Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
File:                     ta3-oXJ8Lu5Diq_TOObW5Reob84.mft (raw, json)
Hash identifier:          j70M5jvkJR9OVtd1zULtjGfGaL7I3SIkEpGC4oHQw+E=
Subject key identifier:   8D:F8:C6:AD:93:9F:F9:02:77:CF:E6:78:CC:29:6F:18:44:DB:9D:EE
Authority key identifier: B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE
Certificate issuer:       /CN=A91FAB3C/serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
Manifest number:          7E
Signing time:             Wed 25 Mar 2026 06:57:01 +0000
Manifest this update:     Wed 25 Mar 2026 06:57:01 +0000
Manifest next update:     Wed 01 Apr 2026 06:57:01 +0000
Files and hashes:         1: ta3-oXJ8Lu5Diq_TOObW5Reob84.crl (hash: 56qvTnkPbIpGl56D6s9FUU304YdrJRCeP0f/p4SIWM8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl
                          rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:57:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAB3C, serialNumber=B5ADFEA1727C2EEE438AAFD338E6D6E517A86FCE
        Validity
            Not Before: Mar 25 06:57:01 2026 GMT
            Not After : Apr  1 06:57:01 2026 GMT
        Subject: CN=69c3873d-1c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5c:0c:d6:72:3b:c4:87:df:64:83:3f:96:a0:
                    39:9c:6c:79:90:11:c7:5a:f2:ba:7d:a2:5b:49:63:
                    27:4d:1d:0d:42:c8:20:24:32:be:93:9a:cc:8f:b7:
                    38:e4:03:77:fa:0f:01:8f:a8:1a:26:16:1d:8f:52:
                    7e:b8:46:01:5d:25:72:8b:dd:dc:f1:42:85:d9:8a:
                    7e:f1:40:5c:16:f6:7d:61:de:ca:a7:3f:af:1c:81:
                    49:b2:1c:5d:18:9e:0a:d1:1b:6c:da:5d:1a:80:f3:
                    06:9c:db:cb:79:a2:c3:c1:5c:3e:f8:f2:51:1a:2a:
                    11:f2:cc:be:51:8e:f8:c4:e5:46:a7:2e:e0:5a:9f:
                    81:f2:d6:cd:7b:77:ec:67:7e:0c:d5:69:21:43:99:
                    ef:33:c1:e4:9f:96:63:d5:f1:3d:e8:70:1e:ec:11:
                    f9:f2:cb:d9:9c:4e:5c:88:06:50:69:2f:c3:d3:f6:
                    2c:6b:a6:33:6d:9e:82:bd:12:80:f4:d8:69:32:7e:
                    5d:23:56:53:68:90:01:1b:55:b4:9c:8a:2e:6d:7a:
                    1c:d3:db:e3:76:8d:7a:42:23:43:f0:f5:e0:da:58:
                    e3:ab:57:80:b2:d8:84:2a:87:16:42:12:35:25:a6:
                    a5:b3:f0:f9:51:83:71:59:71:87:11:fb:76:f7:f4:
                    f8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F8:C6:AD:93:9F:F9:02:77:CF:E6:78:CC:29:6F:18:44:DB:9D:EE
            X509v3 Authority Key Identifier:
                keyid:B5:AD:FE:A1:72:7C:2E:EE:43:8A:AF:D3:38:E6:D6:E5:17:A8:6F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta3-oXJ8Lu5Diq_TOObW5Reob84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/A2804F60694A11F0A7741A43C4F9AE02/ta3-oXJ8Lu5Diq_TOObW5Reob84.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:3d:3a:2e:e7:21:bf:3d:45:65:dc:21:9d:a1:9a:f0:e5:b6:
         83:00:74:86:be:f2:38:3f:36:31:31:d7:ae:bc:6b:6f:ac:d1:
         59:c2:9e:90:cd:65:15:4e:52:e2:06:f9:81:dc:96:4c:94:1b:
         4c:8d:43:81:22:d3:53:e0:a8:aa:cc:a1:4e:95:24:ef:24:a6:
         10:a6:03:17:13:d8:7a:f8:96:35:d8:9c:cb:67:66:69:00:9c:
         fe:1a:9e:8f:7b:14:bb:5b:6c:51:bd:a5:fa:26:05:72:01:6a:
         d7:b1:f5:87:2f:7c:78:ca:c1:45:8d:dd:ba:47:65:48:11:dc:
         a0:12:80:71:0e:87:a3:ca:be:30:f2:b7:90:e4:1d:ab:d3:24:
         a2:59:b8:09:ec:7e:07:65:05:f9:0a:bc:de:3d:a4:a7:e5:2a:
         8d:f2:7b:e9:92:38:6d:a1:f2:20:36:11:f2:bf:c3:60:63:1a:
         1e:48:ca:22:4c:53:d8:36:e5:a4:f1:04:2f:42:26:50:97:82:
         40:90:83:70:e7:e5:d3:b5:c0:db:fb:d0:ec:e6:ab:4f:2b:15:
         3f:ea:18:86:ca:84:48:96:1d:13:9a:eb:98:5b:54:2c:e2:96:
         01:e8:da:0d:40:aa:58:df:ae:f8:4e:32:58:07:d6:c5:f3:9d:
         c2:ff:bc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:29 2026 by rpki-client