Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
File:                     olvfdj8LpjxJo3ar-W5VUIeehbo.mft (raw, json)
Hash identifier:          BtYuNVUt1gfJE+557jMxJmWAqLsbSAuY+C5nK7xsEkY=
Subject key identifier:   6B:A5:DA:18:51:5E:4B:4F:16:01:3F:9E:8B:28:E6:2B:A7:CB:E2:D5
Authority key identifier: A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA
Certificate issuer:       /CN=A912C738/serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA
Certificate serial:       063B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
Manifest number:          063B
Signing time:             Mon 02 Mar 2026 14:59:50 +0000
Manifest this update:     Mon 02 Mar 2026 14:59:50 +0000
Manifest next update:     Mon 09 Mar 2026 14:59:50 +0000
Files and hashes:         1: olvfdj8LpjxJo3ar-W5VUIeehbo.crl (hash: iJTX5QeGDBMoiVHKQNJ9u68L6zmdYmW6tyL47y+52Dg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl
                          rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1595 (0x63b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C738, serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA
        Validity
            Not Before: Mar  2 14:59:50 2026 GMT
            Not After : Mar  9 14:59:50 2026 GMT
        Subject: CN=69a5a5e6-3d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:07:66:b0:51:3e:39:cc:ea:79:52:cf:c8:45:
                    48:2c:43:0c:20:18:f0:c8:65:ba:dc:dc:9a:8a:67:
                    03:a4:71:ea:73:11:3d:34:6c:df:97:e0:49:bf:a9:
                    fa:44:9d:18:49:da:37:fe:cc:d3:6f:b9:01:33:73:
                    5a:c9:eb:83:3a:21:f9:7d:c2:e4:fa:c1:c9:3f:76:
                    26:e6:9e:4f:7c:39:a5:98:c2:c9:f2:76:d9:12:af:
                    6a:48:ed:57:80:16:01:2b:fa:0f:11:2c:c5:79:8a:
                    18:cb:2b:51:a2:16:f9:29:f4:13:49:f7:1b:6c:2f:
                    8a:86:55:11:e7:a9:49:a9:98:7a:c1:45:e4:93:c7:
                    a3:fe:00:1b:3b:d8:99:f6:f2:88:e3:c6:d5:d0:b0:
                    d3:9d:8d:ed:1a:24:9d:57:4a:4c:b6:0c:8a:d5:1d:
                    f1:36:80:5a:43:9b:41:cf:f4:3d:9b:ee:fd:78:5b:
                    5e:69:fb:20:e4:bf:42:b3:d8:c1:54:69:b6:65:ce:
                    52:19:38:0d:04:d4:82:62:0e:ab:a2:5b:fa:96:93:
                    f7:e3:34:c9:74:bc:16:cc:b4:d0:02:d6:ee:34:70:
                    41:8b:8c:78:1f:0d:3e:a3:e5:c1:73:b3:de:cb:9b:
                    ee:3b:7e:80:07:23:e7:bb:a2:d2:15:a2:b5:39:5a:
                    d0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A5:DA:18:51:5E:4B:4F:16:01:3F:9E:8B:28:E6:2B:A7:CB:E2:D5
            X509v3 Authority Key Identifier:
