Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
File:                     olaXUSqiZSfOStYazAmhC-08lxk.mft (raw, json)
Hash identifier:          9xgo8y/dXauxzbgss2YKASWoGgI3tgSMZtdBUXyUpuc=
Subject key identifier:   3E:7F:FB:5E:D0:75:D8:EB:E6:86:69:DC:02:51:17:55:67:CB:AE:4C
Authority key identifier: A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19
Certificate issuer:       /CN=A912598D/serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
Manifest number:          6C
Signing time:             Sat 13 Jun 2026 08:00:21 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:21 +0000
Manifest next update:     Sat 20 Jun 2026 08:00:21 +0000
Files and hashes:         1: olaXUSqiZSfOStYazAmhC-08lxk.crl (hash: vnwX0MF/n6JAg1g/lHVbeAgQixF4UXmeKlA0rJnKMnw=)
                          2: D0870A60C92211F0B4FDBA21C4F9AE02.roa (hash: f9M4eZERDUVlex/pW13JItVAWRs39TWzzBz4G4/5e6M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719
        Validity
            Not Before: Jun 13 08:00:21 2026 GMT
            Not After : Jun 20 08:00:21 2026 GMT
        Subject: CN=6a2d0e15-cc69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:95:07:c7:1c:fd:0d:bc:fe:b5:eb:6e:15:66:
                    90:1e:b8:4d:ef:61:4a:72:f3:20:15:e9:42:c0:24:
                    bb:dd:53:3b:1a:81:2f:12:a5:18:64:80:6d:a3:f3:
                    4c:35:7e:47:be:29:bc:f4:ed:a7:d2:d0:88:b0:ce:
                    93:fa:c1:7d:40:c8:3f:cb:94:cd:11:4f:12:37:98:
                    95:ae:41:98:7a:94:13:b6:09:37:f1:e0:05:69:65:
                    f6:fe:ec:8b:0e:31:a2:de:b7:eb:a9:a3:8d:34:2f:
                    d7:ec:c6:3e:68:54:5f:9c:48:2b:ca:c3:e3:db:93:
                    ab:b6:56:92:06:c0:46:44:2f:ca:e0:5b:0e:60:60:
                    ba:0d:72:09:c6:64:77:be:56:b1:30:b6:06:6b:c0:
                    ab:b2:ee:a6:0b:cf:26:81:56:3b:1b:21:cb:5b:c2:
                    3e:14:02:5a:d5:a4:c3:59:75:c9:55:3f:ee:7c:cb:
                    14:e2:46:19:80:af:7b:16:e2:20:66:7a:61:35:e2:
                    34:f2:98:3c:0f:63:62:8e:3e:11:4e:af:f2:ac:a4:
                    84:7f:98:9f:68:73:f3:c0:6f:ed:14:7c:0f:9d:8a:
                    5a:94:30:f4:35:8d:94:47:d3:a3:61:bb:0f:e2:a4:
                    ad:30:ff:34:d5:ca:aa:f3:f9:eb:54:d2:06:b1:11:
                    29:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7F:FB:5E:D0:75:D8:EB:E6:86:69:DC:02:51:17:55:67:CB:AE:4C
            X509v3 Authority Key Identifier:
                keyid:A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:88:ea:13:ef:bb:17:72:0f:a1:9f:3e:b9:28:d9:0d:76:bb:
         4f:b0:2a:4d:f8:d5:97:9a:25:36:04:01:9c:64:94:1a:47:bb:
         b1:a3:79:dd:2a:16:4e:13:f7:dc:34:88:e5:97:9b:fc:c9:0e:
         d3:5f:55:3b:5f:ba:ab:37:3a:96:ab:c4:11:56:38:3a:b9:86:
         44:f2:f0:b7:f2:d6:03:94:c7:aa:45:ee:37:88:eb:b7:3a:19:
         dc:55:d5:97:a8:b6:bc:dd:cd:39:58:f1:75:b1:c7:dc:44:12:
         4c:5f:36:47:d1:1f:52:c1:3d:de:aa:7d:ce:3e:3c:ee:71:2a:
         54:ba:24:35:da:15:a5:69:10:5a:60:15:4f:9b:0c:ef:a0:41:
         28:35:1b:85:2d:40:0f:82:44:6a:cb:7c:02:18:18:31:87:fe:
         53:0c:8d:9d:10:42:6d:6e:3a:37:95:a9:87:7d:08:38:a6:b5:
         09:b9:62:1c:ac:40:6b:20:6b:2f:bb:10:ac:31:5a:2f:df:6b:
         ed:14:75:bc:01:82:63:e4:0a:7d:29:1d:51:3d:d4:68:86:18:
         69:16:2e:b7:3b:40:c5:a9:d5:a3:8a:71:92:93:4b:0a:cc:a4:
         87:a5:62:90:3a:c4:55:69:75:d5:5e:c1:ec:35:c5:57:5e:d6:
         cf:63:ad:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:55:56 2026 by rpki-client