$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft File: Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft (raw, json) Hash identifier: Hm0Xt0T4QY5Iwb5K2rQVUDCJaGcTA5u4o53V7lq3Ccc= Subject key identifier: EF:1E:99:AB:0E:D6:6A:DF:CB:AE:0A:BB:21:48:3C:2B:71:AA:28:9C Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 Certificate issuer: /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft Manifest number: 02FA Signing time: Mon 03 Nov 2025 03:06:28 +0000 Manifest this update: Mon 03 Nov 2025 03:06:27 +0000 Manifest next update: Mon 10 Nov 2025 03:06:27 +0000 Files and hashes: 1: Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl (hash: 7oe2kPqu4KEfxC5IThXNJV2jiZvK+gGBZSDaBdLnlTo=) 2: FC72D9F4DAD711EF92A87E5DC4F9AE02.roa (hash: yGKY9bGf3KO/fBsHJXYZtjw1LcLqxRqFqjzenpN601A=) 3: C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa (hash: DqUd79ywwc0oIGvda4f69OJAvPxHaLz7wHn0gYGYCXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188 Validity Not Before: Nov 3 03:06:27 2025 GMT Not After : Nov 10 03:06:27 2025 GMT Subject: CN=69081c33-0ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:17:39:ea:24:cd:93:b5:89:31:bb:49:46:50: fb:16:26:53:f0:d5:f0:fb:9a:0b:a9:06:2e:95:18: 7d:98:46:40:a2:69:46:c4:0e:41:6c:02:86:c8:b0: 3d:24:60:84:99:bd:39:86:18:e7:60:87:e6:5e:68: 92:b3:74:a6:5a:61:74:ae:f4:ba:85:63:37:cf:1b: aa:01:b5:ab:9c:2c:a8:b0:81:80:eb:f5:e2:f4:d9: a0:c9:aa:2e:24:28:f2:a9:44:a3:d1:63:d2:86:ab: 28:29:70:a3:7b:5e:d2:be:de:2c:cb:b5:9d:4e:d4: 00:6c:31:a9:bb:b0:30:15:78:c8:af:c4:b7:59:b8: cd:82:0f:fa:9d:c3:05:11:ec:60:76:1f:34:2c:73: d7:c8:7d:62:22:27:6a:05:81:ba:b4:9e:8d:46:b5: 94:76:d2:ec:c7:00:b0:c2:12:fa:e8:21:82:3c:99: ea:bb:84:82:d1:c4:bb:d8:48:e2:4f:70:fa:71:f0: f6:13:e5:28:29:12:32:d9:df:aa:1a:8e:8c:04:77: c1:da:1c:52:0e:da:24:e5:51:ed:56:eb:5e:65:2d: 81:5e:b4:b6:b9:8b:8f:b6:ea:21:7f:01:23:f8:43: 71:b0:5e:17:ed:01:2a:1b:cc:38:0c:50:6f:66:99: b8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1E:99:AB:0E:D6:6A:DF:CB:AE:0A:BB:21:48:3C:2B:71:AA:28:9C X509v3 Authority Key Identifier: keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:84:41:19:17:21:ed:82:f8:a5:b0:a5:ff:2c:e7:01:f6:97: 68:bc:ca:fc:15:c5:e3:dd:59:eb:bb:ac:65:0d:e0:a4:55:2e: 4a:cf:4e:46:f7:5d:37:64:95:ac:0a:1e:d9:40:53:90:7e:6c: d5:0d:38:5b:54:7e:0e:56:f3:f3:3a:aa:3f:8e:5f:69:0c:47: 0c:ea:47:66:b5:2e:f6:2a:50:12:8d:0a:22:78:66:a8:0b:1e: 72:1c:9e:fe:b6:ed:5e:29:68:38:03:9e:1e:a5:13:5a:18:b7: e9:fe:32:09:7a:55:ab:44:02:79:6b:76:94:a8:f9:e3:fc:05: e2:af:8a:36:94:95:37:09:6c:22:bf:81:59:bc:72:fa:2f:01: 9f:51:26:1c:ab:45:3a:7e:3a:29:ca:58:cd:d0:0f:0b:b1:c4: e0:20:34:5c:7c:e7:2a:87:09:8b:ca:94:0d:24:05:39:21:fa: 5f:ac:09:4f:13:25:e7:c4:56:3b:3e:c4:27:6e:85:c9:93:37: e6:e1:52:6f:a5:8a:5e:ae:11:db:18:d5:da:db:3e:1e:69:8d: 22:41:f6:4b:5e:d8:b5:20:ae:31:e9:43:7f:75:f3:b5:ae:7f: 77:5e:9c:f9:be:e9:3c:a3:bd:cf:78:ec:a9:35:40:a9:a0:eb: 56:21:49:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKDNBN0EzN0ZCQkE0OUM0NjlBREFCNTI2NjQ1NkM5QTQ1 RjJDRkMxODgwHhcNMjUxMTAzMDMwNjI3WhcNMjUxMTEwMDMwNjI3WjAYMRYwFAYD VQQDEw02OTA4MWMzMy0wYWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhc56iTNk7WJMbtJRlD7FiZT8NXw+5oLqQYulRh9mEZAomlGxA5BbAKGyLA9 JGCEmb05hhjnYIfmXmiSs3SmWmF0rvS6hWM3zxuqAbWrnCyosIGA6/Xi9Nmgyaou JCjyqUSj0WPShqsoKXCje17Svt4sy7WdTtQAbDGpu7AwFXjIr8S3WbjNgg/6ncMF Eexgdh80LHPXyH1iIidqBYG6tJ6NRrWUdtLsxwCwwhL66CGCPJnqu4SC0cS72Eji T3D6cfD2E+UoKRIy2d+qGo6MBHfB2hxSDtok5VHtVuteZS2BXrS2uYuPtuohfwEj +ENxsF4X7QEqG8w4DFBvZpm4uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8emasO 1mrfy64KuyFIPCtxqiicMB8GA1UdIwQYMBaAFDp6N/u6ScRpratSZkVsmkXyz8GI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhHbXRxMUptUld5YVJmTFB3 WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ubzMtN3BKeEdtdHExSm1SV3lhUmZMUHdZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi9Pbm8zLTdwSnhH bXRxMUptUld5YVJmTFB3WWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHhEEZFyHtgvilsKX/LOcB9pdovMr8FcXj3Vnru6xlDeCkVS5Kz05G 9103ZJWsCh7ZQFOQfmzVDThbVH4OVvPzOqo/jl9pDEcM6kdmtS72KlASjQoieGao Cx5yHJ7+tu1eKWg4A54epRNaGLfp/jIJelWrRAJ5a3aUqPnj/AXir4o2lJU3CWwi v4FZvHL6LwGfUSYcq0U6fjopyljN0A8LscTgIDRcfOcqhwmLypQNJAU5IfpfrAlP EyXnxFY7PsQnboXJkzfm4VJvpYperhHbGNXa2z4eaY0iQfZLXti1IK4x6UN/dfO1 rn93Xpz5vuk8o73PeOypNUCpoOtWIUkG -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:59 2025 by rpki-client