$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft File: opsbaAnOwakkcMWcbDa_pc84cYY.mft (raw, json) Hash identifier: QlMVZvAA1R8jsvTM30tg9ygvvJ4t2+ao50hMlyVEOBk= Subject key identifier: BE:E7:47:F3:04:98:BE:AE:26:1F:B7:15:8C:EB:44:0F:96:3B:C3:B7 Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 Certificate issuer: /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft Manifest number: 013D Signing time: Thu 03 Sep 2026 05:43:55 +0000 Manifest this update: Thu 03 Sep 2026 05:43:54 +0000 Manifest next update: Thu 10 Sep 2026 05:43:54 +0000 Files and hashes: 1: opsbaAnOwakkcMWcbDa_pc84cYY.crl (hash: ynnZ6q+Mejihj6VL6jitmEYhvtiBlRDxR/5x9D0dTkE=) 2: 7375238236E411F0A95FB239C4F9AE02.roa (hash: IahlFKvuUvZTPl7dK0sCB7M+yoIRvnKGTDIQMSq4hWM=) 3: B1532E06F5FC11F08D6378D9536F56BC.roa (hash: 3XmkQBDW/VzAvHD7muWFlcJMnKZTQS3L1LZ6CKtf888=) 4: 7404496836E411F0A95FB239C4F9AE02.roa (hash: qJ7524YAscm+xf2ckiU9VWuAvVs5iHMseuM90BOMC/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 05:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Validity Not Before: Sep 3 05:43:54 2026 GMT Not After : Sep 10 05:43:54 2026 GMT Subject: CN=6a99091b-733e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b9:6d:96:46:39:5c:d2:0a:ba:11:c7:0f:f1: 2f:e4:d0:ab:a5:79:f2:5d:34:1d:d9:42:81:5a:11: d9:3d:5f:cd:fe:e9:9d:c2:45:6b:c0:14:bc:a5:4c: d5:70:e8:6d:03:69:06:0a:1f:cc:72:c3:c5:cf:63: 9c:97:87:10:2d:d2:98:db:34:12:a7:5d:ec:b6:c8: b0:a3:b2:99:50:b0:e3:42:2a:be:3f:c5:b9:50:99: f4:c7:49:15:c0:ae:e3:54:1b:21:d8:44:89:d9:11: d4:0f:f6:86:20:08:eb:16:c1:e4:a4:bd:14:1a:b6: 25:29:82:2c:8b:6c:45:61:10:d7:7b:72:9c:a7:30: 1d:36:ae:5e:13:15:88:ea:bc:d1:72:32:e8:aa:72: 31:3f:9e:4a:1f:0f:bf:41:9d:01:72:c3:07:ac:7f: f5:0e:a8:c4:10:2f:d3:dc:49:e4:b0:d7:8c:c6:fb: ec:f5:83:66:1c:0c:23:3b:0b:70:c0:51:45:e0:7e: 03:13:f3:81:8e:f1:20:f7:ee:fb:63:a9:7b:a5:6d: 78:ab:01:08:fe:e4:c7:a1:2b:f6:c2:39:f7:ea:e4: 52:4a:82:af:1c:cd:7a:2a:c6:a3:9e:88:3d:57:fa: dd:80:ce:1d:dd:ea:eb:e0:e4:98:e7:17:6a:cb:80: f2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E7:47:F3:04:98:BE:AE:26:1F:B7:15:8C:EB:44:0F:96:3B:C3:B7 X509v3 Authority Key Identifier: keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:50:b0:d5:05:6c:89:56:13:3e:79:2a:9c:9d:38:0a:50:d6: 57:6e:a3:e2:13:7d:fc:28:45:b7:bf:96:36:33:70:a3:38:7c: 