$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft File: opsbaAnOwakkcMWcbDa_pc84cYY.mft (raw, json) Hash identifier: l8q7yVpSbb8QFK4/BhMqG6kt/w7aLczOppa+jMKSOUg= Subject key identifier: 27:1B:66:F3:7B:9A:7F:F1:44:5C:06:DB:61:63:54:4B:41:EF:98:09 Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 Certificate issuer: /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft Manifest number: EB Signing time: Wed 25 Mar 2026 05:43:01 +0000 Manifest this update: Wed 25 Mar 2026 05:43:00 +0000 Manifest next update: Wed 01 Apr 2026 05:43:00 +0000 Files and hashes: 1: opsbaAnOwakkcMWcbDa_pc84cYY.crl (hash: cIZ7pNMQmywjzQNJCI/In9pLbPSJgi9tRCAA+DCWVCo=) 2: 7375238236E411F0A95FB239C4F9AE02.roa (hash: IahlFKvuUvZTPl7dK0sCB7M+yoIRvnKGTDIQMSq4hWM=) 3: 7404496836E411F0A95FB239C4F9AE02.roa (hash: qJ7524YAscm+xf2ckiU9VWuAvVs5iHMseuM90BOMC/0=) 4: B1532E06F5FC11F08D6378D9536F56BC.roa (hash: 3XmkQBDW/VzAvHD7muWFlcJMnKZTQS3L1LZ6CKtf888=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Validity Not Before: Mar 25 05:43:00 2026 GMT Not After : Apr 1 05:43:00 2026 GMT Subject: CN=69c375e5-37dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e0:5c:4e:1a:70:f7:a8:9d:84:88:99:1c:91: c2:55:a6:0f:d8:56:66:9e:7b:df:cc:0a:d3:a9:5c: 55:45:ba:89:d2:45:be:fa:e0:cf:f0:ea:54:2f:ad: 22:87:ba:a1:77:72:2f:1a:e6:94:cf:78:06:52:e0: 7e:4f:43:e5:9f:e5:fd:71:e9:2f:39:3b:4c:68:e3: 5e:48:8b:05:14:05:bb:62:96:af:cf:85:81:4f:ab: 2c:95:94:e3:7f:73:06:80:29:a0:2e:79:f6:50:43: fe:9c:2b:b9:46:5e:c7:c8:eb:14:97:f3:0b:3f:32: 34:eb:27:e3:f1:b1:52:7e:43:fa:8d:49:09:d9:59: fc:ad:b2:95:6f:83:55:37:b1:b6:57:ae:14:97:6c: a1:cb:a4:a6:c3:df:43:b9:47:f8:81:61:65:3f:c4: 97:f0:20:16:44:19:f4:85:71:54:d8:b3:38:19:75: f2:dd:bf:ea:cf:bb:5b:83:72:20:87:33:02:0b:b8: 44:9f:00:af:66:e6:f9:c7:44:28:f9:76:66:d8:2f: f4:a1:53:52:42:87:3c:f8:fc:9c:f4:19:ab:17:a3: 06:ed:9f:87:bd:bb:b5:03:83:c6:6c:5d:b1:ac:28: da:d9:99:12:d5:ba:7c:eb:22:5f:7a:c2:cc:41:fd: 1b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1B:66:F3:7B:9A:7F:F1:44:5C:06:DB:61:63:54:4B:41:EF:98:09 X509v3 Authority Key Identifier: keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e9:76:00:05:32:e4:cf:ee:6c:50:15:fc:35:bb:c3:42:be: 9f:9c:a1:00:09:68:5b:ff:04:a6:c2:f0:1a:84:73:cf:70:39: 11:76:e5:89:c6:62:60:71:f5:ca:62:2c:b8:ee:ab:0c:5a:a2: ad:24:d0:72:aa:a9:2e:49:bc:a1:14:02:6b:f7:32:eb:4c:2b: b5:74:61:a7:42:27:7f:91:72:b9:b5:47:b0:a5:63:c4:e2:4d: 46:16:5c:55:25:31:3f:e7:64:c8:05:5d:c9:a0:48:e9:14:27: 8c:9a:40:4c:a5:4c:a2:26:77:ed:93:93:3d:09:30:f2:8c:d6: 44:c3:e9:48:a1:00:15:a8:09:c9:de:e8:51:f6:44:00:eb:55: 30:85:55:68:c0:7d:be:5c:77:c9:e4:8a:3a:f5:1a:7e:4d:59: 43:9c:38:b6:db:e4:25:67:43:c4:94:1d:c9:1a:7c:99:2d:de: 7c:9b:30:db:85:f9:b3:77:b3:e7:bb:73:4d:86:6d:75:95:cc: 3f:b1:5a:2e:48:52:34:70:c9:c4:85:6e:58:65:98:08:78:33: c7:46:34:7c:c1:ac:cb:34:cd:b7:66:14:7a:51:b8:c9:ad:f1: bf:6d:bf:15:d3:a9:91:37:7c:d4:b1:e2:da:fd:f9:45:41:60: d8:4c:6d:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdCQUMxMTAvBgNVBAUTKEEyOUIxQjY4MDlDRUMxQTkyNDcwQzU5QzZDMzZCRkE1 Q0YzODcxODYwHhcNMjYwMzI1MDU0MzAwWhcNMjYwNDAxMDU0MzAwWjAYMRYwFAYD VQQDEw02OWMzNzVlNS0zN2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquBcThpw96idhIiZHJHCVaYP2FZmnnvfzArTqVxVRbqJ0kW++uDP8OpUL60i h7qhd3IvGuaUz3gGUuB+T0Pln+X9cekvOTtMaONeSIsFFAW7Ypavz4WBT6sslZTj f3MGgCmgLnn2UEP+nCu5Rl7HyOsUl/MLPzI06yfj8bFSfkP6jUkJ2Vn8rbKVb4NV N7G2V64Ul2yhy6Smw99DuUf4gWFlP8SX8CAWRBn0hXFU2LM4GXXy3b/qz7tbg3Ig hzMCC7hEnwCvZub5x0Qo+XZm2C/0oVNSQoc8+Pyc9BmrF6MG7Z+Hvbu1A4PGbF2x rCja2ZkS1bp86yJfesLMQf0bWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCcbZvN7 mn/xRFwG22FjVEtB75gJMB8GA1UdIwQYMBaAFKKbG2gJzsGpJHDFnGw2v6XPOHGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0JBQy9DNkFEM0UwQUQw MkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dha2tjTVdjYkRhX3BjODRj WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29wc2JhQW5Pd2Fra2NNV2NiRGFfcGM4NGNZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0JBQy9DNkFEM0UwQUQwMkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dh a2tjTVdjYkRhX3BjODRjWVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjOl2AAUy5M/ubFAV/DW7w0K+n5yhAAloW/8EpsLwGoRzz3A5EXblicZiYHH1 ymIsuO6rDFqirSTQcqqpLkm8oRQCa/cy60wrtXRhp0Inf5FyubVHsKVjxOJNRhZc VSUxP+dkyAVdyaBI6RQnjJpATKVMoiZ37ZOTPQkw8ozWRMPpSKEAFagJyd7oUfZE AOtVMIVVaMB9vlx3yeSKOvUafk1ZQ5w4ttvkJWdDxJQdyRp8mS3efJsw24X5s3ez 57tzTYZtdZXMP7FaLkhSNHDJxIVuWGWYCHgzx0Y0fMGsyzTNt2YUelG4ya3xv22/ FdOpkTd81LHi2v35RUFg2Ext6A== -----END CERTIFICATE-----Generated at Thu Mar 26 18:17:38 2026 by rpki-client