$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft File: opsbaAnOwakkcMWcbDa_pc84cYY.mft (raw, json) Hash identifier: FFn+0/iR11DAasMIrsjdKKPgYqxcCp1gUqTKlIyEubM= Subject key identifier: AC:F4:1E:0B:73:A8:95:F1:11:35:B1:E6:07:2E:37:35:12:78:99:61 Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 Certificate issuer: /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft Manifest number: 0126 Signing time: Tue 21 Jul 2026 07:23:30 +0000 Manifest this update: Tue 21 Jul 2026 07:23:29 +0000 Manifest next update: Tue 28 Jul 2026 07:23:29 +0000 Files and hashes: 1: opsbaAnOwakkcMWcbDa_pc84cYY.crl (hash: jlsb5Zgz4P6zRRmXz7EDWhsEDqg7wym2wfVzn/r8Tsc=) 2: B1532E06F5FC11F08D6378D9536F56BC.roa (hash: 3XmkQBDW/VzAvHD7muWFlcJMnKZTQS3L1LZ6CKtf888=) 3: 7404496836E411F0A95FB239C4F9AE02.roa (hash: qJ7524YAscm+xf2ckiU9VWuAvVs5iHMseuM90BOMC/0=) 4: 7375238236E411F0A95FB239C4F9AE02.roa (hash: IahlFKvuUvZTPl7dK0sCB7M+yoIRvnKGTDIQMSq4hWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 07:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Validity Not Before: Jul 21 07:23:29 2026 GMT Not After : Jul 28 07:23:29 2026 GMT Subject: CN=6a5f1e72-d915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:66:b5:ce:97:d1:18:85:c3:fa:31:c4:f0:3e: 21:43:b6:07:3f:39:33:5f:f5:ab:c4:72:5e:95:42: 14:ab:e9:f1:ed:db:4b:14:14:66:72:47:26:e2:a1: 77:e9:c3:e1:2b:72:47:e3:c0:84:b6:5a:84:19:7c: 50:2a:82:34:b4:c6:fc:94:c2:1a:5f:6b:5d:05:6a: 7d:40:3e:da:1f:c7:5f:b1:95:19:7e:a8:86:d3:87: 90:32:81:5d:cc:8d:b6:95:01:66:8a:48:ba:e9:94: 41:38:dc:58:88:72:7f:30:de:5e:eb:5d:37:ac:55: d9:de:e5:3f:8d:2b:0d:e9:dc:b2:3e:33:5e:5f:4c: 9a:5a:1a:48:7a:5d:71:da:c9:70:23:ca:1e:71:4f: 17:9e:4f:f4:20:39:d7:b7:4b:0e:53:26:14:a3:1f: 36:36:49:2a:b3:78:ac:3e:46:53:38:92:0d:77:1c: a9:55:f3:c4:b6:e0:87:ee:c6:ca:5f:1a:b7:ac:19: c9:ef:89:03:dc:5c:6f:8e:2e:bb:f7:f1:2e:42:02: 62:bf:13:85:93:f3:3a:cf:8e:dd:37:bf:22:3b:c0: f9:e3:a0:2f:d4:6d:04:c1:71:20:37:e1:86:65:6f: b8:ed:53:d0:c8:18:49:86:86:8b:1f:b9:2a:d8:f0: ce:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F4:1E:0B:73:A8:95:F1:11:35:B1:E6:07:2E:37:35:12:78:99:61 X509v3 Authority Key Identifier: keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:49:e9:5b:6d:a7:f3:32:f3:00:58:c4:fe:3c:4e:62:1b:8d: f9:0d:9c:3a:41:da:61:d1:2f:75:fb:35:64:f3:4d:a1:25:38: ba:36:d9:59:19:62:d6:81:b0:78:09:c2:a2:83:11:a0:77:01: 31:38:98:f3:54:c1:d8:15:46:58:bf:83:7c:29:43:ae:d8:1f: 36:07:b9:ce:77:24:e3:60:5b:1b:ed:11:26:3f:a1:cd:a1:9d: 6a:0f:b7:dd:9f:66:19:dd:a4:b5:07:a7:7d:06:14:d3:69:97: c6:b2:ba:f9:df:3e:34:59:b9:dc:16:d2:65:c3:e5:61:09:58: 93:13:3d:86:1b:d8:0e:f4:f8:a6:17:68:22:dd:45:f9:fc:07: 67:35:a7:57:a7:54:3e:99:51:1f:64:e5:a1:8a:54:84:42:6b: 39:6b:2f:41:26:04:a8:b1:cc:55:3b:7a:20:dc:fc:b7:0d:4c: 88:57:ab:f1:32:54:0a:6f:dd:13:52:b0:01:1e:85:cd:d8:fc: 8f:e8:c9:e8:73:be:9f:95:94:47:5a:d2:98:bf:ec:a8:47:25: 23:e7:74:54:39:56:39:8b:d6:1a:a5:84:cb:5d:7d:9d:8b:0d: fe:a5:88:92:37:44:4d:8c:dc:bd:fd:44:b8:bd:88:1f:5e:1d: 28:d0:2c:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdCQUMxMTAvBgNVBAUTKEEyOUIxQjY4MDlDRUMxQTkyNDcwQzU5QzZDMzZCRkE1 Q0YzODcxODYwHhcNMjYwNzIxMDcyMzI5WhcNMjYwNzI4MDcyMzI5WjAYMRYwFAYD VQQDEw02YTVmMWU3Mi1kOTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWa1zpfRGIXD+jHE8D4hQ7YHPzkzX/WrxHJelUIUq+nx7dtLFBRmckcm4qF3 6cPhK3JH48CEtlqEGXxQKoI0tMb8lMIaX2tdBWp9QD7aH8dfsZUZfqiG04eQMoFd zI22lQFmiki66ZRBONxYiHJ/MN5e6103rFXZ3uU/jSsN6dyyPjNeX0yaWhpIel1x 2slwI8oecU8Xnk/0IDnXt0sOUyYUox82Nkkqs3isPkZTOJINdxypVfPEtuCH7sbK Xxq3rBnJ74kD3Fxvji679/EuQgJivxOFk/M6z47dN78iO8D546Av1G0EwXEgN+GG ZW+47VPQyBhJhoaLH7kq2PDOVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKz0Hgtz qJXxETWx5gcuNzUSeJlhMB8GA1UdIwQYMBaAFKKbG2gJzsGpJHDFnGw2v6XPOHGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0JBQy9DNkFEM0UwQUQw MkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dha2tjTVdjYkRhX3BjODRj WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29wc2JhQW5Pd2Fra2NNV2NiRGFfcGM4NGNZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0JBQy9DNkFEM0UwQUQwMkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dh a2tjTVdjYkRhX3BjODRjWVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADknpW22n8zLzAFjE/jxOYhuN+Q2cOkHaYdEvdfs1ZPNNoSU4ujbZWRli1oGw eAnCooMRoHcBMTiY81TB2BVGWL+DfClDrtgfNge5znck42BbG+0RJj+hzaGdag+3 3Z9mGd2ktQenfQYU02mXxrK6+d8+NFm53BbSZcPlYQlYkxM9hhvYDvT4phdoIt1F +fwHZzWnV6dUPplRH2TloYpUhEJrOWsvQSYEqLHMVTt6INz8tw1MiFer8TJUCm/d E1KwAR6Fzdj8j+jJ6HO+n5WUR1rSmL/sqEclI+d0VDlWOYvWGqWEy119nYsN/qWI kjdETYzcvf1EuL2IH14dKNAsXQ== -----END CERTIFICATE-----Generated at Tue Jul 21 22:14:50 2026 by rpki-client