$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft File: opsbaAnOwakkcMWcbDa_pc84cYY.mft (raw, json) Hash identifier: lfGAccO0GpzuU/I/XYueEJZG7717NE7fG5+t2jkrSoc= Subject key identifier: CE:D8:79:C4:58:AE:5C:70:FC:C6:94:B3:92:08:4E:EB:00:B0:D3:62 Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 Certificate issuer: /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft Manifest number: 68 Signing time: Wed 23 Jul 2025 07:22:45 +0000 Manifest this update: Wed 23 Jul 2025 07:22:44 +0000 Manifest next update: Wed 30 Jul 2025 07:22:44 +0000 Files and hashes: 1: opsbaAnOwakkcMWcbDa_pc84cYY.crl (hash: quE+47mexVm19Ce2ATmgXZLkFuvLg5zxm5f1XLRUmUA=) 2: 7404496836E411F0A95FB239C4F9AE02.roa (hash: WHGMZh9P2RExWIeMMaDkbGi0VRoxW1Iai0A3Zb9yWT4=) 3: 7375238236E411F0A95FB239C4F9AE02.roa (hash: 6GqewoLZaVKTqsSzxgnIGXRwmj2ShKpEerZMfS7j+UE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 07:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Validity Not Before: Jul 23 07:22:44 2025 GMT Not After : Jul 30 07:22:44 2025 GMT Subject: CN=68808dc4-6d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7e:69:c0:5a:9d:5a:f5:0c:53:aa:c5:44:41: 3a:12:02:50:a9:f2:15:00:71:05:f1:44:31:c6:5f: 96:65:8a:74:98:d9:c6:5e:8e:92:c4:ad:6d:4d:90: 42:94:ac:86:cb:65:82:2c:82:82:83:a1:eb:2a:3e: 8e:26:77:a9:b1:b0:b0:34:67:74:cb:6f:1a:f3:a8: 3b:eb:5b:54:58:78:50:4d:0c:eb:33:ab:b7:a4:19: 36:bd:5e:ba:b9:b9:b8:27:c7:6e:13:79:28:27:f0: ee:f2:e4:53:19:6b:b4:45:19:de:d8:ea:91:eb:7c: 3d:19:85:be:f8:0b:b7:6a:86:04:01:d8:a8:60:71: 40:0c:ea:5f:a3:3b:f0:8a:47:2c:02:bd:9b:c3:d0: 0d:e8:93:f8:b6:97:5a:d0:d4:e5:47:8b:b0:9b:26: 8a:f9:37:cf:3b:a8:ee:8c:5f:61:39:49:f7:dc:81: e2:7f:9d:84:6f:84:8d:ab:ae:1d:3d:f6:81:5c:7c: cd:6c:86:ba:31:c3:f5:ce:5b:37:b6:d9:73:3b:a0: c6:8d:a0:ef:cc:b3:ac:16:25:02:f4:46:57:1d:38: 69:d1:10:55:dc:d5:8c:33:59:07:2f:0f:1d:09:76: 45:b6:a1:02:1a:c3:57:6a:85:34:8e:cf:48:a6:87: 80:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D8:79:C4:58:AE:5C:70:FC:C6:94:B3:92:08:4E:EB:00:B0:D3:62 X509v3 Authority Key Identifier: keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:f7:6d:8f:b8:a5:ed:e3:b6:4a:f5:39:c1:36:56:61:ba:05: 46:72:44:27:43:e2:f2:68:c4:d6:ab:7c:6b:25:85:04:98:4b: 