$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft File: opsbaAnOwakkcMWcbDa_pc84cYY.mft (raw, json) Hash identifier: pUl4wDnkXvZ+5rPQpRpAs68gVEEiWg6tXkYpGVh1Gnk= Subject key identifier: 97:02:04:F9:A9:33:3A:38:4B:FE:61:63:07:EE:4A:EC:7F:BE:7D:34 Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 Certificate issuer: /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft Manifest number: 6E Signing time: Sun 03 Aug 2025 07:20:10 +0000 Manifest this update: Sun 03 Aug 2025 07:20:09 +0000 Manifest next update: Sun 10 Aug 2025 07:20:09 +0000 Files and hashes: 1: opsbaAnOwakkcMWcbDa_pc84cYY.crl (hash: D2Y32HbLHVoY+zvo0fKtWNduOAd0TwB5VPyeZFe0/HQ=) 2: 7404496836E411F0A95FB239C4F9AE02.roa (hash: WHGMZh9P2RExWIeMMaDkbGi0VRoxW1Iai0A3Zb9yWT4=) 3: 7375238236E411F0A95FB239C4F9AE02.roa (hash: 6GqewoLZaVKTqsSzxgnIGXRwmj2ShKpEerZMfS7j+UE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 07:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Validity Not Before: Aug 3 07:20:09 2025 GMT Not After : Aug 10 07:20:09 2025 GMT Subject: CN=688f0daa-e3e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f7:45:51:fc:5a:23:cb:55:53:e1:5a:d4:fc: 80:c2:0d:c7:a8:4e:02:bf:ba:60:87:ae:03:07:7b: a4:77:ed:3a:c1:a4:4e:39:90:b0:c3:48:03:98:2c: ab:82:cf:01:c8:37:4d:c1:9b:a6:d7:2d:d7:50:e4: 79:d3:2d:25:43:87:f8:c2:59:eb:ff:b5:41:83:fd: 74:60:75:0a:a8:65:fa:8f:7d:c4:48:15:85:de:cf: 77:05:46:44:0b:93:39:c3:fd:fb:83:8e:c2:b2:05: 13:72:06:c2:69:a9:9a:7d:a4:57:f4:d5:00:5b:c0: ad:03:ce:b0:a2:ce:47:fa:bd:59:83:d3:58:e1:66: 04:dd:2e:33:6d:17:30:41:c2:dd:86:c4:9f:d2:a5: ec:3d:98:b9:9c:3a:3f:d6:bd:2b:a6:84:24:22:34: fb:3a:38:54:ff:55:6b:ec:85:28:60:e6:31:65:a6: 06:57:87:79:0f:13:90:21:b8:70:a3:f8:89:07:38: fe:18:93:d3:71:e8:a6:0e:22:56:89:62:3c:a3:fb: 6f:ab:bf:bc:dd:d4:37:f7:fe:ec:99:aa:3b:b9:fb: f3:eb:e2:0e:c5:2c:32:29:ca:ca:57:a2:f9:06:74: 73:dc:46:43:5e:c9:dc:25:51:d3:17:6a:77:ee:ae: 61:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:02:04:F9:A9:33:3A:38:4B:FE:61:63:07:EE:4A:EC:7F:BE:7D:34 X509v3 Authority Key Identifier: keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:9e:74:39:18:18:3f:3e:6d:76:96:3b:a2:e7:29:c1:0b:53: 74:86:bb:3e:d9:56:c6:e7:56:89:bf:2b:48:90:5f:01:1c:50: