$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft File: opsbaAnOwakkcMWcbDa_pc84cYY.mft (raw, json) Hash identifier: irKmtqwiS0S/+CvFsrVKwG4kdlFJ6wcUxETqwVYqx98= Subject key identifier: FA:25:10:E3:70:0B:DC:16:27:C8:DC:01:39:5C:5F:38:7E:F0:74:F9 Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 Certificate issuer: /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft Manifest number: F7 Signing time: Fri 17 Apr 2026 06:04:22 +0000 Manifest this update: Fri 17 Apr 2026 06:04:21 +0000 Manifest next update: Fri 24 Apr 2026 06:04:21 +0000 Files and hashes: 1: opsbaAnOwakkcMWcbDa_pc84cYY.crl (hash: N3Oh7tdIv0jzmjhv+noMSjtekLQVWD12ZGrsmqjFMsk=) 2: B1532E06F5FC11F08D6378D9536F56BC.roa (hash: 3XmkQBDW/VzAvHD7muWFlcJMnKZTQS3L1LZ6CKtf888=) 3: 7375238236E411F0A95FB239C4F9AE02.roa (hash: IahlFKvuUvZTPl7dK0sCB7M+yoIRvnKGTDIQMSq4hWM=) 4: 7404496836E411F0A95FB239C4F9AE02.roa (hash: qJ7524YAscm+xf2ckiU9VWuAvVs5iHMseuM90BOMC/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Validity Not Before: Apr 17 06:04:21 2026 GMT Not After : Apr 24 06:04:21 2026 GMT Subject: CN=69e1cd66-05d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:08:c8:69:a8:5f:df:28:af:e6:e8:cd:23: 2c:5b:fe:c1:c0:39:3b:15:86:1c:46:c9:c7:d0:ca: 2b:ad:d2:66:60:06:9f:49:13:fa:e7:30:45:71:9b: 6b:de:2f:f9:f2:e6:7a:29:e0:5c:51:eb:8c:2c:4f: d8:3c:77:c9:4f:17:f1:a5:76:2f:8a:e9:45:30:b9: e6:0e:49:d0:61:9a:5c:b1:d0:ab:e5:58:34:c0:55: 48:63:2a:f9:5b:6d:a4:5a:a7:d6:ef:51:98:83:bf: 20:7f:3a:2a:3e:49:dd:cd:09:a4:8d:66:60:e6:b9: 2f:49:c7:6e:42:d4:f8:c9:43:fa:12:6d:fa:fe:48: 0b:92:97:ee:d5:49:0c:58:83:3c:0b:5c:38:d0:d1: a5:ce:71:70:7c:7b:f0:65:a8:8e:9b:6b:51:a6:3f: 46:08:ff:16:f4:09:74:17:59:11:fc:b0:58:e3:aa: b1:37:32:7a:23:48:8f:b8:dc:10:b0:cc:87:f7:37: 76:dc:85:90:6d:15:44:29:2b:5b:7d:ba:8b:2b:99: 05:0c:33:f1:65:e9:c5:2d:55:d7:fd:82:6c:d5:ff: 88:bb:6e:c9:6d:1a:74:9b:38:25:b8:f3:bf:b5:c3: 87:51:7c:15:f7:56:ff:ea:8b:27:cf:a6:fc:26:93: 20:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:25:10:E3:70:0B:DC:16:27:C8:DC:01:39:5C:5F:38:7E:F0:74:F9 X509v3 Authority Key Identifier: keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c9:a9:ba:0f:f4:8b:f0:e0:8b:34:7e:06:cf:78:49:f3:9e: 40:93:39:d0:89:5a:c0:4a:a2:18:c2:19:73:f2:d0:3b:6e:2d: 05:11:f0:8f:2e:27:04:c0:dd:13:be:3f:af:d0:1f:e7:ac:ca: e9:18:ae:fd:2e:e6:0e:d4:94:eb:83:33:20:59:49:37:32:2b: 51:2e:c5:8a:43:db:e3:3e:3b:b4:14:04:3a:eb:69:d7:d6:ba: cf:ed:db:0a:64:d4:1e:a2:d4:0e:23:ec:23:00:cc:a0:93:ac: ad:e4:cc:4b:98:4f:26:d7:45:89:8c:ff:b8:05:bc:15:22:0b: 7f:99:27:55:7e:b3:7d:c1:8b:d8:e9:38:59:21:21:7e:c4:34: 10:1d:1c:a6:9d:a2:37:35:91:74:4a:86:7c:4b:d6:de:51:f4: 64:e5:61:90:d9:dc:a5:f9:c5:02:31:6b:05:cc:a4:17:3b:47: 87:6d:4a:03:a9:c9:6c:1e:4c:45:56:2c:53:b9:6c:dd:75:d0: ba:52:55:f8:40:39:06:11:ba:2d:48:95:07:2c:1d:2b:17:29: 51:25:2f:6c:de:e2:fb:e7:2a:cc:60:2c:ca:6c:ed:8d:16:34: 3f:7d:11:d2:aa:74:73:51:67:c2:41:54:33:28:1d:6e:cc:66: 4a:79:8a:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdCQUMxMTAvBgNVBAUTKEEyOUIxQjY4MDlDRUMxQTkyNDcwQzU5QzZDMzZCRkE1 Q0YzODcxODYwHhcNMjYwNDE3MDYwNDIxWhcNMjYwNDI0MDYwNDIxWjAYMRYwFAYD VQQDEw02OWUxY2Q2Ni0wNWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsswIyGmoX98or+bozSMsW/7BwDk7FYYcRsnH0MorrdJmYAafSRP65zBFcZtr 3i/58uZ6KeBcUeuMLE/YPHfJTxfxpXYviulFMLnmDknQYZpcsdCr5Vg0wFVIYyr5 W22kWqfW71GYg78gfzoqPkndzQmkjWZg5rkvScduQtT4yUP6Em36/kgLkpfu1UkM WIM8C1w40NGlznFwfHvwZaiOm2tRpj9GCP8W9Al0F1kR/LBY46qxNzJ6I0iPuNwQ sMyH9zd23IWQbRVEKStbfbqLK5kFDDPxZenFLVXX/YJs1f+Iu27JbRp0mzgluPO/ tcOHUXwV91b/6osnz6b8JpMgIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPolEONw C9wWJ8jcATlcXzh+8HT5MB8GA1UdIwQYMBaAFKKbG2gJzsGpJHDFnGw2v6XPOHGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0JBQy9DNkFEM0UwQUQw MkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dha2tjTVdjYkRhX3BjODRj WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29wc2JhQW5Pd2Fra2NNV2NiRGFfcGM4NGNZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0JBQy9DNkFEM0UwQUQwMkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dh a2tjTVdjYkRhX3BjODRjWVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADcmpug/0i/DgizR+Bs94SfOeQJM50IlawEqiGMIZc/LQO24tBRHwjy4nBMDd E74/r9Af56zK6Riu/S7mDtSU64MzIFlJNzIrUS7FikPb4z47tBQEOutp19a6z+3b CmTUHqLUDiPsIwDMoJOsreTMS5hPJtdFiYz/uAW8FSILf5knVX6zfcGL2Ok4WSEh fsQ0EB0cpp2iNzWRdEqGfEvW3lH0ZOVhkNncpfnFAjFrBcykFztHh21KA6nJbB5M RVYsU7ls3XXQulJV+EA5BhG6LUiVBywdKxcpUSUvbN7i++cqzGAsymztjRY0P30R 0qp0c1FnwkFUMygdbsxmSnmKRQ== -----END CERTIFICATE-----Generated at Fri Apr 17 08:21:03 2026 by rpki-client