$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft File: Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft (raw, json) Hash identifier: AEAUe54QQNEeyDLZfss4Q8ThjoXGAu069d8RQP/YGWM= Subject key identifier: A6:F7:77:3F:7D:C7:0B:05:38:1B:85:7B:EC:89:A1:3E:32:D4:9A:20 Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 Certificate issuer: /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft Manifest number: 0397 Signing time: Wed 25 Mar 2026 02:28:48 +0000 Manifest this update: Wed 25 Mar 2026 02:28:47 +0000 Manifest next update: Wed 01 Apr 2026 02:28:47 +0000 Files and hashes: 1: Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl (hash: Q71h5DD61HQFnGqgDrsVlAgSAh5aySl8i8mNCsOPtiM=) 2: C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa (hash: lDdGjr2xBXdDfbk6ojZCpTh/5gnireZrfjXRJmqAla0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Validity Not Before: Mar 25 02:28:47 2026 GMT Not After : Apr 1 02:28:47 2026 GMT Subject: CN=69c3485f-0482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a5:8c:35:b5:51:78:b2:a9:e0:81:18:73:d0: 8f:3f:b0:4f:d1:d2:69:fa:52:34:93:08:03:8c:83: 05:ef:ab:96:0c:cb:3f:db:b2:72:72:e4:7a:5b:1d: de:fc:2d:df:d6:41:d7:05:a2:69:67:1a:4d:ea:91: b9:42:72:c5:88:39:7b:01:57:7c:9c:fc:a1:46:01: 5c:ae:33:4a:7e:40:ed:17:8c:92:5e:c1:26:f1:89: c0:24:a3:9c:36:1f:8a:46:54:64:51:df:1b:72:0e: a8:f2:de:90:82:73:9d:0d:d6:1b:7a:11:ac:4e:05: 04:e9:ee:97:0b:f2:09:9d:4f:e0:5d:f1:b1:a2:15: c3:10:9a:d9:01:a9:3c:c3:ed:97:26:20:6b:48:3f: e2:a9:61:92:42:d2:4e:d0:67:35:63:80:9c:e3:d6: 14:f8:62:02:37:5f:9d:1e:8b:90:40:e4:ad:bc:4d: 17:e5:7e:52:b0:c5:c5:77:2d:f3:8f:48:43:ed:b8: 91:27:56:7a:0d:ec:e4:09:c9:72:ce:fc:ea:27:33: e4:cd:a8:00:e8:21:ad:56:09:51:b4:04:64:69:a9: 03:b6:96:54:8b:33:b6:17:31:e5:df:f9:8f:17:b9: 06:0a:a2:84:79:f2:9f:e8:84:f0:b3:3d:d4:4b:60: cf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F7:77:3F:7D:C7:0B:05:38:1B:85:7B:EC:89:A1:3E:32:D4:9A:20 X509v3 Authority Key Identifier: keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:5d:eb:df:a8:dd:b8:3f:f8:b8:77:c8:e3:65:c2:33:56:ae: ec:e0:86:6e:34:11:49:a8:12:bc:1e:9c:1b:7b:9a:30:a6:c5: 89:22:1e:50:96:8e:95:84:f3:f4:d1:97:68:08:c0:4c:87:02: a5:0d:d8:86:e7:8b:ca:d7:9e:21:f1:7d:ac:b1:65:d0:47:b3: 81:32:ed:51:0e:c9:43:02:57:30:ca:aa:a4:7c:55:73:db:75: 62:95:09:69:4b:63:af:fd:50:e6:fa:8a:b6:1c:5c:fb:44:95: 0f:46:41:51:b7:f5:5b:5e:1d:d8:b6:55:40:d7:5b:28:d0:e2: f1:2c:39:aa:ea:79:c4:3d:03:15:b2:0b:f7:9c:ec:a8:ea:f9: f8:30:7b:e3:59:42:26:8b:c7:87:db:eb:5b:e0:aa:da:91:80: 7b:5d:4c:45:be:46:5f:5b:9e:83:dd:51:8e:b2:80:86:e0:b2: fb:e4:11:a0:64:ba:b2:86:1d:5a:ad:04:3d:38:a7:a7:a9:11: 0c:64:2f:d7:74:c8:aa:4a:68:75:73:dc:66:df:a3:4f:37:98: f4:b1:7c:9e:a0:11:6d:47:25:fd:92:a0:a1:8a:8e:a4:01:a5: 82:91:17:c5:71:6d:5d:8a:da:57:ac:ac:ab:78:18:25:cc:55: 34:02:b9:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKDNBN0EzN0ZCQkE0OUM0NjlBREFCNTI2NjQ1NkM5QTQ1 RjJDRkMxODgwHhcNMjYwMzI1MDIyODQ3WhcNMjYwNDAxMDIyODQ3WjAYMRYwFAYD VQQDEw02OWMzNDg1Zi0wNDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhKWMNbVReLKp4IEYc9CPP7BP0dJp+lI0kwgDjIMF76uWDMs/27JycuR6Wx3e /C3f1kHXBaJpZxpN6pG5QnLFiDl7AVd8nPyhRgFcrjNKfkDtF4ySXsEm8YnAJKOc Nh+KRlRkUd8bcg6o8t6QgnOdDdYbehGsTgUE6e6XC/IJnU/gXfGxohXDEJrZAak8 w+2XJiBrSD/iqWGSQtJO0Gc1Y4Cc49YU+GICN1+dHouQQOStvE0X5X5SsMXFdy3z j0hD7biRJ1Z6DezkCclyzvzqJzPkzagA6CGtVglRtARkaakDtpZUizO2FzHl3/mP F7kGCqKEefKf6ITwsz3US2DPDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKb3dz99 xwsFOBuFe+yJoT4y1JogMB8GA1UdIwQYMBaAFDp6N/u6ScRpratSZkVsmkXyz8GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhHbXRxMUptUld5YVJmTFB3 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ubzMtN3BKeEdtdHExSm1SV3lhUmZMUHdZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhH bXRxMUptUld5YVJmTFB3WWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoV3r36jduD/4uHfI42XCM1au7OCGbjQRSagSvB6cG3uaMKbFiSIeUJaOlYTz 9NGXaAjATIcCpQ3YhueLyteeIfF9rLFl0EezgTLtUQ7JQwJXMMqqpHxVc9t1YpUJ aUtjr/1Q5vqKthxc+0SVD0ZBUbf1W14d2LZVQNdbKNDi8Sw5qup5xD0DFbIL95zs qOr5+DB741lCJovHh9vrW+Cq2pGAe11MRb5GX1ueg91RjrKAhuCy++QRoGS6soYd Wq0EPTinp6kRDGQv13TIqkpodXPcZt+jTzeY9LF8nqARbUcl/ZKgoYqOpAGlgpEX xXFtXYraV6ysq3gYJcxVNAK5Mw== -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:05 2026 by rpki-client