
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
File: ta3-oXJ8Lu5Diq_TOObW5Reob84.mft (raw, json)
Hash identifier: MYnaHlVg/CCuvFBfEqkiikfl0e/WKQZ4EDHnblSOk9I=
Subject key identifier: B3:BC:03:5C:90:64:EE:16:6C:CE:67:B9:2E:61:96:BF:59:C9:FB:3D
Authority key identifier: B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE
Certificate issuer: /CN=A91FAB3C/serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE
Certificate serial: BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
Manifest number: BC
Signing time: Mon 27 Jul 2026 09:08:44 +0000
Manifest this update: Mon 27 Jul 2026 09:08:44 +0000
Manifest next update: Mon 03 Aug 2026 09:08:44 +0000
Files and hashes: 1: ta3-oXJ8Lu5Diq_TOObW5Reob84.crl (hash: 3UOATaDEU97yL9YgU4X4bmjS9n1kn3NsXDh9C4CxAdg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl
rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:08:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAB3C, serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE
Validity
Not Before: Jul 27 09:08:44 2026 GMT
Not After : Aug 3 09:08:44 2026 GMT
Subject: CN=6a67201c-2f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6c:ee:cd:ee:ee:b1:77:c1:51:81:10:34:75:
33:87:7a:6b:3d:61:f7:84:20:0a:9a:99:cf:d0:4e:
ff:62:17:46:4a:45:94:f4:6c:fa:b5:ec:f4:24:ed:
e2:f4:ea:27:32:38:59:3e:dc:27:d4:70:18:dd:5c:
ee:d7:8c:f3:6e:ab:3f:30:38:3e:8e:0c:61:a3:cd:
25:be:7a:18:ec:10:19:47:3c:d9:dd:46:a0:ae:0e:
69:4d:e4:2a:4f:84:a5:75:2c:40:1e:f6:4b:d0:71:
3d:59:b8:4b:58:5a:4b:d4:4a:5f:e4:8b:18:ac:f8:
67:2e:43:8c:dd:6d:7d:20:e8:e4:53:af:6a:37:ed:
b9:5a:5c:86:4d:e8:cc:fd:d8:de:4d:be:8b:f4:db:
e7:cb:8e:8d:45:56:38:1a:17:51:77:dd:0f:6b:1b:
7b:f0:ec:ee:64:9d:ac:ea:74:6e:8a:26:b7:de:8a:
06:da:83:bf:35:c7:3d:84:b6:b1:e5:1a:fc:f1:bf:
01:18:ee:5a:0c:6f:d9:5e:e2:4e:9d:d1:31:5d:fa:
8c:c9:eb:da:e1:62:ab:d3:cb:f0:c6:3a:ca:2e:b2:
8a:0d:f4:86:40:3b:50:72:56:af:29:37:21:a3:6a:
bc:4e:05:2f:c8:62:d9:62:3d:43:40:95:3d:bd:3a:
68:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BC:03:5C:90:64:EE:16:6C:CE:67:B9:2E:61:96:BF:59:C9:FB:3D
X509v3 Authority Key Identifier:
keyid:B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bb:9e:50:4f:da:5d:fb:1d:9b:b6:d8:51:ee:90:6a:0b:f1:
7a:5a:76:3d:4e:44:d6:d4:76:b4:7e:ce:fe:85:61:fe:71:e5:
d8:8c:d2:2f:2c:21:31:93:ef:b6:46:cd:2c:17:42:52:6a:a7:
10:55:a7:97:ce:ad:af:97:42:ef:ab:18:98:03:58:4d:82:2a:
a8:cc:cf:d5:1a:31:17:e2:d3:4d:dc:99:df:99:65:b5:00:dd:
62:d6:41:8c:1d:70:78:c8:96:64:da:eb:60:d6:d8:3d:a8:af:
75:09:96:cc:56:eb:a0:9f:56:87:37:fd:55:3c:37:c5:70:09:
34:fb:80:b4:ab:bb:df:9d:64:3f:3a:6b:e9:aa:80:53:8c:ee:
5b:4c:f8:65:c0:08:6c:8a:9f:13:92:65:6d:39:ca:f6:a6:1c:
a4:57:e6:99:a1:44:e1:a9:cb:b3:d2:0a:8b:fc:f5:f0:23:ba:
aa:02:fd:78:9f:d9:c3:20:9d:8e:4c:a7:3d:7a:f8:d9:8c:06:
24:81:e6:45:45:08:54:ae:5b:09:f2:49:98:10:a7:dd:b1:43:
2c:38:53:f3:bd:d2:ef:08:06:12:1e:6e:d3:1c:dc:1b:51:f3:
e1:41:3a:41:73:0f:14:1b:cf:05:15:4e:65:07:1a:b8:7d:db:
19:1b:0d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:18 2026 by rpki-client