Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
File:                     37ZyNnIVHsLEbNBOccWfkWnK5vg.mft (raw, json)
Hash identifier:          FwrdetPlyxpsr99lpMIoMrNPv2Qd90/b0BAc8sqIs2U=
Subject key identifier:   8C:D4:25:72:D7:73:AD:18:A2:CB:31:CF:F8:4D:EB:04:C1:00:7E:44
Authority key identifier: DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8
Certificate issuer:       /CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8
Certificate serial:       0D51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
Manifest number:          0D3C
Signing time:             Tue 22 Sep 2026 18:07:00 +0000
Manifest this update:     Tue 22 Sep 2026 18:07:00 +0000
Manifest next update:     Tue 29 Sep 2026 18:07:00 +0000
Files and hashes:         1: 37ZyNnIVHsLEbNBOccWfkWnK5vg.crl (hash: T1TddLSVuQUcdJcK8JFvik5C/ZOzoAa7OzBBr+VGpyQ=)
                          2: ED7EF624B2C311F188E07D2B4C11F970.roa (hash: uc1S2stm9Uhx3B+XK2xoEACktNTcIYwoUDOw85kBtAU=)
                          3: 2539C738B2C411F1B6FCC86B4C11F970.roa (hash: VC3fX4MCY7HkVhPO9ZGyHcHv/3ro8WspG+qBhtBaGbI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl
                          rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:06:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3409 (0xd51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A62F, serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8
        Validity
            Not Before: Sep 22 18:07:00 2026 GMT
            Not After : Sep 29 18:07:00 2026 GMT
        Subject: CN=6ab2c3c4-3485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:00:5b:a2:ef:f1:4b:ea:31:a2:bc:ad:4d:b1:
                    5a:49:5e:f2:0a:e1:9b:eb:30:6f:76:ed:d2:28:f5:
                    c4:e6:70:f6:83:93:b6:51:4e:2c:87:1f:56:60:99:
                    3b:d0:ca:b7:ab:b9:6e:87:29:8c:c9:64:9f:c8:c8:
                    7f:f7:5c:d1:2b:82:ed:d6:ac:c2:f4:02:e6:b5:72:
                    5e:66:d5:f5:f0:7a:36:a2:f9:d3:bb:b8:25:3a:ee:
                    40:03:4d:c1:26:6c:2b:3b:91:81:4d:ee:fb:e9:57:
                    3e:8c:02:81:50:9e:e6:de:55:12:70:b5:0a:85:8f:
                    81:aa:78:0a:1b:93:43:a8:cd:41:7a:77:fe:f4:7f:
                    74:87:5f:68:3b:47:75:ce:f0:3a:44:90:aa:95:90:
                    e4:03:95:1d:80:57:12:3a:c0:35:8f:5e:73:19:99:
                    24:21:e3:51:45:a7:28:65:69:2f:cc:f5:e5:26:d9:
                    0d:63:c2:60:dd:74:a0:91:24:67:0d:bd:60:2f:fa:
                    66:cd:53:2a:2e:74:fe:80:f2:d6:3e:1f:77:24:f3:
                    04:59:68:07:af:20:ca:38:5a:59:4b:9f:37:90:19:
                    d9:d6:c3:97:19:5f:75:e0:94:15:21:b9:ef:47:9a:
                    6d:4b:84:fc:cd:45:ad:4f:d8:3e:32:29:ac:3b:a8:
                    0a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D4:25:72:D7:73:AD:18:A2:CB:31:CF:F8:4D:EB:04:C1:00:7E:44
            X509v3 Authority Key Identifier:
                keyid:DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:a6:23:c4:50:44:7a:f8:84:c3:4d:fc:18:23:da:89:f7:1d:
         79:0e:02:c8:ce:0d:20:0c:4a:71:6b:45:f5:7f:15:98:34:d6:
         5e:ad:9f:39:ea:8f:6f:d9:07:32:b3:9b:8a:2e:05:64:39:3f:
         fb:53:b1:84:68:e5:2f:bb:58:5f:b7:b3:b5:fd:91:03:25:45:
         bf:0f:93:71:73:79:bd:b9:b5:24:70:a7:ea:39:28:3c:d5:9a:
         d9:0c:db:59:db:23:b2:a0:46:42:1b:83:c0:42:4a:49:49:08:
         79:ec:61:75:e1:e3:95:05:0d:5a:2a:94:05:b2:9b:b9:23:74:
         6b:d4:62:de:22:b3:8a:aa:e9:cc:02:3e:16:99:a2:a0:d3:c1:
         17:15:3b:aa:5b:e9:9d:25:a1:5c:97:23:4b:38:4e:87:3e:af:
         46:f3:57:73:a5:1a:b6:ba:d1:b8:d0:19:86:a1:62:e5:d9:71:
         8b:46:fd:e5:6b:b8:96:fd:7e:16:33:1e:b5:11:3e:20:a8:ec:
         2b:1b:a8:7d:d6:f3:01:2c:bb:60:29:85:c9:69:dc:c8:b0:a2:
         94:e6:8f:3d:c4:0b:9e:be:5d:cf:96:d1:75:be:de:a6:08:6e:
         60:27:92:a5:04:b4:a7:1f:9c:83:ab:66:55:44:1b:a8:ea:0a:
         a0:50:23:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:06:34 2026 by rpki-client