Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
File:                     olaXUSqiZSfOStYazAmhC-08lxk.mft (raw, json)
Hash identifier:          x6ipZAB7PVVDurpmC3F2FEjLRN+MpS+F62huzUIcdl0=
Subject key identifier:   96:C4:17:17:B7:D9:32:25:DC:60:D1:DB:38:0E:71:32:42:BA:55:B1
Authority key identifier: A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19
Certificate issuer:       /CN=A912598D/serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719
Certificate serial:       3D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
Manifest number:          3B
Signing time:             Sat 07 Mar 2026 07:45:18 +0000
Manifest this update:     Sat 07 Mar 2026 07:45:18 +0000
Manifest next update:     Sat 14 Mar 2026 07:45:18 +0000
Files and hashes:         1: olaXUSqiZSfOStYazAmhC-08lxk.crl (hash: sfHMdEIZyLsmbyp2OP/OoKbsPrAkTfbOQw0EiYTwE60=)
                          2: D0870A60C92211F0B4FDBA21C4F9AE02.roa (hash: f9M4eZERDUVlex/pW13JItVAWRs39TWzzBz4G4/5e6M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719
        Validity
            Not Before: Mar  7 07:45:18 2026 GMT
            Not After : Mar 14 07:45:18 2026 GMT
        Subject: CN=69abd78e-7147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:08:fb:c9:6e:d6:eb:87:9d:01:e8:82:a1:1f:
                    c1:7f:a5:99:15:55:0d:7f:f7:91:2e:2f:3b:e4:64:
                    65:27:ed:6e:4f:04:c0:b9:b4:f1:94:47:cd:08:3a:
                    15:a9:f5:8d:3a:ce:9b:12:2c:e0:8d:1f:e1:4b:53:
                    93:35:74:a7:37:3f:68:e4:28:10:d1:2d:56:27:e6:
                    03:c8:3c:e8:db:0e:0c:ee:2c:fe:80:e4:06:71:5e:
                    51:2c:c3:73:b0:a7:27:d7:5f:fb:94:a6:aa:ba:23:
                    e6:4c:78:2b:9a:bd:80:16:91:9d:86:9a:bb:f2:6f:
                    71:04:fa:64:14:0c:34:d7:2d:85:53:c9:15:2e:c6:
                    db:d8:18:3d:8d:97:b8:ec:fa:20:6e:16:1d:22:0d:
                    ea:e3:b0:02:55:5a:29:e3:f9:ec:7d:d8:e7:b3:fc:
                    3e:7b:dd:8e:b0:e8:cd:ee:f1:cc:8c:9f:47:a2:99:
                    52:3a:60:2a:79:be:b3:af:11:73:18:b5:77:52:ac:
                    67:4e:32:2d:f9:82:08:33:3b:4d:16:8c:ab:49:8b:
                    ab:1e:56:33:9b:c4:97:de:d6:96:84:91:60:94:08:
                    1c:67:04:5e:4c:48:14:2f:50:6d:fa:87:ac:22:6d:
                    8e:51:1e:3f:65:67:cb:08:c5:93:21:8d:ce:81:dd:
                    21:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C4:17:17:B7:D9:32:25:DC:60:D1:DB:38:0E:71:32:42:BA:55:B1
            X509v3 Authority Key Identifier:
                keyid:A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:fb:84:69:d3:53:3b:aa:1d:7c:b0:eb:b1:17:26:8a:64:1b:
         f8:93:2f:ab:5b:85:97:2c:03:eb:07:2f:70:46:40:f6:52:0b:
         56:72:6e:71:62:38:4d:bf:0c:dd:c2:e0:df:86:36:4c:cf:bc:
         d7:a8:b6:cb:a2:53:ff:a8:22:60:fc:76:0f:c8:76:47:5a:70:
         fb:f9:10:82:4b:f4:98:7f:90:78:58:84:aa:c7:8d:01:5e:0c:
         96:ce:25:02:e4:18:6c:50:e5:8b:8d:c4:55:3a:44:43:81:f5:
         42:32:6c:06:a9:f2:bc:2c:e0:af:e8:9f:27:3a:cf:8a:e6:c2:
         cd:45:4f:1a:39:56:71:2c:74:3b:25:fb:35:45:89:15:3d:93:
         2a:3a:6f:a3:4c:5e:36:cf:59:a2:3f:c2:2a:61:26:47:f1:f2:
         12:8b:79:b6:31:65:5d:b6:08:a3:32:c2:e6:67:91:2d:bd:75:
         4e:20:89:3e:21:9d:db:7a:38:b9:f5:31:1a:e2:47:50:95:77:
         0d:6e:1c:2e:23:bd:99:e0:ff:c2:b7:d4:fa:71:bb:75:92:60:
         6b:fc:b6:f2:90:42:6d:96:85:ca:78:ad:9e:1a:de:7e:bf:71:
         18:17:70:03:0c:40:41:ef:50:ce:93:83:54:ae:84:9b:88:ad:
         88:61:9d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:38:37 2026 by rpki-client