$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft File: Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft (raw, json) Hash identifier: 6r55XOcpS+ldUAOHyxwPq4taDXYd3kB3817J38IVug0= Subject key identifier: D9:61:27:66:C5:8E:78:01:DA:43:69:A8:35:F8:AA:3A:8A:24:7D:67 Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 Certificate issuer: /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft Manifest number: 03D1 Signing time: Thu 21 May 2026 02:52:52 +0000 Manifest this update: Thu 21 May 2026 02:52:51 +0000 Manifest next update: Thu 28 May 2026 02:52:51 +0000 Files and hashes: 1: Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl (hash: Oc0drj6iVEI6MwBTsFMceOz4FYP9TlP1rUpCvnyZCLU=) 2: C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa (hash: lDdGjr2xBXdDfbk6ojZCpTh/5gnireZrfjXRJmqAla0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Validity Not Before: May 21 02:52:51 2026 GMT Not After : May 28 02:52:51 2026 GMT Subject: CN=6a0e7383-af07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:66:25:99:bb:97:00:74:9a:37:5f:48:37:2e: 45:f0:85:55:41:77:2b:cb:d0:25:c3:a2:3a:e9:5f: 80:a3:ee:3f:56:0e:23:60:3c:20:2f:f3:4f:41:90: ac:e2:be:46:22:bb:65:3a:9a:90:30:36:f6:63:d7: 83:1e:a8:e5:b5:e2:dd:ec:6c:c5:32:56:46:fe:0a: 7c:a5:77:fc:5c:5f:e8:01:97:4a:1b:0a:8b:54:bc: 8c:0a:44:17:f6:ba:3a:8e:b2:bf:32:ea:8b:ce:1d: ad:4b:51:56:c2:48:4f:34:b4:eb:f3:2b:93:64:02: 47:62:a1:cb:cb:a9:2f:25:2e:78:ef:34:74:48:8f: 39:69:12:92:3c:75:b5:f0:df:f2:f2:f8:ec:28:ea: b9:01:c5:58:d6:6a:2d:e0:cd:89:80:e9:ce:01:d7: c1:c7:d4:a9:4c:55:9e:8e:52:cf:3c:b7:32:14:40: 18:38:1e:eb:bb:61:7a:e4:6c:16:9b:b1:52:11:32: 75:f3:e7:a4:60:d7:e3:4b:79:df:cd:cf:05:44:69: b7:f9:95:11:a7:fc:2e:1c:45:b8:f9:7d:62:c4:dc: 8d:f0:dd:ac:5d:61:18:5d:79:66:49:03:25:90:4a: 16:13:a4:cc:ee:e2:ee:f3:63:82:05:79:7b:95:97: d4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:61:27:66:C5:8E:78:01:DA:43:69:A8:35:F8:AA:3A:8A:24:7D:67 X509v3 Authority Key Identifier: keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:fc:81:7a:dc:7a:c7:28:d3:90:ac:24:ec:01:e8:d3:70:8e: 16:bd:52:cd:69:e2:41:77:86:3a:77:02:0d:be:de:2a:d7:7c: a9:ae:09:7e:eb:44:e6:e0:04:3d:ca:1b:d0:6a:6f:61:4d:ee: ba:3a:6d:f6:8a:c0:68:50:e8:29:dd:63:53:19:d9:0e:a8:36: b5:54:6d:f0:d6:0e:37:6d:ca:a5:48:18:5e:a5:00:3f:3f:55: e6:f0:b1:cc:b7:de:30:8e:f9:57:80:5f:a8:40:a2:95:85:56: 05:b4:a5:20:28:c7:88:54:f9:8d:76:25:20:01:39:bf:81:a2: 7b:84:6d:e6:4c:52:4d:0b:d7:ae:c4:80:a9:15:20:07:79:17: 27:8a:fc:09:b9:f0:38:20:a6:c1:47:47:35:35:d1:a5:d3:6e: 04:72:85:24:f0:d7:ed:cc:59:cc:22:d1:78:7a:7c:2c:be:67: ad:ad:be:f1:98:88:18:f2:ca:fd:51:18:42:6e:c8:1f:21:4a: 16:ae:3e:4e:a1:53:f7:38:b8:2c:56:4f:01:d2:0a:cb:74:5f: d9:41:5e:f1:08:94:80:52:9d:73:c0:3e:30:e4:bb:3b:c9:3f: 32:ff:40:bf:45:a1:f1:a1:d6:a5:67:2a:b9:a6:2d:9b:8b:99: 18:88:aa:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKDNBN0EzN0ZCQkE0OUM0NjlBREFCNTI2NjQ1NkM5QTQ1 RjJDRkMxODgwHhcNMjYwNTIxMDI1MjUxWhcNMjYwNTI4MDI1MjUxWjAYMRYwFAYD VQQDEw02YTBlNzM4My1hZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk2YlmbuXAHSaN19INy5F8IVVQXcry9Alw6I66V+Ao+4/Vg4jYDwgL/NPQZCs 4r5GIrtlOpqQMDb2Y9eDHqjlteLd7GzFMlZG/gp8pXf8XF/oAZdKGwqLVLyMCkQX 9ro6jrK/MuqLzh2tS1FWwkhPNLTr8yuTZAJHYqHLy6kvJS547zR0SI85aRKSPHW1 8N/y8vjsKOq5AcVY1mot4M2JgOnOAdfBx9SpTFWejlLPPLcyFEAYOB7ru2F65GwW m7FSETJ18+ekYNfjS3nfzc8FRGm3+ZURp/wuHEW4+X1ixNyN8N2sXWEYXXlmSQMl kEoWE6TM7uLu82OCBXl7lZfU4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNlhJ2bF jngB2kNpqDX4qjqKJH1nMB8GA1UdIwQYMBaAFDp6N/u6ScRpratSZkVsmkXyz8GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhHbXRxMUptUld5YVJmTFB3 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ubzMtN3BKeEdtdHExSm1SV3lhUmZMUHdZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhH bXRxMUptUld5YVJmTFB3WWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADvyBetx6xyjTkKwk7AHo03COFr1SzWniQXeGOncCDb7eKtd8qa4JfutE5uAE Pcob0GpvYU3uujpt9orAaFDoKd1jUxnZDqg2tVRt8NYON23KpUgYXqUAPz9V5vCx zLfeMI75V4BfqECilYVWBbSlICjHiFT5jXYlIAE5v4Gie4Rt5kxSTQvXrsSAqRUg B3kXJ4r8CbnwOCCmwUdHNTXRpdNuBHKFJPDX7cxZzCLReHp8LL5nra2+8ZiIGPLK /VEYQm7IHyFKFq4+TqFT9zi4LFZPAdIKy3Rf2UFe8QiUgFKdc8A+MOS7O8k/Mv9A v0Wh8aHWpWcquaYtm4uZGIiqlA== -----END CERTIFICATE-----Generated at Thu May 21 11:39:34 2026 by rpki-client