$ rpki-client -vvf rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft File: OPsGr2SfQA9ROZSTW-335JJwyKo.mft (raw, json) Hash identifier: eaDmJX76sq9iwiLSfx/IJf+zFiyUYEnk8+45RfDgJi8= Subject key identifier: 92:91:11:4D:F5:57:4B:EA:A8:AE:35:36:6B:2C:38:B0:7F:D8:DA:49 Authority key identifier: 38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA Certificate issuer: /CN=A9198267/serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA Certificate serial: 0A33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft Manifest number: 0A24 Signing time: Fri 22 Aug 2025 19:55:07 +0000 Manifest this update: Fri 22 Aug 2025 19:55:07 +0000 Manifest next update: Fri 29 Aug 2025 19:55:07 +0000 Files and hashes: 1: OPsGr2SfQA9ROZSTW-335JJwyKo.crl (hash: yH9Y3Tf0TeiwUwwuRaSMwelYvz82P65ZabZmrFohabs=) 2: 2F43EE7278CC11EAB69DAC75C4F9AE02.roa (hash: vryPQgJZ9HPQvb4c/vnzkdnAafqVRFouOd+j23S6sMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2611 (0xa33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198267, serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA Validity Not Before: Aug 22 19:55:07 2025 GMT Not After : Aug 29 19:55:07 2025 GMT Subject: CN=68a8cb1b-9eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:86:f0:4a:81:dd:98:d7:e6:01:39:fd:f8:3a: 71:7f:73:bb:ff:f1:77:34:33:38:c3:7a:d1:b4:59: bf:d5:47:48:9d:d4:d3:dc:ba:19:93:1d:be:1b:7f: 42:4d:b1:e7:f2:53:39:4d:09:b5:e8:72:4a:eb:29: fc:59:48:01:0f:38:cc:7e:32:a9:63:e5:62:60:9f: 3b:65:a9:6d:6f:c5:2d:62:8b:f1:b6:20:76:e0:c4: ee:67:cc:22:6f:ce:25:9b:86:bd:b9:d0:69:c5:f1: 48:19:bb:48:c0:dd:97:d6:43:de:e4:0e:31:f2:0e: fd:83:1a:aa:69:97:ff:3d:be:bd:58:ab:79:0c:a3: bc:41:15:76:64:97:fa:eb:cb:fe:d6:2e:8e:41:6e: 1c:d4:d6:b4:2c:8e:2c:24:47:10:ca:2c:e8:ea:f0: f2:16:e7:dd:fd:1e:a5:2d:d2:32:6e:b9:a6:c3:b0: 24:e6:6d:b1:cb:91:00:cd:d5:48:16:c6:9f:8a:3b: 3a:d6:cd:9d:5d:c8:a4:39:5d:9f:4f:9e:fa:28:9c: 42:1f:6d:1c:40:e6:08:ad:24:59:05:0a:eb:7b:42: 10:9a:99:6b:4b:ab:1d:c2:d3:c6:8e:27:1a:95:4c: d0:d6:38:e9:5b:d6:5d:04:88:53:5e:3d:38:75:6f: ad:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:91:11:4D:F5:57:4B:EA:A8:AE:35:36:6B:2C:38:B0:7F:D8:DA:49 X509v3 Authority Key Identifier: keyid:38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:56:f6:4c:ce:fb:80:da:77:e1:8f:20:ef:b5:4d:00:ca:80: