$ rpki-client -vvf rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft File: OPsGr2SfQA9ROZSTW-335JJwyKo.mft (raw, json) Hash identifier: njVFLcTkA0Bi1PpBsgRSl1Rq0hj+5oeHFmssQv31u3w= Subject key identifier: C1:B4:AA:7A:7E:AF:E2:E1:2F:94:9D:AC:A1:A2:36:51:6A:8E:6E:68 Authority key identifier: 38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA Certificate issuer: /CN=A9198267/serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA Certificate serial: 0AE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft Manifest number: 0AD3 Signing time: Wed 22 Jul 2026 19:48:48 +0000 Manifest this update: Wed 22 Jul 2026 19:48:47 +0000 Manifest next update: Wed 29 Jul 2026 19:48:47 +0000 Files and hashes: 1: OPsGr2SfQA9ROZSTW-335JJwyKo.crl (hash: Rzs11In1vuLZ7DFPaQSroNf7KAhXg9/sQr6c884qYBY=) 2: 2F43EE7278CC11EAB69DAC75C4F9AE02.roa (hash: RCg1Rl9BMePurgmT4FLJMdQ57mTRP5HppFNnGUt/YQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2788 (0xae4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198267, serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA Validity Not Before: Jul 22 19:48:47 2026 GMT Not After : Jul 29 19:48:47 2026 GMT Subject: CN=6a611e9f-4716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:35:47:ec:51:ae:79:5a:34:5c:b3:0e:92:d4: e2:43:e5:b0:36:ba:66:38:63:8d:f3:39:8d:3d:b9: 33:9b:6c:42:d3:81:f3:09:c0:4c:fa:0d:eb:97:cb: c5:13:de:67:61:ac:69:e4:19:ca:c7:e7:b3:58:9a: b3:db:e9:be:a6:0c:00:2c:ff:8a:50:82:64:d3:73: ba:5a:04:0a:09:b8:59:e6:01:d0:81:c0:72:08:f9: 10:fe:d3:9c:38:56:2e:eb:60:69:11:13:7f:64:bd: fc:eb:fa:14:d5:eb:cc:b8:40:6b:e6:82:64:73:94: 14:96:73:46:21:83:00:be:e3:44:33:05:90:c8:9d: f0:22:aa:07:3b:93:47:ff:1b:07:84:20:b8:36:50: f1:90:e8:d1:bf:d7:c9:80:ff:cb:4b:35:f1:f5:ca: d5:e4:04:5b:b2:22:2d:a0:3f:44:18:64:81:2b:d4: f9:15:88:80:8f:d1:e7:61:bb:38:9d:9f:54:e8:8e: 49:14:ae:44:c7:e4:cf:0f:b5:9c:fd:99:87:bb:88: 9c:cd:28:06:22:4b:c6:73:06:b8:62:31:86:6f:82: 47:c0:f0:73:98:d4:0c:56:ac:07:67:01:40:97:d2: 1f:ec:e6:1c:99:eb:ce:2b:11:93:06:82:a5:41:70: d9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B4:AA:7A:7E:AF:E2:E1:2F:94:9D:AC:A1:A2:36:51:6A:8E:6E:68 X509v3 Authority Key Identifier: keyid:38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:d5:21:f8:a9:fe:dc:99:14:58:77:7b:37:5a:2e:ed:c6:df: