$ rpki-client -vvf rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft File: OPsGr2SfQA9ROZSTW-335JJwyKo.mft (raw, json) Hash identifier: o+YPrD9TdQQZTN3rXQMwK3nowNPrDSU/kl65b8dIcMA= Subject key identifier: 00:32:E2:B1:01:23:02:CD:C6:1E:0C:9A:4F:66:08:99:83:C4:2F:81 Authority key identifier: 38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA Certificate issuer: /CN=A9198267/serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA Certificate serial: 0AC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft Manifest number: 0AAF Signing time: Tue 12 May 2026 19:33:11 +0000 Manifest this update: Tue 12 May 2026 19:33:10 +0000 Manifest next update: Tue 19 May 2026 19:33:10 +0000 Files and hashes: 1: OPsGr2SfQA9ROZSTW-335JJwyKo.crl (hash: ESZd/KnGbsijOlZxV3uT+5Uy8OH99l7QSwkb2zYXJE4=) 2: 2F43EE7278CC11EAB69DAC75C4F9AE02.roa (hash: RCg1Rl9BMePurgmT4FLJMdQ57mTRP5HppFNnGUt/YQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2752 (0xac0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198267, serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA Validity Not Before: May 12 19:33:10 2026 GMT Not After : May 19 19:33:10 2026 GMT Subject: CN=6a038076-19a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f7:1b:7a:39:ef:45:2d:d4:f5:eb:48:0a:be: e4:35:70:73:37:67:c5:e1:80:ee:74:be:34:71:10: 15:0a:94:f3:ae:dc:8b:3c:94:ce:bb:af:3f:8c:aa: 21:74:88:93:34:0a:81:60:c1:d7:97:49:68:d4:62: 5b:3b:4b:57:eb:f8:f9:e6:46:59:bd:6b:08:4e:7e: 45:25:66:fc:50:48:c3:c1:1e:60:5c:6c:e7:22:0d: 48:51:21:14:82:e9:61:e7:85:e6:06:1d:14:3e:ad: c0:32:8c:ae:85:68:25:b9:ec:f2:08:69:1a:eb:d3: bb:28:d4:97:92:cf:12:66:ec:8b:49:ee:a3:39:eb: 97:95:24:d4:f8:d2:4d:fc:dd:d5:30:8c:93:dd:f1: 51:af:30:f2:1f:f3:ec:65:6b:e5:66:44:5f:5b:e2: ba:64:1f:d4:28:79:30:93:ed:74:18:c0:65:d5:94: c8:0d:cf:fc:0e:68:a7:c0:b1:a2:6b:5f:86:d6:b4: 5c:a7:9d:11:87:fd:b1:9d:a5:e2:07:98:5d:a4:6c: 6a:52:09:55:44:86:86:44:91:e6:f2:a3:0a:71:46: 8f:e1:c1:c0:35:50:84:a6:bb:ac:4e:e1:21:5e:d8: d5:58:e7:77:b8:5f:48:26:4b:ae:39:75:0f:bd:fa: 4d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:32:E2:B1:01:23:02:CD:C6:1E:0C:9A:4F:66:08:99:83:C4:2F:81 X509v3 Authority Key Identifier: keyid:38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:85:31:a1:a2:05:9c:3c:09:f6:6b:a8:d5:a2:ca:9a:25:0c: 0e:0e:80:fd:f8:94:4e:94:20:a6:4c:7c:8e:82:5f:b9:30:e4: 45:f5:06:33:72:23:fc:9e:e1:ff:40:25:ec:62:85:2e:d2:e4: 9b:c5:60:a2:e1:c9:89:84:4a:66:d3:13:9b:6c:2e:96:28:53: 5a:e0:88:2a:eb:22:2f:64:fb:59:ce:1d:e5:32:81:7e:a3:32: cf:75:e3:c8:2a:7e:f8:e3:ca:bf:3e:f6:c2:6e:95:92:bc:6c: 30:56:82:b1:b9:9d:ce:2c:db:70:71:31:c7:6e:0a:c5:6a:fd: 65:bb:9f:9d:89:a6:a7:f6:b2:c3:b0:9b:a6:a2:84:8f:77:25: 1d:eb:bc:7e:45:a2:ba:3c:48:eb:54:8f:c0:61:cb:fd:31:76: 94:43:4f:26:75:c4:b2:b0:16:d8:14:4e:92:d6:6c:ae:c2:76: 31:bc:2e:5e:3f:4d:04:8c:f6:47:2a:87:c6:9f:d6:d0:02:9c: 70:db:7c:9e:bd:32:30:ad:7d:f0:49:30:52:14:ce:3b:43:c8: 88:3a:d6:57:8a:29:1b:be:db:bf:c3:9e:51:b2:9e:d2:38:ff: 0d:38:cc:46:51:e4:bd:20:3e:28:cf:8e:9a:39:96:78:c5:1e: 6d:b5:99:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyNjcxMTAvBgNVBAUTKDM4RkIwNkFGNjQ5RjQwMEY1MTM5OTQ5MzVCRURGN0U0 OTI3MEM4QUEwHhcNMjYwNTEyMTkzMzEwWhcNMjYwNTE5MTkzMzEwWjAYMRYwFAYD VQQDEw02YTAzODA3Ni0xOWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vcbejnvRS3U9etICr7kNXBzN2fF4YDudL40cRAVCpTzrtyLPJTOu68/jKoh dIiTNAqBYMHXl0lo1GJbO0tX6/j55kZZvWsITn5FJWb8UEjDwR5gXGznIg1IUSEU gulh54XmBh0UPq3AMoyuhWgluezyCGka69O7KNSXks8SZuyLSe6jOeuXlSTU+NJN /N3VMIyT3fFRrzDyH/PsZWvlZkRfW+K6ZB/UKHkwk+10GMBl1ZTIDc/8DminwLGi a1+G1rRcp50Rh/2xnaXiB5hdpGxqUglVRIaGRJHm8qMKcUaP4cHANVCEprusTuEh XtjVWOd3uF9IJkuuOXUPvfpNmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAAy4rEB IwLNxh4Mmk9mCJmDxC+BMB8GA1UdIwQYMBaAFDj7Bq9kn0APUTmUk1vt9+SScMiq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODI2Ny8wMkM4NkVBQTc4 Q0IxMUVBODIwRDcyNzRDNEY5QUUwMi9PUHNHcjJTZlFBOVJPWlNUVy0zMzVKSnd5 S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Qc0dyMlNmUUE5Uk9aU1RXLTMzNUpKd3lLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODI2Ny8wMkM4NkVBQTc4Q0IxMUVBODIwRDcyNzRDNEY5QUUwMi9PUHNHcjJTZlFB OVJPWlNUVy0zMzVKSnd5S28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFYUxoaIFnDwJ9muo1aLKmiUMDg6A/fiUTpQgpkx8joJfuTDkRfUGM3Ij/J7h /0Al7GKFLtLkm8VgouHJiYRKZtMTm2wulihTWuCIKusiL2T7Wc4d5TKBfqMyz3Xj yCp++OPKvz72wm6VkrxsMFaCsbmdzizbcHExx24KxWr9ZbufnYmmp/ayw7CbpqKE j3clHeu8fkWiujxI61SPwGHL/TF2lENPJnXEsrAW2BROktZsrsJ2MbwuXj9NBIz2 RyqHxp/W0AKccNt8nr0yMK198EkwUhTOO0PIiDrWV4opG77bv8OeUbKe0jj/DTjM RlHkvSA+KM+OmjmWeMUebbWZ/g== -----END CERTIFICATE-----Generated at Wed May 13 14:51:16 2026 by rpki-client