$ rpki-client -vvf rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft File: OPsGr2SfQA9ROZSTW-335JJwyKo.mft (raw, json) Hash identifier: zmDe4h+r51KZsvADl9j3Vfi8h54S7lCuLfdsLljqq+g= Subject key identifier: 65:00:51:1B:13:5B:9C:4B:94:EA:CE:21:1B:52:D3:D3:FB:1D:CA:7E Authority key identifier: 38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA Certificate issuer: /CN=A9198267/serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA Certificate serial: 0AA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft Manifest number: 0A95 Signing time: Thu 26 Mar 2026 19:26:21 +0000 Manifest this update: Thu 26 Mar 2026 19:26:21 +0000 Manifest next update: Thu 02 Apr 2026 19:26:21 +0000 Files and hashes: 1: OPsGr2SfQA9ROZSTW-335JJwyKo.crl (hash: lBnw3d3cCTmoM58MoIU5neMCv+RMluujeS1792MpNu0=) 2: 2F43EE7278CC11EAB69DAC75C4F9AE02.roa (hash: MAXacxJ/RMDMxYMvqaQnbiqd4rfD3qFy66FNBQszakU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 19:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2725 (0xaa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198267, serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA Validity Not Before: Mar 26 19:26:21 2026 GMT Not After : Apr 2 19:26:21 2026 GMT Subject: CN=69c5885d-a5fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:96:35:1c:e6:78:cc:4d:d9:f7:c2:86:1f:6b: 66:52:97:4e:d2:e4:06:92:30:3e:d3:b6:c3:aa:99: 25:cb:5e:60:a6:fe:d8:9b:23:53:f1:5d:6d:fe:ff: bc:22:0b:0c:fd:c9:19:9f:13:9f:c4:a7:54:a3:89: 44:8f:da:30:0a:3d:22:84:88:86:8f:31:ae:02:fe: d3:5b:5a:fb:e1:90:13:9f:8d:0d:3e:b3:41:c2:ba: e0:3e:9d:93:ef:5a:ba:33:8d:16:4d:1c:07:22:dd: d4:3d:ba:95:5a:2c:11:99:75:5e:ef:97:68:14:f3: 61:64:80:25:07:a9:5d:f9:c8:80:ba:a1:04:b0:0e: 85:d1:85:cf:51:f4:1f:73:70:31:ab:af:59:dc:98: f4:5e:84:f0:0d:58:40:5c:8a:08:d2:19:fe:67:5e: 90:cb:20:83:53:d5:03:a9:ae:06:9c:1e:3a:8f:4e: 8a:34:74:08:24:1d:8a:46:0f:40:10:e5:fb:e3:9d: 18:0c:d9:13:4e:e6:b5:d5:4c:cb:33:66:53:a4:e0: f9:41:63:b8:97:c9:89:4d:e5:da:83:af:ab:66:dd: 5d:45:db:c8:a2:c2:30:f4:4b:89:0e:e9:4e:43:c5: 6d:09:90:9e:07:69:73:dc:3f:64:ba:73:ae:a4:7b: 78:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:00:51:1B:13:5B:9C:4B:94:EA:CE:21:1B:52:D3:D3:FB:1D:CA:7E X509v3 Authority Key Identifier: keyid:38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:ee:8b:bb:21:f9:9c:0c:8d:2e:d3:28:7b:7c:73:9d:06:13: 