46:3b:d4:ec:86:09:b9:4d:5c:4a:9c:3f:66:94:c8:e3:0f:88: b8:68:ff:61:eb:a3:34:f2:57:5b:7e:97:3b:6c:12:1a:3f:35: 36:17:92:fb:2c:21:8c:eb:48:f1:26:43:40:cd:40:6b:d4:47: 41:76:30:eb:53:ca:6e:02:a3:41:a7:ba:06:40:aa:ef:96:7c: 2d:6e:75:f3:34:96:ac:54:88:3e:78:a9:e6:00:3b:fd:67:43: f8:40:60:c0:94:6b:ad:bf:a2:b1:f7:2b:cf:44:b8:32:2f:3f: e9:af:aa:4d:eb:78:76:a4:4f:24:7e:81:0b:30:5f:14:6e:cc: b7:70:12:7e:05:05:74:e0:99:24:91:f6:d2:9d:21:a5:35:26: 54:e9:af:10:70:c9:d6:5c:93:b2:50:f3:3b:3b:84:c7:99:62: fc:1f:61:83:ac:f9:14:b0:4c:bf:22:14:cb:71:5a:92:f8:cd: e0:85:0b:e1:99:b6:42:42:88:b5:6b:98:26:bd:de:e4:9a:d8: 57:65:ba:f1:9a:a4:10:63:bd:93:9a:02:3b:84:59:22:86:7e: 1c:0f:46:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0JBQzExMC8GA1UEBRMoQTI5QjFCNjgwOUNFQzFBOTI0NzBDNTlDNkMzNkJGQTVD RjM4NzE4NjAeFw0yNTA3MjMwNzIyNDRaFw0yNTA3MzAwNzIyNDRaMBgxFjAUBgNV BAMTDTY4ODA4ZGM0LTZkN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7fmnAWp1a9QxTqsVEQToSAlCp8hUAcQXxRDHGX5ZlinSY2cZejpLErW1NkEKU rIbLZYIsgoKDoesqPo4md6mxsLA0Z3TLbxrzqDvrW1RYeFBNDOszq7ekGTa9Xrq5 ubgnx24TeSgn8O7y5FMZa7RFGd7Y6pHrfD0Zhb74C7dqhgQB2KhgcUAM6l+jO/CK RywCvZvD0A3ok/i2l1rQ1OVHi7CbJor5N887qO6MX2E5SffcgeJ/nYRvhI2rrh09 9oFcfM1shroxw/XOWze22XM7oMaNoO/Ms6wWJQL0RlcdOGnREFXc1YwzWQcvDx0J dkW2oQIaw1dqhTSOz0imh4A9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzth5xFiu XHD8xpSzkghO6wCw02IwHwYDVR0jBBgwFoAUopsbaAnOwakkcMWcbDa/pc84cYYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3QkFDL0M2QUQzRTBBRDAy QzExRUZCNTU4NDkxNUM0RjlBRTAyL29wc2JhQW5Pd2Fra2NNV2NiRGFfcGM4NGNZ WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3BzYmFBbk93YWtrY01XY2JEYV9wYzg0Y1lZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 QkFDL0M2QUQzRTBBRDAyQzExRUZCNTU4NDkxNUM0RjlBRTAyL29wc2JhQW5Pd2Fr a2NNV2NiRGFfcGM4NGNZWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAf3bY+4pe3jtkr1OcE2VmG6BUZyRCdD4vJoxNarfGslhQSYS0Y71OyG CblNXEqcP2aUyOMPiLho/2HrozTyV1t+lztsEho/NTYXkvssIYzrSPEmQ0DNQGvU R0F2MOtTym4Co0GnugZAqu+WfC1udfM0lqxUiD54qeYAO/1nQ/hAYMCUa62/orH3 K89EuDIvP+mvqk3reHakTyR+gQswXxRuzLdwEn4FBXTgmSSR9tKdIaU1JlTprxBw ydZck7JQ8zs7hMeZYvwfYYOs+RSwTL8iFMtxWpL4zeCFC+GZtkJCiLVrmCa93uSa 2FdluvGapBBjvZOaAjuEWSKGfhwPRkY= -----END CERTIFICATE-----Generated at Fri Jul 25 04:39:20 2025 by rpki-client