$ rpki-client -vvf rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft File: OPsGr2SfQA9ROZSTW-335JJwyKo.mft (raw, json) Hash identifier: AmF9NytB5xZUhlGdGcbhCRAOks7dibIhcgoyUT9XfWM= Subject key identifier: 2B:0A:54:CB:64:D5:15:C5:0B:27:79:61:F8:68:60:C2:94:53:E4:E8 Authority key identifier: 38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA Certificate issuer: /CN=A9198267/serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA Certificate serial: 0AF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft Manifest number: 0AE1 Signing time: Tue 18 Aug 2026 19:41:49 +0000 Manifest this update: Tue 18 Aug 2026 19:41:49 +0000 Manifest next update: Tue 25 Aug 2026 19:41:49 +0000 Files and hashes: 1: OPsGr2SfQA9ROZSTW-335JJwyKo.crl (hash: MX/M9W2UxgmxeK+LykOlEIbIk0zmftkhnxCvtekrRrA=) 2: 2F43EE7278CC11EAB69DAC75C4F9AE02.roa (hash: RCg1Rl9BMePurgmT4FLJMdQ57mTRP5HppFNnGUt/YQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2802 (0xaf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198267, serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA Validity Not Before: Aug 18 19:41:49 2026 GMT Not After : Aug 25 19:41:49 2026 GMT Subject: CN=6a84b57d-cc55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e0:e2:61:d7:f7:f4:6b:61:7d:a5:d6:78:cd: 8b:ea:e8:bd:8e:77:3c:de:07:2b:d3:1e:dc:85:85: 3c:2a:e8:d1:d4:4d:8d:37:8a:c7:15:ae:db:7a:9b: 09:1e:b4:5c:2b:0c:fe:32:b5:a7:5f:2f:22:00:33: 8a:0c:4f:b9:ab:16:1d:e8:cf:aa:66:bd:08:2a:d0: 5b:6e:c9:68:57:8a:9b:06:52:f2:2c:d1:20:13:3f: 7b:6a:6b:e6:f0:3b:e0:a8:48:9a:41:36:f8:33:2c: d3:4e:d6:c1:a8:22:3c:0c:c1:19:08:06:ba:f2:a9: dd:73:75:7c:ae:f4:07:4e:54:fb:71:0a:ae:7c:05: a8:71:04:5e:57:ad:ce:c8:f7:74:a6:95:a3:06:d5: 18:6e:d2:24:59:eb:42:05:63:51:c3:bf:de:ad:41: 18:49:59:e3:aa:5c:56:45:53:ac:ba:1c:0d:8c:c1: d2:42:b4:4e:07:79:69:59:a3:9d:e1:1b:a6:16:3b: 08:08:31:ec:09:c1:f8:d2:6c:69:bb:2a:17:26:9e: 64:54:f6:5a:0f:f0:a1:e5:87:66:c5:ba:6a:56:40: 05:38:49:58:d6:60:40:c1:d3:f9:dd:49:00:18:1f: 53:fc:54:ea:8a:e9:13:38:c2:0f:a9:be:50:f4:b5: 95:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0A:54:CB:64:D5:15:C5:0B:27:79:61:F8:68:60:C2:94:53:E4:E8 X509v3 Authority Key Identifier: keyid:38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:83:d8:17:45:da:74:f8:c0:a7:f6:98:14:79:20:97:b7:3d: 