d6:a3:ab:3b:64:e0:83:81:68:ba:48:e0:a8:b2:07:d8:b7:03: df:b9:e4:a6:6e:b2:0a:9f:11:6d:f0:0f:2d:74:d8:80:57:fc: 55:a8:48:17:99:bd:f7:0e:9f:bf:86:66:6d:bf:06:80:1f:4e: 69:13:d7:df:3a:00:f6:2d:49:46:ee:b0:8a:b0:2c:50:8f:f5: 4a:59:49:d1:11:c9:e7:9c:fc:2c:a2:2f:6c:b6:45:25:f3:07: 6a:b6:38:74:e9:26:72:3f:e8:88:fc:9c:be:65:f8:15:d6:63: 51:6f:f0:56:4b:b6:7f:cf:b9:c2:a0:0c:37:a3:eb:c0:93:d0: 1e:3e:7e:a8:88:09:b0:49:fc:86:90:d6:df:2c:2c:88:9e:61: 57:1c:69:dd:d4:73:d6:2b:d3:3b:d6:57:99:a6:28:3f:c7:8c: fe:78:f6:69:0e:27:92:5b:3a:a2:1d:9f:f9:73:f3:15:d8:9a: 15:60:43:78:a8:05:d4:86:63:35:0c:89:68:12:6d:66:54:d7: 41:a1:38:e6:a1:74:bf:05:da:32:3a:0f:f3:ad:53:ac:c3:cb: ba:7a:02:6c:02:a5:c7:34:da:8b:f0:21:a5:27:23:6d:1a:84: bd:97:fe:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyNjcxMTAvBgNVBAUTKDM4RkIwNkFGNjQ5RjQwMEY1MTM5OTQ5MzVCRURGN0U0 OTI3MEM4QUEwHhcNMjYwNzIyMTk0ODQ3WhcNMjYwNzI5MTk0ODQ3WjAYMRYwFAYD VQQDEw02YTYxMWU5Zi00NzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzVH7FGueVo0XLMOktTiQ+WwNrpmOGON8zmNPbkzm2xC04HzCcBM+g3rl8vF E95nYaxp5BnKx+ezWJqz2+m+pgwALP+KUIJk03O6WgQKCbhZ5gHQgcByCPkQ/tOc OFYu62BpERN/ZL386/oU1evMuEBr5oJkc5QUlnNGIYMAvuNEMwWQyJ3wIqoHO5NH /xsHhCC4NlDxkOjRv9fJgP/LSzXx9crV5ARbsiItoD9EGGSBK9T5FYiAj9HnYbs4 nZ9U6I5JFK5Ex+TPD7Wc/ZmHu4iczSgGIkvGcwa4YjGGb4JHwPBzmNQMVqwHZwFA l9If7OYcmevOKxGTBoKlQXDZLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMG0qnp+ r+LhL5SdrKGiNlFqjm5oMB8GA1UdIwQYMBaAFDj7Bq9kn0APUTmUk1vt9+SScMiq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODI2Ny8wMkM4NkVBQTc4 Q0IxMUVBODIwRDcyNzRDNEY5QUUwMi9PUHNHcjJTZlFBOVJPWlNUVy0zMzVKSnd5 S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Qc0dyMlNmUUE5Uk9aU1RXLTMzNUpKd3lLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODI2Ny8wMkM4NkVBQTc4Q0IxMUVBODIwRDcyNzRDNEY5QUUwMi9PUHNHcjJTZlFB OVJPWlNUVy0zMzVKSnd5S28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYNUh+Kn+3JkUWHd7N1ou7cbf1qOrO2Tgg4FoukjgqLIH2LcD37nkpm6yCp8R bfAPLXTYgFf8VahIF5m99w6fv4Zmbb8GgB9OaRPX3zoA9i1JRu6wirAsUI/1SllJ 0RHJ55z8LKIvbLZFJfMHarY4dOkmcj/oiPycvmX4FdZjUW/wVku2f8+5wqAMN6Pr wJPQHj5+qIgJsEn8hpDW3ywsiJ5hVxxp3dRz1ivTO9ZXmaYoP8eM/nj2aQ4nkls6 oh2f+XPzFdiaFWBDeKgF1IZjNQyJaBJtZlTXQaE45qF0vwXaMjoP861TrMPLunoC bAKlxzTai/AhpScjbRqEvZf+lg== -----END CERTIFICATE-----Generated at Thu Jul 23 21:57:22 2026 by rpki-client