0d:24:90:c5:c0:35:68:84:61:d1:1c:b6:9e:83:41:4e:2f:a3: 0b:15:9a:5a:7d:66:d3:52:93:68:5f:09:44:75:4f:08:f7:50: 83:1d:0c:ff:de:91:b9:ef:76:c2:5f:9d:94:61:4a:2d:2e:69: b6:53:30:02:e5:0b:45:c0:9e:55:c2:89:42:e0:aa:fc:bb:69: e7:ad:8c:b1:99:bf:ef:38:43:e9:59:c9:6d:0a:a9:c5:b9:62: 28:07:7a:88:29:1d:5b:f3:12:e6:a8:70:7a:12:d7:8a:47:ed: d9:a6:ab:c3:bc:e9:a4:4a:c7:48:67:c2:cf:c0:91:34:2d:00: 82:a1:31:85:04:34:38:8d:1a:a5:54:b6:6a:d3:5a:12:d4:54: ea:05:5b:a5:1e:59:2e:c7:8d:4f:2a:b6:b8:c5:03:86:7d:ed: 0c:60:e9:17:7f:fe:c9:9b:89:de:04:ba:83:32:fb:fd:fb:74: b5:78:76:6d:09:5b:7b:c7:96:e4:8d:76:d7:b1:e2:ec:d0:44: 33:f6:d0:48:5b:5e:20:d2:03:59:39:be:1b:ca:1b:c8:04:bc: f9:08:94:e6:39:43:78:6b:54:e9:7b:be:b5:58:e0:bb:c0:85: a5:6e:23:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyNjcxMTAvBgNVBAUTKDM4RkIwNkFGNjQ5RjQwMEY1MTM5OTQ5MzVCRURGN0U0 OTI3MEM4QUEwHhcNMjYwMzI2MTkyNjIxWhcNMjYwNDAyMTkyNjIxWjAYMRYwFAYD VQQDEw02OWM1ODg1ZC1hNWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpY1HOZ4zE3Z98KGH2tmUpdO0uQGkjA+07bDqpkly15gpv7YmyNT8V1t/v+8 IgsM/ckZnxOfxKdUo4lEj9owCj0ihIiGjzGuAv7TW1r74ZATn40NPrNBwrrgPp2T 71q6M40WTRwHIt3UPbqVWiwRmXVe75doFPNhZIAlB6ld+ciAuqEEsA6F0YXPUfQf c3Axq69Z3Jj0XoTwDVhAXIoI0hn+Z16QyyCDU9UDqa4GnB46j06KNHQIJB2KRg9A EOX7450YDNkTTua11UzLM2ZTpOD5QWO4l8mJTeXag6+rZt1dRdvIosIw9EuJDulO Q8VtCZCeB2lz3D9kunOupHt4HwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGUAURsT W5xLlOrOIRtS09P7Hcp+MB8GA1UdIwQYMBaAFDj7Bq9kn0APUTmUk1vt9+SScMiq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODI2Ny8wMkM4NkVBQTc4 Q0IxMUVBODIwRDcyNzRDNEY5QUUwMi9PUHNHcjJTZlFBOVJPWlNUVy0zMzVKSnd5 S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Qc0dyMlNmUUE5Uk9aU1RXLTMzNUpKd3lLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODI2Ny8wMkM4NkVBQTc4Q0IxMUVBODIwRDcyNzRDNEY5QUUwMi9PUHNHcjJTZlFB OVJPWlNUVy0zMzVKSnd5S28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlO6LuyH5nAyNLtMoe3xznQYTDSSQxcA1aIRh0Ry2noNBTi+jCxWaWn1m01KT aF8JRHVPCPdQgx0M/96Rue92wl+dlGFKLS5ptlMwAuULRcCeVcKJQuCq/Ltp562M sZm/7zhD6VnJbQqpxbliKAd6iCkdW/MS5qhwehLXikft2aarw7zppErHSGfCz8CR NC0AgqExhQQ0OI0apVS2atNaEtRU6gVbpR5ZLseNTyq2uMUDhn3tDGDpF3/+yZuJ 3gS6gzL7/ft0tXh2bQlbe8eW5I1217Hi7NBEM/bQSFteINIDWTm+G8obyAS8+QiU 5jlDeGtU6Xu+tVjgu8CFpW4j/A== -----END CERTIFICATE-----Generated at Fri Mar 27 03:45:01 2026 by rpki-client