$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft File: Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft (raw, json) Hash identifier: M4WXAYexTwCByFpTNemn49rQYGm34/v2FMc+TyKO3fc= Subject key identifier: 0B:3C:A1:82:A7:A3:3B:1D:AB:24:69:7C:F4:EB:77:1A:0B:04:45:23 Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 Certificate issuer: /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft Manifest number: 037C Signing time: Sun 01 Mar 2026 04:01:07 +0000 Manifest this update: Sun 01 Mar 2026 04:01:07 +0000 Manifest next update: Sun 08 Mar 2026 04:01:07 +0000 Files and hashes: 1: Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl (hash: nRQJcUO+r4uHTf+aBU62lcwIAF53z8WjsYaM3hyUt0k=) 2: C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa (hash: ASLcGOFlsvlbTp70XDJXTvOFiMW1KSwHYScfbVyL818=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Validity Not Before: Mar 1 04:01:07 2026 GMT Not After : Mar 8 04:01:07 2026 GMT Subject: CN=69a3ba03-d764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:79:97:ad:0f:72:98:24:72:5c:c3:bd:f7:1f: 8c:03:d2:11:5d:ff:0b:29:b7:c2:b1:58:84:44:7f: 19:ed:96:4a:81:28:84:81:03:9c:3d:b1:79:7f:9f: b8:41:b1:ee:e5:76:30:db:86:13:5b:d5:b3:90:04: e9:fd:6f:34:b8:f5:1d:a8:88:b2:39:db:ec:98:11: 10:35:51:71:b3:c4:4e:07:47:4a:13:87:d0:a0:76: 48:2d:c2:84:fd:79:e3:dc:b2:a2:eb:bd:80:fb:bc: e3:92:85:ff:e2:9d:2a:6f:ea:10:72:46:d8:61:1f: 15:d6:65:39:f1:6d:a2:17:4c:fe:d2:b3:d8:02:61: 08:a2:eb:90:21:11:8d:a5:44:24:2b:42:e7:de:21: 9b:76:15:b7:dc:71:57:9e:5a:21:91:10:35:47:e9: d1:2b:b1:60:f8:ca:f9:2d:8d:4e:b2:2e:10:4b:63: ee:b0:5e:4f:f1:2d:4d:ef:e0:66:37:2d:a8:fe:f1: 08:c0:9b:e4:d1:0e:53:25:31:2a:0d:9c:b1:d4:d2: cc:94:97:71:60:ce:04:e1:3b:5a:c8:02:c7:52:70: 71:27:4d:1a:ea:a0:cc:a3:94:c1:7c:6a:63:5d:21: dc:66:81:2f:2e:4c:8f:46:c8:1a:66:cc:7d:2f:8e: a9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3C:A1:82:A7:A3:3B:1D:AB:24:69:7C:F4:EB:77:1A:0B:04:45:23 X509v3 Authority Key Identifier: keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:3c:8d:d4:1a:e4:1f:a5:8c:32:da:ac:57:f2:ea:17:d1:4e: 2b:0a:3d:0e:9d:31:5e:99:32:80:17:4e:17:11:d7:b3:4b:9a: 88:bb:96:2a:13:7e:6f:19:4e:cb:41:b6:55:95:df:29:03:f5: ca:d3:34:4e:d6:4b:66:9f:64:7f:21:30:5f:a8:c2:23:a7:67: 8c:57:e9:58:ce:81:74:32:ca:14:11:88:a4:7b:8f:9d:f1:4b: d3:57:df:e8:68:78:59:d9:64:f7:02:cf:13:72:37:e5:d6:e2: d6:e2:dd:d0:04:62:68:2b:82:38:7c:1b:64:15:98:3c:6b:9d: f2:dc:cd:66:e7:54:7e:07:65:47:5b:c9:1c:35:76:f8:de:db: 0f:dc:27:eb:a1:52:af:c5:86:32:f6:8a:d0:08:9b:c1:50:26: 77:bf:c9:14:54:fd:76:f6:a4:ad:b8:65:3f:4b:36:f6:cd:d6: d0:79:74:5e:eb:04:92:66:a5:72:f8:8d:28:58:63:46:26:02: 23:a0:1f:76:e2:8f:45:53:1e:fd:74:ac:84:22:d7:b7:fa:fc: 9e:71:4e:55:82:42:f6:df:9d:12:37:76:c0:78:09:c8:e0:9f: 9b:e1:c0:2b:97:6b:f6:83:0a:4d:5b:a2:e5:09:b0:28:d7:92: b5:40:d5:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKDNBN0EzN0ZCQkE0OUM0NjlBREFCNTI2NjQ1NkM5QTQ1 RjJDRkMxODgwHhcNMjYwMzAxMDQwMTA3WhcNMjYwMzA4MDQwMTA3WjAYMRYwFAYD VQQDDA02OWEzYmEwMy1kNzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHmXrQ9ymCRyXMO99x+MA9IRXf8LKbfCsViERH8Z7ZZKgSiEgQOcPbF5f5+4 QbHu5XYw24YTW9WzkATp/W80uPUdqIiyOdvsmBEQNVFxs8ROB0dKE4fQoHZILcKE /Xnj3LKi672A+7zjkoX/4p0qb+oQckbYYR8V1mU58W2iF0z+0rPYAmEIouuQIRGN pUQkK0Ln3iGbdhW33HFXnlohkRA1R+nRK7Fg+Mr5LY1Osi4QS2PusF5P8S1N7+Bm Ny2o/vEIwJvk0Q5TJTEqDZyx1NLMlJdxYM4E4TtayALHUnBxJ00a6qDMo5TBfGpj XSHcZoEvLkyPRsgaZsx9L46pcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAs8oYKn ozsdqyRpfPTrdxoLBEUjMB8GA1UdIwQYMBaAFDp6N/u6ScRpratSZkVsmkXyz8GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhHbXRxMUptUld5YVJmTFB3 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ubzMtN3BKeEdtdHExSm1SV3lhUmZMUHdZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhH bXRxMUptUld5YVJmTFB3WWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgDyN1BrkH6WMMtqsV/LqF9FOKwo9Dp0xXpkygBdOFxHXs0uaiLuWKhN+bxlO y0G2VZXfKQP1ytM0TtZLZp9kfyEwX6jCI6dnjFfpWM6BdDLKFBGIpHuPnfFL01ff 6Gh4Wdlk9wLPE3I35dbi1uLd0ARiaCuCOHwbZBWYPGud8tzNZudUfgdlR1vJHDV2 +N7bD9wn66FSr8WGMvaK0AibwVAmd7/JFFT9dvakrbhlP0s29s3W0Hl0XusEkmal cviNKFhjRiYCI6AfduKPRVMe/XSshCLXt/r8nnFOVYJC9t+dEjd2wHgJyOCfm+HA K5dr9oMKTVui5QmwKNeStUDVlA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:35:06 2026 by rpki-client