$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft File: opsbaAnOwakkcMWcbDa_pc84cYY.mft (raw, json) Hash identifier: 7gY2eOEvqgB6z+e4qy/8B0P/MT10oKgsMXDVGJjT95s= Subject key identifier: D3:80:59:D6:34:15:B6:6D:7A:9E:BA:D6:D4:0E:65:C6:3D:2A:E6:A8 Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 Certificate issuer: /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft Manifest number: DD Signing time: Sun 01 Mar 2026 07:50:29 +0000 Manifest this update: Sun 01 Mar 2026 07:50:29 +0000 Manifest next update: Sun 08 Mar 2026 07:50:29 +0000 Files and hashes: 1: opsbaAnOwakkcMWcbDa_pc84cYY.crl (hash: TaUAu+Wv5I0iw7skK1Jn9oPfAb2AHi0c2aKl0mq27GA=) 2: 7375238236E411F0A95FB239C4F9AE02.roa (hash: K9z+IuhKFH34b/IsV2vI8Ng5yteZaKRAPIQpXsjiQGM=) 3: B1532E06F5FC11F08D6378D9536F56BC.roa (hash: kh1aaGr3F4Z0GFVMxfG6sqD9xZapdJlWPziuT9INXns=) 4: 7404496836E411F0A95FB239C4F9AE02.roa (hash: C6HBIEdHjGhMruWBR2Oz8f+R1xT6x6nc/ShhYHiCv/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Validity Not Before: Mar 1 07:50:29 2026 GMT Not After : Mar 8 07:50:29 2026 GMT Subject: CN=69a3efc5-6b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c3:66:9d:b3:d6:e7:87:c4:e1:7b:43:b7:67: b1:06:a6:2c:5a:5d:ba:0d:c7:17:62:54:f5:1a:fc: 44:1b:8a:ac:a1:fa:72:76:1d:df:bc:2b:ce:9b:aa: 8b:16:47:e3:f3:da:26:0e:be:ef:71:ae:65:17:09: 84:9b:cc:5d:1c:fd:b0:86:45:f6:3b:ee:b9:04:b4: c9:75:41:9c:0d:52:d5:fd:ae:3e:8d:bc:47:56:64: 56:cd:f7:09:e7:e7:1e:30:94:01:dd:e6:2d:c6:cd: a4:37:6f:b8:6a:47:7e:07:60:15:fb:d1:f3:f8:77: c4:12:61:ed:73:b7:22:8d:97:38:d2:50:7b:78:e0: bb:1c:de:e3:5f:b6:91:4f:9c:49:74:be:d3:0a:0d: 38:6a:53:a1:76:e2:20:a7:81:58:05:13:83:a0:86: c9:50:e6:52:2f:49:d2:3b:97:af:5c:02:4e:9a:ee: 20:d0:52:0d:19:f8:67:6f:2b:98:82:7a:01:5b:50: f9:ac:90:b6:32:e0:cb:85:ee:24:ed:d3:4c:fa:4b: 4b:88:48:8e:ee:ab:bb:69:85:9a:92:72:b0:39:da: 2b:78:2d:da:5f:c6:59:96:19:74:50:15:3b:bf:34: e4:7c:22:ec:b7:5d:9c:c6:34:2c:38:25:f3:bf:4c: c8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:80:59:D6:34:15:B6:6D:7A:9E:BA:D6:D4:0E:65:C6:3D:2A:E6:A8 X509v3 Authority Key Identifier: keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:d9:2b:a4:f1:54:68:de:69:b9:27:35:9e:92:7f:9d:d0:be: 78:61:f3:8f:42:66:cd:7a:46:ac:05:a0:7c:6c:8a:82:50:b7: bf:78:22:85:35:d1:ed:05:35:cf:79:37:14:99:05:a9:3f:85: 5e:38:cf:17:46:fe:20:03:bb:cb:2c:72:bd:0a:ae:86:46:05: 50:79:25:f1:04:ca:04:0f:2e:7f:7f:2f:4d:22:40:63:f5:5d: 37:eb:cb:14:65:a4:14:45:54:01:08:2f:00:32:d2:59:f7:b0: 3f:55:df:a4:f1:e7:48:5a:a5:be:22:65:4d:bb:d4:75:20:90: f1:e2:91:49:06:3c:42:13:42:f2:a3:20:1f:86:07:98:02:41: 3b:fc:8e:6c:9c:71:19:99:20:e9:fc:b0:a5:77:1a:22:f3:62: 99:b5:68:d3:34:ab:d2:ce:ea:62:96:61:99:28:1f:ea:30:75: 24:09:a7:14:d1:49:d5:5f:66:6d:f8:73:ed:66:99:4a:e2:d0: 0b:d8:0e:b2:66:90:2b:f6:5d:86:b6:3f:f3:8b:a5:ab:bc:67: 33:50:59:db:b1:a0:5f:8b:a6:7f:25:e8:d3:0b:14:00:1b:54: 17:36:e5:80:89:91:da:07:ae:41:50:7f:dd:f5:10:fc:a9:bc: a4:de:24:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdCQUMxMTAvBgNVBAUTKEEyOUIxQjY4MDlDRUMxQTkyNDcwQzU5QzZDMzZCRkE1 Q0YzODcxODYwHhcNMjYwMzAxMDc1MDI5WhcNMjYwMzA4MDc1MDI5WjAYMRYwFAYD VQQDEw02OWEzZWZjNS02YjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8NmnbPW54fE4XtDt2exBqYsWl26DccXYlT1GvxEG4qsofpydh3fvCvOm6qL Fkfj89omDr7vca5lFwmEm8xdHP2whkX2O+65BLTJdUGcDVLV/a4+jbxHVmRWzfcJ 5+ceMJQB3eYtxs2kN2+4akd+B2AV+9Hz+HfEEmHtc7cijZc40lB7eOC7HN7jX7aR T5xJdL7TCg04alOhduIgp4FYBRODoIbJUOZSL0nSO5evXAJOmu4g0FINGfhnbyuY gnoBW1D5rJC2MuDLhe4k7dNM+ktLiEiO7qu7aYWaknKwOdoreC3aX8ZZlhl0UBU7 vzTkfCLst12cxjQsOCXzv0zIuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNOAWdY0 FbZtep661tQOZcY9KuaoMB8GA1UdIwQYMBaAFKKbG2gJzsGpJHDFnGw2v6XPOHGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0JBQy9DNkFEM0UwQUQw MkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dha2tjTVdjYkRhX3BjODRj WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29wc2JhQW5Pd2Fra2NNV2NiRGFfcGM4NGNZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0JBQy9DNkFEM0UwQUQwMkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9vcHNiYUFuT3dh a2tjTVdjYkRhX3BjODRjWVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAktkrpPFUaN5puSc1npJ/ndC+eGHzj0JmzXpGrAWgfGyKglC3v3gihTXR7QU1 z3k3FJkFqT+FXjjPF0b+IAO7yyxyvQquhkYFUHkl8QTKBA8uf38vTSJAY/VdN+vL FGWkFEVUAQgvADLSWfewP1XfpPHnSFqlviJlTbvUdSCQ8eKRSQY8QhNC8qMgH4YH mAJBO/yObJxxGZkg6fywpXcaIvNimbVo0zSr0s7qYpZhmSgf6jB1JAmnFNFJ1V9m bfhz7WaZSuLQC9gOsmaQK/ZdhrY/84ulq7xnM1BZ27GgX4umfyXo0wsUABtUFzbl gImR2geuQVB/3fUQ/Km8pN4kBQ== -----END CERTIFICATE-----Generated at Mon Mar 2 03:34:58 2026 by rpki-client