Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
File:                     olvfdj8LpjxJo3ar-W5VUIeehbo.mft (raw, json)
Hash identifier:          krLCwAJP+WLx9LbGAAAIum5gif8SSCxcn5agN/hAua8=
Subject key identifier:   2F:56:D2:7E:38:25:23:6F:F2:CC:52:F2:19:F2:9E:CD:10:D1:3C:A4
Authority key identifier: A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA
Certificate issuer:       /CN=A912C738/serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA
Certificate serial:       0653
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
Manifest number:          0653
Signing time:             Thu 16 Apr 2026 22:34:50 +0000
Manifest this update:     Thu 16 Apr 2026 22:34:50 +0000
Manifest next update:     Thu 23 Apr 2026 22:34:50 +0000
Files and hashes:         1: olvfdj8LpjxJo3ar-W5VUIeehbo.crl (hash: L0OgLw7sq4odcXUa2lIVX7I3YT+sgIhBgjh9o9MLVsY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl
                          rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1619 (0x653)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C738, serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA
        Validity
            Not Before: Apr 16 22:34:50 2026 GMT
            Not After : Apr 23 22:34:50 2026 GMT
        Subject: CN=69e1640a-7452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:20:95:aa:a2:8c:71:ad:f1:44:71:75:29:
                    e1:02:3e:a3:d9:d8:33:bd:7b:40:07:f7:a2:61:de:
                    ec:35:b5:7d:36:89:11:d4:44:76:75:23:d3:06:51:
                    ec:11:e7:1d:42:22:cf:9f:dd:87:15:19:4e:36:5d:
                    41:93:c1:ff:d8:75:2a:d6:1d:6b:cb:5e:f9:92:ed:
                    de:06:ec:38:25:7c:33:fb:4d:b2:1e:76:29:6e:ce:
                    eb:64:b7:d6:f2:08:7b:c0:a2:e6:26:93:23:91:57:
                    36:e4:2d:1c:14:f5:61:e7:ef:f4:20:12:9e:07:f0:
                    4c:4e:e6:2f:67:b5:e8:e2:16:8a:71:97:2d:e1:17:
                    48:bb:d1:39:4b:b8:52:2e:4e:62:e3:7f:19:41:38:
                    cc:39:14:e4:b2:5f:d8:d6:80:95:01:41:5b:a7:c8:
                    1d:b0:a6:a2:13:56:d1:72:dc:ab:2e:a8:f8:a8:d0:
                    16:7b:9b:79:7c:70:0f:56:38:05:21:2b:55:ef:23:
                    59:08:5d:4e:df:94:fb:5a:47:ec:43:cd:ee:78:b4:
                    5e:f3:34:e9:63:0e:c9:63:87:4a:50:ed:01:88:01:
                    85:4f:ed:1b:43:d1:0c:80:0c:0f:36:a5:bc:a8:54:
                    0f:2c:7e:7d:44:87:d6:62:49:83:60:b8:15:59:8b:
                    e3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:56:D2:7E:38:25:23:6F:F2:CC:52:F2:19:F2:9E:CD:10:D1:3C:A4
            X509v3 Authority Key Identifier:
                keyid:A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ba:12:df:d0:d8:fc:d7:39:20:1e:4d:19:66:53:8c:92:f2:
         2e:9d:c7:28:47:c1:ef:e7:8b:8b:bf:a1:98:4c:2d:07:38:22:
         4b:31:dc:fc:f3:40:6a:d3:26:c5:b4:96:ba:8e:23:32:9c:71:
         ac:76:0a:5c:29:74:6d:f3:5b:44:a6:72:b2:c0:7b:1b:a6:6e:
         74:86:65:3c:40:78:92:c3:6d:07:18:5b:d9:06:2a:9b:4a:81:
         ef:8a:73:86:0a:b2:02:8c:6c:f8:e7:84:74:e4:2f:ce:3f:f4:
         9b:dd:5b:8c:b7:f4:16:b2:af:b6:ee:de:6f:f1:79:d5:25:05:
         0a:5f:6c:ba:5c:e7:03:51:63:df:f0:1e:1e:66:f1:b7:cf:47:
         3a:2f:e8:be:47:10:91:48:d1:d2:70:8d:ff:a2:05:03:61:d1:
         b7:5f:b6:82:99:0d:66:1d:00:61:e0:b3:ac:07:72:14:8e:3b:
         5c:10:5b:95:ad:1a:41:11:af:80:4a:c1:2e:76:3b:64:71:13:
         4d:14:5e:1f:08:d2:fc:db:16:bb:36:5a:c9:aa:db:29:f6:fb:
         ee:b5:c7:fe:94:1e:17:56:4a:62:13:1a:95:1d:c1:72:4d:fc:
         f3:a6:54:d9:92:b1:51:81:3d:68:39:55:e8:ca:b1:dd:c5:72:
         ad:6f:a2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:26:19 2026 by rpki-client