$ rpki-client -vvf rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft File: OPsGr2SfQA9ROZSTW-335JJwyKo.mft (raw, json) Hash identifier: fRReVxgko9MeoiYekrQ8CIWhj9Z87zFwz7coOpFcEFo= Subject key identifier: F1:D9:66:B9:0E:A2:1A:AC:93:8C:87:91:9F:84:4D:BD:42:32:61:3A Authority key identifier: 38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA Certificate issuer: /CN=A9198267/serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA Certificate serial: 0A50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft Manifest number: 0A41 Signing time: Sat 18 Oct 2025 20:42:44 +0000 Manifest this update: Sat 18 Oct 2025 20:42:43 +0000 Manifest next update: Sat 25 Oct 2025 20:42:43 +0000 Files and hashes: 1: OPsGr2SfQA9ROZSTW-335JJwyKo.crl (hash: V14nKRYMUevIr2ZchLmqjHLSOyEemJHxvKkvfc5gmU8=) 2: 2F43EE7278CC11EAB69DAC75C4F9AE02.roa (hash: vryPQgJZ9HPQvb4c/vnzkdnAafqVRFouOd+j23S6sMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2640 (0xa50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198267, serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA Validity Not Before: Oct 18 20:42:43 2025 GMT Not After : Oct 25 20:42:43 2025 GMT Subject: CN=68f3fbc4-7fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:68:15:d7:e9:47:8f:8e:da:13:5b:02:c5:4c: 62:89:51:54:16:a7:3a:48:e9:14:e7:ae:0d:a6:c6: e5:f3:b9:1a:13:6b:f9:57:94:4b:7b:7e:cf:35:b2: 78:e8:1c:53:26:02:b1:fa:75:ba:5a:b4:87:3f:ce: b7:42:c2:0d:be:54:09:0e:d0:09:a2:2f:0e:0a:d5: a8:aa:dd:a8:81:4d:1a:be:19:1f:4d:26:2f:7c:f1: 5a:2e:55:98:6b:16:14:4f:d2:b1:2a:78:b3:06:61: 78:44:20:98:f1:b6:d9:31:53:06:98:7f:36:ed:24: 59:20:3d:d8:4a:f1:b3:b2:6c:3c:5b:af:55:f9:f2: 2c:09:d9:03:b9:83:73:52:61:b8:e7:a6:b1:f0:ac: c6:d3:8f:cc:f1:dc:87:ae:28:87:89:43:a8:37:74: d4:77:a8:68:bd:ed:88:0d:1e:38:a0:6f:af:c9:d9: 97:1e:40:bf:92:4e:5a:5e:51:59:3a:20:41:9a:d9: e3:8b:dd:75:ec:fc:35:d4:2e:e9:84:a3:4d:db:cd: 25:76:11:ff:26:3d:68:55:9e:3a:c4:7c:77:55:61: fd:18:e4:83:25:f7:73:5d:c2:0b:c7:cf:93:55:98: 1b:22:85:ab:df:a9:f9:6e:6f:f6:9d:c6:b2:68:74: a0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D9:66:B9:0E:A2:1A:AC:93:8C:87:91:9F:84:4D:BD:42:32:61:3A X509v3 Authority Key Identifier: keyid:38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:85:7d:ab:c8:31:f5:17:b0:4e:ab:e7:9c:64:45:bc:f4:1a: 86:02:06:9e:9c:1d:74:79:21:e0:86:09:9f:51:c9:34:ce:fa: 0b:43:1d:de:8b:97:5d:1e:95:c0:f4:d4:76:f6:7c:d8:40:4a: 7b:2d:9c:c1:26:22:97:db:90:33:5e:d5:0a:1e:3a:4a:24:3f: a0:44:10:62:fa:5f:f3:62:a5:fe:28:29:42:ee:ca:1a:92:1b: 3a:9b:27:64:cb:51:c8:e3:5e:6b:de:d8:d5:1b:3b:74:a7:d2: a9:e4:fe:11:a8:14:52:14:02:f3:99:c1:dd:bf:ca:f5:96:6c: 2d:c8:56:3f:be:6e:e1:71:a1:86:0a:09:ff:b3:5a:a4:12:d1: 5e:8f:41:e8:69:e4:85:95:f2:f4:90:b9:47:08:2f:91:d1:a0: de:5e:35:c4:e2:24:b3:30:89:8f:5f:7d:65:60:f0:62:2e:d5: 08:01:32:67:b2:74:2f:06:16:3a:6b:07:96:74:13:e3:05:85: 3f:c7:b8:16:10:1c:12:9e:43:0b:72:7b:bd:e6:80:27:64:84: db:02:15:8e:9d:b3:4f:65:6c:d5:25:11:bc:ae:75:ef:ba:e7: 34:b7:2c:ff:3e:62:e6:70:5c:e7:f2:97:62:0c:ac:57:43:8b: b5:a5:9d:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyNjcxMTAvBgNVBAUTKDM4RkIwNkFGNjQ5RjQwMEY1MTM5OTQ5MzVCRURGN0U0 OTI3MEM4QUEwHhcNMjUxMDE4MjA0MjQzWhcNMjUxMDI1MjA0MjQzWjAYMRYwFAYD VQQDEw02OGYzZmJjNC03ZmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WgV1+lHj47aE1sCxUxiiVFUFqc6SOkU564Npsbl87kaE2v5V5RLe37PNbJ4 6BxTJgKx+nW6WrSHP863QsINvlQJDtAJoi8OCtWoqt2ogU0avhkfTSYvfPFaLlWY axYUT9KxKnizBmF4RCCY8bbZMVMGmH827SRZID3YSvGzsmw8W69V+fIsCdkDuYNz UmG456ax8KzG04/M8dyHriiHiUOoN3TUd6hove2IDR44oG+vydmXHkC/kk5aXlFZ OiBBmtnji9117Pw11C7phKNN280ldhH/Jj1oVZ46xHx3VWH9GOSDJfdzXcILx8+T VZgbIoWr36n5bm/2ncayaHSgwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHZZrkO ohqsk4yHkZ+ETb1CMmE6MB8GA1UdIwQYMBaAFDj7Bq9kn0APUTmUk1vt9+SScMiq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODI2Ny8wMkM4NkVBQTc4 Q0IxMUVBODIwRDcyNzRDNEY5QUUwMi9PUHNHcjJTZlFBOVJPWlNUVy0zMzVKSnd5 S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Qc0dyMlNmUUE5Uk9aU1RXLTMzNUpKd3lLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODI2Ny8wMkM4NkVBQTc4Q0IxMUVBODIwRDcyNzRDNEY5QUUwMi9PUHNHcjJTZlFB OVJPWlNUVy0zMzVKSnd5S28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVhX2ryDH1F7BOq+ecZEW89BqGAgaenB10eSHghgmfUck0zvoLQx3e i5ddHpXA9NR29nzYQEp7LZzBJiKX25AzXtUKHjpKJD+gRBBi+l/zYqX+KClC7soa khs6mydky1HI415r3tjVGzt0p9Kp5P4RqBRSFALzmcHdv8r1lmwtyFY/vm7hcaGG Cgn/s1qkEtFej0HoaeSFlfL0kLlHCC+R0aDeXjXE4iSzMImPX31lYPBiLtUIATJn snQvBhY6aweWdBPjBYU/x7gWEBwSnkMLcnu95oAnZITbAhWOnbNPZWzVJRG8rnXv uuc0tyz/PmLmcFzn8pdiDKxXQ4u1pZ34 -----END CERTIFICATE-----Generated at Mon Oct 20 01:43:47 2025 by rpki-client