Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
File:                     ta3-oXJ8Lu5Diq_TOObW5Reob84.mft (raw, json)
Hash identifier:          moyIqSyf+UdnlJLGBAbIN/UBUXGG2a2N+YG1zie0FeI=
Subject key identifier:   17:55:BE:A7:E7:F9:46:DF:1A:38:81:6A:35:59:89:7F:A4:B1:75:22
Authority key identifier: B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE
Certificate issuer:       /CN=A91FAB3C/serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
Manifest number:          71
Signing time:             Sun 01 Mar 2026 09:13:19 +0000
Manifest this update:     Sun 01 Mar 2026 09:13:18 +0000
Manifest next update:     Sun 08 Mar 2026 09:13:18 +0000
Files and hashes:         1: ta3-oXJ8Lu5Diq_TOObW5Reob84.crl (hash: shfDlt2FhMzPSlbk5tbJdA2OC8y7ZEpkvI6WZm9LyHE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl
                          rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAB3C, serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE
        Validity
            Not Before: Mar  1 09:13:18 2026 GMT
            Not After : Mar  8 09:13:18 2026 GMT
        Subject: CN=69a4032f-ae3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:95:e5:9d:81:67:4b:f9:df:aa:e3:fb:e3:2a:
                    cb:a0:00:ca:35:ee:0b:36:a0:1a:1a:67:f1:eb:61:
                    a0:bd:c0:c4:aa:cc:2f:87:05:ab:5d:3e:c7:33:a9:
                    8e:f9:36:4e:cf:f2:6a:8a:d2:3a:bd:f9:5c:aa:04:
                    b3:57:a1:6c:ab:a9:e8:04:46:6e:10:64:d3:95:46:
                    82:63:2e:bb:23:6b:eb:b2:eb:f7:22:9d:4c:e5:8e:
                    76:0f:da:c7:3e:1e:90:6b:f3:22:71:92:bd:7e:13:
                    47:7f:71:7b:23:56:e0:62:10:81:28:98:69:81:32:
                    7c:b7:2b:bc:8c:0a:71:ad:0a:ad:83:9e:d4:41:ef:
                    62:f2:22:fb:b2:64:8f:d7:86:b1:82:02:70:4d:70:
                    8e:1a:80:ff:1b:60:6e:ee:29:9b:b8:c5:48:88:53:
                    93:6e:de:58:da:d4:92:b9:bb:fd:e4:00:7a:6a:30:
                    a0:3e:08:f7:e3:ab:4d:0d:4b:d7:eb:f3:83:78:8e:
                    99:91:d7:0a:47:d9:c5:8a:e8:aa:75:ed:40:9e:1c:
                    f4:0f:9a:fa:00:f3:6c:f3:29:01:87:ef:0b:88:6c:
                    5f:a0:d1:c6:bc:0a:81:8b:88:e9:cc:6a:ed:bd:0a:
                    f5:2c:99:d1:fa:cc:55:60:fe:cf:42:72:84:d4:5a:
                    f2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:55:BE:A7:E7:F9:46:DF:1A:38:81:6A:35:59:89:7F:A4:B1:75:22
            X509v3 Authority Key Identifier:
                keyid:B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a4:94:68:f8:08:17:54:1a:2e:a5:34:3c:23:55:45:d3:86:
         4f:c8:ae:c4:76:20:67:18:23:0a:a6:c6:8c:7e:76:ca:9c:0e:
         1c:e1:dd:ea:96:46:ee:4a:ea:bb:d8:88:4b:33:7c:a7:28:ac:
         53:18:ac:a9:af:46:a6:0f:35:7d:c3:01:b0:7f:a2:a5:9d:cb:
         47:43:aa:d4:a2:66:52:1a:3e:30:12:46:28:02:87:6b:fb:d7:
         fd:c6:36:a8:c5:36:28:a7:65:1f:ae:d0:39:c3:de:98:5f:35:
         9a:7f:2b:0b:78:49:b3:3a:fc:ae:4e:4d:0e:e7:a2:97:d5:1d:
         fe:2d:e3:41:04:7e:f8:b5:8e:10:df:b5:46:1c:75:81:af:58:
         9f:7c:74:c6:52:ca:42:48:31:e9:77:60:47:f9:64:06:e1:93:
         4a:0c:54:67:66:1d:f3:53:31:6a:2b:94:8b:6c:76:79:cf:ba:
         9f:72:85:93:98:67:05:7d:b9:01:3e:79:0c:0d:fb:a3:b8:db:
         40:69:64:90:73:5f:31:d8:2c:6e:5b:68:f6:b5:bd:26:44:22:
         a7:49:93:39:c1:47:74:b9:76:3c:4f:4b:9f:7a:40:d7:3e:89:
         a1:c4:05:12:0d:d5:10:2b:df:35:57:e0:5b:6e:20:ec:25:42:
         8f:b3:a1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:45 2026 by rpki-client