Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft
File:                     OLX3py9k7NJYhfi0dYUC4j2oOLs.mft (raw, json)
Hash identifier:          r+8ifiaBIP5N+vy0zyDk+8nb49zKaMeosV7G0/u5zps=
Subject key identifier:   B7:BC:46:A8:91:5B:B4:09:7C:73:71:7D:44:F1:64:B6:C9:8D:83:0E
Authority key identifier: 38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB
Certificate issuer:       /CN=A912C039/serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB
Certificate serial:       0AEE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft
Manifest number:          0AD5
Signing time:             Fri 12 Jun 2026 19:29:38 +0000
Manifest this update:     Fri 12 Jun 2026 19:29:37 +0000
Manifest next update:     Fri 19 Jun 2026 19:29:37 +0000
Files and hashes:         1: OLX3py9k7NJYhfi0dYUC4j2oOLs.crl (hash: uvAyXGxNQX1ISIQ07eg4zYyNOq7ky1a4ZA9CIjczBNI=)
                          2: 2E53CDEC139C11EF8D2CFD84C4F9AE02.roa (hash: K/JHB0kgGnMjgxfsLnjs8wPyOdjkoMvMD7QLqxSgLT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl
                          rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2798 (0xaee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C039, serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB
        Validity
            Not Before: Jun 12 19:29:37 2026 GMT
            Not After : Jun 19 19:29:37 2026 GMT
        Subject: CN=6a2c5e21-e7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:00:92:c1:ac:b9:f1:13:04:ff:f1:fa:9f:d1:
                    75:78:a0:c9:ef:9e:60:4c:71:13:17:0d:aa:3d:6a:
                    f2:6b:36:1b:29:16:66:3c:5b:fe:4e:67:a7:9a:ea:
                    e7:3e:72:60:55:dd:ef:06:9f:d6:bf:99:54:56:6c:
                    a9:24:c4:1e:15:c9:d7:06:ea:c0:9f:12:6e:85:3d:
                    e7:fc:e3:ea:62:55:78:a8:8e:02:7d:9b:c5:3c:f0:
                    4f:aa:46:48:22:a5:08:18:66:2e:7a:60:94:b8:78:
                    04:4d:25:ff:ef:82:bf:03:ac:fe:e1:0e:99:06:27:
                    7c:a2:30:3c:73:32:22:ad:af:71:b9:0a:d0:83:0a:
                    87:54:bb:27:d0:b2:df:d6:5f:12:d2:fd:3f:29:80:
                    fd:42:63:21:0d:3e:9d:d6:3c:38:e1:c6:e6:78:0b:
                    c3:5e:80:01:4d:c2:ba:62:2f:1d:3d:f7:c7:e8:d7:
                    86:da:4d:9a:2b:13:9c:d1:76:0a:63:04:85:d4:20:
                    d8:56:68:40:28:8c:b1:8a:2e:86:f8:05:47:a1:7c:
                    91:a3:20:76:3f:c8:18:19:44:4d:7f:ae:13:aa:86:
                    7c:3e:5f:ff:82:14:64:d7:dd:a8:f9:e4:f7:9e:fc:
                    95:df:f7:e6:5a:5b:2a:40:bb:2c:f7:39:bc:1e:f4:
                    5c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BC:46:A8:91:5B:B4:09:7C:73:71:7D:44:F1:64:B6:C9:8D:83:0E
            X509v3 Authority Key Identifier:
                keyid:38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ec:10:53:2c:c0:06:03:e0:d9:29:bd:70:07:27:54:ca:43:
         cd:ce:6e:a5:7e:92:28:43:8a:0a:57:b8:02:06:ee:70:4c:65:
         7d:67:48:bb:b6:94:88:0d:21:bd:ef:82:9e:ac:cf:8f:49:26:
         c6:00:be:93:e0:72:9e:3f:77:8a:3c:41:47:c7:50:d2:54:17:
         70:4e:3e:33:72:b0:19:be:99:c4:9c:81:c7:4b:07:76:e6:63:
         e7:b9:61:bc:8c:11:40:63:09:d1:84:53:d0:8b:bf:f7:4d:a1:
         59:4a:61:33:f0:81:c0:67:bc:cc:a9:d7:18:56:51:45:2e:aa:
         27:85:70:1e:91:64:b1:b1:db:ef:96:5e:cf:30:87:bd:56:a8:
         12:81:b2:26:38:2d:b1:23:22:96:5c:b2:be:8e:b0:cd:2d:20:
         0b:8f:e8:6a:b7:e5:ce:32:33:a0:72:14:c1:7c:7b:8f:12:f3:
         9e:db:8a:7a:3c:8f:2c:c4:20:9f:cb:b2:ac:6b:6e:0e:e5:4e:
         69:fe:b1:a7:30:11:20:01:b7:6a:75:9c:52:41:26:79:4d:5e:
         16:f9:37:d7:9c:49:bf:62:68:4b:5e:69:35:3b:c6:b0:1d:bf:
         fb:50:5d:cd:cf:bd:86:73:96:8e:53:b8:b2:68:4d:c0:24:4f:
         d9:06:93:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:42 2026 by rpki-client