$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft File: opsbaAnOwakkcMWcbDa_pc84cYY.mft (raw, json) Hash identifier: r4iO9OsUBSuDGZynIZawfEiULO6Jr5N32Oyl/ni8m+A= Subject key identifier: 4F:00:D6:18:5F:AC:77:89:3B:A0:2D:6B:6C:DD:41:F3:45:94:14:57 Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 Certificate issuer: /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft Manifest number: 54 Signing time: Fri 13 Jun 2025 06:10:28 +0000 Manifest this update: Fri 13 Jun 2025 06:10:28 +0000 Manifest next update: Fri 20 Jun 2025 06:10:28 +0000 Files and hashes: 1: opsbaAnOwakkcMWcbDa_pc84cYY.crl (hash: 2qdRWhFuDB84WJ3xuiTYymv36l0H1Kt1NraqGdGAsGY=) 2: 7404496836E411F0A95FB239C4F9AE02.roa (hash: WHGMZh9P2RExWIeMMaDkbGi0VRoxW1Iai0A3Zb9yWT4=) 3: 7375238236E411F0A95FB239C4F9AE02.roa (hash: 6GqewoLZaVKTqsSzxgnIGXRwmj2ShKpEerZMfS7j+UE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:10:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186 Validity Not Before: Jun 13 06:10:28 2025 GMT Not After : Jun 20 06:10:28 2025 GMT Subject: CN=684bc0d4-9e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:dd:0d:4e:6f:1c:3b:26:72:67:a1:08:45:b6: 0c:b1:ad:1e:41:a7:98:67:ee:c2:6b:61:71:ba:17: 2a:45:bd:db:79:0b:0a:90:96:6e:18:bd:e8:a8:40: de:aa:27:fb:22:c8:0b:1d:56:72:03:ee:d8:88:f2: cc:5c:93:79:8f:38:35:08:6c:da:e8:50:4d:b4:ad: cb:0f:7f:cf:ef:48:7b:75:ae:45:14:83:57:50:50: 1b:92:6d:f6:ca:57:f8:a5:90:a7:62:0d:11:45:2f: bb:51:1d:77:74:35:37:b7:65:2b:fe:5d:92:05:c3: 35:68:37:07:9c:fd:f6:65:1b:71:9a:32:b0:c2:d7: b0:1b:7b:4f:8e:55:3d:6b:fe:13:4f:34:2b:f7:a9: 9f:fe:ec:28:23:ec:09:3b:b3:6d:2d:db:78:e6:1f: 10:c0:93:f6:52:ba:59:6a:54:21:b5:c5:bb:0e:bc: 2d:eb:8a:8a:ca:3f:02:d0:42:d6:f5:71:d0:7e:f5: 1c:28:e4:27:ea:15:45:e8:d0:45:ef:c3:d6:32:95: 2c:8e:0d:48:f3:82:34:42:fc:b1:c9:9a:b3:3a:53: a2:08:d1:b0:ed:b9:a6:68:b7:52:0e:2c:88:0b:7b: 88:6e:da:eb:69:3e:9a:4c:7a:a6:ee:2f:cc:0c:77: 2e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:00:D6:18:5F:AC:77:89:3B:A0:2D:6B:6C:DD:41:F3:45:94:14:57 X509v3 Authority Key Identifier: keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:84:29:c7:d9:20:df:a7:61:fd:37:f1:4d:b3:33:fb:9a:7f: e5:d1:fb:89:b7:28:bc:9a:26:ad:0e:61:bb:74:62:ad:26:40: 