$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft File: ta3-oXJ8Lu5Diq_TOObW5Reob84.mft (raw, json) Hash identifier: OEAmVbrVkW0Mb6NZLRActgC5Brm0z1yrtnm207Epal0= Subject key identifier: B5:C8:3C:D5:79:D3:D8:FE:2A:45:B6:4C:54:B8:AF:D5:2D:06:4E:FE Authority key identifier: B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE Certificate issuer: /CN=A91FAB3C/serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft Manifest number: 9B Signing time: Thu 21 May 2026 07:29:53 +0000 Manifest this update: Thu 21 May 2026 07:29:52 +0000 Manifest next update: Thu 28 May 2026 07:29:52 +0000 Files and hashes: 1: ta3-oXJ8Lu5Diq_TOObW5Reob84.crl (hash: +C9wc4YkHLRNtAj+l7wlIQWM+hvNLIlf6EYdUgA4FtE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 07:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAB3C, serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE Validity Not Before: May 21 07:29:52 2026 GMT Not After : May 28 07:29:52 2026 GMT Subject: CN=6a0eb470-9cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:f7:7b:3e:51:02:0e:a4:4d:9d:65:1a:34: ef:41:80:58:f6:62:5d:30:82:eb:39:d2:be:92:0d: f1:e3:1e:67:6a:c3:03:ff:63:00:19:cf:2d:5e:95: c6:8d:96:2e:51:26:46:24:56:71:21:ab:f3:1c:60: 57:6b:09:16:00:ca:8b:9b:af:84:39:45:3b:f1:3c: cd:35:20:52:bf:50:21:37:eb:28:f8:df:d0:7a:3e: ef:46:f3:74:3e:0c:be:c6:94:63:43:a5:1a:0c:71: 44:ee:5d:3d:e0:2a:08:6c:a6:0a:45:ad:8a:5c:0f: 0f:4d:19:3f:cd:42:c2:23:84:fc:6c:fb:9e:30:12: 45:9b:ad:32:fe:33:2c:ec:b4:52:38:ce:a6:37:3f: 23:d5:e7:f2:fb:e6:14:9b:dc:b4:1c:a9:b4:90:fa: a6:24:e3:55:96:6d:34:60:d0:a5:d0:5f:3e:e8:b9: 16:c2:cc:92:f2:ee:64:d3:0b:63:82:a2:2a:ee:c3: 77:4d:33:1e:14:85:73:0c:9b:5e:2b:cc:b4:23:ba: 11:ee:26:2d:5a:38:4f:62:9e:69:68:5a:fa:9f:81: 50:d1:72:71:12:c2:93:2a:66:d1:f4:08:49:a5:0a: 3d:b0:01:6e:1d:18:24:bb:61:01:dc:93:68:b4:7c: df:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C8:3C:D5:79:D3:D8:FE:2A:45:B6:4C:54:B8:AF:D5:2D:06:4E:FE X509v3 Authority Key Identifier: keyid:B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:33:b9:f4:88:73:9f:c0:37:5d:c6:0f:8f:1f:0d:e7:3a:77: 82:5f:c7:89:b7:31:4f:db:4d:dd:9b:3e:6e:e8:a2:50:88:42: 7a:fc:f5:b6:14:80:35:4d:01:2c:8a:a7:9a:8a:96:06:91:54: 1c:b8:30:45:2b:16:c6:e3:3b:48:48:a1:86:01:1e:6d:30:84: 37:f7:26:02:3f:b8:cc:9b:4a:27:1a:1f:a8:1d:6f:84:2c:31: 5d:1f:33:1b:2c:9f:a7:d0:6d:c3:b9:63:c2:3b:ac:c4:40:20: 6e:35:5a:68:37:d6:52:57:48:36:1e:2c:e7:5d:ce:8a:27:36: 96:87:40:e4:2a:f8:ce:b7:b9:5b:ad:eb:d1:a8:f5:34:df:aa: f6:9b:a3:cf:a3:b9:60:12:e7:e4:cd:e9:f9:55:62:a4:32:62: 0f:ce:a7:6b:1b:92:36:c0:7a:d3:82:e3:d4:5b:fe:94:5a:db: 56:41:a2:8b:31:c6:56:42:d6:16:cf:2d:24:d9:d0:1f:c0:8f: 10:ca:be:f8:46:00:b3:c5:0d:36:07:9e:b7:6f:39:90:e2:7f: 1b:4c:00:49:2c:a9:14:69:6a:68:1c:b6:65:cd:1c:b7:9b:25: 3e:eb:89:d8:63:4e:e0:64:10:02:65:a6:dd:0d:37:5c:e4:cc: a9:eb:fb:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFCM0MxMTAvBgNVBAUTKEI1QURGRUExNzI3QzJFRUU0MzhBQUZEMzM4RTZENkU1 MTdBODZGQ0UwHhcNMjYwNTIxMDcyOTUyWhcNMjYwNTI4MDcyOTUyWjAYMRYwFAYD VQQDEw02YTBlYjQ3MC05Y2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAug73ez5RAg6kTZ1lGjTvQYBY9mJdMILrOdK+kg3x4x5nasMD/2MAGc8tXpXG jZYuUSZGJFZxIavzHGBXawkWAMqLm6+EOUU78TzNNSBSv1AhN+so+N/Qej7vRvN0 Pgy+xpRjQ6UaDHFE7l094CoIbKYKRa2KXA8PTRk/zULCI4T8bPueMBJFm60y/jMs 7LRSOM6mNz8j1efy++YUm9y0HKm0kPqmJONVlm00YNCl0F8+6LkWwsyS8u5k0wtj gqIq7sN3TTMeFIVzDJteK8y0I7oR7iYtWjhPYp5paFr6n4FQ0XJxEsKTKmbR9AhJ pQo9sAFuHRgku2EB3JNotHzfqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLXIPNV5 09j+KkW2TFS4r9UtBk7+MB8GA1UdIwQYMBaAFLWt/qFyfC7uQ4qv0zjm1uUXqG/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUIzQy9BMjgwNEY2MDY5 NEExMUYwQTc3NDFBNDNDNEY5QUUwMi90YTMtb1hKOEx1NURpcV9UT09iVzVSZW9i ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RhMy1vWEo4THU1RGlxX1RPT2JXNVJlb2I4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUIzQy9BMjgwNEY2MDY5NEExMUYwQTc3NDFBNDNDNEY5QUUwMi90YTMtb1hKOEx1 NURpcV9UT09iVzVSZW9iODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADzO59Ihzn8A3XcYPjx8N5zp3gl/HibcxT9tN3Zs+buiiUIhCevz1thSANU0B LIqnmoqWBpFUHLgwRSsWxuM7SEihhgEebTCEN/cmAj+4zJtKJxofqB1vhCwxXR8z Gyyfp9Btw7ljwjusxEAgbjVaaDfWUldINh4s513Oiic2lodA5Cr4zre5W63r0aj1 NN+q9pujz6O5YBLn5M3p+VVipDJiD86naxuSNsB604Lj1Fv+lFrbVkGiizHGVkLW Fs8tJNnQH8CPEMq++EYAs8UNNgeet285kOJ/G0wASSypFGlqaBy2Zc0ct5slPuuJ 2GNO4GQQAmWm3Q03XOTMqev7RA== -----END CERTIFICATE-----Generated at Thu May 21 10:52:53 2026 by rpki-client