$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft File: opsbaAnOwakkcMWcbDa_pc84cYY.mft (raw, json) Hash identifier: CnfWMdWt8OIfNNMqebp/35AeIP3X1i/ujw3344UJpZ0= Subject key identifier: 38:80:66:5B:9B:78:68:69:56:33:BD:19:5A:68:C5:43:AE:7F:09:F3 Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 Certificate issuer: /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft Manifest number: 78 Signing time: Sat 23 Aug 2025 07:04:09 +0000 Manifest this update: Sat 23 Aug 2025 07:04:09 +0000 Manifest next update: Sat 30 Aug 2025 07:04:09 +0000 Files and hashes: 1: opsbaAnOwakkcMWcbDa_pc84cYY.crl (hash: zbQVfIaO5rIiTJp2yHXu4Q5AJqLUQslbWTYNH4/YIn0=) 2: 7404496836E411F0A95FB239C4F9AE02.roa (hash: WHGMZh9P2RExWIeMMaDkbGi0VRoxW1Iai0A3Zb9yWT4=) 3: 7375238236E411F0A95FB239C4F9AE02.roa (hash: 6GqewoLZaVKTqsSzxgnIGXRwmj2ShKpEerZMfS7j+UE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Validity Not Before: Aug 23 07:04:09 2025 GMT Not After : Aug 30 07:04:09 2025 GMT Subject: CN=68a967e9-1d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6b:cf:8f:50:88:e4:38:62:2a:68:6a:05:79: a7:62:19:fb:40:2f:5f:c1:66:00:7d:ae:69:d9:a4: 85:ff:99:b7:e7:dc:25:04:db:6b:ec:1f:46:b4:0b: b7:e9:1e:e6:ef:39:a1:4b:2e:07:c1:fc:12:6d:32: 62:17:2b:df:f6:07:60:d2:9b:2d:a8:cb:0a:db:5b: df:6e:b0:31:36:e8:26:99:2a:37:ff:15:e7:d2:cf: ba:47:e7:1f:32:a0:2a:b0:85:1e:5d:2c:7e:65:6e: 1c:0f:91:73:b1:55:f5:7a:09:63:39:ea:c9:f8:0d: 82:ab:97:76:41:b8:6b:95:10:22:4d:01:0c:ae:c5: 0e:c1:ba:f3:4b:92:b3:fa:01:0e:1b:b3:09:3c:31: 55:b6:9a:65:63:a1:79:ce:87:75:e7:21:c7:5d:4f: 81:2e:ad:ec:6b:28:66:96:44:8d:48:bf:cf:9b:6c: 2e:54:b4:b1:dc:ef:63:3c:ae:d6:2d:c9:0d:2b:9f: a6:b3:2d:d4:a8:67:f4:74:07:79:b1:22:06:47:a1: b7:96:b7:30:ad:28:a5:c7:0a:27:41:1d:ed:68:f2: 69:70:a0:19:1c:5a:46:59:1e:f8:94:e8:e5:a6:45: 99:3e:06:2b:ad:52:3f:a7:1d:c4:76:9a:b2:02:33: e2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:80:66:5B:9B:78:68:69:56:33:BD:19:5A:68:C5:43:AE:7F:09:F3 X509v3 Authority Key Identifier: keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8b:fe:e6:c9:2a:cb:64:cc:d1:b3:1a:d3:14:70:02:d2:40: 6e:1f:04:5c:dc:35:81:73:ad:19:28:e9:78:a0:9d:b2:6a:c1: 52:cc:39:e1:81:38:df:21:14:79:61:d6:2e:99:85:a2:a0:50: 