cc:67:da:4b:f4:ea:7f:64:83:50:af:d7:5c:04:7e:9f:4c:79: 7f:90:96:24:cf:8e:20:9e:54:47:ef:ef:50:4e:3f:db:5f:c9: 10:8e:b6:e6:91:39:c0:74:bf:7f:56:98:d0:c9:62:bc:29:12: 2a:e4:1a:c6:41:3e:09:73:89:6d:9e:23:17:79:b8:33:9e:36: 8f:39:10:bd:ba:f5:f9:0c:74:2e:1a:6d:d4:22:48:11:cf:b4: 19:b6:62:c1:df:40:69:94:25:71:a0:de:6b:fd:35:0d:81:67: b4:0a:30:92:e6:bb:e5:24:90:68:ef:d6:3c:c7:0b:ff:20:29: 47:23:77:75:5f:1f:e1:17:ae:d0:96:76:4b:03:cd:ab:14:f0: 8f:3c:1b:13:0b:b3:8e:e5:8a:57:ec:b7:58:23:80:3c:ee:83: 8b:ba:73:e3:af:99:2b:23:a2:1e:77:e2:39:4f:c5:e4:ba:98: 4a:2e:22:df:23:39:bc:8f:89:5c:f4:3f:b3:c2:ba:59:e5:54: 04:cf:76:9e:55:98:a9:2f:56:cf:e0:e2:cc:9e:20:f0:4a:33: 63:9a:ff:3a:95:27:9f:b6:f5:fa:d9:55:67:20:55:59:19:ca: 42:a4:5d:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyNjcxMTAvBgNVBAUTKDM4RkIwNkFGNjQ5RjQwMEY1MTM5OTQ5MzVCRURGN0U0 OTI3MEM4QUEwHhcNMjUwODIyMTk1NTA3WhcNMjUwODI5MTk1NTA3WjAYMRYwFAYD VQQDEw02OGE4Y2IxYi05ZWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIbwSoHdmNfmATn9+Dpxf3O7//F3NDM4w3rRtFm/1UdIndTT3LoZkx2+G39C TbHn8lM5TQm16HJK6yn8WUgBDzjMfjKpY+ViYJ87Zaltb8UtYovxtiB24MTuZ8wi b84lm4a9udBpxfFIGbtIwN2X1kPe5A4x8g79gxqqaZf/Pb69WKt5DKO8QRV2ZJf6 68v+1i6OQW4c1Na0LI4sJEcQyizo6vDyFufd/R6lLdIybrmmw7Ak5m2xy5EAzdVI Fsafijs61s2dXcikOV2fT576KJxCH20cQOYIrSRZBQrre0IQmplrS6sdwtPGjica lUzQ1jjpW9ZdBIhTXj04dW+tzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKREU31 V0vqqK41NmssOLB/2NpJMB8GA1UdIwQYMBaAFDj7Bq9kn0APUTmUk1vt9+SScMiq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODI2Ny8wMkM4NkVBQTc4 Q0IxMUVBODIwRDcyNzRDNEY5QUUwMi9PUHNHcjJTZlFBOVJPWlNUVy0zMzVKSnd5 S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Qc0dyMlNmUUE5Uk9aU1RXLTMzNUpKd3lLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODI2Ny8wMkM4NkVBQTc4Q0IxMUVBODIwRDcyNzRDNEY5QUUwMi9PUHNHcjJTZlFB OVJPWlNUVy0zMzVKSnd5S28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8VvZMzvuA2nfhjyDvtU0AyoDMZ9pL9Op/ZINQr9dcBH6fTHl/kJYk z44gnlRH7+9QTj/bX8kQjrbmkTnAdL9/VpjQyWK8KRIq5BrGQT4Jc4ltniMXebgz njaPORC9uvX5DHQuGm3UIkgRz7QZtmLB30BplCVxoN5r/TUNgWe0CjCS5rvlJJBo 79Y8xwv/IClHI3d1Xx/hF67QlnZLA82rFPCPPBsTC7OO5YpX7LdYI4A87oOLunPj r5krI6Ied+I5T8XkuphKLiLfIzm8j4lc9D+zwrpZ5VQEz3aeVZipL1bP4OLMniDw SjNjmv86lSeftvX62VVnIFVZGcpCpF3g -----END CERTIFICATE-----Generated at Sat Aug 23 20:32:18 2025 by rpki-client