$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft File: ta3-oXJ8Lu5Diq_TOObW5Reob84.mft (raw, json) Hash identifier: 25HiC+eRqWdBReSJVZnb8VJ8pMsyIJq+uLG14YGNQXY= Subject key identifier: 82:2D:AD:7B:CE:80:87:3A:26:DA:96:9A:4A:B1:36:1B:7C:97:17:A9 Authority key identifier: B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE Certificate issuer: /CN=A91FAB3C/serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft Manifest number: 08 Signing time: Tue 05 Aug 2025 08:52:13 +0000 Manifest this update: Tue 05 Aug 2025 08:52:13 +0000 Manifest next update: Tue 12 Aug 2025 08:52:13 +0000 Files and hashes: 1: ta3-oXJ8Lu5Diq_TOObW5Reob84.crl (hash: NQMs2UDIEY/Bd+fHhcWT+j33O0L9vg9j6aIb6AxUHj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAB3C, serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE Validity Not Before: Aug 5 08:52:13 2025 GMT Not After : Aug 12 08:52:13 2025 GMT Subject: CN=6891c63d-4513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0a:b3:63:19:40:0c:ba:28:b3:04:b0:63:21: b1:14:78:84:b0:63:f4:81:a1:41:d8:3d:6d:fa:e8: 89:18:b2:2d:55:52:60:e5:01:13:05:47:b5:3a:1c: 70:5f:a9:ee:f8:d8:eb:72:26:fa:e7:ac:d1:21:40: 0c:11:e9:60:56:28:b3:22:b6:ca:58:84:50:56:19: b4:12:b6:e2:31:a2:92:a1:1b:1b:31:af:7b:1b:94: c9:35:b6:1b:78:71:95:72:be:dc:14:fe:97:03:9c: 9a:ef:83:87:b6:6c:0e:b7:8c:c8:ca:00:61:4c:b9: 7a:79:be:97:e8:f4:3a:b2:39:66:de:f8:a8:ea:17: 93:2c:1a:2b:11:ea:bd:02:63:4d:bc:33:dd:e0:65: cc:99:b6:2b:6f:e2:df:7b:c1:7a:1b:28:98:36:31: b0:7c:3a:7c:fd:21:c6:b1:91:e7:7e:f9:81:10:5c: 96:65:a3:5e:75:c3:b6:ed:9b:ae:6a:4c:09:c5:4d: bc:94:15:44:7b:93:f2:ad:51:18:5e:78:e9:b1:06: fc:f7:c4:83:0d:37:8b:c7:b9:48:70:8d:d3:64:ad: 8d:37:6d:65:e2:65:d8:9d:36:94:01:b0:06:a8:04: 46:38:61:fe:5c:8c:b1:21:30:6c:f5:66:8b:cf:f2: 01:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2D:AD:7B:CE:80:87:3A:26:DA:96:9A:4A:B1:36:1B:7C:97:17:A9 X509v3 Authority Key Identifier: keyid:B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:55:4d:fe:65:92:b5:26:bd:a1:5b:94:84:a6:3f:c9:7c:dd: 68:27:c4:f3:a9:2a:70:d7:19:50:0a:ea:e6:10:31:51:7e:ee: 34:39:b7:47:4c:0b:de:41:f9:23:02:b3:02:b1:30:0e:84:90: 6f:d8:81:35:3c:0b:a4:43:7f:24:bc:bb:aa:5d:57:ca:c5:e5: c0:a6:c9:d8:6a:9b:40:ca:96:5d:db:81:61:53:8c:e2:98:18: 13:e2:4e:57:89:f8:62:5d:33:05:35:eb:7a:1d:64:96:72:03: 41:2b:2c:0b:d3:70:f8:80:67:08:28:55:de:c6:5e:8b:cd:81: 8b:8d:51:0c:07:7e:da:1e:3f:c3:2c:93:fb:fc:af:7d:22:c3: d8:e3:3e:99:1b:d5:d5:a0:8d:ac:7e:5b:a2:ff:6c:89:7b:f3: ae:0b:b6:d2:08:a1:e3:c1:bb:82:f5:2a:c1:ed:31:03:85:66: ea:40:08:1b:6d:61:0a:6a:b9:e4:4e:9c:ee:84:55:41:9a:d1: 52:32:97:a8:04:39:00:12:da:2d:17:27:c6:34:9a:da:af:46: dc:50:2f:de:57:2b:8a:3a:26:20:40:92:40:29:c1:c1:b1:c8: 30:9a:89:f4:53:73:ab:0c:0f:6b:8b:11:f2:c0:b1:17:dc:43: 9d:cd:f3:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QUIzQzExMC8GA1UEBRMoQjVBREZFQTE3MjdDMkVFRTQzOEFBRkQzMzhFNkQ2RTUx N0E4NkZDRTAeFw0yNTA4MDUwODUyMTNaFw0yNTA4MTIwODUyMTNaMBgxFjAUBgNV BAMTDTY4OTFjNjNkLTQ1MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7CrNjGUAMuiizBLBjIbEUeISwY/SBoUHYPW366IkYsi1VUmDlARMFR7U6HHBf qe742OtyJvrnrNEhQAwR6WBWKLMitspYhFBWGbQStuIxopKhGxsxr3sblMk1tht4 cZVyvtwU/pcDnJrvg4e2bA63jMjKAGFMuXp5vpfo9DqyOWbe+KjqF5MsGisR6r0C Y028M93gZcyZtitv4t97wXobKJg2MbB8Onz9Icaxked++YEQXJZlo151w7btm65q TAnFTbyUFUR7k/KtURheeOmxBvz3xIMNN4vHuUhwjdNkrY03bWXiZdidNpQBsAao BEY4Yf5cjLEhMGz1ZovP8gFNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgi2te86A hzom2paaSrE2G3yXF6kwHwYDVR0jBBgwFoAUta3+oXJ8Lu5Diq/TOObW5Reob84w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBQjNDL0EyODA0RjYwNjk0 QTExRjBBNzc0MUE0M0M0RjlBRTAyL3RhMy1vWEo4THU1RGlxX1RPT2JXNVJlb2I4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdGEzLW9YSjhMdTVEaXFfVE9PYlc1UmVvYjg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB QjNDL0EyODA0RjYwNjk0QTExRjBBNzc0MUE0M0M0RjlBRTAyL3RhMy1vWEo4THU1 RGlxX1RPT2JXNVJlb2I4NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB1VTf5lkrUmvaFblISmP8l83WgnxPOpKnDXGVAK6uYQMVF+7jQ5t0dM C95B+SMCswKxMA6EkG/YgTU8C6RDfyS8u6pdV8rF5cCmydhqm0DKll3bgWFTjOKY GBPiTleJ+GJdMwU163odZJZyA0ErLAvTcPiAZwgoVd7GXovNgYuNUQwHftoeP8Ms k/v8r30iw9jjPpkb1dWgjax+W6L/bIl7864LttIIoePBu4L1KsHtMQOFZupACBtt YQpqueROnO6EVUGa0VIyl6gEOQAS2i0XJ8Y0mtqvRtxQL95XK4o6JiBAkkApwcGx yDCaifRTc6sMD2uLEfLAsRfcQ53N864= -----END CERTIFICATE-----Generated at Thu Aug 7 03:27:48 2025 by rpki-client