Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
File:                     Ol-14XOO4JTFuQizeRxpwHd9rh4.mft (raw, json)
Hash identifier:          zSwxjFi1VH2UhfprjwV0RWWvfIdx/IhKD/nOVC0NsVs=
Subject key identifier:   9E:F0:0E:6A:BA:FD:62:7C:F0:00:3D:F7:F7:FE:85:1C:9E:E6:33:BB
Authority key identifier: 3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E
Certificate issuer:       /CN=A919FBF3/serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
Manifest number:          96
Signing time:             Sun 27 Sep 2026 07:57:43 +0000
Manifest this update:     Sun 27 Sep 2026 07:57:42 +0000
Manifest next update:     Sun 04 Oct 2026 07:57:42 +0000
Files and hashes:         1: Ol-14XOO4JTFuQizeRxpwHd9rh4.crl (hash: vhaKLnCrm7lgAQZVFEz3d9DHFWNlrpbiNYYY20pyK5Q=)
                          2: 83739562D66111F0B67B852D0CB43E13.roa (hash: zc2ezAgRu9OX3UkaaBbvbW4zTb5quPT2+Bwr2iI1FaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl
                          rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 07:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FBF3, serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E
        Validity
            Not Before: Sep 27 07:57:42 2026 GMT
            Not After : Oct  4 07:57:42 2026 GMT
        Subject: CN=6ab8cc77-e643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a9:bd:2c:2d:f7:14:4b:63:1a:28:24:1e:bf:
                    0b:49:a7:f0:55:a1:59:97:df:c0:16:cc:fb:91:f8:
                    a3:4a:1e:8f:31:ef:3f:ba:f9:ae:d0:e6:21:07:75:
                    4f:99:26:64:e6:e6:15:80:a0:bf:57:29:fb:1e:17:
                    9e:a5:b1:26:3a:73:72:10:2c:8a:29:ab:c4:4b:f0:
                    a2:87:a8:f6:ca:13:9a:ea:d3:f4:c7:27:de:58:5b:
                    12:06:5e:50:03:fb:95:fd:c9:8a:c9:ae:62:a9:a5:
                    5a:50:f9:98:d6:93:f8:52:b0:22:0c:ca:27:a4:ec:
                    1e:46:c9:9d:7b:f5:36:4b:1a:8e:1f:8b:0b:fe:1b:
                    dc:9f:4d:d1:b5:5c:8f:a0:aa:5a:d3:40:9e:d5:ed:
                    56:9e:64:e5:2b:4a:3b:62:51:c4:9a:b6:3a:ff:5c:
                    1c:59:5b:d6:6d:b6:5d:39:26:15:ed:4a:9f:a1:51:
                    64:1c:17:05:8b:5e:28:9d:3f:ec:bb:05:cb:91:94:
                    8d:01:32:c9:6a:49:fd:64:c2:46:24:cb:ab:1a:2c:
                    2f:62:40:9c:9b:01:df:14:c7:76:8f:70:41:5f:07:
                    89:a1:09:69:7f:09:6c:8f:bd:bd:df:24:25:3b:9d:
                    2c:ed:22:91:26:81:88:d8:75:3e:61:7d:c3:ca:d7:
                    8a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F0:0E:6A:BA:FD:62:7C:F0:00:3D:F7:F7:FE:85:1C:9E:E6:33:BB
            X509v3 Authority Key Identifier:
                keyid:3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:5d:6e:e8:e7:7d:d9:ab:5e:52:f2:8c:00:fa:84:31:9d:0c:
         a7:0f:fb:75:7d:71:85:eb:14:62:dd:c9:a0:93:13:ee:ec:90:
         97:1f:66:33:0f:7a:19:4d:71:a6:4b:4f:37:8b:73:2d:19:44:
         25:f4:94:8c:e3:45:3c:be:dd:ab:39:a1:87:29:6d:86:7c:f0:
         30:41:96:03:29:63:01:42:16:d5:60:15:58:1e:43:ad:ec:c0:
         39:e6:fd:d8:7f:10:26:59:aa:e3:51:10:9d:1a:48:bb:8d:bd:
         c2:ca:87:47:b5:ec:ed:32:eb:33:5c:69:f8:a8:ef:38:ba:a7:
         fe:8c:11:82:3b:00:c8:70:e9:e4:a1:5d:c3:56:cf:5d:03:b4:
         1a:1b:e5:f5:a2:06:9b:59:86:6b:4a:b5:a9:1c:cb:61:13:8c:
         49:cc:d4:8a:91:0e:05:59:6c:ee:ad:1d:d4:96:be:ff:7d:30:
         66:5d:fd:ea:59:ec:02:4b:25:df:34:eb:a5:7e:2b:d3:7d:1b:
         85:30:13:4c:66:f5:c1:4d:3a:0c:e2:79:73:64:76:bd:6c:9f:
         1f:b8:00:a9:f5:9a:55:af:d2:89:6e:6a:4b:cf:24:85:10:be:
         f3:49:b6:23:9f:3a:3f:c6:3b:a4:8b:fa:c4:27:a6:dc:d7:78:
         f6:97:c2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:35:18 2026 by rpki-client