3a:12:bc:cc:56:99:c9:8d:92:9d:42:bf:c1:a8:ab:31:cf:a7: c7:11:32:31:d1:3c:be:1e:6c:35:c6:ea:f8:86:b3:d7:dc:73: af:a2:df:b5:fe:7c:1d:0e:01:fd:82:d6:7a:4a:9d:74:1d:c6: 3a:9b:22:1d:f7:11:7b:6b:c2:8a:70:1a:f1:60:5c:59:bd:cb: 7e:f8:a8:d9:b9:60:6c:04:95:31:4a:60:4e:7b:02:31:53:de: 2c:23:89:e0:da:4b:01:ef:85:81:5f:0f:31:e9:62:32:d6:ae: 92:ae:38:6e:aa:6c:9b:98:a3:56:a4:56:f5:2d:e2:72:d0:2e: 93:e1:69:35:6a:36:27:41:89:6b:b8:70:3c:cf:2a:9d:0e:cb: b7:54:bc:9a:e4:54:f1:03:06:4f:d9:ad:97:07:ba:80:f2:ae: 41:c9:e1:9d:1a:2a:ed:5e:24:3b:50:87:ac:37:73:1a:50:0a: b8:e3:7e:96:28:a8:95:0a:cf:13:eb:bf:10:fa:ae:7e:98:f7: cb:20:94:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0JBQzExMC8GA1UEBRMoQTI5QjFCNjgwOUNFQzFBOTI0NzBDNTlDNkMzNkJGQTVD RjM4NzE4NjAeFw0yNTA4MjMwNzA0MDlaFw0yNTA4MzAwNzA0MDlaMBgxFjAUBgNV BAMTDTY4YTk2N2U5LTFkNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCya8+PUIjkOGIqaGoFeadiGftAL1/BZgB9rmnZpIX/mbfn3CUE22vsH0a0C7fp HubvOaFLLgfB/BJtMmIXK9/2B2DSmy2oywrbW99usDE26CaZKjf/FefSz7pH5x8y oCqwhR5dLH5lbhwPkXOxVfV6CWM56sn4DYKrl3ZBuGuVECJNAQyuxQ7BuvNLkrP6 AQ4bswk8MVW2mmVjoXnOh3XnIcddT4EurexrKGaWRI1Iv8+bbC5UtLHc72M8rtYt yQ0rn6azLdSoZ/R0B3mxIgZHobeWtzCtKKXHCidBHe1o8mlwoBkcWkZZHviU6OWm RZk+BiutUj+nHcR2mrICM+KNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOIBmW5t4 aGlWM70ZWmjFQ65/CfMwHwYDVR0jBBgwFoAUopsbaAnOwakkcMWcbDa/pc84cYYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3QkFDL0M2QUQzRTBBRDAy QzExRUZCNTU4NDkxNUM0RjlBRTAyL29wc2JhQW5Pd2Fra2NNV2NiRGFfcGM4NGNZ WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3BzYmFBbk93YWtrY01XY2JEYV9wYzg0Y1lZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 QkFDL0M2QUQzRTBBRDAyQzExRUZCNTU4NDkxNUM0RjlBRTAyL29wc2JhQW5Pd2Fr a2NNV2NiRGFfcGM4NGNZWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC6L/ubJKstkzNGzGtMUcALSQG4fBFzcNYFzrRko6XignbJqwVLMOeGB ON8hFHlh1i6ZhaKgUDoSvMxWmcmNkp1Cv8GoqzHPp8cRMjHRPL4ebDXG6viGs9fc c6+i37X+fB0OAf2C1npKnXQdxjqbIh33EXtrwopwGvFgXFm9y374qNm5YGwElTFK YE57AjFT3iwjieDaSwHvhYFfDzHpYjLWrpKuOG6qbJuYo1akVvUt4nLQLpPhaTVq NidBiWu4cDzPKp0Oy7dUvJrkVPEDBk/ZrZcHuoDyrkHJ4Z0aKu1eJDtQh6w3cxpQ CrjjfpYoqJUKzxPrvxD6rn6Y98sglOE= -----END CERTIFICATE-----Generated at Sat Aug 23 17:58:27 2025 by rpki-client