$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft File: opsbaAnOwakkcMWcbDa_pc84cYY.mft (raw, json) Hash identifier: 8WLF3p5FnHKphsg3ayF5YNxDHUKKeJBHwUTzyBSCa4g= Subject key identifier: F2:9A:44:C3:D1:78:2B:70:04:F2:AC:57:15:6E:8F:D3:4A:D2:32:5B Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 Certificate issuer: /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft Manifest number: 0103 Signing time: Mon 11 May 2026 06:19:32 +0000 Manifest this update: Mon 11 May 2026 06:19:32 +0000 Manifest next update: Mon 18 May 2026 06:19:32 +0000 Files and hashes: 1: opsbaAnOwakkcMWcbDa_pc84cYY.crl (hash: LZvjyh3Nqoc/Kj6G1DtVgR50WqBOEDA4vA4IcBcCaRw=) 2: B1532E06F5FC11F08D6378D9536F56BC.roa (hash: 3XmkQBDW/VzAvHD7muWFlcJMnKZTQS3L1LZ6CKtf888=) 3: 7404496836E411F0A95FB239C4F9AE02.roa (hash: qJ7524YAscm+xf2ckiU9VWuAvVs5iHMseuM90BOMC/0=) 4: 7375238236E411F0A95FB239C4F9AE02.roa (hash: IahlFKvuUvZTPl7dK0sCB7M+yoIRvnKGTDIQMSq4hWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 06:19:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Validity Not Before: May 11 06:19:32 2026 GMT Not After : May 18 06:19:32 2026 GMT Subject: CN=6a0174f4-c903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dc:63:cf:c7:b9:90:aa:3c:ec:ee:1d:c2:59: 86:c4:66:d6:29:3a:7c:87:78:ae:bf:49:1f:f0:c2: 07:6f:a2:f1:7b:4a:ef:9c:7a:57:d7:02:fe:5a:72: eb:43:15:60:11:dc:01:fa:7d:f7:44:80:27:49:e6: 7b:c6:6f:59:32:31:4c:32:94:75:d0:75:dd:01:93: d1:b5:ea:90:2f:94:19:cf:5e:83:bb:fb:f9:64:ad: 74:7c:35:64:73:e0:2b:c9:11:4e:e3:11:52:e7:99: 93:60:ac:b1:79:15:86:d7:57:27:76:13:31:f4:61: 24:93:00:24:18:b7:b2:b2:7f:5b:b5:5a:c5:b7:af: 3e:86:5b:b1:57:2c:e5:00:67:b4:70:16:ce:c9:e8: b2:b8:99:de:a6:33:d3:d4:06:0e:64:2d:72:bc:ef: 48:4e:db:66:32:36:4a:b8:32:47:4f:c4:50:4a:4e: 72:6d:66:bc:30:86:fa:12:ab:de:73:a3:48:e5:48: 24:57:04:c5:37:21:63:6b:99:d5:76:6a:45:85:46: cd:e2:e1:e5:13:04:f1:80:4d:13:91:78:5c:f7:65: b2:d8:05:ef:5a:b9:e8:10:bf:f5:ea:9b:6e:13:0f: 50:34:34:06:95:19:69:ae:cc:c2:5a:76:49:93:06: c0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9A:44:C3:D1:78:2B:70:04:F2:AC:57:15:6E:8F:D3:4A:D2:32:5B X509v3 Authority Key Identifier: keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:dd:29:f7:8f:b5:cf:be:ce:9b:9e:84:9b:1c:c7:3a:ab:bc: d4:f1:22:9b:f3:02:64:0a:f4:dc:b4:b7:53:a0:56:e1:91:fe: ed:ad:b2:a6:7f:12:3c:7b:66:c0:e1:87:40:80:04:b9:5c:91: a1:a7:9f:f3:21:3c:56:21:25:01:6f:ae:cf:6b:30:97:73:83: 20:b6:7c:b7:15:40:a9:d9:77:b0:d2:7f:f2:d6:5b:1b:c4:2d: 73:b5:2a:67:50:c4:60:7f:1f:bd:47:ba:aa:f6:7c:a3:da:fb: 9b:9c:d7:85:a9:f5:dd:6d:5f:7a:61:b6:76:17:ab:74:5e:d6: 61:e3:6c:6c:ac:f7:aa:4f:9c:55:03:e1:dc:41:fc:da:f7:c5: 21:9b:bf:f3:90:a9:45:ec:50:ec:ae:b2:80:4e:a8:30:a2:c1: 6d:e0:1a:40:89:bd:75:29:36:f2:b3:b7:31:9f:b5:fd:55:57: 59:cf:da:d3:28:be:bc:db:20:76:0d:f4:14:bd:67:ad:f2:4d: 42:bc:ac:69:ea:53:33:88:2d:97:79:e5:86:71:6a:6c:25:b3: 81:32:af:b7:45:c1:e3:44:86:54:aa:7d:4d:67:a7:32:98:03: e0:4c:f1:5b:c8:25:1f:cf:ef:c5:84:81:30:0c:6e:cd:33:1a: 2a:6b:9a:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdCQUMxMTAvBgNVBAUTKEEyOUIxQjY4MDlDRUMxQTkyNDcwQzU5QzZDMzZCRkE1 Q0YzODcxODYwHhcNMjYwNTExMDYxOTMyWhcNMjYwNTE4MDYxOTMyWjAYMRYwFAYD VQQDEw02YTAxNzRmNC1jOTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9xjz8e5kKo87O4dwlmGxGbWKTp8h3iuv0kf8MIHb6Lxe0rvnHpX1wL+WnLr QxVgEdwB+n33RIAnSeZ7xm9ZMjFMMpR10HXdAZPRteqQL5QZz16Du/v5ZK10fDVk c+AryRFO4xFS55mTYKyxeRWG11cndhMx9GEkkwAkGLeysn9btVrFt68+hluxVyzl AGe0cBbOyeiyuJnepjPT1AYOZC1yvO9ITttmMjZKuDJHT8RQSk5ybWa8MIb6Eqve c6NI5UgkVwTFNyFja5nVdmpFhUbN4uHlEwTxgE0TkXhc92Wy2AXvWrnoEL/16ptu Ew9QNDQGlRlprszCWnZJkwbAzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPKaRMPR eCtwBPKsVxVuj9NK0jJbMB8GA1UdIwQYMBaAFKKbG2gJzsGpJHDFnGw2v6XPOHGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0JBQy9DNkFEM0UwQUQw MkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dha2tjTVdjYkRhX3BjODRj WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29wc2JhQW5Pd2Fra2NNV2NiRGFfcGM4NGNZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0JBQy9DNkFEM0UwQUQwMkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dh a2tjTVdjYkRhX3BjODRjWVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADN0p94+1z77Om56EmxzHOqu81PEim/MCZAr03LS3U6BW4ZH+7a2ypn8SPHtm wOGHQIAEuVyRoaef8yE8ViElAW+uz2swl3ODILZ8txVAqdl3sNJ/8tZbG8Qtc7Uq Z1DEYH8fvUe6qvZ8o9r7m5zXhan13W1femG2dherdF7WYeNsbKz3qk+cVQPh3EH8 2vfFIZu/85CpRexQ7K6ygE6oMKLBbeAaQIm9dSk28rO3MZ+1/VVXWc/a0yi+vNsg dg30FL1nrfJNQrysaepTM4gtl3nlhnFqbCWzgTKvt0XB40SGVKp9TWenMpgD4Ezx W8glH8/vxYSBMAxuzTMaKmua5Q== -----END CERTIFICATE-----Generated at Wed May 13 00:04:27 2026 by rpki-client