Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft
File:                     2OL6sVCi_VePZ-GbApZTmzdSyak.mft (raw, json)
Hash identifier:          me+1cFowgRzaxbZXYyU6jg6up7xo9dIrKj/YrEgysfg=
Subject key identifier:   2F:38:06:D7:79:6E:21:7C:A4:56:A2:E5:03:A3:44:A3:34:7A:68:62
Authority key identifier: D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9
Certificate issuer:       /CN=A91EC225/serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9
Certificate serial:       0F68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft
Manifest number:          0F5E
Signing time:             Wed 20 May 2026 17:33:30 +0000
Manifest this update:     Wed 20 May 2026 17:33:29 +0000
Manifest next update:     Wed 27 May 2026 17:33:29 +0000
Files and hashes:         1: 2OL6sVCi_VePZ-GbApZTmzdSyak.crl (hash: HrE+s13Qt5yy4R3n+dkTYrfB0scy4TffuEElKviyuz0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl
                          rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:33:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3944 (0xf68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC225, serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9
        Validity
            Not Before: May 20 17:33:29 2026 GMT
            Not After : May 27 17:33:29 2026 GMT
        Subject: CN=6a0df06a-6082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ae:2b:00:ef:58:6b:3b:29:ed:c3:72:fb:a4:
                    f9:8b:49:82:c8:18:d4:df:ff:9f:66:dc:50:62:c7:
                    79:6d:f7:1d:05:db:d9:aa:cd:ea:85:71:b4:70:e5:
                    80:37:80:7c:21:61:90:0d:3e:b4:d5:85:8e:38:10:
                    64:50:c0:a9:e9:1d:e9:6d:19:94:2a:a7:34:96:2b:
                    01:a4:dd:0f:11:a0:67:42:b7:2f:a7:be:7a:ba:d5:
                    30:f8:2c:70:2f:d7:ed:a9:f2:59:84:e7:44:ba:45:
                    03:2b:24:3b:89:a0:a2:24:a6:89:8b:24:4d:8c:06:
                    6a:02:fd:a8:7c:84:99:a3:df:ec:97:55:c9:8a:99:
                    ff:6d:90:49:94:d0:c4:8b:ca:11:6e:45:2b:fe:d9:
                    38:e4:ed:ba:e1:b7:6b:14:2d:5b:77:de:92:27:80:
                    86:08:3c:4b:d4:45:f0:83:23:dd:0e:58:63:f0:57:
                    01:02:b2:ba:fa:8d:02:00:9b:7e:93:bd:c1:4d:ff:
                    0a:e3:6e:e9:f3:8d:69:d0:72:13:78:d6:79:9f:f1:
                    39:e7:28:13:78:1a:57:99:7c:97:18:24:56:d6:09:
                    ff:af:49:01:d1:e0:b0:62:1d:59:98:c8:ea:01:11:
                    e1:50:5e:4b:24:0d:47:e2:3c:42:d4:f0:b4:2e:23:
                    1b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:38:06:D7:79:6E:21:7C:A4:56:A2:E5:03:A3:44:A3:34:7A:68:62
            X509v3 Authority Key Identifier:
                keyid:D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c8:e2:2a:08:23:51:00:72:cb:07:88:ba:58:38:4f:b6:03:
         57:d2:62:14:6b:25:ef:59:9d:4e:50:c8:c6:86:94:20:2a:df:
         13:60:bc:d3:55:eb:24:71:86:de:66:ce:ef:97:ba:87:a0:3e:
         29:ea:5b:4b:ba:cf:6b:03:12:29:de:de:e9:f3:c6:ba:a2:74:
         c7:6a:07:bd:0d:73:ab:47:a9:69:fc:59:af:0e:13:63:a3:69:
         d5:d0:1d:6b:da:b4:f5:fe:3b:dd:24:fb:61:0d:b9:13:2f:ca:
         a1:cb:e9:ac:80:b5:bf:d0:81:a7:43:79:82:19:19:21:fe:20:
         75:59:ab:50:ec:ec:4d:0a:d4:c5:90:1d:fb:be:ef:c9:3c:ba:
         ea:ea:8b:ad:f9:85:a0:12:c1:23:da:c8:6d:43:79:da:f1:85:
         08:80:6d:30:3e:38:fb:1c:41:3b:94:7d:c7:02:33:a5:0b:74:
         96:3f:11:b0:1c:23:c5:3f:35:1a:25:ce:e6:19:e5:79:50:33:
         8d:0b:be:eb:53:1d:6d:b0:f7:c0:d0:5d:0b:3b:99:8a:a6:83:
         20:82:0e:fe:97:13:27:0f:04:0a:b2:d1:57:4a:d9:24:94:15:
         00:ea:82:86:fd:e1:49:14:3e:50:65:6a:08:2b:5f:31:b5:46:
         55:39:04:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:06 2026 by rpki-client