$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft File: Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft (raw, json) Hash identifier: UaVpw1+jHO14we2lzjFrQ6JDFSNwVP9AFFRS5psQmg8= Subject key identifier: D1:FA:8A:9C:42:18:57:35:15:EA:1A:97:AF:1A:5F:5A:B0:0D:C5:7C Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 Certificate issuer: /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft Manifest number: 03A3 Signing time: Sun 05 Apr 2026 02:36:12 +0000 Manifest this update: Sun 05 Apr 2026 02:36:11 +0000 Manifest next update: Sun 12 Apr 2026 02:36:11 +0000 Files and hashes: 1: Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl (hash: pIfWkPXdFGKPRw9oz1U84Yg+xKeqh2OCuzSXjvJkKZQ=) 2: C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa (hash: lDdGjr2xBXdDfbk6ojZCpTh/5gnireZrfjXRJmqAla0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Validity Not Before: Apr 5 02:36:11 2026 GMT Not After : Apr 12 02:36:11 2026 GMT Subject: CN=69d1ca9c-29bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cc:c6:01:ee:31:10:f3:f4:e3:3a:ce:f0:24: 07:1c:2f:22:1a:0e:3d:4c:c5:87:00:b2:a1:a3:a8: e6:9a:de:65:c8:61:f0:fa:ad:b1:0e:87:51:5e:ad: 4f:95:a0:74:84:04:4d:25:83:53:4d:cc:4c:47:55: 09:52:54:e5:2a:d8:97:31:8e:75:d6:ea:07:81:0c: 9f:01:12:d7:a2:27:83:6f:f2:71:c0:a8:d8:ef:59: ab:95:aa:f1:bb:49:04:d8:6f:82:ec:f6:06:23:e0: 8d:07:86:86:33:63:54:28:53:fe:bd:18:d1:29:c4: af:a0:0e:97:c7:63:43:d3:42:e8:2a:53:a0:4d:93: 5a:5d:e8:9d:3b:ee:8c:19:30:77:b4:63:55:7d:01: d7:0e:12:0c:8d:a6:f5:61:6d:8e:c6:8b:8a:0b:26: 0a:f7:1a:35:cf:d0:e5:19:f6:a0:47:6b:4c:09:c5: b7:48:75:76:60:dd:34:30:d8:59:e1:84:36:f3:69: b1:3a:e9:ee:e3:d3:28:5a:e5:37:f6:98:9f:28:a5: 3f:13:6d:29:72:0b:7c:65:5f:f6:aa:f1:51:0f:f6: 0a:4f:ca:f7:46:01:ff:29:b0:66:fc:cd:35:44:ea: 63:46:f1:eb:53:60:04:16:bc:75:87:2a:c4:e8:fe: b6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FA:8A:9C:42:18:57:35:15:EA:1A:97:AF:1A:5F:5A:B0:0D:C5:7C X509v3 Authority Key Identifier: keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:66:96:7a:b9:5a:35:df:53:b9:2b:af:1b:7e:f8:5a:2d:3a: 31:f5:5d:5e:3a:b0:79:8f:64:f4:da:3b:f6:a9:0b:75:d6:e6: fb:40:1a:05:3d:fc:f1:ef:de:99:a4:3d:0b:67:54:9f:14:b5: b5:50:b8:08:b2:b8:f1:15:62:ff:84:22:3b:4f:62:5a:72:1f: b2:f8:2d:49:f3:ce:e9:19:d9:8c:7a:cf:d0:df:cd:f3:98:2f: f8:55:79:96:52:a7:53:6b:97:fd:e7:6c:e3:f0:ae:05:e6:f3: 42:a4:11:12:c9:54:74:12:f9:4c:10:dd:ba:f4:77:07:20:35: cc:75:6e:20:ff:e5:91:df:31:5d:73:58:2a:6a:38:3d:86:d1: f3:cc:52:36:a9:12:9d:67:38:4b:14:23:a0:28:45:80:85:6e: 17:3b:fb:36:6b:f9:bc:55:82:15:00:7d:13:d4:4c:d9:d0:9a: 40:ec:d4:a2:0a:49:23:0b:b4:90:46:cf:3c:46:5d:8e:97:4d: d3:8c:45:26:76:a2:9d:2e:cf:d7:7c:04:5b:56:59:16:d9:09: 17:62:9d:8d:6d:b2:07:fb:37:3e:97:d3:e8:b2:e7:99:b8:94: db:af:b6:21:b2:2b:29:44:27:f1:ec:60:1d:5a:b6:3b:48:6d: 84:47:78:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKDNBN0EzN0ZCQkE0OUM0NjlBREFCNTI2NjQ1NkM5QTQ1 RjJDRkMxODgwHhcNMjYwNDA1MDIzNjExWhcNMjYwNDEyMDIzNjExWjAYMRYwFAYD VQQDEw02OWQxY2E5Yy0yOWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtszGAe4xEPP04zrO8CQHHC8iGg49TMWHALKho6jmmt5lyGHw+q2xDodRXq1P laB0hARNJYNTTcxMR1UJUlTlKtiXMY511uoHgQyfARLXoieDb/JxwKjY71mrlarx u0kE2G+C7PYGI+CNB4aGM2NUKFP+vRjRKcSvoA6Xx2ND00LoKlOgTZNaXeidO+6M GTB3tGNVfQHXDhIMjab1YW2OxouKCyYK9xo1z9DlGfagR2tMCcW3SHV2YN00MNhZ 4YQ282mxOunu49MoWuU39pifKKU/E20pcgt8ZV/2qvFRD/YKT8r3RgH/KbBm/M01 ROpjRvHrU2AEFrx1hyrE6P62tQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNH6ipxC GFc1Feoal68aX1qwDcV8MB8GA1UdIwQYMBaAFDp6N/u6ScRpratSZkVsmkXyz8GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhHbXRxMUptUld5YVJmTFB3 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ubzMtN3BKeEdtdHExSm1SV3lhUmZMUHdZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhH bXRxMUptUld5YVJmTFB3WWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADmaWerlaNd9TuSuvG374Wi06MfVdXjqweY9k9No79qkLddbm+0AaBT388e/e maQ9C2dUnxS1tVC4CLK48RVi/4QiO09iWnIfsvgtSfPO6RnZjHrP0N/N85gv+FV5 llKnU2uX/eds4/CuBebzQqQREslUdBL5TBDduvR3ByA1zHVuIP/lkd8xXXNYKmo4 PYbR88xSNqkSnWc4SxQjoChFgIVuFzv7Nmv5vFWCFQB9E9RM2dCaQOzUogpJIwu0 kEbPPEZdjpdN04xFJnainS7P13wEW1ZZFtkJF2KdjW2yB/s3PpfT6LLnmbiU26+2 IbIrKUQn8exgHVq2O0hthEd4Cg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:00 2026 by rpki-client