$ rpki-client -vvvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft File: Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft (raw, json) Hash identifier: bL9mfrw+dneAM3QpWqsS4TxIYeSfMgtMifAUyo3kGSc= Subject key identifier: 66:BA:A1:D1:80:33:ED:53:77:8F:0D:28:82:B1:84:6D:1B:97:E7:43 Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 Certificate issuer: /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft Manifest number: 0451 Signing time: Fri 25 Sep 2026 02:15:48 +0000 Manifest this update: Fri 25 Sep 2026 02:15:47 +0000 Manifest next update: Fri 02 Oct 2026 02:15:47 +0000 Files and hashes: 1: Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl (hash: h1R+Ka8ywRXFY48PTGpCW0DlXk6GUJ+Kn3DSmYQmyM8=) 2: C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa (hash: lDdGjr2xBXdDfbk6ojZCpTh/5gnireZrfjXRJmqAla0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Validity Not Before: Sep 25 02:15:47 2026 GMT Not After : Oct 2 02:15:47 2026 GMT Subject: CN=6ab5d954-8748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:70:46:a2:eb:67:35:74:82:1f:36:38:f3:3b: 97:d2:c7:4c:eb:50:8f:b8:bd:3c:6b:74:1a:c0:bf: 23:0f:57:20:4d:c9:56:5c:f9:2e:66:6d:19:f6:7c: d2:af:1e:28:30:75:f2:d3:8b:b9:33:d5:36:d4:8c: 45:93:a0:c7:57:79:67:45:80:f8:12:ec:bf:2d:1a: b2:98:49:40:8c:0e:db:37:54:df:e4:ca:21:a2:0d: 37:30:85:88:a6:f5:51:1b:ec:a0:44:0a:61:bd:32: 37:94:23:43:40:f4:5e:33:86:71:e7:f3:35:9d:b8: b5:ab:ba:db:4c:fc:cb:86:79:c5:f3:57:de:66:60: 5b:c2:8b:57:74:f7:6c:75:09:d4:07:cc:19:6e:ee: 95:88:d8:d0:4e:25:13:1b:63:37:6f:74:f5:03:5a: 6f:f9:81:f0:33:89:81:00:1d:b7:52:73:55:12:17: eb:52:53:40:dd:e8:33:e5:5e:b3:95:0d:ce:cb:0b: 15:04:f8:a1:fb:5a:21:8e:1b:b5:6c:e9:3c:fe:60: 5e:56:8f:7c:af:76:f6:8a:27:5b:8a:2f:f0:27:b3: b2:2c:e1:1d:cf:30:40:3a:65:de:5e:3b:67:53:4e: 67:90:4e:d6:6f:dd:c1:e2:8e:de:3b:40:ad:74:a5: 77:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BA:A1:D1:80:33:ED:53:77:8F:0D:28:82:B1:84:6D:1B:97:E7:43 X509v3 Authority Key Identifier: keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:47:88:00:37:5c:b7:87:07:03:3f:41:b3:46:97:e8:7a:c3: 71:6a:1f:91:68:51:bc:76:a3:02:0f:52:98:b1:63:77:b0:e2: 80:34:43:f2:7f:94:d0:a3:9d:63:03:00:32:65:03:f0:ad:b3: 5c:1e:e7:a9:9d:93:a2:a3:ee:32:ca:8e:2d:1a:cc:c2:db:81: 77:c4:83:df:77:24:96:44:e6:4e:d4:e3:c1:82:4e:44:39:6f: f8:64:16:f0:cc:48:54:6f:8f:25:e3:b9:7f:6f:df:f7:2a:30: 64:47:2a:1f:e4:b5:6a:16:1e:c1:3a:a8:47:ad:e3:27:ea:5a: 3d:7c:f3:40:9c:da:f1:d8:13:f6:e5:4a:b6:9f:19:ed:0e:2a: 8a:b0:e8:d6:af:b7:d5:2f:2c:29:cd:a9:d9:74:ac:82:82:fa: 0b:e1:9f:cb:25:93:b8:9d:d5:35:c1:0a:fb:8f:74:6e:42:5b: 93:cc:33:b8:26:7a:90:03:0e:54:9e:59:d3:73:52:65:99:49: be:3a:50:7f:14:27:46:af:40:f9:7d:a3:51:c8:68:c6:17:5f: 29:6e:1e:8e:44:16:c6:80:06:76:1d:59:af:dd:10:7a:78:40: 14:93:e2:9d:85:a2:bc:02:7d:19:10:00:04:90:7c:f8:29:4b: d7:8c:3b:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKDNBN0EzN0ZCQkE0OUM0NjlBREFCNTI2NjQ1NkM5QTQ1 RjJDRkMxODgwHhcNMjYwOTI1MDIxNTQ3WhcNMjYxMDAyMDIxNTQ3WjAYMRYwFAYD VQQDEw02YWI1ZDk1NC04NzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8nBGoutnNXSCHzY48zuX0sdM61CPuL08a3QawL8jD1cgTclWXPkuZm0Z9nzS rx4oMHXy04u5M9U21IxFk6DHV3lnRYD4Euy/LRqymElAjA7bN1Tf5Mohog03MIWI pvVRG+ygRAphvTI3lCNDQPReM4Zx5/M1nbi1q7rbTPzLhnnF81feZmBbwotXdPds dQnUB8wZbu6ViNjQTiUTG2M3b3T1A1pv+YHwM4mBAB23UnNVEhfrUlNA3egz5V6z lQ3OywsVBPih+1ohjhu1bOk8/mBeVo98r3b2iidbii/wJ7OyLOEdzzBAOmXeXjtn U05nkE7Wb93B4o7eO0CtdKV3hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGa6odGA M+1Td48NKIKxhG0bl+dDMB8GA1UdIwQYMBaAFDp6N/u6ScRpratSZkVsmkXyz8GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhHbXRxMUptUld5YVJmTFB3 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ubzMtN3BKeEdtdHExSm1SV3lhUmZMUHdZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhH bXRxMUptUld5YVJmTFB3WWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgkeIADdct4cHAz9Bs0aX6HrDcWofkWhRvHajAg9SmLFjd7DigDRD8n+U0KOd YwMAMmUD8K2zXB7nqZ2ToqPuMsqOLRrMwtuBd8SD33cklkTmTtTjwYJORDlv+GQW 8MxIVG+PJeO5f2/f9yowZEcqH+S1ahYewTqoR63jJ+paPXzzQJza8dgT9uVKtp8Z 7Q4qirDo1q+31S8sKc2p2XSsgoL6C+GfyyWTuJ3VNcEK+490bkJbk8wzuCZ6kAMO VJ5Z03NSZZlJvjpQfxQnRq9A+X2jUchoxhdfKW4ejkQWxoAGdh1Zr90QenhAFJPi nYWivAJ9GRAABJB8+ClL14w7DQ== -----END CERTIFICATE-----Generated at Fri Sep 25 08:16:24 2026 by rpki-client