Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
File:                     olvfdj8LpjxJo3ar-W5VUIeehbo.mft (raw, json)
Hash identifier:          yurRg3Ud/KJFdhZfETuWeoy3bq01o5OIqpE6qSwSHas=
Subject key identifier:   DA:3D:3C:70:3C:88:0F:7C:5A:A1:F9:95:EE:D3:25:22:38:1E:36:3C
Authority key identifier: A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA
Certificate issuer:       /CN=A912C738/serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA
Certificate serial:       06BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
Manifest number:          06BA
Signing time:             Wed 04 Nov 2026 22:39:35 +0000
Manifest this update:     Wed 04 Nov 2026 22:39:35 +0000
Manifest next update:     Wed 11 Nov 2026 22:39:35 +0000
Files and hashes:         1: olvfdj8LpjxJo3ar-W5VUIeehbo.crl (hash: CKNwy/SQNeS3cg0+YqoKcCqJWNTuafYNk1ABelfaS3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl
                          rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 22:39:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1722 (0x6ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C738, serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA
        Validity
            Not Before: Nov  4 22:39:35 2026 GMT
            Not After : Nov 11 22:39:35 2026 GMT
        Subject: CN=6aebb427-84d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:af:25:70:5a:98:89:34:87:45:9c:46:52:f9:
                    ed:71:db:ab:d1:82:4a:23:29:37:a5:1a:15:55:dc:
                    e7:97:8b:88:27:ff:66:59:57:b3:b3:a6:1c:9d:3f:
                    a6:5d:41:15:f7:77:05:bd:a0:6c:5c:7b:77:1e:08:
                    c1:ce:40:f6:60:c8:71:69:94:d7:fe:5d:1e:11:a0:
                    ef:dc:a8:78:9b:ce:32:8c:c6:f1:5a:6e:d1:b1:2e:
                    e4:5b:0f:7c:a5:f7:f1:20:70:c3:8c:c7:54:87:71:
                    39:7c:d8:21:9a:fa:fc:0d:50:2f:15:78:97:4c:1a:
                    d6:ec:85:e4:35:76:c9:7b:14:2c:24:91:ca:4c:19:
                    13:e4:57:6d:be:ef:fa:b0:7c:22:b2:30:a6:d1:ce:
                    4e:a2:52:98:c0:86:7b:9e:e1:40:23:fc:90:b9:f8:
                    e3:f0:5c:cd:ff:93:3f:7c:26:6f:86:53:fb:25:ca:
                    80:f0:00:8e:ae:03:1b:6b:95:33:41:8a:31:92:d9:
                    31:d6:c1:46:5f:94:cc:e4:07:34:ae:58:31:95:57:
                    69:bb:aa:8b:49:31:8e:b4:de:be:bd:51:36:96:29:
                    52:13:fd:b5:2b:fd:e3:74:9d:29:71:5b:c4:39:fb:
                    67:d8:37:5f:d6:49:f3:ad:cd:16:7f:71:38:ff:1b:
                    f8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3D:3C:70:3C:88:0F:7C:5A:A1:F9:95:EE:D3:25:22:38:1E:36:3C
            X509v3 Authority Key Identifier:
                keyid:A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:38:8d:52:94:e5:46:0f:81:f6:ce:46:7f:ac:97:58:a6:08:
         5e:63:f9:7b:4b:82:eb:31:1a:a5:3c:be:58:17:f1:b9:12:d4:
         66:32:26:9c:2d:9e:e2:54:27:a5:37:47:6f:f8:e8:5d:39:4c:
         e2:56:6d:9a:e4:9d:b8:63:10:4a:da:3a:40:58:4f:6b:a4:40:
         f8:7b:ca:8d:ca:9c:a0:32:3a:fc:94:55:dd:d0:5d:32:45:81:
         b4:12:5d:0d:aa:6e:4c:a3:64:12:fa:6e:64:da:3a:48:17:99:
         c0:66:b5:e5:32:14:36:fc:fa:af:ab:c5:80:ad:5c:cf:66:d7:
         cc:16:fa:c7:bf:27:05:ba:11:82:74:84:35:7e:7f:08:00:4a:
         0c:a4:7c:b9:99:16:ba:9b:32:e3:ce:18:97:3d:d8:5c:20:6a:
         b5:1f:94:31:25:ad:f0:56:95:9d:80:c3:f9:b3:6f:ea:50:cc:
         74:d5:db:a4:84:d2:79:fb:9b:eb:48:f1:e4:79:8d:fb:ff:1c:
         f7:c2:5b:8c:d7:b0:d7:a3:9b:c0:b2:22:ef:8d:92:00:ee:92:
         e9:0d:9b:79:bf:a0:bf:5c:f2:16:cb:d4:cc:bd:73:d8:f9:b6:
         61:ea:5b:bc:f5:07:a5:75:17:54:a1:38:6b:2a:7c:d5:b8:9d:
         c8:06:65:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:49:51 2026 by rpki-client