$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft File: opsbaAnOwakkcMWcbDa_pc84cYY.mft (raw, json) Hash identifier: 83JQHYoX5Rug/ydT1H/MC4AzKmY5bWGMYCSsfpcHuGY= Subject key identifier: 26:DB:5B:5C:58:7B:6C:E4:31:64:0F:A5:BE:C6:AB:C1:13:8B:DB:E2 Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 Certificate issuer: /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft Manifest number: 0146 Signing time: Mon 21 Sep 2026 05:27:57 +0000 Manifest this update: Mon 21 Sep 2026 05:27:56 +0000 Manifest next update: Mon 28 Sep 2026 05:27:56 +0000 Files and hashes: 1: opsbaAnOwakkcMWcbDa_pc84cYY.crl (hash: 8w33Udge/jeh8HJd554d75BtzTadNtZm7X3MwsoZX70=) 2: B1532E06F5FC11F08D6378D9536F56BC.roa (hash: 3XmkQBDW/VzAvHD7muWFlcJMnKZTQS3L1LZ6CKtf888=) 3: 7375238236E411F0A95FB239C4F9AE02.roa (hash: IahlFKvuUvZTPl7dK0sCB7M+yoIRvnKGTDIQMSq4hWM=) 4: 7404496836E411F0A95FB239C4F9AE02.roa (hash: qJ7524YAscm+xf2ckiU9VWuAvVs5iHMseuM90BOMC/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Validity Not Before: Sep 21 05:27:56 2026 GMT Not After : Sep 28 05:27:56 2026 GMT Subject: CN=6ab0c05d-616b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d1:6e:93:09:9c:d9:9c:a6:06:22:17:46:10: c1:da:11:32:d7:9d:2b:54:74:55:ec:e8:0f:09:fb: e3:36:07:5a:50:77:96:02:ac:0f:07:6e:a7:bf:5c: 9f:2b:00:11:ac:d3:a9:a8:08:00:7c:21:9c:66:11: 9a:17:3d:3d:6b:bb:57:88:5a:db:43:b8:02:89:67: 87:61:d0:9d:12:35:10:cd:ea:5e:e7:6d:a7:0f:cc: 0d:53:70:44:ea:d2:4f:ca:be:77:e0:be:39:c2:ce: 68:4b:62:d8:c5:d3:6c:82:f0:54:86:a4:ef:95:b9: d7:ba:64:10:df:1e:af:7c:77:66:f7:4f:c7:cf:a1: fa:f1:b2:61:4b:aa:aa:3e:dd:f2:7c:af:64:c3:d7: 7f:30:01:e5:d3:0f:00:ee:a2:f4:76:ec:a6:40:e5: 35:9c:cf:52:f3:62:f3:10:59:bd:d8:2b:a0:49:55: f1:be:fa:ec:7e:44:9a:6f:be:45:84:47:69:4d:07: 15:f5:99:55:fe:28:82:96:8d:fe:17:c0:ef:0e:27: c0:9c:18:d3:97:49:f0:3d:d6:5c:78:26:9f:86:e0: 87:35:1c:ef:2d:de:32:a0:8a:33:3e:5c:76:38:5e: 69:35:02:bf:bc:78:8a:b2:0e:1e:5e:20:fa:01:fd: 1b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:DB:5B:5C:58:7B:6C:E4:31:64:0F:A5:BE:C6:AB:C1:13:8B:DB:E2 X509v3 Authority Key Identifier: keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d4:f1:9a:68:6d:c7:4f:60:57:33:f1:16:4d:eb:e4:00:9e: 68:ec:5d:43:8c:3f:19:d7:fb:b1:f3:41:83:11:a5:bb:b0:7a: