Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
File:                     olaXUSqiZSfOStYazAmhC-08lxk.mft (raw, json)
Hash identifier:          BTltz2i9iiUYf7V6tR/UfGE/+rUnthCQ+lSTzEYW7Xw=
Subject key identifier:   79:02:0F:EA:3B:A8:D3:FF:71:E0:04:EA:67:AD:E0:05:29:A1:E7:49
Authority key identifier: A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19
Certificate issuer:       /CN=A912598D/serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
Manifest number:          83
Signing time:             Wed 29 Jul 2026 09:08:49 +0000
Manifest this update:     Wed 29 Jul 2026 09:08:48 +0000
Manifest next update:     Wed 05 Aug 2026 09:08:48 +0000
Files and hashes:         1: olaXUSqiZSfOStYazAmhC-08lxk.crl (hash: Yx9C+ndBHpFe3gQqiIhPRFiEUTWimzLLjkVAOlXVF+Y=)
                          2: D0870A60C92211F0B4FDBA21C4F9AE02.roa (hash: f9M4eZERDUVlex/pW13JItVAWRs39TWzzBz4G4/5e6M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719
        Validity
            Not Before: Jul 29 09:08:48 2026 GMT
            Not After : Aug  5 09:08:48 2026 GMT
        Subject: CN=6a69c321-44a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:22:0b:6f:06:e7:bb:e8:11:3c:36:9d:89:12:
                    8c:8b:cf:a4:fb:a7:6d:f2:cc:1d:e4:d0:fd:80:84:
                    3f:d0:10:8a:5b:77:a7:67:62:03:7b:90:e8:39:55:
                    b6:02:d1:dd:35:98:fd:fe:88:ce:0a:1a:09:4f:ca:
                    43:ae:72:4b:76:b7:38:df:11:22:57:b3:11:b3:5e:
                    c8:55:20:88:e6:55:f4:d2:d1:c3:9f:6e:74:d2:f5:
                    23:33:41:c7:4b:3d:70:b9:b0:3e:48:62:40:9b:54:
                    97:a8:c8:b5:bc:8e:2d:4a:07:d2:cf:f8:b8:b6:34:
                    d3:ed:73:be:77:f7:12:1e:d9:46:d2:45:46:44:d8:
                    d2:c5:99:3f:41:14:a3:22:81:3d:7d:1f:b4:e5:5f:
                    a0:18:97:42:49:dc:5e:f0:f6:0f:4c:f6:83:35:b4:
                    26:30:65:f3:47:93:85:70:fc:8e:de:75:a2:b9:c8:
                    c3:5f:35:06:ec:ba:b5:13:e0:7b:74:d9:fb:e7:79:
                    77:02:44:91:ff:e2:74:ff:a2:1e:32:8b:18:dc:1d:
                    ea:ea:f8:3f:6a:aa:37:13:6e:fe:82:f0:71:39:2c:
                    e6:fc:9f:89:fa:eb:01:ba:a2:8f:cd:1b:ec:c3:1b:
                    40:2c:62:ca:52:6f:36:cf:e1:b8:f4:f6:68:7c:9c:
                    60:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:02:0F:EA:3B:A8:D3:FF:71:E0:04:EA:67:AD:E0:05:29:A1:E7:49
            X509v3 Authority Key Identifier:
