Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
File:                     Ol-14XOO4JTFuQizeRxpwHd9rh4.mft (raw, json)
Hash identifier:          ff9Tw590+gsfGFKhbYCl9KjjUtgyioveEZWWCV8EJgo=
Subject key identifier:   3C:6C:50:CD:13:BC:AA:37:3F:7A:4F:9E:C6:62:5D:C9:E0:9B:97:C3
Authority key identifier: 3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E
Certificate issuer:       /CN=A919FBF3/serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
Manifest number:          5B
Signing time:             Mon 01 Jun 2026 08:55:05 +0000
Manifest this update:     Mon 01 Jun 2026 08:55:04 +0000
Manifest next update:     Mon 08 Jun 2026 08:55:04 +0000
Files and hashes:         1: Ol-14XOO4JTFuQizeRxpwHd9rh4.crl (hash: yNpsyFUhkEGGUc9dsH9kwV7Ycz3HYNfofE/7bTMZnvU=)
                          2: 83739562D66111F0B67B852D0CB43E13.roa (hash: zc2ezAgRu9OX3UkaaBbvbW4zTb5quPT2+Bwr2iI1FaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl
                          rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FBF3, serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E
        Validity
            Not Before: Jun  1 08:55:04 2026 GMT
            Not After : Jun  8 08:55:04 2026 GMT
        Subject: CN=6a1d48e8-ba60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:eb:95:ec:5b:2e:0e:f3:e2:d8:de:21:9a:7e:
                    d4:24:75:42:21:6b:32:f2:90:df:29:ac:cc:c4:9d:
                    3e:24:6b:f8:7d:43:c1:a6:60:fb:d3:44:6d:23:f0:
                    5c:f8:57:d5:24:f7:ce:4f:00:1a:6c:e4:31:14:cd:
                    c1:01:99:19:20:35:1c:a3:87:5c:40:7d:9c:1e:31:
                    e6:67:41:80:a3:d5:c4:92:6d:ff:09:ad:39:b0:16:
                    0a:3d:f5:e5:7b:af:1b:d6:38:10:54:5e:1b:4e:58:
                    45:dc:b1:ae:5b:aa:d8:2e:73:d1:fd:fc:45:a1:53:
                    4c:40:06:fe:e5:74:a0:9c:5e:c2:f3:02:5e:a2:10:
                    c8:1d:57:29:e4:24:a6:1b:7c:38:8a:18:1b:cf:df:
                    99:7c:cf:43:a2:5c:91:e8:01:50:b0:fd:fc:d9:62:
                    ff:80:7c:33:c1:63:20:3e:ab:44:a2:b7:09:50:d1:
                    7d:eb:29:ae:24:50:e5:0f:5d:c0:47:e5:98:df:3f:
                    e8:69:4f:a1:14:fd:32:91:e0:15:96:69:dc:01:59:
                    a0:3b:3b:54:cb:f9:92:ef:48:bc:41:98:37:23:33:
                    ae:81:c9:71:19:11:b4:ab:ef:cd:a2:b8:c3:7c:20:
                    51:a6:c6:a3:08:db:02:e0:0b:43:5a:72:04:2e:81:
                    75:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6C:50:CD:13:BC:AA:37:3F:7A:4F:9E:C6:62:5D:C9:E0:9B:97:C3
            X509v3 Authority Key Identifier:
                keyid:3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ec:be:af:39:43:fb:ec:93:4e:cf:27:08:1f:12:46:9e:ff:
         04:25:c1:0c:bc:9c:87:92:c8:a3:16:24:08:b1:57:4d:26:42:
         5a:71:b3:bd:79:97:9f:c9:a3:78:f8:21:50:08:f6:24:87:85:
         3a:01:91:74:a5:c1:7f:de:77:c8:22:48:f5:23:ce:c0:44:28:
         5f:c4:8a:47:15:a3:9f:98:c8:24:1d:5a:fe:3b:e1:83:12:a0:
         cb:82:e8:ac:31:a1:96:c7:ff:0c:ea:4c:e4:60:e7:f0:dc:75:
         8c:e2:06:77:f7:3c:c7:db:83:fa:0f:9e:ee:83:9c:8d:b9:01:
         3e:95:fb:98:a8:74:46:7f:b6:62:3d:30:f0:21:d4:6d:0d:bb:
         46:67:cc:98:ec:85:5d:63:09:ac:1c:6e:fb:30:ad:81:72:6a:
         31:1d:92:13:2d:3b:10:f3:e0:3e:59:e3:88:d7:8c:d4:04:1b:
         f7:91:bf:0a:68:d2:d8:ee:9a:ba:86:bc:5b:ed:69:ef:c8:8b:
         63:da:89:d5:18:8d:22:b9:c5:81:9f:13:3c:68:c5:97:05:23:
         e0:6b:60:a3:32:80:b5:f7:8f:a7:e8:cf:5f:31:5d:f6:41:c4:
         67:43:62:f0:25:18:de:8c:1c:74:c7:2c:82:7d:33:43:b3:52:
         a0:91:97:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:35 2026 by rpki-client