ef:cd:9d:8a:a8:50:61:10: 73:90:e9:7e:f4:03:2e:e7:37:a3:f4:97:5a:f8:5a: 88:e6:9e:a6:c2:0f:4c:ef:f8:1c:88:e7:8f:f9:b2: 8b:fb:1f:e7:d3:f9:1f:f0:07:fb:b0:57:aa:fc:33: 06:34:da:10:80:d6:ae:4e:e2:85:dd:3f:ed:21:09: 35:1c:9a:6c:31:99:97:ca:38:e1:8c:49:31:83:3e: d6:68:4a:bd:16:1a:38:5b:15:8a:f3:df:02:1a:4d: 8d:bf:17:76:5a:29:ab:4b:b8:ce:bb:98:e7:e0:93: 83:90:3d:73:40:28:75:3d:c3:be:01:1a:c3:3c:b0: e3:ef:14:65:58:63:e9:d8:2f:fb:a1:fb:f9:21:ff: 8f:a5:e1:6f:1c:f4:60:c6:9a:fa:95:b4:f7:1c:bb: e2:c0:9e:1a:ef:5d:9d:34:da:18:30:1b:6f:63:1a: dd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:75:16:EC:72:34:7B:55:DC:C5:58:7F:C3:50:72:7D:36:2D:7D:04 X509v3 Authority Key Identifier: keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:8a:79:7f:76:03:7d:cf:ca:7b:fc:6f:0f:dd:85:14:12:55: 10:da:c7:07:71:ca:76:e0:fc:b1:28:4b:db:1e:a7:ff:66:05: bf:69:39:20:ad:69:95:f9:0b:3f:52:98:35:6c:6b:0a:02:1b: a4:cb:79:4f:bf:e1:7a:d8:87:54:cd:38:cc:eb:e9:7c:1b:f8: 9b:1e:65:ed:ed:43:c0:cd:c2:b4:9a:e4:80:91:6a:8f:a4:1f: b0:80:6c:39:16:27:db:da:19:f9:e7:4c:63:d6:6f:5b:b7:96: d4:89:25:77:95:7c:aa:ef:64:63:85:e8:62:8e:5c:9e:ae:d1: f7:86:3c:7a:22:08:04:91:0a:80:b7:04:54:bc:36:c7:66:0e: 59:dc:a8:29:a0:84:b4:21:79:73:2f:15:66:e2:27:75:91:45: 9d:72:44:ba:0e:e1:16:8e:97:14:67:0c:b3:33:ec:d7:52:05: 59:57:b2:7a:fa:f4:6d:8a:91:8e:77:4d:b8:2b:cd:c7:e2:99: b5:62:b1:b1:d9:f8:66:75:f4:6d:45:f9:38:2f:a7:4e:83:ec: e6:ae:7e:9b:32:98:3a:5e:40:a4:7e:32:4a:8a:73:a6:00:54: 8a:ff:1e:1b:91:cd:ed:55:7a:ab:4e:fb:86:51:54:0c:e5:7a: 0d:de:05:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdCQUMxMTAvBgNVBAUTKEEyOUIxQjY4MDlDRUMxQTkyNDcwQzU5QzZDMzZCRkE1 Q0YzODcxODYwHhcNMjYwNzIzMDcyODI3WhcNMjYwNzMwMDcyODI3WjAYMRYwFAYD VQQDEw02YTYxYzI5Yi1lY2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEJlXdo692FFPEEUGWNF3oG+yv82w+OKiV4EoKOr2T1OvuHK5cMbHiNUIJBC jK5t+NAHdcryz/bkUZKv+QsyLX9XA7jGmDS+r0ZxPqs9yCg1782diqhQYRBzkOl+ 9AMu5zej9Jda+FqI5p6mwg9M7/gciOeP+bKL+x/n0/kf8Af7sFeq/DMGNNoQgNau TuKF3T/tIQk1HJpsMZmXyjjhjEkxgz7WaEq9Fho4WxWK898CGk2Nvxd2WimrS7jO u5jn4JODkD1zQCh1PcO+ARrDPLDj7xRlWGPp2C/7ofv5If+PpeFvHPRgxpr6lbT3 HLviwJ4a712dNNoYMBtvYxrd3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIx1Fuxy NHtV3MVYf8NQcn02LX0EMB8GA1UdIwQYMBaAFKKbG2gJzsGpJHDFnGw2v6XPOHGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0JBQy9DNkFEM0UwQUQw MkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dha2tjTVdjYkRhX3BjODRj WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29wc2JhQW5Pd2Fra2NNV2NiRGFfcGM4NGNZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0JBQy9DNkFEM0UwQUQwMkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dh a2tjTVdjYkRhX3BjODRjWVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkYp5f3YDfc/Ke/xvD92FFBJVENrHB3HKduD8sShL2x6n/2YFv2k5IK1plfkL P1KYNWxrCgIbpMt5T7/hetiHVM04zOvpfBv4mx5l7e1DwM3CtJrkgJFqj6QfsIBs ORYn29oZ+edMY9ZvW7eW1Ikld5V8qu9kY4XoYo5cnq7R94Y8eiIIBJEKgLcEVLw2 x2YOWdyoKaCEtCF5cy8VZuIndZFFnXJEug7hFo6XFGcMszPs11IFWVeyevr0bYqR jndNuCvNx+KZtWKxsdn4ZnX0bUX5OC+nToPs5q5+mzKYOl5ApH4ySopzpgBUiv8e G5HN7VV6q077hlFUDOV6Dd4Fhw== -----END CERTIFICATE-----Generated at Fri Jul 24 14:16:33 2026 by rpki-client