Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
File:                     ta3-oXJ8Lu5Diq_TOObW5Reob84.mft (raw, json)
Hash identifier:          NaqPK7gf/cP0Czj9rkzqmooR4yZ3TWfcxa3A6kksllU=
Subject key identifier:   3C:03:16:9B:AF:EE:FF:9C:A7:D8:DF:F7:02:A7:17:97:F0:C1:7D:9E
Authority key identifier: B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE
Certificate issuer:       /CN=A91FAB3C/serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
Manifest number:          8A
Signing time:             Fri 17 Apr 2026 07:18:44 +0000
Manifest this update:     Fri 17 Apr 2026 07:18:43 +0000
Manifest next update:     Fri 24 Apr 2026 07:18:43 +0000
Files and hashes:         1: ta3-oXJ8Lu5Diq_TOObW5Reob84.crl (hash: Yios8k6Npu7zIZLoPHwV9hf0OeLaPYxASVmAOTpOozE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl
                          rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAB3C, serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE
        Validity
            Not Before: Apr 17 07:18:43 2026 GMT
            Not After : Apr 24 07:18:43 2026 GMT
        Subject: CN=69e1ded3-9cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c0:3d:fa:b7:c1:46:18:8b:83:cd:c3:e3:a3:
                    6d:44:bd:81:1a:c8:b1:80:26:a7:45:78:30:18:3c:
                    3e:49:2e:40:f8:e4:3e:8b:d0:7f:f3:da:40:41:f4:
                    4d:1c:08:4c:77:d8:e1:17:31:e8:2a:96:1c:26:6c:
                    ed:95:5e:03:b0:1e:a9:72:1c:15:e7:de:27:2c:0b:
                    87:23:91:4c:56:a2:eb:ac:ae:7c:d7:60:ed:01:ea:
                    b7:8b:c5:fa:7d:82:d6:20:71:73:e7:1d:f5:f7:8b:
                    45:fe:1f:6a:38:ad:3f:b7:5e:d5:df:dd:ea:e7:54:
                    1e:d2:88:fc:21:bd:b7:5b:e1:5d:93:1a:ab:10:3b:
                    0a:91:18:1f:55:5a:d2:32:cf:8a:01:d9:23:59:48:
                    c7:5e:36:4d:fd:6e:e0:d4:6a:7a:a9:21:05:06:0a:
                    1d:8c:72:ad:8f:95:5d:8d:0a:bf:c6:b4:3c:7c:03:
                    e1:ef:de:d8:1f:9a:9f:05:63:f8:a4:4d:5a:fa:38:
                    81:d4:93:85:8b:8f:e1:01:62:c0:73:5c:55:71:bc:
                    cd:05:0e:d5:8e:35:e5:6d:cb:59:6c:d7:d3:fe:c8:
                    28:a2:85:4d:32:e1:91:25:49:d2:2f:98:22:57:93:
                    af:f5:35:50:86:2e:70:53:29:bf:17:ad:61:1f:a7:
                    b2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:03:16:9B:AF:EE:FF:9C:A7:D8:DF:F7:02:A7:17:97:F0:C1:7D:9E
            X509v3 Authority Key Identifier:
                keyid:B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:30:84:8a:c3:48:6c:31:a0:c0:1e:46:f7:a2:71:94:5e:21:
         3e:f0:f7:ab:6a:92:09:68:2a:09:8c:a6:04:c7:81:9d:d5:ad:
         2e:e3:94:7a:4f:e4:d0:b8:d8:2b:a8:c8:32:7c:14:ae:05:fd:
         d3:a3:af:de:a6:4b:97:6b:97:f5:71:eb:bb:7d:cf:95:75:12:
         d9:e0:20:d0:5d:db:7f:08:e5:08:39:ee:88:4e:96:26:23:fd:
         f9:d9:10:0b:8c:da:56:cd:aa:18:d7:f3:32:20:b4:81:13:f7:
         66:91:c5:8f:09:13:fa:25:63:9a:96:cb:5f:af:ff:99:54:40:
         28:de:62:a5:a4:1a:10:24:2e:30:a3:2e:c9:83:cb:be:d7:52:
         b4:d4:29:99:71:a7:53:b3:6d:cb:23:6a:ff:31:bd:a5:0f:b9:
         ee:2a:d1:05:64:d1:c8:e1:f9:97:7c:cc:29:7e:dd:f3:17:3a:
         ae:78:42:4b:c5:7a:36:94:ac:c4:b6:ee:6a:90:ea:28:a3:87:
         ef:63:f3:ae:2e:28:88:2f:be:8a:e2:b2:48:a6:99:cf:f6:3a:
         14:3d:91:c6:89:10:61:c3:b4:62:01:9f:37:92:96:1f:fe:ba:
         76:e4:ea:d6:40:65:45:4a:cd:cb:0c:87:18:a4:a8:ed:a2:fb:
         5b:25:1a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:34:31 2026 by rpki-client