00:24:a0:13:ed:ce:04:0f:93:a1:1b:41:a3:7c:f4:7f:08:a0: 63:4c:a1:13:5f:31:30:9f:67:df:c9:c7:f8:41:a0:d7:23:94: 5f:b4:92:73:34:14:59:20:b7:4f:ff:f1:48:d0:f6:24:12:8a: 63:cf:d0:fe:7c:07:d7:b6:12:9c:db:ad:f9:e4:65:26:ae:20: 24:b5:db:7d:f2:e0:52:a7:c3:2e:44:a9:02:01:1e:6f:95:3f: 4d:8c:7d:06:9c:65:7f:d2:44:aa:b7:4e:5b:09:06:2e:17:df: 2d:64:8e:e8:de:d9:ca:ab:c2:0c:91:af:71:da:16:4a:9c:96: c6:c9:dd:8d:9f:91:d1:14:ef:c6:2b:3f:3f:fa:70:1c:dc:54: 54:0a:34:f9:84:7c:e9:b1:9e:cf:8f:60:b2:7f:75:bc:25:69: a0:03:11:16:cf:1b:3d:e3:09:52:36:1b:78:18:9a:e5:7d:77: 6a:54:38:7a:e4:ac:8c:d1:c2:6a:48:d2:15:33:82:26:79:29: 2d:ef:4d:64:28:07:2b:ac:2c:6b:af:23:9f:4d:7a:6b:62:80: eb:f6:80:4a:c2:ae:07:6b:9c:e6:6e:16:7e:79:f1:49:df:cc: d3:4e:5f:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyNjcxMTAvBgNVBAUTKDM4RkIwNkFGNjQ5RjQwMEY1MTM5OTQ5MzVCRURGN0U0 OTI3MEM4QUEwHhcNMjYwODE4MTk0MTQ5WhcNMjYwODI1MTk0MTQ5WjAYMRYwFAYD VQQDEw02YTg0YjU3ZC1jYzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ODiYdf39GthfaXWeM2L6ui9jnc83gcr0x7chYU8KujR1E2NN4rHFa7bepsJ HrRcKwz+MrWnXy8iADOKDE+5qxYd6M+qZr0IKtBbbsloV4qbBlLyLNEgEz97amvm 8DvgqEiaQTb4MyzTTtbBqCI8DMEZCAa68qndc3V8rvQHTlT7cQqufAWocQReV63O yPd0ppWjBtUYbtIkWetCBWNRw7/erUEYSVnjqlxWRVOsuhwNjMHSQrROB3lpWaOd 4RumFjsICDHsCcH40mxpuyoXJp5kVPZaD/Ch5YdmxbpqVkAFOElY1mBAwdP53UkA GB9T/FTqiukTOMIPqb5Q9LWV0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCsKVMtk 1RXFCyd5YfhoYMKUU+ToMB8GA1UdIwQYMBaAFDj7Bq9kn0APUTmUk1vt9+SScMiq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODI2Ny8wMkM4NkVBQTc4 Q0IxMUVBODIwRDcyNzRDNEY5QUUwMi9PUHNHcjJTZlFBOVJPWlNUVy0zMzVKSnd5 S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Qc0dyMlNmUUE5Uk9aU1RXLTMzNUpKd3lLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODI2Ny8wMkM4NkVBQTc4Q0IxMUVBODIwRDcyNzRDNEY5QUUwMi9PUHNHcjJTZlFB OVJPWlNUVy0zMzVKSnd5S28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWYPYF0XadPjAp/aYFHkgl7c9ACSgE+3OBA+ToRtBo3z0fwigY0yhE18xMJ9n 38nH+EGg1yOUX7SSczQUWSC3T//xSND2JBKKY8/Q/nwH17YSnNut+eRlJq4gJLXb ffLgUqfDLkSpAgEeb5U/TYx9Bpxlf9JEqrdOWwkGLhffLWSO6N7ZyqvCDJGvcdoW SpyWxsndjZ+R0RTvxis/P/pwHNxUVAo0+YR86bGez49gsn91vCVpoAMRFs8bPeMJ UjYbeBia5X13alQ4euSsjNHCakjSFTOCJnkpLe9NZCgHK6wsa68jn016a2KA6/aA SsKuB2uc5m4WfnnxSd/M005f+g== -----END CERTIFICATE-----Generated at Wed Aug 19 12:55:52 2026 by rpki-client