$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft File: Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft (raw, json) Hash identifier: 94K9fPjPDPFSE7t1i+gxd65zrVoA0kP8D6W0fDedk8M= Subject key identifier: 55:5B:11:25:7D:21:2F:79:A0:23:93:0E:77:96:CD:48:03:A5:01:1D Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 Certificate issuer: /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft Manifest number: 02A4 Signing time: Sat 09 Aug 2025 03:55:46 +0000 Manifest this update: Sat 09 Aug 2025 03:55:45 +0000 Manifest next update: Sat 16 Aug 2025 03:55:45 +0000 Files and hashes: 1: Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl (hash: SQHu5LdTMrZMBEioCsL7SMHcwqS9OzvnjIsrZZS3WWA=) 2: FC72D9F4DAD711EF92A87E5DC4F9AE02.roa (hash: yGKY9bGf3KO/fBsHJXYZtjw1LcLqxRqFqjzenpN601A=) 3: C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa (hash: DqUd79ywwc0oIGvda4f69OJAvPxHaLz7wHn0gYGYCXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Validity Not Before: Aug 9 03:55:45 2025 GMT Not After : Aug 16 03:55:45 2025 GMT Subject: CN=6896c6c1-2312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:17:f6:24:e6:e2:1e:f5:47:18:48:40:3b:0b: 4b:36:08:f8:1c:dc:bc:0a:a9:48:73:61:f5:70:b3: f3:2d:d6:c3:a0:8a:3d:93:1b:09:d0:d2:ac:85:a0: 83:63:df:8d:76:ca:e2:3a:f7:80:41:15:32:b6:08: 86:0d:85:fa:99:69:60:b6:a1:fd:49:73:05:56:bb: 7a:02:fd:3e:8b:74:55:cd:d3:70:8e:cc:bb:9a:e8: 79:a4:7a:bb:74:86:7f:d6:75:e3:59:99:c5:26:ce: c5:59:31:0a:fb:68:86:78:63:81:b0:1b:89:f3:1c: fb:e1:b8:df:67:2d:48:8f:08:05:d0:21:3a:05:3f: f5:09:d0:8a:98:1c:87:ef:3d:f6:85:64:f1:45:16: 79:b0:93:50:22:fe:2c:90:71:0e:76:64:0b:10:dc: b7:12:f9:d7:11:c0:ef:21:87:10:41:dd:a9:6e:c7: 50:06:be:51:46:02:36:b7:fd:fe:2b:bd:33:75:31: c4:40:c3:77:4f:c2:3a:51:25:6b:f8:7d:15:47:77: ef:c8:e6:cf:d0:e4:46:df:33:1d:17:7a:f7:cd:20: 15:02:05:ea:d9:27:2c:be:58:0c:49:dc:99:14:f2: 37:c8:79:29:bd:92:cc:5a:e3:90:f9:58:8d:04:35: d8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5B:11:25:7D:21:2F:79:A0:23:93:0E:77:96:CD:48:03:A5:01:1D X509v3 Authority Key Identifier: keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:fc:b1:66:f5:ec:31:f3:28:f0:66:b9:21:9f:7a:76:64:2d: bf:fc:26:40:0f:46:15:eb:af:90:df:95:dc:78:ce:bd:94:61: 78:a4:37:cf:78:cc:54:f9:d1:76:12:2b:13:bc:d3:1a:3a:1d: f3:7a:7f:67:f8:06:c0:27:90:33:34:8e:da:cc:83:6b:2c:dc: b3:83:b4:94:f4:4a:82:96:e4:33:0a:09:dd:8e:13:19:3b:c5: 25:93:c9:89:dc:b9:6e:a4:4a:78:bb:e5:65:74:6e:b3:4b:f6: b3:37:c8:bf:27:38:33:87:42:b3:d1:8a:d7:80:16:39:91:4b: ce:95:b9:9c:9f:16:ea:7a:e1:85:f4:8a:60:b2:e7:e7:3b:43: 44:81:e9:bc:2e:d4:56:03:ac:d4:49:43:93:a1:47:85:73:4d: f2:38:88:47:57:bc:d2:cd:00:53:9a:f4:39:77:a6:b6:5c:5c: 62:ae:d6:b8:73:2a:02:c0:ca:8f:9f:bd:b8:67:27:46:62:0e: ee:f2:fe:7e:4d:17:75:2d:a4:50:ae:be:c5:fe:a5:ed:c5:ec: 81:2b:8a:a4:7e:95:be:97:08:f3:76:64:ff:5a:6b:5a:80:0d: b6:cd:7a:f1:00:de:b3:b9:1a:3c:aa:a1:6e:33:9a:44:52:27: f9:53:b8:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKDNBN0EzN0ZCQkE0OUM0NjlBREFCNTI2NjQ1NkM5QTQ1 RjJDRkMxODgwHhcNMjUwODA5MDM1NTQ1WhcNMjUwODE2MDM1NTQ1WjAYMRYwFAYD VQQDEw02ODk2YzZjMS0yMzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxf2JObiHvVHGEhAOwtLNgj4HNy8CqlIc2H1cLPzLdbDoIo9kxsJ0NKshaCD Y9+NdsriOveAQRUytgiGDYX6mWlgtqH9SXMFVrt6Av0+i3RVzdNwjsy7muh5pHq7 dIZ/1nXjWZnFJs7FWTEK+2iGeGOBsBuJ8xz74bjfZy1IjwgF0CE6BT/1CdCKmByH 7z32hWTxRRZ5sJNQIv4skHEOdmQLENy3EvnXEcDvIYcQQd2pbsdQBr5RRgI2t/3+ K70zdTHEQMN3T8I6USVr+H0VR3fvyObP0ORG3zMdF3r3zSAVAgXq2ScsvlgMSdyZ FPI3yHkpvZLMWuOQ+ViNBDXYAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVbESV9 IS95oCOTDneWzUgDpQEdMB8GA1UdIwQYMBaAFDp6N/u6ScRpratSZkVsmkXyz8GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhHbXRxMUptUld5YVJmTFB3 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ubzMtN3BKeEdtdHExSm1SV3lhUmZMUHdZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhH bXRxMUptUld5YVJmTFB3WWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn/LFm9ewx8yjwZrkhn3p2ZC2//CZAD0YV66+Q35XceM69lGF4pDfP eMxU+dF2EisTvNMaOh3zen9n+AbAJ5AzNI7azINrLNyzg7SU9EqCluQzCgndjhMZ O8Ulk8mJ3LlupEp4u+VldG6zS/azN8i/Jzgzh0Kz0YrXgBY5kUvOlbmcnxbqeuGF 9IpgsufnO0NEgem8LtRWA6zUSUOToUeFc03yOIhHV7zSzQBTmvQ5d6a2XFxirta4 cyoCwMqPn724ZydGYg7u8v5+TRd1LaRQrr7F/qXtxeyBK4qkfpW+lwjzdmT/Wmta gA22zXrxAN6zuRo8qqFuM5pEUif5U7gF -----END CERTIFICATE-----Generated at Mon Aug 11 04:26:32 2025 by rpki-client