$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft File: ta3-oXJ8Lu5Diq_TOObW5Reob84.mft (raw, json) Hash identifier: 3tIRxgBLVkEX1ihmM+ZPcsSoWt0ss7ViPiSrRG2iozs= Subject key identifier: 4B:FE:2E:7C:7B:BE:BF:3E:1E:0D:EE:EE:57:E7:3D:30:07:96:D8:6D Authority key identifier: B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE Certificate issuer: /CN=A91FAB3C/serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft Manifest number: 35 Signing time: Mon 03 Nov 2025 07:35:27 +0000 Manifest this update: Mon 03 Nov 2025 07:35:26 +0000 Manifest next update: Mon 10 Nov 2025 07:35:26 +0000 Files and hashes: 1: ta3-oXJ8Lu5Diq_TOObW5Reob84.crl (hash: IEr/VPIXQUnY8vaqO0KuaSynBIikMHYra+YV1I8IbHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAB3C, serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE Validity Not Before: Nov 3 07:35:26 2025 GMT Not After : Nov 10 07:35:26 2025 GMT Subject: CN=69085b3f-476a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c1:24:93:46:0d:af:7f:00:56:e6:27:07:c0: 30:90:fe:4f:7c:8a:24:a8:4b:8c:ef:67:98:e1:ef: ff:7c:7b:a4:bf:09:86:59:a7:0e:97:82:b6:c5:25: 7e:5c:03:dd:92:94:68:95:08:ab:75:34:32:87:75: ab:e2:4c:b0:c2:f7:86:dc:17:61:02:66:fb:58:84: b7:dd:38:be:4c:f0:46:f4:87:5b:04:be:82:e9:43: bf:03:fd:3e:e7:04:12:fa:c6:84:cb:bf:e2:c2:ca: cb:6f:09:87:76:51:2b:98:0e:d3:a8:d5:fc:d9:24: 9f:fb:89:61:fc:c6:a8:32:61:b6:3e:4e:10:f5:5d: be:32:21:0b:32:b6:91:79:7b:ed:4e:fa:44:72:c9: f3:5f:ff:72:34:5a:c6:10:c3:ea:c5:d7:e0:6e:4e: 0d:04:cb:b4:bb:75:03:8e:d4:bb:88:e7:57:b5:28: e8:75:cd:f7:73:65:0c:74:92:60:55:7b:7e:11:da: fc:74:b1:7a:6b:7c:fb:40:35:ab:26:30:44:93:70: d6:7f:8e:69:f2:8d:cb:0f:9e:d4:5f:f5:fa:fe:55: 26:ae:b4:6e:53:0d:88:56:e1:34:68:d1:f0:90:b6: 4c:16:65:f7:b9:34:79:cc:60:98:d9:4f:2b:0d:96: 15:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FE:2E:7C:7B:BE:BF:3E:1E:0D:EE:EE:57:E7:3D:30:07:96:D8:6D X509v3 Authority Key Identifier: keyid:B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:5a:73:42:04:ae:42:c5:1a:74:ff:02:bd:31:24:0a:c4:01: 36:69:b0:8b:0f:c2:bc:5e:32:d6:50:35:d1:02:50:9a:54:fa: c4:43:24:4b:45:76:57:d6:97:1c:4c:f2:f6:65:8f:d4:1c:78: 08:f2:2e:c8:8d:de:98:5f:ad:50:a2:3f:c0:5b:42:40:f6:c8: ea:cc:c2:1a:b3:cf:2a:23:6d:cd:96:a0:37:37:ea:60:47:b5: 48:9a:d9:25:23:c1:96:a1:a8:2f:c8:22:9e:5e:89:3c:c6:bb: 52:11:44:b0:5b:1f:b5:67:98:c6:c4:09:20:e5:7b:ae:6f:ce: f5:dd:da:f4:4c:1d:3d:81:cf:0f:87:e0:dd:93:79:c3:86:2c: a0:7f:d4:04:1e:01:29:a0:81:9d:d2:15:35:dd:82:30:37:9f: b7:aa:5c:f9:55:ec:a5:a0:13:c8:4d:36:41:da:32:c6:98:12: 33:17:84:fe:34:1f:2a:3c:3a:98:c6:e7:26:de:e1:c1:57:1c: 09:b9:fc:3d:56:c7:ae:f6:84:b5:76:8d:f5:b6:b6:af:72:10: 81:c3:cf:b6:c2:a1:0e:e3:8b:7f:df:e8:60:0c:93:bd:fe:18: 09:9e:4c:50:57:a0:8c:a2:2f:df:63:8e:81:9b:9d:16:b2:c7: 24:a2:cc:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QUIzQzExMC8GA1UEBRMoQjVBREZFQTE3MjdDMkVFRTQzOEFBRkQzMzhFNkQ2RTUx N0E4NkZDRTAeFw0yNTExMDMwNzM1MjZaFw0yNTExMTAwNzM1MjZaMBgxFjAUBgNV BAMTDTY5MDg1YjNmLTQ3NmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOwSSTRg2vfwBW5icHwDCQ/k98iiSoS4zvZ5jh7/98e6S/CYZZpw6XgrbFJX5c A92SlGiVCKt1NDKHdaviTLDC94bcF2ECZvtYhLfdOL5M8Eb0h1sEvoLpQ78D/T7n BBL6xoTLv+LCystvCYd2USuYDtOo1fzZJJ/7iWH8xqgyYbY+ThD1Xb4yIQsytpF5 e+1O+kRyyfNf/3I0WsYQw+rF1+BuTg0Ey7S7dQOO1LuI51e1KOh1zfdzZQx0kmBV e34R2vx0sXprfPtANasmMESTcNZ/jmnyjcsPntRf9fr+VSautG5TDYhW4TRo0fCQ tkwWZfe5NHnMYJjZTysNlhU9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS/4ufHu+ vz4eDe7uV+c9MAeW2G0wHwYDVR0jBBgwFoAUta3+oXJ8Lu5Diq/TOObW5Reob84w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBQjNDL0EyODA0RjYwNjk0 QTExRjBBNzc0MUE0M0M0RjlBRTAyL3RhMy1vWEo4THU1RGlxX1RPT2JXNVJlb2I4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdGEzLW9YSjhMdTVEaXFfVE9PYlc1UmVvYjg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB QjNDL0EyODA0RjYwNjk0QTExRjBBNzc0MUE0M0M0RjlBRTAyL3RhMy1vWEo4THU1 RGlxX1RPT2JXNVJlb2I4NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADxac0IErkLFGnT/Ar0xJArEATZpsIsPwrxeMtZQNdECUJpU+sRDJEtF dlfWlxxM8vZlj9QceAjyLsiN3phfrVCiP8BbQkD2yOrMwhqzzyojbc2WoDc36mBH tUia2SUjwZahqC/IIp5eiTzGu1IRRLBbH7VnmMbECSDle65vzvXd2vRMHT2Bzw+H 4N2TecOGLKB/1AQeASmggZ3SFTXdgjA3n7eqXPlV7KWgE8hNNkHaMsaYEjMXhP40 Hyo8OpjG5ybe4cFXHAm5/D1Wx672hLV2jfW2tq9yEIHDz7bCoQ7ji3/f6GAMk73+ GAmeTFBXoIyiL99jjoGbnRayxySizNY= -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:56 2025 by rpki-client