$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft File: OPsGr2SfQA9ROZSTW-335JJwyKo.mft (raw, json) Hash identifier: xQZ6HxdfR26/5BjJLTTIkJHXuBOmHOJSStAT4/OGB/k= Subject key identifier: 4A:AE:31:CC:5F:3C:1A:22:64:23:52:E0:62:25:4C:66:99:CB:91:91 Authority key identifier: 38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA Certificate issuer: /CN=A9198267/serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA Certificate serial: 0B0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft Manifest number: 0AFD Signing time: Mon 12 Oct 2026 19:29:21 +0000 Manifest this update: Mon 12 Oct 2026 19:29:20 +0000 Manifest next update: Mon 19 Oct 2026 19:29:20 +0000 Files and hashes: 1: OPsGr2SfQA9ROZSTW-335JJwyKo.crl (hash: 8ljTqYKlLm1vCVEbkVGLSiNLKWUEs90FZ9tfWWAiUVk=) 2: 2F43EE7278CC11EAB69DAC75C4F9AE02.roa (hash: RCg1Rl9BMePurgmT4FLJMdQ57mTRP5HppFNnGUt/YQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 19:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2830 (0xb0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198267, serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA Validity Not Before: Oct 12 19:29:20 2026 GMT Not After : Oct 19 19:29:20 2026 GMT Subject: CN=6acd3511-272e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3b:df:5b:9e:03:1d:ed:46:08:0a:9c:b7:ab: e1:5a:3e:ea:6b:bf:aa:07:ed:63:2d:16:dd:e4:81: 90:a3:29:81:37:bc:b5:e2:3c:c3:1c:21:d4:64:c0: 33:0d:b9:f9:4a:67:fe:c0:eb:44:03:91:89:0c:87: 61:b1:8d:e0:eb:6a:40:fe:61:6b:10:77:19:ed:fb: 08:e9:ba:56:1e:1f:54:63:50:32:2b:80:5a:95:5d: a7:24:1f:48:8d:75:ea:5b:db:64:84:43:74:22:79: 51:82:17:4a:af:12:c1:e0:d9:38:6c:51:86:81:41: eb:58:03:d9:a2:3e:5f:32:e2:7d:3c:e8:83:a4:e8: 9e:fd:6f:5b:01:1e:0b:b0:6f:71:4b:fc:80:ab:c1: 2c:65:10:a9:bd:bc:3f:fd:7c:1a:8f:d1:e7:5a:63: 41:7e:b6:2c:1d:17:c1:d6:33:b7:2e:ee:56:07:e4: eb:1f:3e:ab:45:c6:25:36:1c:59:85:04:b5:7e:c7: 09:3d:49:13:f9:d0:82:6d:1a:c4:f0:b5:57:2c:b7: 76:d9:da:8c:87:70:05:55:7e:ce:7c:b8:f1:cb:81: 19:0b:41:cf:d5:55:d3:1a:94:15:55:c5:ec:f9:e1: 0f:07:52:8f:c9:16:f5:a3:9f:72:aa:e5:d2:bc:79: 0a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AE:31:CC:5F:3C:1A:22:64:23:52:E0:62:25:4C:66:99:CB:91:91 X509v3 Authority Key Identifier: keyid:38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:76:53:5c:9f:89:c1:31:91:e2:ef:4f:58:ea:f8:65:b0:6c: 