a6:71:7a:c9:43:2f:73:77:d3:52:1c:ea:ac:dd:40:8e:d0:02: b8:91:9b:ff:ab:8c:48:3e:20:ee:bd:4d:24:18:9d:c9:22:94: 6b:7f:83:d8:ad:ee:b2:e4:73:bf:69:8f:05:92:f8:4c:d8:d2: 17:14:19:44:7b:f7:11:d8:fa:2b:3d:d1:a7:5d:5f:16:db:01: 11:4c:9a:56:03:db:ca:be:c6:9a:26:7a:dd:27:bb:5b:74:bc: 5f:c3:0b:75:d6:55:83:e7:b5:50:97:34:c8:87:60:9a:e1:c7: 6d:88:c7:f6:ee:96:47:65:d9:8d:66:64:97:ed:dd:05:5c:ea: 52:49:0a:47:c8:78:fe:7e:61:04:52:50:50:b5:3b:ac:75:f5: 4e:19:9a:e9:8c:84:0c:e5:7a:d2:6b:4b:35:b4:f5:b7:57:9c: 35:e0:34:fa:ab:9d:4e:79:cc:d9:75:d7:b4:49:95:cd:cd:46: 84:4e:cc:7c:cb:e1:f7:31:23:b1:c6:22:d4:7c:dc:71:7b:49: 6b:c6:26:d1:24:ee:89:a2:e5:07:73:60:c4:04:8e:18:46:ac: 25:f3:26:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdCQUMxMTAvBgNVBAUTKEEyOUIxQjY4MDlDRUMxQTkyNDcwQzU5QzZDMzZCRkE1 Q0YzODcxODYwHhcNMjYwOTIxMDUyNzU2WhcNMjYwOTI4MDUyNzU2WjAYMRYwFAYD VQQDEw02YWIwYzA1ZC02MTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9Fukwmc2ZymBiIXRhDB2hEy150rVHRV7OgPCfvjNgdaUHeWAqwPB26nv1yf KwARrNOpqAgAfCGcZhGaFz09a7tXiFrbQ7gCiWeHYdCdEjUQzepe522nD8wNU3BE 6tJPyr534L45ws5oS2LYxdNsgvBUhqTvlbnXumQQ3x6vfHdm90/Hz6H68bJhS6qq Pt3yfK9kw9d/MAHl0w8A7qL0duymQOU1nM9S82LzEFm92CugSVXxvvrsfkSab75F hEdpTQcV9ZlV/iiClo3+F8DvDifAnBjTl0nwPdZceCafhuCHNRzvLd4yoIozPlx2 OF5pNQK/vHiKsg4eXiD6Af0bqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCbbW1xY e2zkMWQPpb7Gq8ETi9viMB8GA1UdIwQYMBaAFKKbG2gJzsGpJHDFnGw2v6XPOHGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0JBQy9DNkFEM0UwQUQw MkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dha2tjTVdjYkRhX3BjODRj WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29wc2JhQW5Pd2Fra2NNV2NiRGFfcGM4NGNZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0JBQy9DNkFEM0UwQUQwMkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dh a2tjTVdjYkRhX3BjODRjWVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL9Txmmhtx09gVzPxFk3r5ACeaOxdQ4w/Gdf7sfNBgxGlu7B6pnF6yUMvc3fT UhzqrN1AjtACuJGb/6uMSD4g7r1NJBidySKUa3+D2K3usuRzv2mPBZL4TNjSFxQZ RHv3Edj6Kz3Rp11fFtsBEUyaVgPbyr7GmiZ63Se7W3S8X8MLddZVg+e1UJc0yIdg muHHbYjH9u6WR2XZjWZkl+3dBVzqUkkKR8h4/n5hBFJQULU7rHX1Thma6YyEDOV6 0mtLNbT1t1ecNeA0+qudTnnM2XXXtEmVzc1GhE7MfMvh9zEjscYi1HzccXtJa8Ym 0STuiaLlB3NgxASOGEasJfMmZQ== -----END CERTIFICATE-----Generated at Tue Sep 22 04:20:24 2026 by rpki-client