
$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft
File: Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft (raw, json)
Hash identifier: /cWO+aHaQvYBTEwwRk0WQRZ39qqQTFGE9r7pSGEuzUw=
Subject key identifier: A9:42:5A:E8:70:C8:F4:79:A7:6E:CC:55:E7:25:3B:5D:13:A7:A6:56
Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88
Certificate issuer: /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188
Certificate serial: 01E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft
Manifest number: 040F
Signing time: Thu 23 Jul 2026 03:44:58 +0000
Manifest this update: Thu 23 Jul 2026 03:44:57 +0000
Manifest next update: Thu 30 Jul 2026 03:44:57 +0000
Files and hashes: 1: Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl (hash: UlHs/2dHbSPFvX5IeAjx7Z+T6JkLcbV6y4Az18fFNTg=)
2: C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa (hash: lDdGjr2xBXdDfbk6ojZCpTh/5gnireZrfjXRJmqAla0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl
rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 482 (0x1e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91463ED, serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188
Validity
Not Before: Jul 23 03:44:57 2026 GMT
Not After : Jul 30 03:44:57 2026 GMT
Subject: CN=6a618e3a-9bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f9:f5:e9:18:a0:f9:91:bd:f2:46:0e:b9:53:
a3:3e:72:ae:89:17:9e:63:23:dc:0d:9c:68:f0:28:
74:28:c5:b4:97:e7:fe:c1:8b:69:3d:92:61:5b:bd:
ee:c2:6f:cc:42:91:11:2a:a7:32:ae:63:56:9e:a4:
50:07:5c:6a:d8:41:bd:d5:06:e9:99:c9:5e:ad:92:
0d:5a:92:98:41:22:ba:07:7b:cc:d5:f7:28:79:31:
e3:e7:8a:9d:34:1e:b8:46:c9:71:9f:ce:8f:27:62:
fa:62:b6:f4:37:9e:b3:0e:65:c1:fd:ec:06:22:bb:
fd:d0:c7:25:77:83:74:de:b3:ea:f3:ad:b9:3c:dc:
b0:63:8b:67:a0:fb:1c:f5:71:8f:98:45:95:1a:3e:
ac:02:99:06:d1:35:c2:6e:88:9a:ba:c3:c4:c2:35:
ae:05:b8:a4:47:6c:99:ea:d5:84:e7:3f:a9:7c:fb:
3c:4a:2b:65:d2:14:73:a8:a2:59:d7:e6:42:bd:df:
99:f1:b3:e9:e3:e7:b6:1d:28:04:73:dd:c0:3e:14:
89:dd:6a:f8:e8:cb:9e:90:d8:2e:ea:79:d3:71:f7:
da:f3:7b:e5:91:be:a0:37:bf:c6:92:1d:33:b8:28:
67:51:25:28:e1:f9:e2:31:76:1b:27:09:f7:e8:22:
40:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:42:5A:E8:70:C8:F4:79:A7:6E:CC:55:E7:25:3B:5D:13:A7:A6:56
X509v3 Authority Key Identifier:
keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:36:71:28:04:01:ce:c5:49:e3:b8:a1:28:da:21:8c:45:ef:
2a:8f:70:90:d9:f2:59:76:2e:a4:06:26:cb:eb:21:4d:6c:48:
a1:e0:b0:43:12:7b:ea:5a:82:cc:95:81:1e:ab:c3:78:bc:75:
73:60:ec:14:18:6a:a1:3f:0d:ec:1a:93:08:43:31:fe:e6:c0:
3e:70:62:0f:95:0a:ef:56:c9:60:01:f4:c0:22:84:fc:d3:be:
a8:76:a9:d9:85:27:76:a4:c9:f5:e3:25:53:28:53:44:41:3d:
91:b4:5e:5f:ec:f9:1d:53:47:56:e2:c8:10:f6:2b:75:8c:42:
b6:08:09:7d:b1:e1:01:db:9a:65:09:df:61:01:af:aa:63:85:
ae:00:6f:06:0f:52:b5:f2:88:b6:e6:1f:93:09:64:ad:d0:59:
50:e8:1f:80:c9:06:66:b2:5b:e3:df:b6:33:7d:0f:62:86:09:
6f:1d:6a:f7:20:2e:6f:ed:ab:62:72:83:86:71:01:62:89:a5:
3c:70:0e:68:1c:0b:4f:17:9f:0c:e7:cf:f9:90:bf:59:1b:0f:
4a:89:3c:87:1d:7c:12:ff:1b:01:f9:ed:76:03:32:6c:a6:c6:
48:52:39:91:4f:20:08:2b:d9:93:fe:13:b3:8e:14:2d:34:63:
47:c8:50:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:41 2026 by rpki-client