Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft
File:                     9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft (raw, json)
Hash identifier:          fnJrt47e7gNjeK9lyVllKm1T7ZO4LDTZMRh8+9qyea0=
Subject key identifier:   B5:2D:C4:07:F1:41:92:61:B7:95:28:01:32:51:87:4A:FD:B2:3C:7E
Authority key identifier: F5:03:B9:65:59:5C:A9:DA:41:88:E4:D9:FD:72:C0:3F:E1:D6:F6:8C
Certificate issuer:       /CN=A9136067/serialNumber=F503B965595CA9DA4188E4D9FD72C03FE1D6F68C
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft
Manifest number:          75
Signing time:             Mon 27 Jul 2026 10:03:15 +0000
Manifest this update:     Mon 27 Jul 2026 10:03:14 +0000
Manifest next update:     Mon 03 Aug 2026 10:03:14 +0000
Files and hashes:         1: 9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.crl (hash: shbkg7tOQTXB/g9Ba1QXbCGpyiE9xyzRuX4eT7KG8fo=)
                          2: 2812D988D68111F09571D1A368D3641D.roa (hash: VKKHpjPTEvlkEGFu+dpzNhBb8en/BchDeWr6ImqXAAY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.crl
                          rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136067, serialNumber=F503B965595CA9DA4188E4D9FD72C03FE1D6F68C
        Validity
            Not Before: Jul 27 10:03:14 2026 GMT
            Not After : Aug  3 10:03:14 2026 GMT
        Subject: CN=6a672ce3-a969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:23:83:3a:d9:2e:72:06:49:03:e7:b6:13:a1:
                    44:a2:1b:b0:e1:9d:7f:db:66:26:21:b9:9c:fd:1d:
                    33:07:ca:65:a7:fd:50:21:78:10:0c:eb:63:03:4d:
                    3b:b5:58:62:6e:e3:0b:9c:88:3c:a8:ca:6b:ae:de:
                    00:f1:42:33:fd:c4:12:49:43:e3:c8:fb:55:03:ad:
                    73:a9:c5:00:c6:16:0a:02:0d:b5:e7:50:f1:09:e7:
                    8a:a4:7e:19:db:6f:48:af:fb:e3:64:bb:57:cd:42:
                    c0:f5:c3:e2:a4:64:0f:2e:5a:e0:81:58:8b:89:db:
                    35:71:f6:37:71:3d:0b:cc:61:d6:1e:cb:bb:79:f2:
                    85:54:69:98:45:03:4a:ac:44:9f:83:ab:d9:15:d0:
                    71:d4:cc:8b:24:c5:78:69:25:d3:ef:69:0c:2e:0b:
                    93:8d:7d:d3:3e:df:a4:5e:e7:ba:7e:e3:4e:34:a4:
                    7b:67:3b:31:fc:f9:a9:ee:23:d7:9c:d3:cf:33:9c:
                    23:1e:e9:fd:e9:a6:0b:f2:22:37:e9:e9:e2:6a:2f:
                    32:58:7d:be:de:98:d2:18:9e:c0:0e:c5:23:db:73:
                    d7:57:93:3f:1e:ef:68:a3:7a:bd:70:26:ec:df:bc:
                    d6:69:e3:bd:a4:98:5a:60:10:f6:0d:5b:62:48:ed:
                    3c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2D:C4:07:F1:41:92:61:B7:95:28:01:32:51:87:4A:FD:B2:3C:7E
            X509v3 Authority Key Identifier:
                keyid:F5:03:B9:65:59:5C:A9:DA:41:88:E4:D9:FD:72:C0:3F:E1:D6:F6:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:78:5c:c6:f4:d8:ce:75:43:06:a7:e0:3c:d5:da:42:1a:47:
         33:96:2b:4e:e1:a3:aa:f4:84:f2:41:95:e2:b5:80:a6:ac:e8:
         0e:db:14:96:74:45:08:e5:8d:13:04:f8:85:66:c8:e3:33:69:
         32:b1:70:c8:36:3c:3a:ac:7f:fe:ce:b8:0b:cb:10:b5:dc:be:
         48:bf:6a:95:13:e8:f7:70:dc:25:3b:1e:dd:8f:d5:d3:cd:14:
         12:1b:65:e7:37:ec:2e:9a:6b:79:73:46:70:5c:35:11:6a:9e:
         19:9c:32:bc:32:bc:50:ac:ba:42:3b:46:d3:df:24:f9:cc:73:
         44:e9:c1:66:01:6c:4c:a6:b8:3c:9e:de:fb:b1:79:66:53:7d:
         d1:f9:64:40:9c:b4:03:29:0c:59:8e:fc:df:42:cf:b8:76:e9:
         8b:b0:88:73:a8:a2:8f:3f:63:dc:ed:f2:40:70:09:c7:84:5c:
         55:79:73:f9:58:cb:a7:cb:ba:c0:93:e9:c7:9b:30:56:4b:74:
         c4:f6:2c:41:e7:3d:6a:e0:f7:21:23:73:04:79:24:7f:c4:0d:
         39:20:3e:5d:dc:83:f5:17:35:1c:42:3e:ed:c3:ad:52:82:04:
         87:77:5c:bb:7c:ab:c0:83:9f:0c:0e:93:d7:d4:11:8e:b3:be:
         91:0f:6f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:39:27 2026 by rpki-client