$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft File: Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft (raw, json) Hash identifier: NiMZZhZp7VG71dLgZoVgublfZDgTUoQGTA26rp/JR7s= Subject key identifier: 7F:77:81:B4:3C:1C:29:E5:5C:CA:74:14:4D:AC:95:FA:07:4F:57:04 Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 Certificate issuer: /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft Manifest number: 03C7 Signing time: Mon 11 May 2026 02:54:03 +0000 Manifest this update: Mon 11 May 2026 02:54:03 +0000 Manifest next update: Mon 18 May 2026 02:54:03 +0000 Files and hashes: 1: Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl (hash: KujK7fHDLUtv0pZnrYVzarIX5XWIUUKlP3K2qq6Csn4=) 2: C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa (hash: lDdGjr2xBXdDfbk6ojZCpTh/5gnireZrfjXRJmqAla0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 02:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Validity Not Before: May 11 02:54:03 2026 GMT Not After : May 18 02:54:03 2026 GMT Subject: CN=6a0144cb-6ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9b:77:d2:07:84:20:24:c5:5a:f1:c5:06:d1: c6:00:9c:e2:f6:c8:81:da:36:2c:c0:7b:30:0f:14: 20:2d:fe:c3:9f:93:df:df:f7:0b:45:1c:42:cd:4d: fb:07:25:b3:19:64:5e:30:88:72:94:95:ab:75:ee: 6d:58:60:14:50:8c:be:49:49:ce:75:c6:24:6b:61: dd:86:90:dd:47:2f:a5:dd:8e:fb:64:6e:f3:51:3e: 5c:d5:b9:a0:67:26:6e:e5:17:d9:db:bc:b6:69:dd: 18:3f:0a:08:f8:2d:80:5a:57:81:40:2c:7c:4f:ed: 54:d0:b8:3b:ce:c7:2c:cf:78:9e:0f:05:60:e6:48: c1:28:6d:38:66:f6:27:13:a3:61:4f:bb:93:37:b5: a7:e5:1b:37:f7:fa:58:be:bf:57:12:fb:c5:07:00: a1:7a:d3:94:a9:b1:76:53:8d:49:6d:9b:24:b4:4d: a9:9c:d2:fc:5e:4e:fc:02:e6:cb:09:e8:55:41:38: 02:be:67:b4:35:34:63:f7:be:62:4b:63:00:47:1f: fe:0e:47:8d:b4:3d:ca:71:74:fc:fb:84:d9:22:c6: 7c:66:5b:df:8b:34:34:52:07:8b:a6:5e:30:6a:cf: c8:82:b1:ce:c2:50:67:e4:b7:a2:ea:49:84:3f:d3: 08:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:77:81:B4:3C:1C:29:E5:5C:CA:74:14:4D:AC:95:FA:07:4F:57:04 X509v3 Authority Key Identifier: keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:69:a8:47:d8:72:79:5d:fb:fa:cd:61:96:d9:5b:f5:5d:6f: 9d:84:72:29:6d:d3:ab:31:c0:9e:09:84:68:3f:5c:d9:cc:fe: 14:b2:81:ea:99:34:23:c3:04:7d:2b:c6:7f:2c:31:66:50:e6: 66:a1:a7:24:d2:3a:ba:1a:cd:5c:4f:0f:bf:a2:54:59:ca:47: b6:c3:f4:13:5c:29:97:c1:52:ba:d0:fe:b9:3a:b8:c5:4a:43: b5:7b:36:08:51:79:6e:81:fe:d1:17:f9:b7:36:25:55:bf:0a: fa:5a:f7:f2:01:66:df:85:63:69:7b:14:14:24:b1:13:70:0b: b8:db:b3:44:af:2c:68:d6:5c:34:22:ef:2b:ec:55:52:77:24: d8:7d:41:31:1f:7c:1f:c0:7c:75:88:be:30:1e:17:ce:39:67: e3:63:c7:45:33:1b:81:79:9a:cf:2e:3f:f1:c3:84:e0:22:78: f0:f1:72:2f:22:b5:fe:ff:cf:88:18:24:08:c6:a1:fe:e2:6b: 84:27:df:e2:d4:a1:7f:c6:b9:54:21:db:e1:89:0d:eb:1c:76: 34:dd:81:f2:8b:af:95:21:2b:bb:14:14:34:3d:f0:a7:4b:39: ed:d3:d1:4d:28:50:9a:5b:c9:6b:11:e4:f9:04:98:8c:09:94: 25:6f:39:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKDNBN0EzN0ZCQkE0OUM0NjlBREFCNTI2NjQ1NkM5QTQ1 RjJDRkMxODgwHhcNMjYwNTExMDI1NDAzWhcNMjYwNTE4MDI1NDAzWjAYMRYwFAYD VQQDEw02YTAxNDRjYi02ZWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Jt30geEICTFWvHFBtHGAJzi9siB2jYswHswDxQgLf7Dn5Pf3/cLRRxCzU37 ByWzGWReMIhylJWrde5tWGAUUIy+SUnOdcYka2HdhpDdRy+l3Y77ZG7zUT5c1bmg ZyZu5RfZ27y2ad0YPwoI+C2AWleBQCx8T+1U0Lg7zscsz3ieDwVg5kjBKG04ZvYn E6NhT7uTN7Wn5Rs39/pYvr9XEvvFBwChetOUqbF2U41JbZsktE2pnNL8Xk78AubL CehVQTgCvme0NTRj975iS2MARx/+DkeNtD3KcXT8+4TZIsZ8ZlvfizQ0UgeLpl4w as/IgrHOwlBn5Lei6kmEP9MIvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH93gbQ8 HCnlXMp0FE2slfoHT1cEMB8GA1UdIwQYMBaAFDp6N/u6ScRpratSZkVsmkXyz8GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhHbXRxMUptUld5YVJmTFB3 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ubzMtN3BKeEdtdHExSm1SV3lhUmZMUHdZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhH bXRxMUptUld5YVJmTFB3WWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEGmoR9hyeV37+s1hltlb9V1vnYRyKW3TqzHAngmEaD9c2cz+FLKB6pk0I8ME fSvGfywxZlDmZqGnJNI6uhrNXE8Pv6JUWcpHtsP0E1wpl8FSutD+uTq4xUpDtXs2 CFF5boH+0Rf5tzYlVb8K+lr38gFm34VjaXsUFCSxE3ALuNuzRK8saNZcNCLvK+xV Unck2H1BMR98H8B8dYi+MB4Xzjln42PHRTMbgXmazy4/8cOE4CJ48PFyLyK1/v/P iBgkCMah/uJrhCff4tShf8a5VCHb4YkN6xx2NN2B8ouvlSEruxQUND3wp0s57dPR TShQmlvJaxHk+QSYjAmUJW85Tw== -----END CERTIFICATE-----Generated at Wed May 13 05:17:03 2026 by rpki-client