Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
File:                     ta3-oXJ8Lu5Diq_TOObW5Reob84.mft (raw, json)
Hash identifier:          FU9AvdR++JzHoxMPXS9NhXS7kqo1nzlpb41dlYP514k=
Subject key identifier:   DA:76:AC:82:62:F7:5B:B3:16:7B:A7:97:CF:5F:F8:2F:5D:96:9F:0C
Authority key identifier: B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE
Certificate issuer:       /CN=A91FAB3C/serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE
Certificate serial:       BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
Manifest number:          BA
Signing time:             Thu 23 Jul 2026 08:52:10 +0000
Manifest this update:     Thu 23 Jul 2026 08:52:09 +0000
Manifest next update:     Thu 30 Jul 2026 08:52:09 +0000
Files and hashes:         1: ta3-oXJ8Lu5Diq_TOObW5Reob84.crl (hash: Lg9AVI2vEPQcVOSODO1EGClzgPVRohHknIU7DF9B4B4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl
                          rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:52:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAB3C, serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE
        Validity
            Not Before: Jul 23 08:52:09 2026 GMT
            Not After : Jul 30 08:52:09 2026 GMT
        Subject: CN=6a61d639-c33e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9e:85:97:b7:a5:fc:36:9c:c2:1e:0f:1e:bb:
                    58:c4:39:f2:db:41:f0:f7:f0:72:d1:80:e6:29:b6:
                    0b:68:4e:8d:ea:0d:dc:f9:33:e4:3e:9a:c1:b5:f7:
                    f5:d5:e8:8b:38:27:d1:2c:16:60:5b:b7:e6:d5:51:
                    8a:d1:79:be:48:83:ad:a0:75:7d:cb:a3:85:03:0f:
                    67:41:75:2a:ce:e0:ad:ce:db:05:b9:06:ab:4c:1f:
                    3b:34:20:dd:ad:ac:64:5e:8a:a2:c9:2f:96:ce:d2:
                    c2:3d:23:bc:35:af:d6:5e:a5:64:48:0f:42:d3:c6:
                    02:4f:eb:5b:0c:0a:9a:59:2b:c4:e8:30:3e:72:3f:
                    18:f2:fe:f6:8c:d2:43:94:eb:07:9b:96:c8:44:e8:
                    ab:05:da:ff:d7:0d:04:c8:e4:93:75:18:53:57:6c:
                    43:18:8d:79:79:69:6a:55:82:ed:a1:8c:f7:6a:9a:
                    0a:90:b7:e1:68:2c:98:8d:48:23:b5:32:9e:1f:0d:
                    d7:f3:8a:a3:50:31:a7:e5:8b:78:54:aa:81:41:a9:
                    12:b0:38:d6:ba:c2:a6:28:2b:69:cb:29:6e:5d:0a:
                    3e:c4:9a:12:0c:34:52:fa:e8:2e:d0:dc:26:9b:d4:
                    f8:15:97:c8:71:de:fa:61:b2:3f:9b:e6:e7:4f:ee:
                    22:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:76:AC:82:62:F7:5B:B3:16:7B:A7:97:CF:5F:F8:2F:5D:96:9F:0C
            X509v3 Authority Key Identifier:
                keyid:B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:35:c3:06:d9:8b:9b:e2:1e:c7:f2:32:a0:fa:1e:e7:5d:c0:
         42:22:f5:99:83:3f:cd:1a:15:2a:fe:67:35:38:57:52:0b:44:
         e2:5d:30:cb:b7:d1:7d:44:a2:09:0c:15:98:77:46:06:94:be:
         d1:f7:19:10:69:8c:7a:67:5a:0e:60:d2:fb:54:cd:77:6b:ca:
         8a:f5:22:9b:38:3b:c7:61:c5:f9:a2:8c:01:99:33:61:18:d2:
         80:b6:e0:61:9d:66:13:cc:9d:09:0d:dc:9b:b8:9c:1c:f1:f7:
         91:32:0a:93:88:b4:0d:0b:dc:07:03:73:4f:82:e6:2c:4f:87:
         31:f7:73:f1:bf:1f:37:fe:40:42:22:e5:91:dc:75:cc:b0:3b:
         d2:eb:85:00:05:26:2b:32:3c:52:7a:a5:15:ad:22:27:65:ef:
         9e:ce:09:6e:64:7e:85:d4:d0:5d:bc:cb:bd:00:27:2c:25:68:
         a5:3b:5a:6d:84:06:5c:2d:5d:11:79:29:88:74:72:1f:82:8f:
         47:d6:13:b8:5b:f9:c1:06:3f:ff:1f:5c:42:1e:8a:d9:0c:04:
         1b:71:9b:00:9f:fc:34:9f:88:de:e1:f2:ae:b8:f8:ec:55:f4:
         d1:fb:c9:98:af:42:fb:95:9f:90:97:d4:1d:10:af:55:a8:70:
         e2:db:b0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:02 2026 by rpki-client