Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft
File:                     OLX3py9k7NJYhfi0dYUC4j2oOLs.mft (raw, json)
Hash identifier:          fsylp3ULPw5nTCPPu2iiF53dOFPDQAsUUdJcCbNSTq8=
Subject key identifier:   EA:0A:0C:E2:3D:90:F6:EE:98:CD:B6:2C:33:BB:1A:C4:D6:E8:08:77
Authority key identifier: 38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB
Certificate issuer:       /CN=A912C039/serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB
Certificate serial:       0B2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft
Manifest number:          0B0E
Signing time:             Tue 22 Sep 2026 19:12:37 +0000
Manifest this update:     Tue 22 Sep 2026 19:12:37 +0000
Manifest next update:     Tue 29 Sep 2026 19:12:37 +0000
Files and hashes:         1: OLX3py9k7NJYhfi0dYUC4j2oOLs.crl (hash: bxo3eao40XibatdD/2oND9vVoM4xBIipSkxaRtv63X0=)
                          2: F4299FF895A711F180BC0AEB3D11F970.roa (hash: PmXSjv1wDQDznhKCnpf8rUER23M5yoMgmCPaXPNRsLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl
                          rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 19:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2858 (0xb2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C039, serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB
        Validity
            Not Before: Sep 22 19:12:37 2026 GMT
            Not After : Sep 29 19:12:37 2026 GMT
        Subject: CN=6ab2d325-9825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:95:3b:46:81:b5:aa:b6:f5:0a:f4:3b:bf:47:
                    16:4a:44:e9:5a:d3:b2:09:dd:3e:dd:dd:e3:b1:24:
                    a5:52:24:e7:dd:1e:ac:14:a5:01:5a:98:5d:c2:d1:
                    d7:3f:4d:3c:41:02:ca:f0:b9:6d:6f:c3:04:45:7e:
                    4d:83:fd:73:5a:9d:7c:89:d4:96:54:62:56:05:ec:
                    3f:c7:3b:86:cc:38:ee:db:64:c8:e9:50:12:b2:3d:
                    d7:c8:ea:3f:4f:77:98:e7:92:60:b1:48:dd:b2:fb:
                    8f:ea:74:ab:06:6c:fc:f9:f6:0a:db:19:14:5f:f3:
                    9f:55:63:4e:cc:21:05:74:f1:47:35:03:74:c5:3a:
                    a3:c9:c1:aa:41:56:47:42:e0:84:86:a3:68:26:9a:
                    93:1e:4d:49:08:4a:ce:c1:de:e1:7d:eb:74:0d:60:
                    bf:f5:e7:c7:f0:91:72:b6:8d:fa:26:a4:15:f1:6e:
                    a8:5f:3e:6a:bf:97:54:08:ff:c0:9a:ed:9c:76:e9:
                    b2:a1:97:d2:6a:62:c7:b3:6f:37:73:ca:fe:02:71:
                    96:17:52:e0:8b:15:97:a6:0d:25:6d:36:5c:24:7d:
                    b1:f7:e6:52:27:86:54:71:16:f0:25:f6:84:34:49:
                    3b:e3:f8:18:4d:c5:be:d6:9a:84:4b:ad:24:0b:1f:
                    31:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0A:0C:E2:3D:90:F6:EE:98:CD:B6:2C:33:BB:1A:C4:D6:E8:08:77
            X509v3 Authority Key Identifier:
                keyid:38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:98:33:1c:6f:0e:61:64:bc:0f:15:fb:87:b0:1b:b5:4d:1f:
         ce:44:42:2a:fd:b0:b0:e3:ba:42:e3:24:cf:35:55:f9:c5:96:
         e9:4a:a1:d8:42:7d:eb:5b:d1:f5:9f:97:c3:37:13:b1:3e:78:
         1f:e7:91:b6:5f:7d:46:07:aa:03:bf:f3:85:39:0f:82:49:1a:
         81:89:80:b7:25:b9:10:3b:b1:b2:6e:e4:64:3d:24:7a:76:ef:
         17:19:82:c5:cd:28:51:10:34:0c:26:fb:67:39:f4:2e:b3:72:
         14:c9:34:3f:db:22:13:c3:ee:ed:44:94:03:c9:76:13:e3:75:
         ee:64:bb:b7:26:56:7b:0c:87:44:71:85:c1:81:28:bb:ad:56:
         2a:e4:7f:08:da:77:24:06:6a:dd:e8:b4:b8:29:b9:c9:e3:eb:
         e8:a0:da:c3:20:35:cd:c0:46:b5:3c:4e:47:e7:48:fc:80:ef:
         7a:5e:fb:15:0b:c3:7b:a3:85:da:9d:13:33:03:b9:38:20:a5:
         ad:2e:35:a8:67:7c:f9:bd:cc:25:53:2a:d5:dc:ea:61:03:91:
         08:34:52:c7:67:37:8a:67:cf:68:07:41:9e:6b:eb:45:d0:e5:
         72:32:29:d8:d9:ca:3d:05:28:27:c6:08:25:8b:b4:9f:b3:3e:
         69:9f:06:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:32:29 2026 by rpki-client