84:87:2c:fa:67:b9:30:35:4c:62:b8:53:6d:f2:ae:dd:ad:c7: d0:13:56:4d:f6:1c:58:41:90:e1:6c:d8:ed:d2:53:fb:e2:6e: fc:de:73:a6:4e:af:78:3a:36:d8:07:07:ab:8a:19:88:7e:e9: 1c:47:72:a4:87:80:2f:73:85:98:03:ff:71:a0:83:74:8d:89: 9b:9b:36:b8:fa:e8:a4:7e:c0:8e:76:39:bf:90:07:c3:96:fc: 74:42:43:31:71:61:00:3a:24:21:5d:29:d3:b5:28:5a:7c:54: 9e:e9:14:58:29:10:d2:a5:9b:f9:10:5e:40:a3:ba:16:f9:a5: 05:08:df:9e:50:8a:c9:ee:b4:c6:22:43:4f:7d:84:7f:32:44: 36:ca:b7:45:84:98:38:d0:c9:1c:0a:3e:47:be:23:f7:d7:af: b1:7f:bf:cd:f4:6e:91:bd:0e:ab:4d:96:a2:58:b7:7a:39:db: 8a:ce:a7:77:b1:1b:8c:19:39:c2:8c:8f:22:36:3b:cd:47:08: 40:9d:ad:f4:fe:d4:9b:96:d2:32:69:93:6c:02:ac:5b:23:1d: b2:2a:87:a9:c9:8b:5b:f2:fc:b6:dd:4c:02:b6:80:b4:39:ff: cf:02:0e:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyNjcxMTAvBgNVBAUTKDM4RkIwNkFGNjQ5RjQwMEY1MTM5OTQ5MzVCRURGN0U0 OTI3MEM4QUEwHhcNMjYxMDEyMTkyOTIwWhcNMjYxMDE5MTkyOTIwWjAYMRYwFAYD VQQDEw02YWNkMzUxMS0yNzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTvfW54DHe1GCAqct6vhWj7qa7+qB+1jLRbd5IGQoymBN7y14jzDHCHUZMAz Dbn5Smf+wOtEA5GJDIdhsY3g62pA/mFrEHcZ7fsI6bpWHh9UY1AyK4BalV2nJB9I jXXqW9tkhEN0InlRghdKrxLB4Nk4bFGGgUHrWAPZoj5fMuJ9POiDpOie/W9bAR4L sG9xS/yAq8EsZRCpvbw//Xwaj9HnWmNBfrYsHRfB1jO3Lu5WB+TrHz6rRcYlNhxZ hQS1fscJPUkT+dCCbRrE8LVXLLd22dqMh3AFVX7OfLjxy4EZC0HP1VXTGpQVVcXs +eEPB1KPyRb1o59yquXSvHkK/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEquMcxf PBoiZCNS4GIlTGaZy5GRMB8GA1UdIwQYMBaAFDj7Bq9kn0APUTmUk1vt9+SScMiq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODI2Ny8wMkM4NkVBQTc4 Q0IxMUVBODIwRDcyNzRDNEY5QUUwMi9PUHNHcjJTZlFBOVJPWlNUVy0zMzVKSnd5 S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09Qc0dyMlNmUUE5Uk9aU1RXLTMzNUpKd3lLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODI2Ny8wMkM4NkVBQTc4Q0IxMUVBODIwRDcyNzRDNEY5QUUwMi9PUHNHcjJTZlFB OVJPWlNUVy0zMzVKSnd5S28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsXZTXJ+JwTGR4u9PWOr4ZbBshIcs+me5MDVMYrhTbfKu3a3H0BNWTfYcWEGQ 4WzY7dJT++Ju/N5zpk6veDo22AcHq4oZiH7pHEdypIeAL3OFmAP/caCDdI2Jm5s2 uPropH7AjnY5v5AHw5b8dEJDMXFhADokIV0p07UoWnxUnukUWCkQ0qWb+RBeQKO6 FvmlBQjfnlCKye60xiJDT32EfzJENsq3RYSYONDJHAo+R74j99evsX+/zfRukb0O q02Woli3ejnbis6nd7EbjBk5woyPIjY7zUcIQJ2t9P7Um5bSMmmTbAKsWyMdsiqH qcmLW/L8tt1MAraAtDn/zwIOwA== -----END CERTIFICATE-----Generated at Tue Oct 13 21:21:17 2026 by rpki-client