$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft File: ta3-oXJ8Lu5Diq_TOObW5Reob84.mft (raw, json) Hash identifier: lt8g4kfqsJH3c7qZWlmVapAEF6SDq0B98IscMIxGhGg= Subject key identifier: 3F:6F:75:84:17:57:36:03:19:86:53:97:5E:F1:A3:B2:94:FC:4C:FC Authority key identifier: B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE Certificate issuer: /CN=A91FAB3C/serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft Manifest number: 2E Signing time: Sun 19 Oct 2025 11:12:15 +0000 Manifest this update: Sun 19 Oct 2025 11:12:15 +0000 Manifest next update: Sun 26 Oct 2025 11:12:15 +0000 Files and hashes: 1: ta3-oXJ8Lu5Diq_TOObW5Reob84.crl (hash: bD6tMFeWGImqbDVARHrdBZb0X7C1UYjgObuj2QsnWiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAB3C, serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE Validity Not Before: Oct 19 11:12:15 2025 GMT Not After : Oct 26 11:12:15 2025 GMT Subject: CN=68f4c78f-07d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4b:e0:4c:5d:6e:df:33:9f:b7:ac:ef:3e:11: 64:54:c0:f6:5a:49:c0:ce:9a:83:a4:73:53:c3:7c: 2d:fd:66:6b:07:4b:19:ad:6a:3c:09:cc:8e:82:9b: 42:c3:0d:f8:14:68:45:d3:5a:75:bf:dc:d0:33:34: 06:5c:52:81:02:ff:83:71:85:47:a5:3f:28:e4:68: 61:43:08:0f:ab:38:4f:6d:e8:f1:44:9f:9a:b5:e3: 6d:d1:d1:7d:bc:87:14:d7:8d:8e:b5:25:e1:e8:dc: 62:49:37:2a:47:e1:1a:9d:b5:09:b8:9e:13:74:dd: a3:9d:ad:68:62:d9:80:eb:ae:f0:ff:3f:cd:0b:60: 6b:97:77:db:0d:a8:1b:26:ed:48:95:60:da:ed:08: 8a:df:ed:57:a8:64:3d:79:b2:34:94:f5:2c:de:4c: 8b:2f:c0:a6:e9:24:88:13:64:50:d0:ab:14:37:45: 42:8d:c5:b2:ed:74:24:12:ed:61:9f:a4:08:17:8f: 07:33:9e:4e:4d:20:54:94:ba:99:bb:78:bf:23:29: 88:34:74:d2:52:4b:c4:01:12:9d:9e:44:30:c4:d4: 77:c7:bf:2c:31:15:b4:7e:7b:12:9e:fe:19:f7:dc: 48:91:c1:a1:c1:9a:75:46:dc:ed:4d:c6:de:b3:9f: 9d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6F:75:84:17:57:36:03:19:86:53:97:5E:F1:A3:B2:94:FC:4C:FC X509v3 Authority Key Identifier: keyid:B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:80:ab:be:d4:0a:d2:ad:80:0e:4d:34:a5:d2:c2:ad:83:9d: da:2a:2a:ab:1e:af:50:6d:5a:95:b7:7d:43:eb:0d:87:39:47: 61:d2:fc:0d:bb:d5:c9:d3:84:7f:3d:c8:85:e5:89:b2:56:67: d8:2e:9c:d0:0b:0c:fa:97:b0:34:42:d7:6f:91:af:cd:49:23: 6b:16:7a:76:78:22:6d:8f:f6:c7:84:01:fa:bf:9c:16:f1:6a: fd:2d:cb:c7:67:f3:a2:04:c4:9e:2b:69:a8:b6:92:24:ff:ef: af:8b:c1:2d:1b:02:0c:f2:5a:18:de:b3:24:ab:98:55:62:bf: fc:5a:a1:82:94:dd:7a:a1:8f:e1:9d:23:9c:9a:61:fb:30:8a: 22:b4:90:99:19:8a:34:e9:42:f6:d7:fa:f2:37:18:d9:be:17: 60:0b:c4:96:69:94:f0:70:22:57:56:99:58:6d:e3:63:8e:d4: 7a:4f:0f:c1:1c:01:83:37:a7:d2:1b:52:1b:d4:fc:52:eb:19: 1f:5c:85:5b:19:3e:8b:7c:f3:a1:66:9b:b3:8c:f7:91:42:68: 56:c3:ad:d5:94:11:1f:56:58:ff:9c:c5:fa:9d:e6:1e:67:9e: f5:59:85:38:a8:84:c5:81:0f:91:4d:41:2e:8b:f0:da:0d:0d: 4d:76:ad:f8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QUIzQzExMC8GA1UEBRMoQjVBREZFQTE3MjdDMkVFRTQzOEFBRkQzMzhFNkQ2RTUx N0E4NkZDRTAeFw0yNTEwMTkxMTEyMTVaFw0yNTEwMjYxMTEyMTVaMBgxFjAUBgNV BAMTDTY4ZjRjNzhmLTA3ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLS+BMXW7fM5+3rO8+EWRUwPZaScDOmoOkc1PDfC39ZmsHSxmtajwJzI6Cm0LD DfgUaEXTWnW/3NAzNAZcUoEC/4NxhUelPyjkaGFDCA+rOE9t6PFEn5q1423R0X28 hxTXjY61JeHo3GJJNypH4RqdtQm4nhN03aOdrWhi2YDrrvD/P80LYGuXd9sNqBsm 7UiVYNrtCIrf7VeoZD15sjSU9SzeTIsvwKbpJIgTZFDQqxQ3RUKNxbLtdCQS7WGf pAgXjwcznk5NIFSUupm7eL8jKYg0dNJSS8QBEp2eRDDE1HfHvywxFbR+exKe/hn3 3EiRwaHBmnVG3O1Nxt6zn52hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUP291hBdX NgMZhlOXXvGjspT8TPwwHwYDVR0jBBgwFoAUta3+oXJ8Lu5Diq/TOObW5Reob84w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBQjNDL0EyODA0RjYwNjk0 QTExRjBBNzc0MUE0M0M0RjlBRTAyL3RhMy1vWEo4THU1RGlxX1RPT2JXNVJlb2I4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdGEzLW9YSjhMdTVEaXFfVE9PYlc1UmVvYjg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB QjNDL0EyODA0RjYwNjk0QTExRjBBNzc0MUE0M0M0RjlBRTAyL3RhMy1vWEo4THU1 RGlxX1RPT2JXNVJlb2I4NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH6Aq77UCtKtgA5NNKXSwq2DndoqKqser1BtWpW3fUPrDYc5R2HS/A27 1cnThH89yIXlibJWZ9gunNALDPqXsDRC12+Rr81JI2sWenZ4Im2P9seEAfq/nBbx av0ty8dn86IExJ4raai2kiT/76+LwS0bAgzyWhjesySrmFViv/xaoYKU3Xqhj+Gd I5yaYfswiiK0kJkZijTpQvbX+vI3GNm+F2ALxJZplPBwIldWmVht42OO1HpPD8Ec AYM3p9IbUhvU/FLrGR9chVsZPot886Fmm7OM95FCaFbDrdWUER9WWP+cxfqd5h5n nvVZhTiohMWBD5FNQS6L8NoNDU12rfg= -----END CERTIFICATE-----Generated at Mon Oct 20 07:14:37 2025 by rpki-client