e3:29:6f:b2:8f:c6:18:0a:c3:ee:a3:63:ca:f7:33:e5:7b:7a: 96:19:b4:d5:16:3e:ab:d8:15:c5:5a:1e:88:17:47:8e:ea:40: 9f:00:e6:d1:3a:57:c4:e4:aa:13:03:ec:d3:4f:99:58:87:01: 0d:6d:aa:36:21:36:40:7d:b7:ea:ab:70:c9:58:92:7d:3d:29: 76:3f:ce:69:a2:c2:20:35:aa:7c:a9:02:82:12:ab:62:2e:6c: 1c:7a:ee:bd:e5:36:f7:49:2a:c3:ff:77:68:61:83:04:d7:e4: 3e:97:e1:4a:0c:e6:e5:b7:f4:4e:7a:f0:7f:96:bf:94:a2:aa: de:23:39:d5:92:a3:33:30:81:33:f5:ae:75:34:a5:07:ac:9e: fb:85:e3:a1:a4:de:56:d3:fa:df:95:f6:ae:8f:e2:99:3d:99: 44:f7:8f:61:c7:78:6a:53:b0:fc:f4:f9:f1:1c:36:15:be:e1: b8:ed:14:5b:ac:32:1c:d3:a6:c4:15:e8:2c:ec:da:85:32:de: 31:89:08:5b:24:61:70:bd:5d:8f:bc:c5:ff:bb:62:5b:f2:92: c4:4b:32:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0JBQzExMC8GA1UEBRMoQTI5QjFCNjgwOUNFQzFBOTI0NzBDNTlDNkMzNkJGQTVD RjM4NzE4NjAeFw0yNTA4MDMwNzIwMDlaFw0yNTA4MTAwNzIwMDlaMBgxFjAUBgNV BAMTDTY4OGYwZGFhLWUzZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX90VR/Fojy1VT4VrU/IDCDceoTgK/umCHrgMHe6R37TrBpE45kLDDSAOYLKuC zwHIN03Bm6bXLddQ5HnTLSVDh/jCWev/tUGD/XRgdQqoZfqPfcRIFYXez3cFRkQL kznD/fuDjsKyBRNyBsJpqZp9pFf01QBbwK0DzrCizkf6vVmD01jhZgTdLjNtFzBB wt2GxJ/Spew9mLmcOj/WvSumhCQiNPs6OFT/VWvshShg5jFlpgZXh3kPE5AhuHCj +IkHOP4Yk9Nx6KYOIlaJYjyj+2+rv7zd1Df3/uyZqju5+/Pr4g7FLDIpyspXovkG dHPcRkNeydwlUdMXanfurmGNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlwIE+akz OjhL/mFjB+5K7H++fTQwHwYDVR0jBBgwFoAUopsbaAnOwakkcMWcbDa/pc84cYYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3QkFDL0M2QUQzRTBBRDAy QzExRUZCNTU4NDkxNUM0RjlBRTAyL29wc2JhQW5Pd2Fra2NNV2NiRGFfcGM4NGNZ WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3BzYmFBbk93YWtrY01XY2JEYV9wYzg0Y1lZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 QkFDL0M2QUQzRTBBRDAyQzExRUZCNTU4NDkxNUM0RjlBRTAyL29wc2JhQW5Pd2Fr a2NNV2NiRGFfcGM4NGNZWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABSedDkYGD8+bXaWO6LnKcELU3SGuz7ZVsbnVom/K0iQXwEcUOMpb7KP xhgKw+6jY8r3M+V7epYZtNUWPqvYFcVaHogXR47qQJ8A5tE6V8TkqhMD7NNPmViH AQ1tqjYhNkB9t+qrcMlYkn09KXY/zmmiwiA1qnypAoISq2IubBx67r3lNvdJKsP/ d2hhgwTX5D6X4UoM5uW39E568H+Wv5Siqt4jOdWSozMwgTP1rnU0pQesnvuF46Gk 3lbT+t+V9q6P4pk9mUT3j2HHeGpTsPz0+fEcNhW+4bjtFFusMhzTpsQV6Czs2oUy 3jGJCFskYXC9XY+8xf+7YlvyksRLMhM= -----END CERTIFICATE-----Generated at Mon Aug 4 16:06:34 2025 by rpki-client