Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft
File:                     OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft (raw, json)
Hash identifier:          nbdLDAKeoM+ZTNZRnEGHSD/L4REdOWQtvsiFiLAcIPo=
Subject key identifier:   8F:4C:ED:C6:C2:C5:42:BE:74:FE:B6:1A:C3:B8:4A:02:98:E3:66:E1
Authority key identifier: 38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC
Certificate issuer:       /CN=A917BEDF/serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft
Manifest number:          A0
Signing time:             Fri 09 Oct 2026 07:59:48 +0000
Manifest this update:     Fri 09 Oct 2026 07:59:47 +0000
Manifest next update:     Fri 16 Oct 2026 07:59:47 +0000
Files and hashes:         1: OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl (hash: ldoEDBGEmdB2qzEylXt1ReO5bbbvH8r14ASnIaUf+bo=)
                          2: BF556A5AD00911F08CA8E011C4F9AE02.roa (hash: BaXk/hJbR9SRkovDK683Jt8jKKdSrrVLCbAV4lpGXs0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl
                          rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 07:59:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BEDF, serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC
        Validity
            Not Before: Oct  9 07:59:47 2026 GMT
            Not After : Oct 16 07:59:47 2026 GMT
        Subject: CN=6ac89ef4-0069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3c:6f:f8:57:81:44:94:b2:35:65:5d:b1:b8:
                    dd:a3:36:94:b8:6f:17:d7:1c:25:f1:ff:97:93:fb:
                    25:67:a9:d0:f7:e3:fb:b3:d1:49:05:f3:15:46:c2:
                    1e:ae:e3:b2:57:b4:37:3b:6c:28:d5:6d:31:4e:a1:
                    19:c5:9a:60:45:c5:85:c1:8a:c3:9c:22:f3:5c:b7:
                    ce:58:b0:9b:d3:d6:98:7e:98:9f:d7:3f:6a:44:76:
                    db:44:21:7f:12:6a:0c:75:06:5a:2e:75:e4:3b:9f:
                    c9:8a:a6:58:23:9d:ef:bb:59:f4:da:b3:c9:be:4b:
                    c2:15:0b:25:9b:1d:8d:fe:30:c9:33:7e:e5:7b:e4:
                    ab:58:cb:87:a4:8c:b4:de:ea:5f:7e:30:6e:cf:f7:
                    04:47:0f:0f:76:c4:f6:7e:02:e2:f0:57:4c:57:93:
                    c4:3b:34:13:bd:50:de:cf:c0:e4:e7:42:b7:ce:7c:
                    fd:8c:06:2a:29:18:41:a6:d5:20:69:12:f3:6c:d5:
                    3a:2b:d7:d2:fd:e4:f8:db:37:f1:ce:21:69:98:89:
                    30:80:f8:8a:e7:ed:46:64:50:87:5b:c2:e7:78:2e:
                    d0:de:32:fc:39:7c:30:6d:80:c3:75:c1:4c:4d:43:
                    cd:ad:5d:5e:49:05:13:9f:6a:1b:17:5f:a6:47:bf:
                    f3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4C:ED:C6:C2:C5:42:BE:74:FE:B6:1A:C3:B8:4A:02:98:E3:66:E1
            X509v3 Authority Key Identifier:
                keyid:38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a7:ee:39:01:32:50:c9:13:88:65:0e:12:aa:f8:df:21:4d:
         08:f0:d4:a8:3e:65:59:16:6a:6e:20:db:2c:26:bf:8d:d8:47:
         5e:4f:e8:87:66:20:10:99:1d:c8:75:91:5a:ee:8d:91:a8:2a:
         d8:8f:7e:1d:39:84:87:b4:c3:2f:b4:61:f4:48:95:81:85:ba:
         89:96:a5:77:bc:ae:90:3c:39:12:34:95:b0:df:fc:12:42:7f:
         f8:5b:65:af:fe:87:38:fc:db:b1:33:81:e5:c4:e3:59:2a:3b:
         17:b6:44:e6:09:7e:ad:05:b6:e4:45:12:3f:88:d1:b2:55:e0:
         39:fc:87:49:5e:90:f4:dd:4a:d7:27:27:43:29:90:4d:72:8d:
         8a:9d:65:dd:f0:11:20:26:e9:b9:bb:14:e3:56:db:05:43:ea:
         68:a5:03:11:76:5b:80:22:81:38:ac:41:a0:0d:f6:ec:5a:73:
         e3:b6:43:88:ca:40:a7:a4:18:de:9b:8d:e7:d7:cb:09:38:25:
         f3:c3:b6:4d:ab:d0:a2:2b:de:b7:ba:ea:2b:51:e7:ed:57:5d:
         fa:a1:55:cf:42:c7:f9:6e:ed:b7:dc:22:19:78:16:45:49:95:
         d7:dc:84:15:f3:94:54:9a:62:44:91:27:ab:f1:f8:5a:95:18:
         74:e7:87:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 02:54:39 2026 by rpki-client