$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft File: Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft (raw, json) Hash identifier: rtgwY5bvXiLy2MoDOOGVT5iaik9cs2CW1FJ2Wg80QFw= Subject key identifier: A3:1A:BE:10:C4:AB:B4:CF:8A:43:D5:46:BE:42:11:48:83:20:EE:3D Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 Certificate issuer: /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft Manifest number: 03AF Signing time: Fri 17 Apr 2026 02:45:01 +0000 Manifest this update: Fri 17 Apr 2026 02:45:01 +0000 Manifest next update: Fri 24 Apr 2026 02:45:01 +0000 Files and hashes: 1: Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl (hash: CN66cEVfzR1hjPWSImmKNMiENFSNciYD/2OlB0oE1zk=) 2: C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa (hash: lDdGjr2xBXdDfbk6ojZCpTh/5gnireZrfjXRJmqAla0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Validity Not Before: Apr 17 02:45:01 2026 GMT Not After : Apr 24 02:45:01 2026 GMT Subject: CN=69e19ead-d0f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:04:b6:05:7b:ea:84:8b:55:bd:ae:92:5a:b7: ff:49:13:fe:2e:a3:4e:a1:48:71:75:dd:5c:b6:d5: 64:c2:c2:3b:a3:19:02:ab:6d:fb:15:f3:b5:ab:57: 97:63:60:cf:a9:66:69:23:e1:6b:d3:b3:60:f1:92: 73:b5:b3:1f:67:96:f6:1a:70:22:92:ca:fe:e2:fd: 93:e3:6d:99:f9:fa:a9:9b:3f:11:9c:13:ae:2c:c3: 7d:62:17:03:17:34:3a:9b:b1:04:86:15:71:84:2f: f6:6b:56:29:63:47:e8:9f:f2:a2:b6:1d:82:24:fb: 31:02:05:d2:74:34:e5:3d:a1:e5:3d:be:30:20:6e: 8c:2d:c1:3a:a6:da:3f:6a:64:4d:12:01:7c:27:c3: fc:9e:13:82:85:89:74:37:dc:b3:69:4c:e8:64:72: 78:9b:52:73:13:01:16:bd:02:06:36:80:f4:7f:4e: 8f:e3:5e:cb:1b:9f:9b:91:91:cf:af:53:2e:73:79: 7e:83:cf:13:83:71:a3:11:07:97:48:ca:98:9e:ae: 5a:0d:9d:74:39:03:59:03:01:be:69:9f:8b:22:8e: b7:02:5f:24:11:ec:67:ff:41:ab:0a:dd:66:30:bf: dd:84:a1:d8:69:8c:1a:4a:ea:48:b4:7e:62:71:94: 89:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1A:BE:10:C4:AB:B4:CF:8A:43:D5:46:BE:42:11:48:83:20:EE:3D X509v3 Authority Key Identifier: keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:55:9a:7c:73:53:f6:79:28:69:bd:a0:28:8c:b7:f9:3b:9f: c6:61:14:16:79:3c:bb:d7:50:1d:ba:e3:37:7f:95:fd:fd:7c: 6a:49:4e:8c:94:3c:7c:79:89:86:95:c6:d0:f3:c0:f1:f5:7c: ee:db:89:79:59:32:6c:32:bb:87:5b:08:ea:9e:03:ab:e1:ca: 13:27:d3:91:e9:fd:68:95:71:d6:24:93:14:c0:11:23:28:d2: f8:d4:0f:98:ef:d7:57:8f:4a:3a:2e:10:f7:6e:0f:ec:53:9a: 3e:81:a7:19:1b:42:da:99:50:41:71:9d:2b:90:04:83:13:85: a6:47:d4:b0:26:db:32:b6:37:c7:08:1e:be:0d:a4:70:4d:63: fe:d1:1e:f7:53:97:2b:c6:b1:2a:66:27:d8:62:34:ba:25:37: b6:55:0d:be:ae:4c:28:9b:e3:31:06:61:65:a3:8d:9f:d9:29: e3:03:33:7b:dd:df:37:0e:47:8d:ca:6a:2d:9d:58:e2:0e:05: c8:12:f0:7f:db:ef:5e:e2:45:1d:20:1d:d4:5e:bb:dc:df:e6: c9:a4:00:9c:3b:6f:8b:b1:6b:fc:7a:16:6f:a3:a9:6c:8e:da: e0:55:55:b8:f1:1f:18:f0:3a:3b:8d:70:3d:6a:32:40:07:a1: 10:6f:4b:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKDNBN0EzN0ZCQkE0OUM0NjlBREFCNTI2NjQ1NkM5QTQ1 RjJDRkMxODgwHhcNMjYwNDE3MDI0NTAxWhcNMjYwNDI0MDI0NTAxWjAYMRYwFAYD VQQDEw02OWUxOWVhZC1kMGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQS2BXvqhItVva6SWrf/SRP+LqNOoUhxdd1cttVkwsI7oxkCq237FfO1q1eX Y2DPqWZpI+Fr07Ng8ZJztbMfZ5b2GnAiksr+4v2T422Z+fqpmz8RnBOuLMN9YhcD FzQ6m7EEhhVxhC/2a1YpY0fon/Kith2CJPsxAgXSdDTlPaHlPb4wIG6MLcE6pto/ amRNEgF8J8P8nhOChYl0N9yzaUzoZHJ4m1JzEwEWvQIGNoD0f06P417LG5+bkZHP r1Muc3l+g88Tg3GjEQeXSMqYnq5aDZ10OQNZAwG+aZ+LIo63Al8kEexn/0GrCt1m ML/dhKHYaYwaSupItH5icZSJjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKMavhDE q7TPikPVRr5CEUiDIO49MB8GA1UdIwQYMBaAFDp6N/u6ScRpratSZkVsmkXyz8GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhHbXRxMUptUld5YVJmTFB3 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ubzMtN3BKeEdtdHExSm1SV3lhUmZMUHdZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhH bXRxMUptUld5YVJmTFB3WWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQlWafHNT9nkoab2gKIy3+TufxmEUFnk8u9dQHbrjN3+V/f18aklOjJQ8fHmJ hpXG0PPA8fV87tuJeVkybDK7h1sI6p4Dq+HKEyfTken9aJVx1iSTFMARIyjS+NQP mO/XV49KOi4Q924P7FOaPoGnGRtC2plQQXGdK5AEgxOFpkfUsCbbMrY3xwgevg2k cE1j/tEe91OXK8axKmYn2GI0uiU3tlUNvq5MKJvjMQZhZaONn9kp4wMze93fNw5H jcpqLZ1Y4g4FyBLwf9vvXuJFHSAd1F673N/myaQAnDtvi7Fr/HoWb6OpbI7a4FVV uPEfGPA6O41wPWoyQAehEG9L7w== -----END CERTIFICATE-----Generated at Fri Apr 17 14:08:07 2026 by rpki-client