$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft File: Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft (raw, json) Hash identifier: LQTycmyHhFlvw8eflaQrlP2HFX2gLoZk6l4UGSAupk0= Subject key identifier: BB:25:57:A7:68:E8:52:7A:FC:1E:4C:E7:2E:DA:09:75:93:C3:83:C5 Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 Certificate issuer: /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft Manifest number: 0413 Signing time: Mon 27 Jul 2026 04:00:43 +0000 Manifest this update: Mon 27 Jul 2026 04:00:42 +0000 Manifest next update: Mon 03 Aug 2026 04:00:42 +0000 Files and hashes: 1: Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl (hash: UrE1W8o0DztO/+I09gfwwiExk06Fvl5Qw/8tNZ5fLVU=) 2: C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa (hash: lDdGjr2xBXdDfbk6ojZCpTh/5gnireZrfjXRJmqAla0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Validity Not Before: Jul 27 04:00:42 2026 GMT Not After : Aug 3 04:00:42 2026 GMT Subject: CN=6a66d7eb-4d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:53:8c:5b:f1:d1:38:4e:fe:ce:ee:38:3a:5d: b3:49:e2:f8:c0:c2:95:2b:30:09:0e:93:51:d9:e8: 3c:f0:1e:26:6a:80:d0:79:ee:7d:f6:c7:af:ff:bc: d9:b3:f5:4c:65:88:9a:b1:99:b4:16:fd:0f:a0:03: 0d:c2:35:8e:ee:11:ca:69:c0:ee:62:5f:dc:a7:1a: 73:4e:cd:a7:20:d1:87:f9:16:80:d9:50:b5:b6:a5: 7d:05:3e:55:dd:0b:a7:74:f0:8b:ab:b3:1e:6c:b1: 0f:55:cb:ee:9a:a9:25:f9:31:45:fc:1d:27:e3:ef: ef:34:d7:0d:e0:e4:be:16:3c:13:d8:ee:84:38:4a: 93:70:c7:a1:ab:53:3f:d1:13:f6:d1:6a:fc:16:91: b5:60:92:40:37:6c:9b:55:f5:18:01:f6:40:c7:4f: 7a:5c:bb:88:08:91:ee:b1:90:1a:1e:eb:23:08:be: 94:13:e3:48:25:ad:90:fb:af:49:5c:b3:17:74:0e: 7f:5a:fb:38:3e:f6:a4:4f:b3:6d:11:f8:95:f2:63: eb:89:e2:89:d0:8b:8d:61:87:b7:ac:26:34:8f:eb: 4e:64:ac:aa:01:f6:1f:77:89:fd:e7:b8:f2:23:93: 97:d8:39:b1:2d:4a:1c:af:59:b8:d1:33:bf:c1:0b: 11:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:25:57:A7:68:E8:52:7A:FC:1E:4C:E7:2E:DA:09:75:93:C3:83:C5 X509v3 Authority Key Identifier: keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:f0:8a:87:f7:af:62:52:84:60:5a:9f:ff:59:fa:a1:22:6b: 25:6d:b0:84:6f:07:02:15:fb:76:f3:45:00:6c:cb:da:2d:64: ba:a0:48:9d:f1:32:96:2d:32:d0:ac:2f:9c:e9:e7:48:d7:a0: 47:6d:8e:11:ab:0a:8a:3e:ea:05:78:03:f3:fc:54:72:40:0d: 42:94:92:c0:14:7d:5c:7f:22:46:bb:30:55:fb:05:ab:4c:b5: 40:b6:f2:a5:fd:43:24:7c:79:5d:23:87:a7:44:11:39:73:06: 77:94:b4:0e:c2:1d:2f:54:e0:bb:f1:80:5c:f6:49:13:60:9f: 07:6e:d1:0b:d0:59:f2:34:89:04:b5:21:d1:c6:1a:c6:2c:ba: 3a:5c:83:f4:90:85:ca:13:0e:ac:92:c5:55:65:04:25:7f:53: a4:f3:09:71:00:61:7b:39:bd:8e:54:75:d7:3e:a6:c1:dd:ae: e0:bb:d8:fc:2b:d7:49:82:65:63:5a:94:e9:36:af:0a:cb:18: c6:29:09:d8:c7:12:8d:23:f8:2d:30:df:33:06:b4:82:85:07: e7:d7:98:e8:02:10:25:81:ba:7e:36:9a:1f:5e:71:3b:17:7d: 36:f3:5d:65:97:1f:bc:ff:92:c1:37:b4:01:d4:7c:af:9d:51: a9:af:df:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKDNBN0EzN0ZCQkE0OUM0NjlBREFCNTI2NjQ1NkM5QTQ1 RjJDRkMxODgwHhcNMjYwNzI3MDQwMDQyWhcNMjYwODAzMDQwMDQyWjAYMRYwFAYD VQQDEw02YTY2ZDdlYi00ZDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1OMW/HROE7+zu44Ol2zSeL4wMKVKzAJDpNR2eg88B4maoDQee599sev/7zZ s/VMZYiasZm0Fv0PoAMNwjWO7hHKacDuYl/cpxpzTs2nINGH+RaA2VC1tqV9BT5V 3QundPCLq7MebLEPVcvumqkl+TFF/B0n4+/vNNcN4OS+FjwT2O6EOEqTcMehq1M/ 0RP20Wr8FpG1YJJAN2ybVfUYAfZAx096XLuICJHusZAaHusjCL6UE+NIJa2Q+69J XLMXdA5/Wvs4PvakT7NtEfiV8mPrieKJ0IuNYYe3rCY0j+tOZKyqAfYfd4n957jy I5OX2DmxLUocr1m40TO/wQsRDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLslV6do 6FJ6/B5M5y7aCXWTw4PFMB8GA1UdIwQYMBaAFDp6N/u6ScRpratSZkVsmkXyz8GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhHbXRxMUptUld5YVJmTFB3 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ubzMtN3BKeEdtdHExSm1SV3lhUmZMUHdZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhH bXRxMUptUld5YVJmTFB3WWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkPCKh/evYlKEYFqf/1n6oSJrJW2whG8HAhX7dvNFAGzL2i1kuqBInfEyli0y 0KwvnOnnSNegR22OEasKij7qBXgD8/xUckANQpSSwBR9XH8iRrswVfsFq0y1QLby pf1DJHx5XSOHp0QROXMGd5S0DsIdL1Tgu/GAXPZJE2CfB27RC9BZ8jSJBLUh0cYa xiy6OlyD9JCFyhMOrJLFVWUEJX9TpPMJcQBhezm9jlR11z6mwd2u4LvY/CvXSYJl Y1qU6TavCssYxikJ2McSjSP4LTDfMwa0goUH59eY6AIQJYG6fjaaH15xOxd9NvNd ZZcfvP+SwTe0AdR8r51Rqa/fTQ== -----END CERTIFICATE-----Generated at Tue Jul 28 23:12:31 2026 by rpki-client