Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
File:                     37ZyNnIVHsLEbNBOccWfkWnK5vg.mft (raw, json)
Hash identifier:          wFIAAZ0HSeJvqf6uyVzDzJLpX6GortXsr+RGkyFR+5Y=
Subject key identifier:   76:69:DF:2D:7B:08:E5:D1:92:A1:5B:12:C2:BC:EF:A1:5B:7A:59:79
Authority key identifier: DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8
Certificate issuer:       /CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8
Certificate serial:       0D52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
Manifest number:          0D3D
Signing time:             Thu 24 Sep 2026 18:11:15 +0000
Manifest this update:     Thu 24 Sep 2026 18:11:15 +0000
Manifest next update:     Thu 01 Oct 2026 18:11:15 +0000
Files and hashes:         1: 37ZyNnIVHsLEbNBOccWfkWnK5vg.crl (hash: rdE0y7aPubFqLjqMtOfd8ZCsT87QaZdaRbPhRFb2MN4=)
                          2: ED7EF624B2C311F188E07D2B4C11F970.roa (hash: uc1S2stm9Uhx3B+XK2xoEACktNTcIYwoUDOw85kBtAU=)
                          3: 2539C738B2C411F1B6FCC86B4C11F970.roa (hash: VC3fX4MCY7HkVhPO9ZGyHcHv/3ro8WspG+qBhtBaGbI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl
                          rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3410 (0xd52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A62F, serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8
        Validity
            Not Before: Sep 24 18:11:15 2026 GMT
            Not After : Oct  1 18:11:15 2026 GMT
        Subject: CN=6ab567c3-c816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a8:2b:a2:18:bd:af:0f:ac:5b:d6:4b:76:30:
                    9a:92:c2:40:c7:74:f3:48:35:47:bf:cc:0d:b4:67:
                    de:8a:42:2f:49:07:8d:0c:73:d0:6b:53:f4:1d:9f:
                    1c:98:b2:a7:65:76:d5:c0:26:73:f9:ca:2a:d2:7e:
                    52:30:19:ea:19:5e:f2:ce:05:6d:f9:d7:0c:b8:0e:
                    5e:bd:c4:a8:a6:72:28:61:e6:0c:27:0a:ef:fa:e2:
                    3d:69:ce:05:4d:54:26:91:68:97:4a:7a:ad:14:51:
                    ec:1e:7b:09:6d:f3:ac:c5:94:ca:93:5d:a2:43:e5:
                    be:df:85:48:44:86:7f:ac:79:d0:b5:81:6d:69:5a:
                    4c:da:0d:d4:b6:92:f4:21:9e:c2:44:30:e6:da:d4:
                    52:55:5f:97:65:dd:4e:12:9b:57:52:e2:ee:8e:ba:
                    ea:90:1b:d7:5d:db:eb:25:3e:dd:3f:1a:7a:b7:59:
                    72:67:dd:4e:1c:00:92:d7:38:ed:b2:b5:f2:4c:6c:
                    91:82:60:09:35:10:49:e5:31:d5:6e:57:9a:5a:8a:
                    61:c0:e4:37:0a:9a:f1:ab:f2:29:ad:e5:31:f3:e0:
                    7e:5a:b8:48:9e:fb:de:de:84:52:63:7d:76:7d:1f:
                    c8:65:41:c4:c9:ab:a4:ec:79:6b:72:7b:58:b0:d0:
                    61:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:69:DF:2D:7B:08:E5:D1:92:A1:5B:12:C2:BC:EF:A1:5B:7A:59:79
            X509v3 Authority Key Identifier:
                keyid:DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:39:21:db:10:68:a4:b3:ff:c1:13:ca:fe:06:78:d3:50:3f:
         48:71:27:b4:d4:e9:7c:95:82:70:d6:b2:cb:c1:d9:eb:5b:27:
         dc:84:82:f9:63:6a:e6:ed:e3:6c:80:36:d9:f3:14:36:fe:fd:
         79:08:fa:96:6d:97:62:c9:20:df:46:7a:9f:9c:40:3e:6a:dd:
         b9:fb:54:da:81:99:7d:3d:37:23:7c:2c:0e:9d:05:17:6b:10:
         d2:79:ac:c4:73:24:69:1f:bb:03:35:3c:da:59:be:d6:85:1a:
         f0:27:1b:d1:57:53:96:c4:ab:02:c2:8d:71:0f:cf:42:08:1d:
         da:80:61:f7:ee:f6:07:34:73:61:b7:b2:64:22:5a:2e:e7:e8:
         a6:16:9d:b4:6a:8c:21:66:8a:a4:1a:53:36:53:52:59:a5:0f:
         9d:a0:37:07:78:82:da:dc:96:61:59:df:9e:7e:de:0d:6f:bb:
         a7:0c:66:45:11:e3:fc:90:ac:df:f7:64:f1:b4:93:66:23:52:
         e5:93:2f:ae:a9:b6:26:e5:b9:01:d7:77:68:68:8f:8c:65:4d:
         f5:24:a1:e5:5c:36:9d:ae:a3:12:42:9d:26:47:e6:ef:00:ee:
         49:bc:eb:8b:f5:aa:40:34:5a:4b:21:43:e9:85:65:3a:95:19:
         8e:f7:04:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:04:46 2026 by rpki-client