Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft
File:                     OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft (raw, json)
Hash identifier:          m1Gj8XBVuv5TeYFqr1PibhqWOh/le4AsmhoFijTV5T4=
Subject key identifier:   78:44:80:B4:D6:A3:A0:E8:58:A6:7C:DC:24:65:78:51:DF:2E:A0:30
Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28
Certificate issuer:       /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028
Certificate serial:       24E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft
Manifest number:          24CD
Signing time:             Thu 04 Jun 2026 15:46:23 +0000
Manifest this update:     Thu 04 Jun 2026 15:46:23 +0000
Manifest next update:     Thu 11 Jun 2026 15:46:23 +0000
Files and hashes:         1: OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl (hash: L2Ol+8fammBHeu5Z94ulHouIUOmPu9rhThYYo7bDFYw=)
                          2: D8D3FB6414F111F08EE5E32DC4F9AE02.roa (hash: Z1iMqs+QoYYoJUqVZPJECJ1hNSHdhes92tk2TKS7LP0=)
                          3: 54EE8F7615FE11ECAF541012C4F9AE02.roa (hash: ma3mPLbDDoGF1MegDkOFqkQshwZriofp35ZPlLPNv48=)
                          4: 9876A6C025B211ECB5356475C4F9AE02.roa (hash: MsKmniAPt2PQV/HaIQt7xSjXSsuc7vmPEbiCsLgiKi0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl
                          rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9449 (0x24e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028
        Validity
            Not Before: Jun  4 15:46:23 2026 GMT
            Not After : Jun 11 15:46:23 2026 GMT
        Subject: CN=6a219dcf-a09f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:03:64:48:ad:60:d0:2b:99:ef:dd:84:28:18:
                    2e:d5:00:df:e3:d5:80:86:c7:fe:57:1b:89:b8:10:
                    c6:98:82:98:82:99:94:2a:ca:db:0a:26:aa:5e:c0:
                    e5:5b:c2:38:4c:45:cc:c0:82:6c:16:cf:1f:0a:6c:
                    5e:c7:dd:b2:a6:14:f2:76:fb:b9:25:ae:2a:21:0d:
                    49:85:52:8b:a6:85:71:eb:9d:8b:c4:3e:fc:e8:df:
                    c6:45:b5:d0:f4:00:2d:8f:02:d7:83:39:7a:9d:89:
                    78:a7:7f:51:b7:6b:83:fe:11:50:32:8e:cf:5e:cc:
                    57:e2:80:20:71:0a:ed:dc:4f:20:45:8f:98:44:08:
                    b9:24:25:29:29:23:00:5a:ba:ef:a4:22:b4:64:6e:
                    b6:31:8b:28:57:43:53:05:7b:f6:19:a8:d7:1f:f4:
                    10:20:77:f9:d7:39:5d:88:c5:ab:08:7d:0a:32:e6:
                    9b:46:33:9e:31:a2:f7:eb:ad:a3:99:49:ee:5e:f8:
                    80:a3:9d:a9:04:aa:40:d9:24:6d:fa:a4:ed:d0:96:
                    a5:cc:8d:b7:c4:40:3f:db:15:4d:fc:7d:5b:8d:f1:
                    41:84:e6:89:0a:23:68:1b:26:f4:b6:e8:f6:32:8f:
                    14:8f:e8:25:2b:6f:ca:79:f2:57:eb:0d:1a:9f:70:
                    80:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:44:80:B4:D6:A3:A0:E8:58:A6:7C:DC:24:65:78:51:DF:2E:A0:30
            X509v3 Authority Key Identifier:
                keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:41:d2:41:54:fe:57:30:84:22:06:d7:f0:bd:1d:b6:c3:16:
         2d:44:fb:17:09:f0:83:a5:3a:5e:b7:92:63:74:d3:bf:0e:2b:
         5d:19:25:51:60:75:a2:d9:81:fa:2b:2d:97:52:32:79:eb:cd:
         0f:e1:f6:0b:2d:8c:63:90:8f:dd:cd:af:89:d8:88:b5:1c:6c:
         d0:19:47:9d:05:84:4b:dc:04:cd:d9:77:fa:8f:73:cf:0a:18:
         33:71:18:c8:cd:d7:93:8c:b9:a8:cf:0e:ec:ea:6b:22:95:bb:
         c4:7b:07:52:42:ad:1d:13:88:82:0b:01:54:74:ae:02:1f:4c:
         a7:33:0c:fc:4e:c9:69:d6:0d:08:bf:d8:30:85:a9:b3:f0:65:
         a1:0c:eb:66:54:74:5c:14:4e:c8:45:07:57:f0:15:ed:63:d0:
         8e:94:92:74:17:d1:d9:70:6e:02:b4:3b:91:52:b1:69:bf:c0:
         4f:56:84:10:20:af:f3:f9:8c:4d:db:ce:fd:9b:a1:c6:ff:f6:
         d9:62:9e:2a:b9:89:5b:96:e8:00:45:29:1c:e2:1d:be:dd:7a:
         2c:79:d1:dc:34:01:73:09:51:26:5c:42:11:19:32:c1:2e:46:
         96:bc:cc:fb:ac:0f:4d:c8:0a:2c:0d:a1:89:4e:c0:56:d0:78:
         e7:7a:59:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:44:25 2026 by rpki-client