$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft File: opsbaAnOwakkcMWcbDa_pc84cYY.mft (raw, json) Hash identifier: gtOb5Y7yvu5hTNhkKtaywZ6CavIKhjupyhh1rWlzCvc= Subject key identifier: C5:9A:B4:94:E0:BF:AF:D1:B8:C6:0F:B6:06:40:5F:BA:96:85:01:30 Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 Certificate issuer: /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft Manifest number: 0115 Signing time: Wed 17 Jun 2026 06:10:41 +0000 Manifest this update: Wed 17 Jun 2026 06:10:40 +0000 Manifest next update: Wed 24 Jun 2026 06:10:40 +0000 Files and hashes: 1: opsbaAnOwakkcMWcbDa_pc84cYY.crl (hash: YeNwntcnOyQHoQ06+NLra4WxP2BO1tLxDwcsFeEeiws=) 2: B1532E06F5FC11F08D6378D9536F56BC.roa (hash: 3XmkQBDW/VzAvHD7muWFlcJMnKZTQS3L1LZ6CKtf888=) 3: 7375238236E411F0A95FB239C4F9AE02.roa (hash: IahlFKvuUvZTPl7dK0sCB7M+yoIRvnKGTDIQMSq4hWM=) 4: 7404496836E411F0A95FB239C4F9AE02.roa (hash: qJ7524YAscm+xf2ckiU9VWuAvVs5iHMseuM90BOMC/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Jun 2026 01:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Validity Not Before: Jun 17 06:10:40 2026 GMT Not After : Jun 24 06:10:40 2026 GMT Subject: CN=6a323a61-5f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:df:36:d5:26:f5:b1:05:93:46:48:6a:46:5e: fb:66:e1:e3:b3:ad:e7:a0:02:8d:f1:39:2b:70:b0: ea:e8:70:46:86:e8:56:af:00:f6:0d:0a:d8:3a:2b: 4b:eb:e7:c4:8f:03:67:af:66:d0:a5:6a:51:38:93: 2c:62:bd:c6:c8:76:61:19:10:4e:d3:80:c6:45:17: 13:7e:3f:71:3c:4b:b1:e6:b1:aa:c8:02:53:ec:82: f5:d5:67:66:ef:75:1c:b8:e3:98:a2:22:11:b7:a7: c8:ce:9d:b5:3f:6f:0d:56:dd:86:65:8b:4e:5e:2e: d2:eb:a6:ef:4f:40:d7:b1:9f:c4:98:26:db:c2:10: 03:e7:26:8f:e8:c5:2f:d5:2f:f0:c6:67:6b:02:72: cb:f7:65:92:f8:73:d8:22:15:4c:fb:fd:84:9e:5e: e4:50:dd:80:c2:8b:c6:08:ef:67:9e:74:a6:bd:fd: 3d:08:79:9b:3c:eb:74:76:f1:7f:90:6f:a5:0e:41: c6:77:71:24:34:ff:ae:fd:c4:f2:1d:42:80:dc:61: 3d:58:28:78:5d:eb:35:e5:7e:c7:e0:0b:02:cd:53: bd:7d:e9:93:6f:79:9e:3b:32:53:63:7c:92:d6:a7: 80:31:e6:72:2b:e2:70:3f:c4:c2:c7:fb:3d:e2:dc: 35:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9A:B4:94:E0:BF:AF:D1:B8:C6:0F:B6:06:40:5F:BA:96:85:01:30 X509v3 Authority Key Identifier: keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:c8:4a:d9:d4:ea:1e:f3:a2:f5:85:d2:b2:39:da:ac:53:38: 6c:1c:d1:39:46:d6:69:db:2c:38:0e:e8:89:63:63:73:4f:31: