Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
File:                     Ol-14XOO4JTFuQizeRxpwHd9rh4.mft (raw, json)
Hash identifier:          RlhvdTWEtiPFGbSPlN/ToDfyiNnlH4DVY3m/jxmMoKc=
Subject key identifier:   85:58:38:D5:26:83:55:81:8A:A3:7A:DF:44:7F:CE:FE:B9:54:D0:99
Authority key identifier: 3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E
Certificate issuer:       /CN=A919FBF3/serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
Manifest number:          43
Signing time:             Wed 15 Apr 2026 07:59:26 +0000
Manifest this update:     Wed 15 Apr 2026 07:59:26 +0000
Manifest next update:     Wed 22 Apr 2026 07:59:26 +0000
Files and hashes:         1: Ol-14XOO4JTFuQizeRxpwHd9rh4.crl (hash: 3Oc71u1jSbaDJXjVaFdtpyujPZ2ofFGvvt306i0AIWI=)
                          2: 83739562D66111F0B67B852D0CB43E13.roa (hash: zc2ezAgRu9OX3UkaaBbvbW4zTb5quPT2+Bwr2iI1FaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl
                          rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 07:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FBF3, serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E
        Validity
            Not Before: Apr 15 07:59:26 2026 GMT
            Not After : Apr 22 07:59:26 2026 GMT
        Subject: CN=69df455e-946a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b2:90:6f:9b:9b:67:0c:0d:2e:e7:71:87:ce:
                    66:fb:5d:3c:23:b8:bf:3c:17:df:b8:e2:ec:46:30:
                    5c:11:79:cd:bd:11:e8:1a:d0:86:11:7e:e3:a1:99:
                    33:a0:cd:71:5c:11:0f:ac:19:0c:a6:35:15:77:eb:
                    a6:d2:78:2f:01:7c:7a:f0:a0:69:6b:1e:13:b8:bf:
                    6f:5d:bb:76:eb:1c:55:57:04:97:3c:3e:43:48:9b:
                    6b:39:c6:29:b3:0b:e2:8b:6a:2b:ef:2e:5a:73:f6:
                    ea:b7:b3:f0:6d:26:d2:33:93:b0:50:60:8a:3b:b3:
                    53:7c:88:04:a6:60:8c:27:d5:be:e9:8a:a4:46:02:
                    64:b1:e3:86:77:25:f0:e3:d1:4d:a4:ce:b3:a1:69:
                    fd:29:1f:8b:c1:31:56:0b:1b:a2:9b:41:33:50:05:
                    25:c9:4e:dd:43:3e:e2:41:27:58:19:c0:c0:71:95:
                    d9:a4:fa:46:d0:f5:f0:43:d8:33:ac:80:0d:d6:43:
                    43:a2:0f:88:09:d7:fe:7f:70:0b:1d:3c:63:0b:50:
                    37:a1:eb:42:50:16:53:05:84:ae:98:30:98:07:06:
                    f5:c0:5a:ed:47:45:b3:b9:48:d7:7d:72:19:fd:50:
                    40:bf:b6:95:e1:40:ef:2e:9b:f4:b3:e3:16:82:64:
                    dd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:58:38:D5:26:83:55:81:8A:A3:7A:DF:44:7F:CE:FE:B9:54:D0:99
            X509v3 Authority Key Identifier:
                keyid:3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c3:d9:b3:db:91:a3:dd:98:a7:96:9f:04:a2:9f:0e:57:81:
         84:2c:df:73:96:7a:e6:ff:00:c0:c9:98:ef:7a:70:f8:7a:a5:
         a3:fa:81:3c:ce:f7:3b:cc:e9:30:8d:82:bb:23:e8:fd:ec:dd:
         c8:de:21:5b:4c:1a:ea:75:f8:2f:89:73:98:f0:1b:3e:5d:52:
         34:b8:34:7d:de:0c:a7:0f:7e:40:fc:cc:ad:c4:1c:4b:07:fd:
         2a:2d:78:7e:7e:be:ab:ff:c1:15:4b:f1:db:b4:33:de:07:d0:
         06:ed:0f:58:99:f0:2c:c2:34:e8:d9:5a:ed:68:7b:d9:18:e5:
         ee:fc:6e:47:58:97:31:1b:c2:da:af:92:22:42:9d:23:a7:8d:
         f8:f3:81:8f:72:cd:50:8d:a4:fa:ba:db:f7:39:bb:83:b3:28:
         23:f8:b5:47:29:a5:c9:8a:be:48:a1:46:6c:27:ff:12:e1:59:
         24:92:49:46:50:c3:d2:91:a3:11:b9:0a:bb:ef:c5:b3:fc:5a:
         17:2b:08:7d:06:9e:5e:d4:bb:8d:24:15:2f:9f:f1:6a:12:64:
         b8:aa:c0:4d:fd:9e:f3:86:24:58:a3:f1:f5:dc:c4:da:ac:9b:
         00:57:1e:de:a4:65:02:7b:41:dc:60:aa:13:1b:13:e6:d6:21:
         c3:07:94:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:54 2026 by rpki-client