Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft
File:                     OLX3py9k7NJYhfi0dYUC4j2oOLs.mft (raw, json)
Hash identifier:          1YnwYjUvS1mwQtYf6XRhOgldl1QcnQy81OK0+qge7Hc=
Subject key identifier:   95:65:68:66:1C:63:45:A7:BC:9F:67:B4:29:D1:07:5F:98:21:FC:9E
Authority key identifier: 38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB
Certificate issuer:       /CN=A912C039/serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB
Certificate serial:       0B31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft
Manifest number:          0B15
Signing time:             Tue 06 Oct 2026 19:28:50 +0000
Manifest this update:     Tue 06 Oct 2026 19:28:49 +0000
Manifest next update:     Tue 13 Oct 2026 19:28:49 +0000
Files and hashes:         1: OLX3py9k7NJYhfi0dYUC4j2oOLs.crl (hash: TXAQGlORiTx3bT5CO3Voqy4XwtcawLiAIXVQpT8ZocM=)
                          2: F4299FF895A711F180BC0AEB3D11F970.roa (hash: PmXSjv1wDQDznhKCnpf8rUER23M5yoMgmCPaXPNRsLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl
                          rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 19:28:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2865 (0xb31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C039, serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB
        Validity
            Not Before: Oct  6 19:28:49 2026 GMT
            Not After : Oct 13 19:28:49 2026 GMT
        Subject: CN=6ac54bf2-7051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c5:0e:da:04:5a:e1:3b:a8:9d:a1:0d:dd:1c:
                    51:da:61:87:03:46:e5:42:44:d5:95:99:c3:b1:2d:
                    a7:bb:60:18:40:4f:dc:c8:e9:74:5a:ab:6f:dc:ef:
                    db:16:f5:4d:21:e9:be:9b:6b:ad:c0:d4:3b:c2:33:
                    72:96:68:99:92:76:42:9f:2a:b9:4c:35:77:a6:a2:
                    1c:9e:52:a9:3d:08:01:9a:c7:00:e8:1f:ac:84:38:
                    53:68:f2:ab:c2:d7:b3:1b:44:51:5e:70:9f:20:a1:
                    b2:be:bb:1c:d3:29:62:a1:a9:0d:b5:f8:bb:ee:14:
                    f6:74:c4:72:05:58:4f:b1:86:ec:9d:21:66:1f:63:
                    97:c3:b2:d8:e1:f8:e2:0b:2b:24:67:9d:f7:65:89:
                    e2:7a:73:15:0e:c6:0f:12:cb:6c:11:ea:9d:8f:12:
                    7f:02:03:ee:2c:5b:bb:55:ca:67:40:41:b1:5b:fd:
                    21:d7:9b:c9:87:2e:2f:03:ac:c9:e6:a8:f3:a2:dd:
                    ac:5f:4a:0c:65:dc:b7:5a:0d:98:66:a4:85:c5:4a:
                    99:39:73:be:1d:0f:91:b3:00:86:e5:49:e6:f0:a4:
                    a8:36:20:c0:74:1a:9c:14:57:f9:73:44:df:34:16:
                    c9:83:b2:1d:ea:ed:a0:ee:ad:1a:68:33:e5:7b:a4:
                    e1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:65:68:66:1C:63:45:A7:BC:9F:67:B4:29:D1:07:5F:98:21:FC:9E
            X509v3 Authority Key Identifier:
                keyid:38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:69:cc:76:b9:5e:86:e2:42:28:24:07:bd:67:cc:e1:24:50:
         fc:26:c7:d1:8d:2d:32:4b:49:35:5c:71:4b:fd:6c:f2:9b:62:
         2b:ee:8c:76:30:ce:ad:5a:f7:69:e4:7b:b2:99:e0:4c:3e:96:
         b0:43:14:bc:af:40:50:78:ac:af:ef:84:e4:84:ce:e8:d5:79:
         38:54:21:6f:6b:68:a1:66:93:61:82:8b:de:05:1b:0e:3d:b0:
         b0:60:8f:2b:87:ed:77:61:83:33:89:99:c6:aa:31:f3:31:41:
         f7:f8:f6:ce:a4:38:68:8a:2d:35:17:1f:3b:03:15:aa:1a:c1:
         32:30:7c:41:28:9f:c8:fa:11:87:c2:50:2c:43:1f:be:0b:1d:
         59:ea:db:95:da:a8:54:aa:6e:5f:cd:38:fb:c5:42:13:bf:47:
         dc:a7:69:e6:39:52:e2:76:c9:ae:60:13:b8:94:e7:a8:29:0b:
         40:ba:7a:1c:12:15:61:69:d4:d9:56:5e:94:93:f8:a4:b6:20:
         7c:f4:7b:09:39:89:37:20:36:ad:43:b0:a0:7f:41:5b:db:f8:
         33:9a:e2:81:ea:97:48:8a:71:3c:01:c4:fc:8a:a2:4c:18:b2:
         07:a1:bc:d2:5a:9b:77:5b:8a:8b:50:ac:2a:c7:43:ac:29:7a:
         ac:f6:6b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:22:25 2026 by rpki-client