e8:5e:12:9b:22:13:c7:c6:54:89:e0:a0:eb:b5:13:5e:71:47: 9b:6e:41:8a:d8:ff:54:56:1d:d1:e5:c4:34:cd:06:53:1d:91: 04:88:d4:f5:6d:cc:7d:0e:37:28:2b:87:28:2e:2f:fc:ba:74: b4:a6:d1:88:6b:a5:df:16:7a:e9:0d:be:41:30:67:bf:72:b6: 06:eb:1d:de:60:39:29:99:73:05:94:98:ba:26:2b:ce:c7:5f: 21:21:8d:66:a4:4b:24:49:fb:c5:e3:24:32:f3:e2:7a:c9:3f: 72:ad:c4:61:fe:f2:8f:0e:b9:64:bb:c6:87:3e:39:ba:1e:d3: 61:ab:0b:77:d7:0f:da:87:a9:7b:77:db:8b:30:1c:81:79:5a: 74:89:8d:71:62:b9:c3:a6:fc:79:a2:a4:1a:9c:e3:a3:75:dd: 9d:35:c6:fd:3d:a5:fb:e3:0f:c9:3d:41:90:74:b1:a2:cf:db: da:19:48:08:0a:25:ce:72:3c:92:d9:6f:29:2b:3a:8f:a4:94: c7:b8:7c:7d:7b:bc:c8:42:e8:ac:05:8b:d7:f1:3b:c9:de:d8: b0:78:6e:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdCQUMxMTAvBgNVBAUTKEEyOUIxQjY4MDlDRUMxQTkyNDcwQzU5QzZDMzZCRkE1 Q0YzODcxODYwHhcNMjYwNjE3MDYxMDQwWhcNMjYwNjI0MDYxMDQwWjAYMRYwFAYD VQQDEw02YTMyM2E2MS01ZjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmt821Sb1sQWTRkhqRl77ZuHjs63noAKN8TkrcLDq6HBGhuhWrwD2DQrYOitL 6+fEjwNnr2bQpWpROJMsYr3GyHZhGRBO04DGRRcTfj9xPEux5rGqyAJT7IL11Wdm 73UcuOOYoiIRt6fIzp21P28NVt2GZYtOXi7S66bvT0DXsZ/EmCbbwhAD5yaP6MUv 1S/wxmdrAnLL92WS+HPYIhVM+/2Enl7kUN2AwovGCO9nnnSmvf09CHmbPOt0dvF/ kG+lDkHGd3EkNP+u/cTyHUKA3GE9WCh4Xes15X7H4AsCzVO9femTb3meOzJTY3yS 1qeAMeZyK+JwP8TCx/s94tw1GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMWatJTg v6/RuMYPtgZAX7qWhQEwMB8GA1UdIwQYMBaAFKKbG2gJzsGpJHDFnGw2v6XPOHGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0JBQy9DNkFEM0UwQUQw MkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dha2tjTVdjYkRhX3BjODRj WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29wc2JhQW5Pd2Fra2NNV2NiRGFfcGM4NGNZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0JBQy9DNkFEM0UwQUQwMkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dh a2tjTVdjYkRhX3BjODRjWVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYshK2dTqHvOi9YXSsjnarFM4bBzROUbWadssOA7oiWNjc08x6F4SmyITx8ZU ieCg67UTXnFHm25Bitj/VFYd0eXENM0GUx2RBIjU9W3MfQ43KCuHKC4v/Lp0tKbR iGul3xZ66Q2+QTBnv3K2Busd3mA5KZlzBZSYuiYrzsdfISGNZqRLJEn7xeMkMvPi esk/cq3EYf7yjw65ZLvGhz45uh7TYasLd9cP2oepe3fbizAcgXladImNcWK5w6b8 eaKkGpzjo3XdnTXG/T2l++MPyT1BkHSxos/b2hlICAolznI8ktlvKSs6j6SUx7h8 fXu8yELorAWL1/E7yd7YsHhuKg== -----END CERTIFICATE-----Generated at Wed Jun 17 10:07:33 2026 by rpki-client