                keyid:A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:19:62:5f:10:d0:1c:81:8c:c6:9b:8c:bd:c6:5d:2e:7d:96:
         5e:f1:ca:e1:39:2b:73:38:c7:c9:01:15:c4:b6:fc:78:92:ec:
         af:b0:71:e2:c8:dd:89:3b:f0:6c:13:37:a2:a9:7b:62:a3:c6:
         f9:2f:0b:8c:00:9a:3a:b1:40:b9:da:81:58:31:04:c8:e8:eb:
         d5:6a:89:e7:fc:83:c2:a7:fb:f8:a7:6b:3b:cf:ea:5b:e4:bb:
         b6:69:91:e5:99:b9:b3:61:71:52:7b:d2:85:4d:2d:ac:a1:2d:
         0b:6a:95:a0:fb:c8:8a:00:37:92:55:ea:34:d3:56:cf:b1:7c:
         e5:a6:37:b5:34:04:4e:be:34:b8:9a:a4:74:a8:df:e6:bf:7e:
         b6:d9:17:e9:41:31:71:b7:bf:6a:c9:be:d3:68:a6:33:80:60:
         2a:7d:eb:31:0b:9b:07:01:d4:14:00:87:52:36:2a:b1:06:64:
         0d:a1:be:08:ab:a7:03:34:42:7a:a2:40:a7:f4:5a:95:14:89:
         8c:46:dd:e9:dd:7f:d9:fc:90:6c:21:5d:ed:58:a5:8a:7a:76:
         7f:16:9c:14:3e:d6:75:fe:f2:fa:2d:dc:e0:fa:b6:4f:03:53:
         68:c8:7c:f6:9d:16:5e:4e:3d:1d:18:3e:cd:ce:a3:93:61:39:
         b3:ce:7e:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM3MzgxMTAvBgNVBAUTKEEyNUJERjc2M0YwQkE2M0M0OUEzNzZBQkY5NkU1NTUw
ODc5RTg1QkEwHhcNMjYwMzAyMTQ1OTUwWhcNMjYwMzA5MTQ1OTUwWjAYMRYwFAYD
VQQDEw02OWE1YTVlNi0zZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2QdmsFE+OczqeVLPyEVILEMMIBjwyGW63NyaimcDpHHqcxE9NGzfl+BJv6n6
RJ0YSdo3/szTb7kBM3NayeuDOiH5fcLk+sHJP3Ym5p5PfDmlmMLJ8nbZEq9qSO1X
gBYBK/oPESzFeYoYyytRohb5KfQTSfcbbC+KhlUR56lJqZh6wUXkk8ej/gAbO9iZ
9vKI48bV0LDTnY3tGiSdV0pMtgyK1R3xNoBaQ5tBz/Q9m+79eFteafsg5L9Cs9jB
VGm2Zc5SGTgNBNSCYg6rolv6lpP34zTJdLwWzLTQAtbuNHBBi4x4Hw0+o+XBc7Pe
y5vuO36AByPnu6LSFaK1OVrQwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGul2hhR
XktPFgE/noso5iuny+LVMB8GA1UdIwQYMBaAFKJb33Y/C6Y8SaN2q/luVVCHnoW6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzczOC8zQkYwQUU5Q0M5
RDExMUVCOERDNUQyMTBDNEY5QUUwMi9vbHZmZGo4THBqeEpvM2FyLVc1VlVJZWVo
Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29sdmZkajhMcGp4Sm8zYXItVzVWVUllZWhiby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzczOC8zQkYwQUU5Q0M5RDExMUVCOERDNUQyMTBDNEY5QUUwMi9vbHZmZGo4THBq
eEpvM2FyLVc1VlVJZWVoYm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlxliXxDQHIGMxpuMvcZdLn2WXvHK4TkrczjHyQEVxLb8eJLsr7Bx4sjdiTvw
bBM3oql7YqPG+S8LjACaOrFAudqBWDEEyOjr1WqJ5/yDwqf7+KdrO8/qW+S7tmmR
5Zm5s2FxUnvShU0trKEtC2qVoPvIigA3klXqNNNWz7F85aY3tTQETr40uJqkdKjf
5r9+ttkX6UExcbe/asm+02imM4BgKn3rMQubBwHUFACHUjYqsQZkDaG+CKunAzRC
eqJAp/RalRSJjEbd6d1/2fyQbCFd7Vilinp2fxacFD7Wdf7y+i3c4Pq2TwNTaMh8
9p0WXk49HRg+zc6jk2E5s85+NQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:42:12 2026 by rpki-client