                keyid:A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c9:b5:7e:6d:80:fa:64:68:2e:05:a3:c8:51:87:6a:4a:e6:
         7c:8c:7e:87:b9:f6:d8:06:09:26:39:3d:da:c6:df:e3:d5:66:
         2f:84:c6:79:26:c2:10:34:39:39:cb:d3:bf:f8:0e:14:82:5a:
         79:ac:4d:b3:fd:0f:a7:b5:08:e4:9c:1c:84:c4:a9:67:d4:93:
         58:9e:1f:13:01:72:b6:cf:ba:d3:26:4a:43:47:c1:1f:1c:fd:
         64:de:70:e4:41:31:56:c7:29:ce:71:40:e4:d9:69:30:0d:6a:
         ea:cb:49:f0:85:78:f8:a2:19:4f:06:ad:1a:7c:aa:a8:7d:2b:
         56:b9:7c:30:c4:87:96:e1:3d:3b:f1:33:71:80:4a:c7:da:d7:
         b4:76:41:c5:68:cd:da:30:7d:e2:3a:8e:a4:4c:74:8e:1d:ae:
         ff:20:6c:e0:0d:8a:d8:d2:86:86:75:ff:e8:88:bc:11:97:fa:
         c4:45:06:24:3b:fb:84:f0:83:61:31:8d:55:d5:9f:a0:3f:e2:
         c1:a6:1b:da:be:cb:6f:5f:97:3b:05:28:0d:e1:04:5f:ea:1d:
         95:c0:da:d3:f5:b9:15:af:2c:fb:54:10:cf:57:f0:bd:5d:df:
         ae:24:22:f2:4a:87:8b:7c:a0:7a:95:33:0b:78:d5:45:03:e4:
         f3:d2:b2:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU5OEQxMTAvBgNVBAUTKEEyNTY5NzUxMkFBMjY1MjdDRTRBRDYxQUNDMDlBMTBC
RUQzQzk3MTkwHhcNMjYwNzI5MDkwODQ4WhcNMjYwODA1MDkwODQ4WjAYMRYwFAYD
VQQDEw02YTY5YzMyMS00NGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnCILbwbnu+gRPDadiRKMi8+k+6dt8swd5ND9gIQ/0BCKW3enZ2IDe5DoOVW2
AtHdNZj9/ojOChoJT8pDrnJLdrc43xEiV7MRs17IVSCI5lX00tHDn2500vUjM0HH
Sz1wubA+SGJAm1SXqMi1vI4tSgfSz/i4tjTT7XO+d/cSHtlG0kVGRNjSxZk/QRSj
IoE9fR+05V+gGJdCSdxe8PYPTPaDNbQmMGXzR5OFcPyO3nWiucjDXzUG7Lq1E+B7
dNn753l3AkSR/+J0/6IeMosY3B3q6vg/aqo3E27+gvBxOSzm/J+J+usBuqKPzRvs
wxtALGLKUm82z+G49PZofJxgzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHkCD+o7
qNP/ceAE6met4AUpoedJMB8GA1UdIwQYMBaAFKJWl1EqomUnzkrWGswJoQvtPJcZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTk4RC9FMzlEOEUwQ0M4
RUMxMUYwOEM3OEFCNDVDNEY5QUUwMi9vbGFYVVNxaVpTZk9TdFlhekFtaEMtMDhs
eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL29sYVhVU3FpWlNmT1N0WWF6QW1oQy0wOGx4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTk4RC9FMzlEOEUwQ0M4RUMxMUYwOEM3OEFCNDVDNEY5QUUwMi9vbGFYVVNxaVpT
Zk9TdFlhekFtaEMtMDhseGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaMm1fm2A+mRoLgWjyFGHakrmfIx+h7n22AYJJjk92sbf49VmL4TGeSbCEDQ5
OcvTv/gOFIJaeaxNs/0Pp7UI5JwchMSpZ9STWJ4fEwFyts+60yZKQ0fBHxz9ZN5w
5EExVscpznFA5NlpMA1q6stJ8IV4+KIZTwatGnyqqH0rVrl8MMSHluE9O/EzcYBK
x9rXtHZBxWjN2jB94jqOpEx0jh2u/yBs4A2K2NKGhnX/6Ii8EZf6xEUGJDv7hPCD
YTGNVdWfoD/iwaYb2r7Lb1+XOwUoDeEEX+odlcDa0/W5Fa8s+1QQz1fwvV3friQi
8kqHi3ygepUzC3jVRQPk89KyDQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:05:24 2026 by rpki-client