Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
File:                     Ol-14XOO4JTFuQizeRxpwHd9rh4.mft (raw, json)
Hash identifier:          V3nqw4cqbzex4r7wN7cSMkskEq9uVFGOgbdvU5/+JGs=
Subject key identifier:   9D:78:37:4B:9B:6F:7E:09:CB:16:9F:04:DA:68:87:98:EE:4F:6C:98
Authority key identifier: 3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E
Certificate issuer:       /CN=A919FBF3/serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
Manifest number:          74
Signing time:             Thu 23 Jul 2026 09:45:44 +0000
Manifest this update:     Thu 23 Jul 2026 09:45:43 +0000
Manifest next update:     Thu 30 Jul 2026 09:45:43 +0000
Files and hashes:         1: Ol-14XOO4JTFuQizeRxpwHd9rh4.crl (hash: +VjRWmxuRQHR2oX1mttlO4cvGD2wVJ6HE+4c53LdMos=)
                          2: 83739562D66111F0B67B852D0CB43E13.roa (hash: zc2ezAgRu9OX3UkaaBbvbW4zTb5quPT2+Bwr2iI1FaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl
                          rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:45:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FBF3, serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E
        Validity
            Not Before: Jul 23 09:45:43 2026 GMT
            Not After : Jul 30 09:45:43 2026 GMT
        Subject: CN=6a61e2c8-9653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7d:31:af:19:61:e8:88:4d:a9:c7:dd:61:53:
                    76:5f:93:3d:d8:93:0d:a4:2b:61:e8:94:46:3f:0d:
                    7c:a2:41:47:ab:81:26:62:fc:89:86:3b:ac:d8:86:
                    96:61:65:40:68:d5:a1:43:79:21:72:9c:22:1d:59:
                    d6:cb:75:ee:26:6e:e3:a2:f1:a1:ea:a5:ae:30:13:
                    cd:ed:8c:8b:cc:24:d7:2a:9e:7e:7e:87:47:6d:6a:
                    93:94:30:c6:ee:de:be:91:ad:9a:dd:c5:c5:7d:c2:
                    31:ae:ce:d4:e8:a1:f7:05:bf:c7:22:04:90:ae:64:
                    9a:1f:d4:72:58:b4:25:1f:4d:0c:a5:42:bb:d0:e4:
                    16:38:96:00:3d:3a:63:b6:85:3f:35:09:a9:fa:bb:
                    f6:3b:77:46:93:00:c3:14:c1:39:ed:f9:61:3a:d8:
                    97:ec:17:9a:cf:79:fd:c3:a0:a3:3c:f4:97:41:56:
                    ae:3a:ce:bf:8f:7d:c8:b2:5a:24:8c:22:af:6c:6b:
                    6c:50:c3:9a:4f:bc:f3:b2:1e:8b:7e:e5:f3:89:66:
                    9b:fb:eb:de:c8:27:91:ed:7f:9d:14:a3:af:af:83:
                    a4:28:fd:06:ac:fc:9d:98:39:54:f3:b0:2d:16:2b:
                    cd:a0:fc:fd:ca:48:8d:51:3c:6c:ae:32:fc:3c:d4:
                    22:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:78:37:4B:9B:6F:7E:09:CB:16:9F:04:DA:68:87:98:EE:4F:6C:98
            X509v3 Authority Key Identifier:
                keyid:3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:51:f2:52:b0:54:f2:4f:96:bd:f9:0c:b4:8f:4f:4f:ef:f1:
         ab:f6:9a:3a:2f:f9:5b:31:2c:26:a6:9c:9c:7c:18:26:da:3c:
         a1:df:87:33:a0:22:95:ad:d8:73:d3:d0:34:da:ed:74:c7:48:
         2f:9f:e1:e0:5a:ca:5a:28:22:5c:e7:c3:3a:36:08:63:ca:7b:
         83:1d:72:13:1d:da:26:be:37:a5:14:a0:82:1b:30:43:f5:0c:
         a9:fc:ab:ac:ad:7d:54:7f:35:3b:89:5f:dc:94:db:8d:6f:fc:
         e3:f8:b2:e6:57:0e:75:69:1c:7c:11:43:ed:db:4c:9f:cc:09:
         fe:4d:12:e6:9c:ad:eb:3a:30:0f:06:69:d7:44:69:ea:e2:e3:
         b8:cc:58:8f:3b:c4:42:3a:5b:4e:d8:4c:58:36:49:8b:27:a9:
         96:95:cc:e7:4c:86:ee:71:95:6c:6f:2b:47:0b:ef:57:0d:da:
         89:b9:36:7f:8e:05:d4:23:2d:29:77:ba:a0:bb:6c:bd:44:8d:
         cf:f5:61:5f:df:d9:94:7e:40:c6:04:aa:8d:f6:e6:aa:76:2f:
         36:02:df:b5:82:d6:81:bd:f4:68:eb:1e:23:e6:b5:26:19:e6:
         9f:13:d3:ed:be:6b:08:09:ca:d1:7f:96:66:55:92:8a:da:1c:
         99:e1:02:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:03 2026 by rpki-client