
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
File: ta3-oXJ8Lu5Diq_TOObW5Reob84.mft (raw, json)
Hash identifier: FU9AvdR++JzHoxMPXS9NhXS7kqo1nzlpb41dlYP514k=
Subject key identifier: DA:76:AC:82:62:F7:5B:B3:16:7B:A7:97:CF:5F:F8:2F:5D:96:9F:0C
Authority key identifier: B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE
Certificate issuer: /CN=A91FAB3C/serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE
Certificate serial: BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
Manifest number: BA
Signing time: Thu 23 Jul 2026 08:52:10 +0000
Manifest this update: Thu 23 Jul 2026 08:52:09 +0000
Manifest next update: Thu 30 Jul 2026 08:52:09 +0000
Files and hashes: 1: ta3-oXJ8Lu5Diq_TOObW5Reob84.crl (hash: Lg9AVI2vEPQcVOSODO1EGClzgPVRohHknIU7DF9B4B4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl
rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:52:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAB3C, serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE
Validity
Not Before: Jul 23 08:52:09 2026 GMT
Not After : Jul 30 08:52:09 2026 GMT
Subject: CN=6a61d639-c33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:85:97:b7:a5:fc:36:9c:c2:1e:0f:1e:bb:
58:c4:39:f2:db:41:f0:f7:f0:72:d1:80:e6:29:b6:
0b:68:4e:8d:ea:0d:dc:f9:33:e4:3e:9a:c1:b5:f7:
f5:d5:e8:8b:38:27:d1:2c:16:60:5b:b7:e6:d5:51:
8a:d1:79:be:48:83:ad:a0:75:7d:cb:a3:85:03:0f:
67:41:75:2a:ce:e0:ad:ce:db:05:b9:06:ab:4c:1f:
3b:34:20:dd:ad:ac:64:5e:8a:a2:c9:2f:96:ce:d2:
c2:3d:23:bc:35:af:d6:5e:a5:64:48:0f:42:d3:c6:
02:4f:eb:5b:0c:0a:9a:59:2b:c4:e8:30:3e:72:3f:
18:f2:fe:f6:8c:d2:43:94:eb:07:9b:96:c8:44:e8:
ab:05:da:ff:d7:0d:04:c8:e4:93:75:18:53:57:6c:
43:18:8d:79:79:69:6a:55:82:ed:a1:8c:f7:6a:9a:
0a:90:b7:e1:68:2c:98:8d:48:23:b5:32:9e:1f:0d:
d7:f3:8a:a3:50:31:a7:e5:8b:78:54:aa:81:41:a9:
12:b0:38:d6:ba:c2:a6:28:2b:69:cb:29:6e:5d:0a:
3e:c4:9a:12:0c:34:52:fa:e8:2e:d0:dc:26:9b:d4:
f8:15:97:c8:71:de:fa:61:b2:3f:9b:e6:e7:4f:ee:
22:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:76:AC:82:62:F7:5B:B3:16:7B:A7:97:CF:5F:F8:2F:5D:96:9F:0C
X509v3 Authority Key Identifier:
keyid:B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:35:c3:06:d9:8b:9b:e2:1e:c7:f2:32:a0:fa:1e:e7:5d:c0:
42:22:f5:99:83:3f:cd:1a:15:2a:fe:67:35:38:57:52:0b:44:
e2:5d:30:cb:b7:d1:7d:44:a2:09:0c:15:98:77:46:06:94:be:
d1:f7:19:10:69:8c:7a:67:5a:0e:60:d2:fb:54:cd:77:6b:ca:
8a:f5:22:9b:38:3b:c7:61:c5:f9:a2:8c:01:99:33:61:18:d2:
80:b6:e0:61:9d:66:13:cc:9d:09:0d:dc:9b:b8:9c:1c:f1:f7:
91:32:0a:93:88:b4:0d:0b:dc:07:03:73:4f:82:e6:2c:4f:87:
31:f7:73:f1:bf:1f:37:fe:40:42:22:e5:91:dc:75:cc:b0:3b:
d2:eb:85:00:05:26:2b:32:3c:52:7a:a5:15:ad:22:27:65:ef:
9e:ce:09:6e:64:7e:85:d4:d0:5d:bc:cb:bd:00:27:2c:25:68:
a5:3b:5a:6d:84:06:5c:2d:5d:11:79:29:88:74:72:1f:82:8f:
47:d6:13:b8:5b:f9:c1:06:3f:ff:1f:5c:42:1e:8a:d9:0c:04:
1b:71:9b:00:9f:fc:34:9f:88:de:e1:f2:ae:b8:f8:ec:55:f4:
d1:fb:c9:98:af:42:fb:95:9f:90:97:d4:1d:10:af:55:a8:70:
e2:db:b0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:02 2026 by rpki-client