$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft File: opsbaAnOwakkcMWcbDa_pc84cYY.mft (raw, json) Hash identifier: 08O8xE1JUOX73IajNscBAe/urDOv2LFvgIQMlgsvwro= Subject key identifier: EC:8A:B6:A5:74:27:9B:D0:89:A8:AB:15:35:5A:57:0A:B4:52:45:E5 Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 Certificate issuer: /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft Manifest number: 0156 Signing time: Fri 23 Oct 2026 05:49:05 +0000 Manifest this update: Fri 23 Oct 2026 05:49:05 +0000 Manifest next update: Fri 30 Oct 2026 05:49:05 +0000 Files and hashes: 1: opsbaAnOwakkcMWcbDa_pc84cYY.crl (hash: HSHsswrNZVNopNgf9EUa5mv7SCFlzKY48XMrQ2CMOPE=) 2: B1532E06F5FC11F08D6378D9536F56BC.roa (hash: 3XmkQBDW/VzAvHD7muWFlcJMnKZTQS3L1LZ6CKtf888=) 3: 7375238236E411F0A95FB239C4F9AE02.roa (hash: IahlFKvuUvZTPl7dK0sCB7M+yoIRvnKGTDIQMSq4hWM=) 4: 7404496836E411F0A95FB239C4F9AE02.roa (hash: qJ7524YAscm+xf2ckiU9VWuAvVs5iHMseuM90BOMC/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 05:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Validity Not Before: Oct 23 05:49:05 2026 GMT Not After : Oct 30 05:49:05 2026 GMT Subject: CN=6adaf551-5c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f4:ea:fd:e5:de:e5:cf:00:18:bd:43:a2:c8: 0f:15:12:1f:3c:4d:82:8f:b7:50:bb:ba:bf:8e:3e: f2:c1:87:29:3b:23:74:44:b3:90:e3:cf:55:f2:f7: f7:56:68:fb:4c:3a:bd:f3:66:25:e1:db:d4:24:ec: db:fe:ba:bd:ec:1c:67:2a:3b:c3:66:cf:f4:ea:02: 74:8b:ce:d7:ba:58:da:39:86:c9:30:c5:21:63:8e: c8:3b:2c:ea:35:c9:cc:11:f4:76:3f:e0:bf:0d:57: d2:5d:e3:88:57:0a:d1:4c:56:8c:28:d3:c2:13:b2: 20:07:1e:16:2b:ec:61:b8:23:fd:e7:41:89:cd:27: 39:fe:8e:03:49:d0:e5:aa:95:a7:2d:14:61:d4:01: bc:d2:00:a6:6f:b6:a6:61:16:50:5b:67:0b:7b:97: b5:c9:86:11:7b:17:db:4a:fc:43:cd:3f:cf:81:14: f8:c9:4c:60:0c:9a:b5:7b:0d:67:cc:85:fa:53:49: a3:54:8b:43:47:5b:fe:91:81:09:4d:b8:ca:c1:70: 58:c5:9e:66:c6:76:d7:4c:6a:46:c7:af:ff:b0:a5: 90:96:ed:db:dc:f1:e7:86:3c:d2:84:a9:89:0d:9c: 7c:74:37:14:8f:c9:59:ae:29:58:e2:80:0b:0e:86: 9d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8A:B6:A5:74:27:9B:D0:89:A8:AB:15:35:5A:57:0A:B4:52:45:E5 X509v3 Authority Key Identifier: keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:1a:0c:8e:6a:f2:07:a4:73:0b:d4:0d:b9:bf:c8:9b:0e:a7: e1:a7:53:74:be:c2:14:c0:5e:76:66:26:4e:88:f9:b8:46:74: 9c:53:88:13:57:f0:10:3a:7a:b5:2e:fb:71:7c:12:67:ea:76: 9b:20:b4:46:08:3e:71:6d:5b:b1:8f:81:c3:cf:9b:30:11:fc: 13:47:de:b7:05:50:26:93:8f:a4:69:f5:66:a3:c8:d7:4e:b0: bf:43:19:94:9a:a9:86:f4:80:49:76:c3:62:8b:0a:34:54:70: 03:a5:06:fa:4a:8d:17:13:80:a2:41:39:67:eb:6c:38:a5:5d: 00:01:f0:da:ab:7c:b7:4c:ec:74:61:e1:59:11:6a:12:bb:ca: f4:18:70:8f:fb:28:8c:9e:42:78:63:c8:9d:23:6d:61:13:24: 1d:a6:cd:82:87:c6:38:e0:bb:fa:5e:45:6d:05:3a:93:9e:9f: 6b:e2:23:01:28:40:c3:6d:da:e9:ff:05:b0:26:3a:ea:0b:22: f6:f5:5b:56:1b:cc:de:70:c8:c9:c2:24:5b:d3:90:8c:54:71: f7:c7:98:5f:30:dd:af:08:f3:e3:01:ee:04:87:c3:49:8e:71: 71:1d:4c:6f:a3:28:2f:16:4e:d5:3e:a8:6e:63:15:92:ca:45: da:d3:98:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdCQUMxMTAvBgNVBAUTKEEyOUIxQjY4MDlDRUMxQTkyNDcwQzU5QzZDMzZCRkE1 Q0YzODcxODYwHhcNMjYxMDIzMDU0OTA1WhcNMjYxMDMwMDU0OTA1WjAYMRYwFAYD VQQDEw02YWRhZjU1MS01YzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/Tq/eXe5c8AGL1DosgPFRIfPE2Cj7dQu7q/jj7ywYcpOyN0RLOQ489V8vf3 Vmj7TDq982Yl4dvUJOzb/rq97BxnKjvDZs/06gJ0i87XuljaOYbJMMUhY47IOyzq NcnMEfR2P+C/DVfSXeOIVwrRTFaMKNPCE7IgBx4WK+xhuCP950GJzSc5/o4DSdDl qpWnLRRh1AG80gCmb7amYRZQW2cLe5e1yYYRexfbSvxDzT/PgRT4yUxgDJq1ew1n zIX6U0mjVItDR1v+kYEJTbjKwXBYxZ5mxnbXTGpGx6//sKWQlu3b3PHnhjzShKmJ DZx8dDcUj8lZrilY4oALDoadfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOyKtqV0 J5vQiairFTVaVwq0UkXlMB8GA1UdIwQYMBaAFKKbG2gJzsGpJHDFnGw2v6XPOHGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0JBQy9DNkFEM0UwQUQw MkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dha2tjTVdjYkRhX3BjODRj WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29wc2JhQW5Pd2Fra2NNV2NiRGFfcGM4NGNZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0JBQy9DNkFEM0UwQUQwMkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dh a2tjTVdjYkRhX3BjODRjWVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAARoMjmryB6RzC9QNub/Imw6n4adTdL7CFMBedmYmToj5uEZ0nFOIE1fwEDp6 tS77cXwSZ+p2myC0Rgg+cW1bsY+Bw8+bMBH8E0fetwVQJpOPpGn1ZqPI106wv0MZ lJqphvSASXbDYosKNFRwA6UG+kqNFxOAokE5Z+tsOKVdAAHw2qt8t0zsdGHhWRFq ErvK9Bhwj/sojJ5CeGPInSNtYRMkHabNgofGOOC7+l5FbQU6k56fa+IjAShAw23a 6f8FsCY66gsi9vVbVhvM3nDIycIkW9OQjFRx98eYXzDdrwjz4wHuBIfDSY5xcR1M b6MoLxZO1T6obmMVkspF2tOYkw== -----END CERTIFICATE-----Generated at Sat Oct 24 20:34:27 2026 by rpki-client