
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
File: ta3-oXJ8Lu5Diq_TOObW5Reob84.mft (raw, json)
Hash identifier: moyIqSyf+UdnlJLGBAbIN/UBUXGG2a2N+YG1zie0FeI=
Subject key identifier: 17:55:BE:A7:E7:F9:46:DF:1A:38:81:6A:35:59:89:7F:A4:B1:75:22
Authority key identifier: B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE
Certificate issuer: /CN=A91FAB3C/serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE
Certificate serial: 71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
Manifest number: 71
Signing time: Sun 01 Mar 2026 09:13:19 +0000
Manifest this update: Sun 01 Mar 2026 09:13:18 +0000
Manifest next update: Sun 08 Mar 2026 09:13:18 +0000
Files and hashes: 1: ta3-oXJ8Lu5Diq_TOObW5Reob84.crl (hash: shfDlt2FhMzPSlbk5tbJdA2OC8y7ZEpkvI6WZm9LyHE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl
rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAB3C, serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE
Validity
Not Before: Mar 1 09:13:18 2026 GMT
Not After : Mar 8 09:13:18 2026 GMT
Subject: CN=69a4032f-ae3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:95:e5:9d:81:67:4b:f9:df:aa:e3:fb:e3:2a:
cb:a0:00:ca:35:ee:0b:36:a0:1a:1a:67:f1:eb:61:
a0:bd:c0:c4:aa:cc:2f:87:05:ab:5d:3e:c7:33:a9:
8e:f9:36:4e:cf:f2:6a:8a:d2:3a:bd:f9:5c:aa:04:
b3:57:a1:6c:ab:a9:e8:04:46:6e:10:64:d3:95:46:
82:63:2e:bb:23:6b:eb:b2:eb:f7:22:9d:4c:e5:8e:
76:0f:da:c7:3e:1e:90:6b:f3:22:71:92:bd:7e:13:
47:7f:71:7b:23:56:e0:62:10:81:28:98:69:81:32:
7c:b7:2b:bc:8c:0a:71:ad:0a:ad:83:9e:d4:41:ef:
62:f2:22:fb:b2:64:8f:d7:86:b1:82:02:70:4d:70:
8e:1a:80:ff:1b:60:6e:ee:29:9b:b8:c5:48:88:53:
93:6e:de:58:da:d4:92:b9:bb:fd:e4:00:7a:6a:30:
a0:3e:08:f7:e3:ab:4d:0d:4b:d7:eb:f3:83:78:8e:
99:91:d7:0a:47:d9:c5:8a:e8:aa:75:ed:40:9e:1c:
f4:0f:9a:fa:00:f3:6c:f3:29:01:87:ef:0b:88:6c:
5f:a0:d1:c6:bc:0a:81:8b:88:e9:cc:6a:ed:bd:0a:
f5:2c:99:d1:fa:cc:55:60:fe:cf:42:72:84:d4:5a:
f2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:55:BE:A7:E7:F9:46:DF:1A:38:81:6A:35:59:89:7F:A4:B1:75:22
X509v3 Authority Key Identifier:
keyid:B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:a4:94:68:f8:08:17:54:1a:2e:a5:34:3c:23:55:45:d3:86:
4f:c8:ae:c4:76:20:67:18:23:0a:a6:c6:8c:7e:76:ca:9c:0e:
1c:e1:dd:ea:96:46:ee:4a:ea:bb:d8:88:4b:33:7c:a7:28:ac:
53:18:ac:a9:af:46:a6:0f:35:7d:c3:01:b0:7f:a2:a5:9d:cb:
47:43:aa:d4:a2:66:52:1a:3e:30:12:46:28:02:87:6b:fb:d7:
fd:c6:36:a8:c5:36:28:a7:65:1f:ae:d0:39:c3:de:98:5f:35:
9a:7f:2b:0b:78:49:b3:3a:fc:ae:4e:4d:0e:e7:a2:97:d5:1d:
fe:2d:e3:41:04:7e:f8:b5:8e:10:df:b5:46:1c:75:81:af:58:
9f:7c:74:c6:52:ca:42:48:31:e9:77:60:47:f9:64:06:e1:93:
4a:0c:54:67:66:1d:f3:53:31:6a:2b:94:8b:6c:76:79:cf:ba:
9f:72:85:93:98:67:05:7d:b9:01:3e:79:0c:0d:fb:a3:b8:db:
40:69:64:90:73:5f:31:d8:2c:6e:5b:68:f6:b5:bd:26:44:22:
a7:49:93:39:c1:47:74:b9:76:3c:4f:4b:9f:7a:40:d7:3e:89:
a1:c4:05:12:0d:d5:10:2b:df:35:57:e0:5b:6e:20:ec:25:42:
8f:b3:a1:48
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
QUIzQzExMC8GA1UEBRMoQjVBREZFQTE3MjdDMkVFRTQzOEFBRkQzMzhFNkQ2RTUx
N0E4NkZDRTAeFw0yNjAzMDEwOTEzMThaFw0yNjAzMDgwOTEzMThaMBgxFjAUBgNV
BAMTDTY5YTQwMzJmLWFlM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDcleWdgWdL+d+q4/vjKsugAMo17gs2oBoaZ/HrYaC9wMSqzC+HBatdPsczqY75
Nk7P8mqK0jq9+VyqBLNXoWyrqegERm4QZNOVRoJjLrsja+uy6/cinUzljnYP2sc+
HpBr8yJxkr1+E0d/cXsjVuBiEIEomGmBMny3K7yMCnGtCq2DntRB72LyIvuyZI/X
hrGCAnBNcI4agP8bYG7uKZu4xUiIU5Nu3lja1JK5u/3kAHpqMKA+CPfjq00NS9fr
84N4jpmR1wpH2cWK6Kp17UCeHPQPmvoA82zzKQGH7wuIbF+g0ca8CoGLiOnMau29
CvUsmdH6zFVg/s9CcoTUWvJXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUF1W+p+f5
Rt8aOIFqNVmJf6SxdSIwHwYDVR0jBBgwFoAUta3+oXJ8Lu5Diq/TOObW5Reob84w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBQjNDL0EyODA0RjYwNjk0
QTExRjBBNzc0MUE0M0M0RjlBRTAyL3RhMy1vWEo4THU1RGlxX1RPT2JXNVJlb2I4
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdGEzLW9YSjhMdTVEaXFfVE9PYlc1UmVvYjg0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB
QjNDL0EyODA0RjYwNjk0QTExRjBBNzc0MUE0M0M0RjlBRTAyL3RhMy1vWEo4THU1
RGlxX1RPT2JXNVJlb2I4NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAppJRo+AgXVBoupTQ8I1VF04ZPyK7EdiBnGCMKpsaMfnbKnA4c4d3qlkbuSuq7
2IhLM3ynKKxTGKypr0amDzV9wwGwf6KlnctHQ6rUomZSGj4wEkYoAodr+9f9xjao
xTYop2UfrtA5w96YXzWafysLeEmzOvyuTk0O56KX1R3+LeNBBH74tY4Q37VGHHWB
r1iffHTGUspCSDHpd2BH+WQG4ZNKDFRnZh3zUzFqK5SLbHZ5z7qfcoWTmGcFfbkB
PnkMDfujuNtAaWSQc18x2CxuW2j2tb0mRCKnSZM5wUd0uXY8T0ufekDXPomhxAUS
DdUQK981V+BbbiDsJUKPs6FI
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:45 2026 by rpki-client