Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
File:                     Ol-14XOO4JTFuQizeRxpwHd9rh4.mft (raw, json)
Hash identifier:          5pHH7h5CifPiE2/A/tj4hHDOPwKYgOJ/AH4IuUFltrM=
Subject key identifier:   7C:DB:8F:25:26:7D:A0:70:41:5E:CA:A7:31:DB:44:F3:D7:21:CA:6D
Authority key identifier: 3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E
Certificate issuer:       /CN=A919FBF3/serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
Manifest number:          50
Signing time:             Mon 11 May 2026 08:25:19 +0000
Manifest this update:     Mon 11 May 2026 08:25:19 +0000
Manifest next update:     Mon 18 May 2026 08:25:19 +0000
Files and hashes:         1: Ol-14XOO4JTFuQizeRxpwHd9rh4.crl (hash: 7HyBhCY2Vr8MiB9YuxQjdiQv+BImEKUJlNy8dwYYDTo=)
                          2: 83739562D66111F0B67B852D0CB43E13.roa (hash: zc2ezAgRu9OX3UkaaBbvbW4zTb5quPT2+Bwr2iI1FaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl
                          rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FBF3, serialNumber=3A5FB5E1738EE094C5B908B3791C69C0777DAE1E
        Validity
            Not Before: May 11 08:25:19 2026 GMT
            Not After : May 18 08:25:19 2026 GMT
        Subject: CN=6a01926f-d440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f0:72:cb:f8:0f:17:5f:ea:f6:12:44:05:ca:
                    8f:a7:82:57:42:66:a6:b1:cd:4e:49:b5:35:a8:53:
                    45:82:7d:a8:7b:f2:04:de:5b:e6:54:ac:7a:db:59:
                    40:28:8e:58:08:63:e0:8e:d1:ff:a6:47:57:44:02:
                    dd:4c:ae:e0:ca:0c:86:08:27:f9:09:5a:2c:94:d8:
                    5e:dc:ec:cd:21:4e:f9:49:0b:92:7d:84:ca:1d:af:
                    72:51:a9:69:3c:12:9d:67:f4:bc:3b:d8:31:0b:a7:
                    82:97:e4:a2:bb:4f:0b:6d:2c:44:76:5f:2c:67:2f:
                    46:82:e1:2c:25:af:9a:9e:74:1f:ea:f8:ae:9a:ae:
                    be:4a:50:ad:f5:4b:da:5e:97:0d:8b:bb:21:07:94:
                    db:c1:21:26:9e:1c:41:02:d8:6e:ff:7d:a1:68:5d:
                    1d:52:9b:11:e1:46:a7:a5:27:c2:82:7a:d6:dd:c5:
                    79:57:67:2c:ca:17:ae:a3:43:25:53:95:78:df:5d:
                    94:2f:a1:9c:19:e6:f8:85:a9:ab:1f:09:ed:c8:fc:
                    b1:44:1c:bd:a0:bb:f7:a7:a6:98:f5:cf:b1:26:aa:
                    2d:35:97:39:0c:fd:b2:da:0b:12:8a:98:9a:a8:48:
                    6b:17:d6:99:c5:95:9d:d2:aa:2c:c0:e2:fe:d8:e9:
                    f7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DB:8F:25:26:7D:A0:70:41:5E:CA:A7:31:DB:44:F3:D7:21:CA:6D
            X509v3 Authority Key Identifier:
                keyid:3A:5F:B5:E1:73:8E:E0:94:C5:B9:08:B3:79:1C:69:C0:77:7D:AE:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ol-14XOO4JTFuQizeRxpwHd9rh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/E50C99B4D66011F0B2A54B950BB43E13/Ol-14XOO4JTFuQizeRxpwHd9rh4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:01:c0:5a:9a:cb:3d:14:f6:a0:63:89:07:47:8c:29:46:51:
         72:e3:3c:2b:0b:7d:ce:46:f0:ff:15:d3:f9:81:2b:6b:56:93:
         77:a0:39:ae:1e:91:2b:b2:30:b7:f1:c1:83:60:eb:3e:4a:86:
         5e:9a:cc:b0:bf:19:56:d8:f1:f0:12:51:78:36:2a:33:3d:dc:
         50:38:96:af:18:6f:f4:51:00:62:c5:d5:7e:88:c0:9a:9e:8b:
         4c:2b:0e:82:aa:64:17:6e:c4:28:8f:ce:c8:d7:95:57:f1:5e:
         bd:fc:9c:2e:ea:cc:b2:1e:5b:74:06:b6:f8:93:aa:bf:cc:31:
         85:ee:42:dc:41:89:55:1f:3b:f9:88:ce:41:d2:e4:f3:ea:c5:
         af:0c:b9:53:04:28:ae:db:0a:3b:fa:d2:1a:49:d0:6d:2d:5b:
         a6:97:d9:e8:8f:59:85:68:7a:e9:1f:c7:06:8e:27:94:36:a6:
         e4:e6:c0:d1:61:e4:6e:83:57:24:db:33:4f:ba:36:c3:48:af:
         c6:d6:bb:90:01:5d:e9:9e:21:38:bb:30:26:dd:f2:bc:81:14:
         0d:a8:2d:6b:d2:4f:72:f7:12:b6:e4:fb:7c:fc:69:27:d6:eb:
         0d:b8:25:99:5f:30:72:b9:98:11:21:01:14:ae:4b:bb:35:20:
         84:d8:d1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:54:45 2026 by rpki-client