Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
File:                     olaXUSqiZSfOStYazAmhC-08lxk.mft (raw, json)
Hash identifier:          /OHkgbCnhjbqt6P/Us9v9bUvf2PMPTNU4BC6XaEAfQQ=
Subject key identifier:   8B:26:19:CB:58:53:B2:BC:18:45:87:49:DB:85:A4:29:00:EC:96:E4
Authority key identifier: A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19
Certificate issuer:       /CN=A912598D/serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
Manifest number:          68
Signing time:             Fri 05 Jun 2026 08:22:31 +0000
Manifest this update:     Fri 05 Jun 2026 08:22:31 +0000
Manifest next update:     Fri 12 Jun 2026 08:22:31 +0000
Files and hashes:         1: olaXUSqiZSfOStYazAmhC-08lxk.crl (hash: JXwVShsOi7yo8HvIMm4ua9r9Va7tCBI5Y71ngGJWTs8=)
                          2: D0870A60C92211F0B4FDBA21C4F9AE02.roa (hash: f9M4eZERDUVlex/pW13JItVAWRs39TWzzBz4G4/5e6M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 08:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719
        Validity
            Not Before: Jun  5 08:22:31 2026 GMT
            Not After : Jun 12 08:22:31 2026 GMT
        Subject: CN=6a228747-5b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:47:29:6e:ec:35:c9:21:d2:8f:b2:3f:44:05:
                    7f:78:d3:e7:8a:db:dc:3c:c6:bb:c7:3c:15:73:61:
                    11:9e:63:86:c5:43:66:ca:68:0d:77:fb:6f:2b:ae:
                    7f:71:48:91:34:21:0a:ea:11:7e:be:5a:5b:97:a6:
                    b5:bf:db:df:42:18:7b:dc:57:6b:39:b2:87:20:e1:
                    6e:09:d8:74:33:90:f0:1d:c2:d2:62:27:c6:23:90:
                    d0:c6:f2:8c:bc:ac:d8:fd:5f:07:2b:cd:00:c8:18:
                    2f:b1:15:79:5e:fb:7d:3b:96:95:10:09:ea:b2:35:
                    0c:02:55:96:c2:50:82:2f:f7:49:9f:29:76:28:e3:
                    b0:38:71:32:b5:c0:c8:9a:a3:e2:3b:20:21:9b:06:
                    ed:c3:66:20:85:ba:fe:e4:1f:fe:32:63:8b:f5:23:
                    40:52:a1:94:7f:84:e4:e9:ff:a7:a3:f7:10:ef:1b:
                    ca:ec:45:c0:40:c7:6e:96:f9:48:68:60:a6:d5:61:
                    61:20:4e:f5:3b:4a:37:bf:04:bd:06:12:9a:eb:ed:
                    8e:15:c4:aa:dd:85:1b:c8:d4:99:4f:f4:1c:cb:4b:
                    4a:3d:66:09:e7:67:28:fb:03:54:7f:ff:9f:b7:e6:
                    52:be:75:9f:ab:44:5b:dc:0b:72:c8:21:b3:90:c1:
                    4c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:26:19:CB:58:53:B2:BC:18:45:87:49:DB:85:A4:29:00:EC:96:E4
            X509v3 Authority Key Identifier:
                keyid:A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:49:01:cf:48:7e:12:f4:f4:30:05:a0:0c:3a:02:b9:42:b1:
         aa:da:b3:4e:3f:2d:09:48:5a:b3:ee:dd:83:5c:7a:80:d6:b6:
         5f:fa:54:a0:13:db:a0:13:e7:a5:9e:85:84:b5:60:3f:66:8b:
         0b:ef:12:34:30:ec:04:da:73:fe:3b:6d:5f:bd:09:25:bb:b1:
         75:60:ed:69:7f:3c:f4:80:29:07:ab:44:87:f9:ee:9b:05:01:
         7a:7a:82:99:2f:6f:c9:a0:94:e2:f2:e9:a0:58:69:96:94:fa:
         eb:9e:e9:6d:e2:d8:0e:55:66:16:25:8a:20:42:40:dd:aa:8a:
         29:ab:fa:43:d7:99:2e:0f:ef:94:b2:8e:dc:4b:5f:d9:19:15:
         e9:17:eb:bd:0e:6d:6f:6b:5c:f2:65:ed:39:3f:da:15:99:ab:
         4c:64:7b:95:18:1d:11:de:f9:75:22:bb:d4:74:5c:84:98:aa:
         f7:3f:4d:62:9f:a5:b8:89:34:cc:3b:48:8d:55:02:61:63:84:
         b6:03:f6:a5:ec:08:36:2c:00:6a:4b:b5:e2:d8:2c:90:74:3f:
         fe:9c:b7:ef:46:f4:1d:98:5e:91:53:d3:3d:bd:61:19:78:6c:
         fa:e4:bf:21:f1:8b:2b:17:6f:f4:e3:16:36:6a:41:28:9f:9f:
         f9:0c:f8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:53:38 2026 by rpki-client