$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft File: ta3-oXJ8Lu5Diq_TOObW5Reob84.mft (raw, json) Hash identifier: tZS+wnSiRh2Z3BMQmEbcl01GCPKx6+D6zQ5JBxhneNE= Subject key identifier: 78:42:BC:5C:08:2D:5B:67:07:D0:E1:3A:30:9D:88:D3:0A:34:E6:71 Authority key identifier: B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE Certificate issuer: /CN=A91FAB3C/serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft Manifest number: 11 Signing time: Sat 23 Aug 2025 08:18:28 +0000 Manifest this update: Sat 23 Aug 2025 08:18:28 +0000 Manifest next update: Sat 30 Aug 2025 08:18:28 +0000 Files and hashes: 1: ta3-oXJ8Lu5Diq_TOObW5Reob84.crl (hash: j4t5eekQyPGEajOS0oaXvA48nDWxMW0EESy2YLIc3BI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAB3C, serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE Validity Not Before: Aug 23 08:18:28 2025 GMT Not After : Aug 30 08:18:28 2025 GMT Subject: CN=68a97954-4aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8b:09:b0:eb:13:9c:6b:59:a2:43:f5:de:84: 0c:ec:5d:99:8e:d5:28:03:95:50:a0:60:8d:ca:78: 27:ba:d7:a0:3c:85:02:f1:dc:ef:97:bb:ac:18:c0: 67:51:1d:a2:fc:0e:f4:c2:6a:18:ee:91:2b:24:09: bf:20:e3:9c:51:cc:59:1f:4d:d4:1c:20:10:40:8e: 28:4f:b0:0d:b9:0d:1c:16:e1:4a:e4:93:8e:a5:20: 9c:3a:e1:cb:08:59:bd:da:57:ef:a3:58:48:7c:19: 0a:75:c3:85:9c:19:c0:8b:49:51:0d:11:39:1b:9c: f6:61:7b:10:f8:a0:5f:d9:3a:43:33:ac:7b:ab:d3: e1:3d:80:03:10:ab:5e:97:2e:cd:f9:d7:84:38:3d: 54:2d:f1:6e:0d:e2:de:63:c9:b9:b1:c3:27:d2:5a: e6:03:11:cd:35:b9:16:55:84:94:dd:28:4c:18:d8: 53:30:d6:b2:3a:1b:74:4b:8b:96:79:1c:8f:fc:77: 28:27:5c:b6:d0:0d:71:16:49:55:c5:7b:b5:78:39: 8b:6b:de:bc:7d:ed:f6:98:d4:8d:dc:84:fe:77:e5: 1d:f5:fb:7b:ff:65:73:af:61:82:2d:ed:c7:5e:50: 4d:60:f7:39:73:e6:5a:0b:67:b5:2f:ad:b9:4e:1e: c1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:42:BC:5C:08:2D:5B:67:07:D0:E1:3A:30:9D:88:D3:0A:34:E6:71 X509v3 Authority Key Identifier: keyid:B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:34:5a:06:64:af:cc:55:0b:2c:d3:34:90:7a:a8:57:08:b5: 8d:a9:7a:73:f2:4d:23:0d:1b:df:4a:64:d7:91:91:61:c7:19: 68:61:a1:d6:54:fa:b4:fe:e1:18:8a:14:27:90:b0:5d:12:b2: 83:3a:cf:95:bd:93:2a:39:7e:77:c9:9f:08:02:e9:7e:9f:67: 19:d0:42:00:22:ae:b4:f9:ec:5d:c6:4c:dc:9c:6c:9f:83:81: 55:d4:0d:84:60:61:85:fe:65:c1:bd:3c:9e:eb:52:8c:21:7b: 6f:63:47:5a:32:b9:95:1f:b7:a1:7c:9f:a6:1f:7f:50:d6:13: 6c:d0:71:1f:24:25:16:a0:9d:07:28:8d:dc:80:e3:39:5f:4a: 35:5f:28:09:60:a7:18:22:4e:6f:b9:52:e6:0f:89:77:55:96: 56:37:5e:cb:48:84:df:0d:0a:fa:93:2a:a5:6d:38:72:34:e9: 55:a1:77:59:f0:72:c7:0d:a2:d1:23:98:f7:a0:0c:1c:2e:67: 32:64:82:ad:7b:f1:cc:86:31:0e:a6:2a:d5:db:e8:93:20:07: 4c:0f:1f:ea:ff:54:df:89:5b:36:41:f4:b9:ac:f3:56:4d:39: e8:3c:e5:a2:92:58:a0:30:5c:fb:cc:d1:7e:14:33:ec:a0:ef: fc:8c:56:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QUIzQzExMC8GA1UEBRMoQjVBREZFQTE3MjdDMkVFRTQzOEFBRkQzMzhFNkQ2RTUx N0E4NkZDRTAeFw0yNTA4MjMwODE4MjhaFw0yNTA4MzAwODE4MjhaMBgxFjAUBgNV BAMTDTY4YTk3OTU0LTRhYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgiwmw6xOca1miQ/XehAzsXZmO1SgDlVCgYI3KeCe616A8hQLx3O+Xu6wYwGdR HaL8DvTCahjukSskCb8g45xRzFkfTdQcIBBAjihPsA25DRwW4Urkk46lIJw64csI Wb3aV++jWEh8GQp1w4WcGcCLSVENETkbnPZhexD4oF/ZOkMzrHur0+E9gAMQq16X Ls3514Q4PVQt8W4N4t5jybmxwyfSWuYDEc01uRZVhJTdKEwY2FMw1rI6G3RLi5Z5 HI/8dygnXLbQDXEWSVXFe7V4OYtr3rx97faY1I3chP535R31+3v/ZXOvYYIt7cde UE1g9zlz5loLZ7UvrblOHsHjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeEK8XAgt W2cH0OE6MJ2I0wo05nEwHwYDVR0jBBgwFoAUta3+oXJ8Lu5Diq/TOObW5Reob84w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBQjNDL0EyODA0RjYwNjk0 QTExRjBBNzc0MUE0M0M0RjlBRTAyL3RhMy1vWEo4THU1RGlxX1RPT2JXNVJlb2I4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdGEzLW9YSjhMdTVEaXFfVE9PYlc1UmVvYjg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB QjNDL0EyODA0RjYwNjk0QTExRjBBNzc0MUE0M0M0RjlBRTAyL3RhMy1vWEo4THU1 RGlxX1RPT2JXNVJlb2I4NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALM0WgZkr8xVCyzTNJB6qFcItY2penPyTSMNG99KZNeRkWHHGWhhodZU +rT+4RiKFCeQsF0SsoM6z5W9kyo5fnfJnwgC6X6fZxnQQgAirrT57F3GTNycbJ+D gVXUDYRgYYX+ZcG9PJ7rUowhe29jR1oyuZUft6F8n6Yff1DWE2zQcR8kJRagnQco jdyA4zlfSjVfKAlgpxgiTm+5UuYPiXdVllY3XstIhN8NCvqTKqVtOHI06VWhd1nw cscNotEjmPegDBwuZzJkgq178cyGMQ6mKtXb6JMgB0wPH+r/VN+JWzZB9Lms81ZN Oeg85aKSWKAwXPvM0X4UM+yg7/yMVv8= -----END CERTIFICATE-----Generated at Sat Aug 23 20:16:24 2025 by rpki-client