64:1e:cc:42:28:18:ad:de:cb:dd:bb:3f:f7:c9:49:a3:24:15: c6:85:c5:43:01:a6:c2:e3:e9:ad:64:01:dc:35:43:8b:d0:9b: ea:81:08:6d:1f:fc:c8:33:aa:ea:8e:2d:39:40:05:97:4e:b9: a1:e4:13:ff:cd:4e:b0:72:bc:ac:7f:2d:c3:47:6c:20:cb:6d: 70:80:57:b6:db:7b:a8:94:bb:74:9e:f4:1f:43:d5:fd:fa:dd: 0b:66:31:17:74:5a:27:ef:9c:a1:d1:67:10:70:d5:d6:7f:9f: cc:af:d3:8f:ed:e7:bd:1f:d0:21:9c:94:f9:9c:dd:ef:d4:94: da:21:bf:3c:9f:2a:42:b5:2d:ae:e4:db:11:32:41:53:be:c8: 22:77:43:9b:f9:e6:12:25:53:11:84:dd:5e:4f:6b:6c:55:7c: 90:bc:86:b8:3f:cd:de:c0:8c:1a:77:31:79:84:4a:19:c6:ba: 79:07:29:67:ba:c3:5e:28:35:ba:bc:46:1c:51:3b:d8:f2:d9: af:ac:9b:4b:c5:f6:76:a4:e2:a1:0b:1b:c4:a5:bb:9c:b5:f3: 40:18:dd:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0JBQzExMC8GA1UEBRMoQTI5QjFCNjgwOUNFQzFBOTI0NzBDNTlDNkMzNkJGQTVD RjM4NzE4NjAeFw0yNTA2MTMwNjEwMjhaFw0yNTA2MjAwNjEwMjhaMBgxFjAUBgNV BAMTDTY4NGJjMGQ0LTllOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ3Q1Obxw7JnJnoQhFtgyxrR5Bp5hn7sJrYXG6FypFvdt5CwqQlm4YveioQN6q J/siyAsdVnID7tiI8sxck3mPODUIbNroUE20rcsPf8/vSHt1rkUUg1dQUBuSbfbK V/ilkKdiDRFFL7tRHXd0NTe3ZSv+XZIFwzVoNwec/fZlG3GaMrDC17Abe0+OVT1r /hNPNCv3qZ/+7Cgj7Ak7s20t23jmHxDAk/ZSullqVCG1xbsOvC3riorKPwLQQtb1 cdB+9Rwo5CfqFUXo0EXvw9YylSyODUjzgjRC/LHJmrM6U6II0bDtuaZot1IOLIgL e4hu2utpPppMeqbuL8wMdy65AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTwDWGF+s d4k7oC1rbN1B80WUFFcwHwYDVR0jBBgwFoAUopsbaAnOwakkcMWcbDa/pc84cYYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3QkFDL0M2QUQzRTBBRDAy QzExRUZCNTU4NDkxNUM0RjlBRTAyL29wc2JhQW5Pd2Fra2NNV2NiRGFfcGM4NGNZ WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3BzYmFBbk93YWtrY01XY2JEYV9wYzg0Y1lZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 QkFDL0M2QUQzRTBBRDAyQzExRUZCNTU4NDkxNUM0RjlBRTAyL29wc2JhQW5Pd2Fr a2NNV2NiRGFfcGM4NGNZWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGiEKcfZIN+nYf038U2zM/uaf+XR+4m3KLyaJq0OYbt0Yq0mQGQezEIo GK3ey927P/fJSaMkFcaFxUMBpsLj6a1kAdw1Q4vQm+qBCG0f/MgzquqOLTlABZdO uaHkE//NTrByvKx/LcNHbCDLbXCAV7bbe6iUu3Se9B9D1f363QtmMRd0WifvnKHR ZxBw1dZ/n8yv04/t570f0CGclPmc3e/UlNohvzyfKkK1La7k2xEyQVO+yCJ3Q5v5 5hIlUxGE3V5Pa2xVfJC8hrg/zd7AjBp3MXmEShnGunkHKWe6w14oNbq8RhxRO9jy 2a+sm0vF9nak4qELG8Slu5y180AY3as= -----END CERTIFICATE-----Generated at Sat Jun 14 17:21:11 2025 by rpki-client