$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft File: Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft (raw, json) Hash identifier: JG9WQ+hNFV9LUfS+lI93fb7CmJq0bfeYMnXQshVYGes= Subject key identifier: 45:57:16:56:8B:1B:8C:CA:05:3A:4D:EF:12:3E:64:AD:FE:2D:2D:18 Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 Certificate issuer: /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft Manifest number: 02B2 Signing time: Sat 23 Aug 2025 03:36:01 +0000 Manifest this update: Sat 23 Aug 2025 03:36:00 +0000 Manifest next update: Sat 30 Aug 2025 03:36:00 +0000 Files and hashes: 1: Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl (hash: IEpciKA05URNupbl6oHnSdI0RLqpe0rOlq5mqLPSoI4=) 2: FC72D9F4DAD711EF92A87E5DC4F9AE02.roa (hash: yGKY9bGf3KO/fBsHJXYZtjw1LcLqxRqFqjzenpN601A=) 3: C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa (hash: DqUd79ywwc0oIGvda4f69OJAvPxHaLz7wHn0gYGYCXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Validity Not Before: Aug 23 03:36:00 2025 GMT Not After : Aug 30 03:36:00 2025 GMT Subject: CN=68a93721-4ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:78:1d:ec:ed:86:2d:f2:79:bc:c9:87:8d:58: 81:19:48:18:e8:e0:c2:9a:91:39:a8:a6:84:cb:fd: 32:6e:6d:db:bb:ac:ce:d6:45:39:60:66:c2:ef:27: 37:c7:5c:cf:bb:16:22:7f:c0:d5:18:08:42:ab:09: 4e:db:fb:99:f9:24:20:f9:97:3d:d4:86:e0:f0:1a: 8c:2c:89:8e:79:4d:75:be:58:93:09:88:85:75:23: 85:ea:42:5d:75:81:7d:63:7d:1d:93:36:f2:40:63: e6:6a:53:b1:4f:52:43:bf:43:03:fa:4b:81:5d:86: 43:40:32:93:47:09:c4:d2:fb:fe:44:51:c7:2b:3a: 88:bc:16:4f:94:0e:40:1d:40:12:5f:17:5a:10:9c: 4e:79:77:a1:fd:c7:f1:96:80:7c:7c:4f:f9:76:02: 0b:5a:59:3b:a6:57:b4:20:4c:c0:7e:8c:2f:1b:f0: 3b:b1:cf:da:41:e2:4b:49:cd:df:57:40:67:1e:26: 19:e6:75:2c:7e:d6:ea:78:76:c9:d6:d3:11:95:f5: 0e:26:aa:00:89:8a:3c:3f:b1:14:22:11:d7:48:85: a9:80:a4:6a:bd:0d:57:38:31:3c:76:a6:f4:85:df: 7c:6b:a0:fa:54:4c:82:94:74:f8:f9:5d:c4:0f:6e: 56:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:57:16:56:8B:1B:8C:CA:05:3A:4D:EF:12:3E:64:AD:FE:2D:2D:18 X509v3 Authority Key Identifier: keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:41:80:f0:2f:74:8e:55:82:5e:f0:9d:c6:62:71:e0:d4:95: 35:c2:e7:7f:07:3b:d1:6c:b3:df:81:85:1e:49:8d:0e:c2:9f: 07:f1:a8:c0:b6:de:a5:4b:ec:35:ee:e0:3b:fd:eb:4c:5a:f7: 49:17:3d:b4:ca:cc:93:c3:b9:b2:f4:b5:55:67:7f:e2:8b:24: f1:88:1b:d9:26:c7:70:d4:6e:f6:03:32:40:6e:49:28:7d:0b: 81:45:be:c3:c0:a2:94:96:47:1d:53:27:06:4a:cc:eb:24:cf: 41:d0:3d:27:7b:13:9b:43:03:f2:95:ea:a4:5d:c3:7b:5a:3b: 8a:a9:35:fc:c2:24:c1:33:d5:4a:08:29:d1:7a:50:45:86:d5: f2:b4:87:f7:66:f6:ac:6a:26:85:64:87:24:02:69:ec:de:89: a6:fd:7b:0e:78:81:42:09:2b:c9:1e:e8:b0:14:7c:f0:f6:9c: b5:9d:38:64:27:3c:1e:c2:60:eb:5a:a4:9e:4f:56:75:6c:cb: fc:ec:e0:02:df:39:5c:e6:25:66:34:b3:2c:8c:c1:03:e8:74: c0:65:dc:19:fe:e6:9d:b8:6f:f2:71:91:32:51:99:0b:d9:36: 38:ab:29:ce:07:0c:e9:50:f5:48:09:8d:0d:02:3e:d0:cd:e8: 69:76:d2:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKDNBN0EzN0ZCQkE0OUM0NjlBREFCNTI2NjQ1NkM5QTQ1 RjJDRkMxODgwHhcNMjUwODIzMDMzNjAwWhcNMjUwODMwMDMzNjAwWjAYMRYwFAYD VQQDEw02OGE5MzcyMS00YWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Xgd7O2GLfJ5vMmHjViBGUgY6ODCmpE5qKaEy/0ybm3bu6zO1kU5YGbC7yc3 x1zPuxYif8DVGAhCqwlO2/uZ+SQg+Zc91Ibg8BqMLImOeU11vliTCYiFdSOF6kJd dYF9Y30dkzbyQGPmalOxT1JDv0MD+kuBXYZDQDKTRwnE0vv+RFHHKzqIvBZPlA5A HUASXxdaEJxOeXeh/cfxloB8fE/5dgILWlk7ple0IEzAfowvG/A7sc/aQeJLSc3f V0BnHiYZ5nUsftbqeHbJ1tMRlfUOJqoAiYo8P7EUIhHXSIWpgKRqvQ1XODE8dqb0 hd98a6D6VEyClHT4+V3ED25WRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVXFlaL G4zKBTpN7xI+ZK3+LS0YMB8GA1UdIwQYMBaAFDp6N/u6ScRpratSZkVsmkXyz8GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhHbXRxMUptUld5YVJmTFB3 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ubzMtN3BKeEdtdHExSm1SV3lhUmZMUHdZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhH bXRxMUptUld5YVJmTFB3WWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNQYDwL3SOVYJe8J3GYnHg1JU1wud/BzvRbLPfgYUeSY0Owp8H8ajA tt6lS+w17uA7/etMWvdJFz20ysyTw7my9LVVZ3/iiyTxiBvZJsdw1G72AzJAbkko fQuBRb7DwKKUlkcdUycGSszrJM9B0D0nexObQwPyleqkXcN7WjuKqTX8wiTBM9VK CCnRelBFhtXytIf3ZvasaiaFZIckAmns3omm/XsOeIFCCSvJHuiwFHzw9py1nThk JzwewmDrWqSeT1Z1bMv87OAC3zlc5iVmNLMsjMED6HTAZdwZ/uaduG/ycZEyUZkL 2TY4qynOBwzpUPVICY0NAj7QzehpdtJU -----END CERTIFICATE-----Generated at Sat Aug 23 07:07:46 2025 by rpki-client