$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft File: opsbaAnOwakkcMWcbDa_pc84cYY.mft (raw, json) Hash identifier: 1MB2rYPmJfMD5neSTuqGmxm38L5aYbRpieJhx8EB6VM= Subject key identifier: 2B:B8:CE:C6:5A:24:FC:8F:34:3F:AE:8C:4B:D8:9B:D1:64:68:94:84 Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 Certificate issuer: /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft Manifest number: 95 Signing time: Sun 19 Oct 2025 09:44:07 +0000 Manifest this update: Sun 19 Oct 2025 09:44:06 +0000 Manifest next update: Sun 26 Oct 2025 09:44:06 +0000 Files and hashes: 1: opsbaAnOwakkcMWcbDa_pc84cYY.crl (hash: PHHAxIWGNWTY8ztPwOSNJ2FHaQYDG1KpRIKkCyN4A4Y=) 2: 7404496836E411F0A95FB239C4F9AE02.roa (hash: WHGMZh9P2RExWIeMMaDkbGi0VRoxW1Iai0A3Zb9yWT4=) 3: 7375238236E411F0A95FB239C4F9AE02.roa (hash: 6GqewoLZaVKTqsSzxgnIGXRwmj2ShKpEerZMfS7j+UE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Validity Not Before: Oct 19 09:44:06 2025 GMT Not After : Oct 26 09:44:06 2025 GMT Subject: CN=68f4b2e7-e540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e5:2a:fd:bd:2a:43:94:0e:3c:7f:bf:a3:d0: 40:a1:fc:7a:31:02:0c:2a:8e:b3:3a:72:99:6d:37: 37:8b:09:41:5c:4d:85:5c:4f:8b:00:eb:58:b2:67: 24:b2:52:d5:3e:1f:fe:a1:02:78:c1:a5:ca:3a:f8: a8:a7:fc:b1:45:3f:4c:4d:01:06:78:08:6b:9a:9b: e6:37:c0:8f:b1:89:37:2b:fb:c8:58:a8:e5:d0:00: 0d:b0:42:42:8f:ea:7a:c0:c6:e3:6e:fb:85:7a:4b: 57:f9:f0:f7:fb:d4:67:05:04:34:f4:5f:33:a2:25: 1e:f8:3a:03:75:f4:74:02:7a:77:e4:84:3f:fd:3e: 59:78:c7:af:63:47:16:96:f3:71:01:aa:76:fe:ae: a0:4d:c4:69:ae:e2:d5:16:54:46:cf:9a:02:7d:0f: 0d:86:ca:06:f0:d0:59:38:f5:32:00:2f:b4:ce:c2: 69:17:18:86:e7:b1:54:40:8b:d6:b3:77:0b:f4:4a: 18:6d:25:1f:37:3f:6b:70:23:f8:5d:a1:8a:97:ed: a9:c9:f2:19:ae:e6:7b:06:a3:9a:cb:b5:1a:50:52: 94:01:0f:44:e1:db:44:ba:e8:62:23:9c:22:00:fc: e8:c3:36:6c:51:31:35:27:a8:0c:62:0d:05:a9:ed: f1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B8:CE:C6:5A:24:FC:8F:34:3F:AE:8C:4B:D8:9B:D1:64:68:94:84 X509v3 Authority Key Identifier: keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:d9:fb:26:57:f0:d9:24:fc:60:2c:93:a4:f1:1e:c6:ea:69: ec:2e:8b:7c:34:7f:c5:81:ae:f6:3d:81:af:21:6a:1b:8e:cf: 80:b2:0a:9f:58:ab:ff:43:39:5b:86:a6:14:1b:dd:df:9a:05: 88:00:65:4e:1d:55:54:31:f2:e5:47:34:0a:94:98:d8:ca:91: 4f:8a:df:e9:60:90:f5:41:9f:dc:bc:4e:dd:25:16:6a:73:59: 93:1d:9a:d3:1b:7c:50:f5:8e:46:12:b8:71:5b:b5:89:c6:5f: 27:d5:6f:f2:af:4e:a4:b1:64:89:57:35:97:dc:54:fd:b9:9a: f7:ed:e2:27:d7:5d:d2:16:68:d1:e2:3f:86:ae:38:6d:dd:10: 15:1c:86:3f:98:6f:68:7b:3b:58:25:38:ea:42:83:9d:7c:d4: 43:55:b0:84:f0:6a:12:73:0a:7f:25:f8:39:73:ab:f1:04:ce: 39:44:22:21:cb:7b:b6:f8:bd:48:a4:d5:da:f3:7f:86:c5:37: 33:6e:9a:bb:1e:b3:20:9e:92:dd:83:a1:5b:ae:44:ee:5f:2c: ab:19:45:55:20:77:d9:62:64:03:a8:c2:1d:63:cc:9c:e7:4b: 13:da:dd:05:4e:97:48:f4:d5:9b:a2:9f:7f:88:b2:b5:65:c2: 78:9f:90:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdCQUMxMTAvBgNVBAUTKEEyOUIxQjY4MDlDRUMxQTkyNDcwQzU5QzZDMzZCRkE1 Q0YzODcxODYwHhcNMjUxMDE5MDk0NDA2WhcNMjUxMDI2MDk0NDA2WjAYMRYwFAYD VQQDEw02OGY0YjJlNy1lNTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eUq/b0qQ5QOPH+/o9BAofx6MQIMKo6zOnKZbTc3iwlBXE2FXE+LAOtYsmck slLVPh/+oQJ4waXKOviop/yxRT9MTQEGeAhrmpvmN8CPsYk3K/vIWKjl0AANsEJC j+p6wMbjbvuFektX+fD3+9RnBQQ09F8zoiUe+DoDdfR0Anp35IQ//T5ZeMevY0cW lvNxAap2/q6gTcRpruLVFlRGz5oCfQ8NhsoG8NBZOPUyAC+0zsJpFxiG57FUQIvW s3cL9EoYbSUfNz9rcCP4XaGKl+2pyfIZruZ7BqOay7UaUFKUAQ9E4dtEuuhiI5wi APzowzZsUTE1J6gMYg0Fqe3xUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCu4zsZa JPyPND+ujEvYm9FkaJSEMB8GA1UdIwQYMBaAFKKbG2gJzsGpJHDFnGw2v6XPOHGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0JBQy9DNkFEM0UwQUQw MkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dha2tjTVdjYkRhX3BjODRj WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29wc2JhQW5Pd2Fra2NNV2NiRGFfcGM4NGNZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0JBQy9DNkFEM0UwQUQwMkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dh a2tjTVdjYkRhX3BjODRjWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ2fsmV/DZJPxgLJOk8R7G6mnsLot8NH/Fga72PYGvIWobjs+Asgqf WKv/QzlbhqYUG93fmgWIAGVOHVVUMfLlRzQKlJjYypFPit/pYJD1QZ/cvE7dJRZq c1mTHZrTG3xQ9Y5GErhxW7WJxl8n1W/yr06ksWSJVzWX3FT9uZr37eIn113SFmjR 4j+Grjht3RAVHIY/mG9oeztYJTjqQoOdfNRDVbCE8GoScwp/Jfg5c6vxBM45RCIh y3u2+L1IpNXa83+GxTczbpq7HrMgnpLdg6FbrkTuXyyrGUVVIHfZYmQDqMIdY8yc 50sT2t0FTpdI9NWbop9/iLK1ZcJ4n5DK -----END CERTIFICATE-----Generated at Mon Oct 20 04:08:02 2025 by rpki-client