Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
File:                     37ZyNnIVHsLEbNBOccWfkWnK5vg.mft (raw, json)
Hash identifier:          njj645UYU56dznd+xG/4BDQqgEn0kPV4yrVigP/BGYY=
Subject key identifier:   11:A6:BB:78:4A:AA:A6:8C:4B:5E:E4:AC:01:76:67:FD:20:F3:A9:F4
Authority key identifier: DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8
Certificate issuer:       /CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8
Certificate serial:       0D30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
Manifest number:          0D1D
Signing time:             Tue 28 Jul 2026 18:25:21 +0000
Manifest this update:     Tue 28 Jul 2026 18:25:21 +0000
Manifest next update:     Tue 04 Aug 2026 18:25:21 +0000
Files and hashes:         1: 37ZyNnIVHsLEbNBOccWfkWnK5vg.crl (hash: 3C4ugoGIJ6dh0DhQosRYcFwFU4g3EgvFCCuc6JHERf0=)
                          2: 9DF59BFADA1611ED87B4D357C4F9AE02.roa (hash: pK5FZXPjDd+TKj14dtLaTi8ME4/aS4fDTZjurF0aAOg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl
                          rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3376 (0xd30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A62F, serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8
        Validity
            Not Before: Jul 28 18:25:21 2026 GMT
            Not After : Aug  4 18:25:21 2026 GMT
        Subject: CN=6a68f411-6e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:54:70:c4:d1:42:95:48:ae:fc:f4:c2:4b:11:
                    8c:8a:a4:bc:db:69:e9:96:04:82:bd:28:31:da:f0:
                    2c:f1:46:56:a4:25:ef:73:ed:48:d1:a1:1e:8e:92:
                    73:52:5e:4f:77:79:a0:bf:71:72:aa:a9:89:1d:0b:
                    48:02:51:85:cb:16:75:a8:88:bd:f2:30:de:f5:3e:
                    3a:34:c6:de:ab:26:25:93:f6:9c:be:b0:9a:ce:b9:
                    47:e2:38:21:f1:96:1f:64:06:3b:28:25:11:dd:2b:
                    fd:90:4f:5c:f2:49:8e:ba:04:9c:a6:29:d2:98:74:
                    ed:65:2e:18:e1:ff:aa:25:ed:28:f4:b4:3a:1f:0c:
                    99:e7:97:8d:8e:93:8a:4e:e3:df:e2:6c:50:e0:51:
                    da:08:32:72:f3:7c:4c:92:e3:f2:d6:51:92:9f:7b:
                    c3:2c:d5:22:1d:a6:02:c5:f3:78:ae:2a:e3:ec:8d:
                    3f:8d:0a:55:6b:3d:6d:ba:7e:06:8c:bb:61:15:03:
                    31:b1:f7:ac:26:a5:cc:0d:4b:14:74:a5:b9:60:f4:
                    c7:64:4b:78:42:9e:28:12:aa:6e:21:a3:32:65:da:
                    af:40:bf:04:1f:12:7e:e9:da:f0:7c:17:1f:7b:59:
                    9f:e2:9b:f2:a7:93:97:e4:5f:62:5e:11:26:63:f0:
                    d1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A6:BB:78:4A:AA:A6:8C:4B:5E:E4:AC:01:76:67:FD:20:F3:A9:F4
            X509v3 Authority Key Identifier:
                keyid:DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e8:d4:e6:cb:c3:62:11:2f:fa:c6:86:f3:3f:7f:4b:a0:f7:
         31:66:c9:dd:45:b6:11:3a:41:b1:c7:10:43:39:49:f0:1a:21:
         33:56:70:ba:28:aa:e9:89:04:0b:39:2d:99:85:ca:4c:4f:25:
         d5:c6:cd:d4:0a:4c:d6:b5:bc:f5:9d:b8:66:f1:68:4d:e0:35:
         bf:1e:45:41:14:9d:6d:01:d9:15:45:46:0c:c8:27:01:12:10:
         79:09:4d:0a:74:f6:4f:88:a8:f5:39:8f:84:3d:09:62:29:16:
         d3:21:85:29:6d:c0:c0:af:ec:3b:9e:db:ba:7f:a5:39:4e:6d:
         87:5c:70:57:0f:b0:f5:c3:07:2d:00:88:0d:e3:e1:a9:76:c6:
         a6:09:3f:bf:5b:94:cb:88:78:77:ba:fb:0b:0d:70:ea:5f:28:
         af:46:b5:1c:d6:1d:cd:26:51:69:46:0e:53:40:32:37:25:8e:
         0f:f6:d3:ce:1e:97:a2:60:b5:57:33:40:ab:69:b6:9f:f6:a2:
         72:09:73:5e:3d:65:01:db:5d:e3:35:30:72:2d:59:d9:07:cd:
         f6:f3:44:8d:eb:18:37:97:6b:1f:07:52:be:17:fd:48:2f:61:
         0e:d3:55:93:01:d2:5d:bb:3f:90:85:6b:0f:fb:bc:e2:3f:0c:
         01:7d:80:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:27:57 2026 by rpki-client