Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
File:                     37ZyNnIVHsLEbNBOccWfkWnK5vg.mft (raw, json)
Hash identifier:          3qwIp4ht4+/s6MjFHEglv+3cr1KuP+kytqgcv+Avk68=
Subject key identifier:   3D:54:AB:7D:06:C3:03:CC:D3:9E:45:51:7A:C2:DC:BD:2C:D8:C6:31
Authority key identifier: DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8
Certificate issuer:       /CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8
Certificate serial:       0C74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
Manifest number:          0C64
Signing time:             Fri 08 Aug 2025 18:42:43 +0000
Manifest this update:     Fri 08 Aug 2025 18:42:43 +0000
Manifest next update:     Fri 15 Aug 2025 18:42:43 +0000
Files and hashes:         1: 37ZyNnIVHsLEbNBOccWfkWnK5vg.crl (hash: kYRTuvIc3bxb4KM5qlGlM1H8/qQ4NmrUMkT1vsY0g5A=)
                          2: 9DF59BFADA1611ED87B4D357C4F9AE02.roa (hash: gCE8sQKb8A6qpKcLfMZ4C7XBMwBoNFAnuYIqxIqfFSI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl
                          rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3188 (0xc74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A62F, serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8
        Validity
            Not Before: Aug  8 18:42:43 2025 GMT
            Not After : Aug 15 18:42:43 2025 GMT
        Subject: CN=68964523-92db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dc:72:a7:f8:3a:72:be:e4:e0:7f:9e:21:15:
                    b1:68:d7:9b:6f:d5:59:4b:f2:eb:b5:0b:4f:57:2b:
                    d7:21:f0:d6:37:06:07:73:a8:1f:5a:58:4f:ac:ae:
                    36:55:bf:d2:42:75:af:05:fd:f8:ed:65:85:cf:3b:
                    b0:c8:69:70:eb:27:96:aa:78:e0:8f:7f:2c:da:79:
                    c5:36:57:c5:56:5a:fc:58:37:d9:07:fd:50:d2:02:
                    b1:b7:be:6a:c6:64:ae:7a:0c:a8:71:b8:b8:e1:5e:
                    04:c1:ad:f0:88:37:ca:3c:d6:7f:cb:43:3b:e8:43:
                    8a:f9:4b:68:1d:4f:7a:d1:b8:e4:9a:c1:0c:51:52:
                    8d:64:af:0f:a4:f6:28:1d:52:5a:3e:7d:ed:b5:cd:
                    b7:33:7f:e7:43:49:5a:9b:d9:b2:dc:51:55:5d:f9:
                    34:89:ce:d1:04:fc:dc:b9:d4:43:ef:df:c7:50:b1:
                    ab:59:11:3d:6e:2f:c1:d7:a9:42:ce:92:c9:31:52:
                    97:5f:5f:7c:7c:f4:ad:3f:d7:dc:cf:49:35:c2:0f:
                    b4:d9:5f:29:31:9f:91:34:28:de:20:2f:58:e9:e2:
                    92:9c:68:cd:49:bb:1d:af:02:9b:7b:fc:53:1b:64:
                    29:22:dd:14:a8:e5:33:4a:ab:2d:4b:33:56:4c:76:
                    f2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:54:AB:7D:06:C3:03:CC:D3:9E:45:51:7A:C2:DC:BD:2C:D8:C6:31
            X509v3 Authority Key Identifier:
                keyid:DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:a9:fc:39:07:57:36:6b:ff:19:49:5d:8c:50:7f:94:39:6b:
         28:be:0e:5d:48:f9:24:48:c5:1e:b2:41:a4:04:06:15:18:b5:
         e6:24:28:b7:d3:3a:64:99:3f:37:f4:7e:c3:2f:ed:8e:bd:4d:
         a3:ec:50:11:90:e4:59:47:09:1b:b6:03:78:cd:0e:2b:5d:8c:
         f5:e9:83:9f:af:54:2c:51:f8:d3:ef:72:10:7d:22:4d:37:3e:
         7e:83:df:54:b7:0e:49:4f:b1:bf:b4:18:d7:85:fb:78:8f:a7:
         c9:ee:f7:8c:a0:a6:1e:c3:2f:82:27:3c:da:60:c2:e2:e7:73:
         f5:28:e5:ee:f8:53:84:bc:64:4b:ad:8f:9e:7c:5e:de:a1:d0:
         7c:7b:95:50:11:cf:ca:4b:91:22:02:30:b1:12:8f:f9:18:22:
         28:4f:1d:36:98:d8:dd:49:c5:0f:5f:d5:01:78:37:1c:c8:8c:
         b0:9c:7e:50:18:01:6d:92:7e:76:b7:03:4c:16:5e:bb:66:62:
         ab:5f:9e:90:f0:71:74:9b:1b:72:16:3f:d2:a0:a4:a6:cb:86:
         85:67:c9:f1:46:59:1d:d9:b9:ec:e9:7d:b0:5b:ff:94:01:ae:
         0c:6d:dd:a1:ce:49:5a:c3:79:3c:d4:4e:57:49:56:0e:a5:90:
         cc:31:92:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:54:12 2025 by rpki-client