$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft File: Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft (raw, json) Hash identifier: oMOZHRRACc2tSKcJ7nqxCWsnX3orIgjZwfregr6Tmz0= Subject key identifier: 75:82:A7:21:92:9A:9A:4E:AE:46:A1:79:83:05:44:6A:65:11:C7:DA Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 Certificate issuer: /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft Manifest number: 026A Signing time: Fri 13 Jun 2025 02:52:11 +0000 Manifest this update: Fri 13 Jun 2025 02:52:11 +0000 Manifest next update: Fri 20 Jun 2025 02:52:11 +0000 Files and hashes: 1: Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl (hash: uc0vta5x8KB79YR7y+ApH1OPDGrG+UBXRoqvql3M2/I=) 2: FC72D9F4DAD711EF92A87E5DC4F9AE02.roa (hash: yGKY9bGf3KO/fBsHJXYZtjw1LcLqxRqFqjzenpN601A=) 3: C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa (hash: DqUd79ywwc0oIGvda4f69OJAvPxHaLz7wHn0gYGYCXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Validity Not Before: Jun 13 02:52:11 2025 GMT Not After : Jun 20 02:52:11 2025 GMT Subject: CN=684b925b-757a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c6:7e:11:36:69:0f:39:c7:5c:b5:8c:a2:ce: ab:5c:67:8b:9a:6e:7f:61:4c:2e:47:86:87:25:5a: fe:2b:be:31:7f:71:39:f0:99:b8:33:13:1d:e7:82: c2:e3:c6:5d:df:39:64:83:1c:33:89:0c:c2:41:7a: 56:7d:c0:75:6e:87:50:ba:d4:4d:35:11:77:e0:7c: 3b:98:44:9b:b8:fd:db:be:f9:ff:c5:b1:9c:b4:b4: 36:01:d7:b0:97:b8:9b:ce:d3:b0:a0:8a:78:e8:8f: e0:2d:cf:c1:03:ff:68:0d:2f:98:5f:c5:44:ba:bf: e2:72:9c:f3:b5:d9:e9:54:74:62:e0:b4:7b:c0:4f: 38:ef:70:e1:a8:c3:6d:03:62:cd:56:de:b1:58:37: 23:4a:56:87:47:11:e4:d8:a1:19:ae:c9:a4:b8:3e: bc:8b:90:34:cc:ba:69:44:1c:1d:86:cf:20:55:69: 97:46:96:07:91:21:7b:1f:0c:58:11:f1:19:d5:03: e2:7f:99:0c:04:47:94:f0:f1:63:dd:1e:61:9e:9a: fe:21:13:fc:97:c5:ee:a6:4f:a3:2b:e0:48:9f:06: a9:d1:ed:c8:10:b5:f7:66:a8:e6:1a:34:49:91:79: a1:91:ab:2b:91:73:b9:76:93:d8:54:4a:8a:b3:8b: 61:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:82:A7:21:92:9A:9A:4E:AE:46:A1:79:83:05:44:6A:65:11:C7:DA X509v3 Authority Key Identifier: keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:f6:08:f0:8b:89:f7:b3:c9:c6:e8:6b:d7:80:80:24:1f:11: 37:f4:8f:bb:01:c2:18:23:97:3c:e1:b7:a2:fb:99:96:5e:76: 6b:d4:43:ee:e8:75:c2:0c:c7:d5:58:1a:30:04:2f:0a:61:73: d8:ce:ee:2c:42:f5:32:67:54:be:04:2f:88:5c:5d:f2:70:ff: 05:3f:33:bb:45:81:d7:c8:e8:43:5d:38:21:8b:71:89:fc:57: b2:cc:a7:f0:70:34:5a:71:c6:8c:69:4f:37:4c:1c:ca:ef:37: da:90:cc:ed:07:5b:3d:f0:93:64:bf:be:ab:e8:bd:f2:ac:59: d5:5c:7b:3e:75:df:62:ec:67:00:e9:4f:92:9a:44:33:68:ba: 81:f5:b5:f5:e4:b9:03:e5:84:a0:c0:b5:a5:cb:3e:60:77:a9: 88:e4:46:d9:5a:34:8a:cd:f3:d5:91:f2:6a:4c:85:d4:78:5d: e7:f6:49:33:da:b1:61:34:5e:09:91:31:8f:ab:e8:49:8d:c3: 64:c6:23:7c:22:04:fa:10:ee:51:4c:54:72:af:5a:9b:33:a7: e9:fb:64:87:f2:8d:80:0e:df:f7:6d:b1:94:68:4e:4e:73:55: 42:69:c8:76:d4:95:18:a3:fb:af:de:69:d3:2c:55:0d:cc:91: f2:ac:65:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKDNBN0EzN0ZCQkE0OUM0NjlBREFCNTI2NjQ1NkM5QTQ1 RjJDRkMxODgwHhcNMjUwNjEzMDI1MjExWhcNMjUwNjIwMDI1MjExWjAYMRYwFAYD VQQDEw02ODRiOTI1Yi03NTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsZ+ETZpDznHXLWMos6rXGeLmm5/YUwuR4aHJVr+K74xf3E58Jm4MxMd54LC 48Zd3zlkgxwziQzCQXpWfcB1bodQutRNNRF34Hw7mESbuP3bvvn/xbGctLQ2Adew l7ibztOwoIp46I/gLc/BA/9oDS+YX8VEur/icpzztdnpVHRi4LR7wE8473DhqMNt A2LNVt6xWDcjSlaHRxHk2KEZrsmkuD68i5A0zLppRBwdhs8gVWmXRpYHkSF7HwxY EfEZ1QPif5kMBEeU8PFj3R5hnpr+IRP8l8Xupk+jK+BInwap0e3IELX3ZqjmGjRJ kXmhkasrkXO5dpPYVEqKs4thgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWCpyGS mppOrkaheYMFRGplEcfaMB8GA1UdIwQYMBaAFDp6N/u6ScRpratSZkVsmkXyz8GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhHbXRxMUptUld5YVJmTFB3 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ubzMtN3BKeEdtdHExSm1SV3lhUmZMUHdZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhH bXRxMUptUld5YVJmTFB3WWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDT9gjwi4n3s8nG6GvXgIAkHxE39I+7AcIYI5c84bei+5mWXnZr1EPu 6HXCDMfVWBowBC8KYXPYzu4sQvUyZ1S+BC+IXF3ycP8FPzO7RYHXyOhDXTghi3GJ /FeyzKfwcDRaccaMaU83TBzK7zfakMztB1s98JNkv76r6L3yrFnVXHs+dd9i7GcA 6U+SmkQzaLqB9bX15LkD5YSgwLWlyz5gd6mI5EbZWjSKzfPVkfJqTIXUeF3n9kkz 2rFhNF4JkTGPq+hJjcNkxiN8IgT6EO5RTFRyr1qbM6fp+2SH8o2ADt/3bbGUaE5O c1VCach21JUYo/uv3mnTLFUNzJHyrGWw -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:00 2025 by rpki-client