1f:48:58:f7:55:55:d9:b3:fc:4a:fb:40:b6:6b:86:f0:ca:0e: d3:75:be:e9:53:dd:48:d5:4a:a4:85:82:8b:38:5c:5c:68:46: 95:5e:ea:49:18:d6:7b:b2:45:c5:8c:0d:5d:8a:56:68:11:2a: 86:2b:b4:0c:6a:45:0b:ca:e5:0b:62:cf:53:37:6e:51:3c:d8: f5:1f:e0:35:95:4d:b9:95:b9:03:2f:0c:ef:1b:38:99:e3:fc: 8b:33:3a:41:b3:4f:79:84:86:00:14:47:3d:ba:cf:8a:08:b5: 3e:22:45:7b:3a:c6:b4:33:8c:cb:a0:d7:bd:d8:1e:00:ed:7f: 28:a1:f1:14:42:cb:ff:4e:d0:2f:41:9b:07:88:62:26:6e:ed: a4:ed:ce:d4:97:8f:8c:4f:4f:08:c4:e6:3a:01:92:75:39:13: 33:f4:4d:f0:16:08:b0:9f:8d:6c:d5:7a:b2:7b:44:f4:3e:3b: 03:8e:87:69:06:41:74:9b:b4:c7:bb:96:c1:57:fb:a8:33:9d: 62:56:40:80:4a:45:70:28:0f:e4:a2:55:ac:5a:f3:ac:b5:ca: 65:6d:75:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdCQUMxMTAvBgNVBAUTKEEyOUIxQjY4MDlDRUMxQTkyNDcwQzU5QzZDMzZCRkE1 Q0YzODcxODYwHhcNMjYwOTAzMDU0MzU0WhcNMjYwOTEwMDU0MzU0WjAYMRYwFAYD VQQDEw02YTk5MDkxYi03MzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrltlkY5XNIKuhHHD/Ev5NCrpXnyXTQd2UKBWhHZPV/N/umdwkVrwBS8pUzV cOhtA2kGCh/McsPFz2Ocl4cQLdKY2zQSp13stsiwo7KZULDjQiq+P8W5UJn0x0kV wK7jVBsh2ESJ2RHUD/aGIAjrFsHkpL0UGrYlKYIsi2xFYRDXe3KcpzAdNq5eExWI 6rzRcjLoqnIxP55KHw+/QZ0BcsMHrH/1DqjEEC/T3EnksNeMxvvs9YNmHAwjOwtw wFFF4H4DE/OBjvEg9+77Y6l7pW14qwEI/uTHoSv2wjn36uRSSoKvHM16Ksajnog9 V/rdgM4d3err4OSY5xdqy4Dy8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL7nR/ME mL6uJh+3FYzrRA+WO8O3MB8GA1UdIwQYMBaAFKKbG2gJzsGpJHDFnGw2v6XPOHGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0JBQy9DNkFEM0UwQUQw MkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dha2tjTVdjYkRhX3BjODRj WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29wc2JhQW5Pd2Fra2NNV2NiRGFfcGM4NGNZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0JBQy9DNkFEM0UwQUQwMkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dh a2tjTVdjYkRhX3BjODRjWVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAolCw1QVsiVYTPnkqnJ04ClDWV26j4hN9/ChFt7+WNjNwozh8H0hY91VV2bP8 SvtAtmuG8MoO03W+6VPdSNVKpIWCizhcXGhGlV7qSRjWe7JFxYwNXYpWaBEqhiu0 DGpFC8rlC2LPUzduUTzY9R/gNZVNuZW5Ay8M7xs4meP8izM6QbNPeYSGABRHPbrP igi1PiJFezrGtDOMy6DXvdgeAO1/KKHxFELL/07QL0GbB4hiJm7tpO3O1JePjE9P CMTmOgGSdTkTM/RN8BYIsJ+NbNV6sntE9D47A46HaQZBdJu0x7uWwVf7qDOdYlZA gEpFcCgP5KJVrFrzrLXKZW113w== -----END CERTIFICATE-----Generated at Sat Sep 5 04:18:12 2026 by rpki-client