Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
File:                     37ZyNnIVHsLEbNBOccWfkWnK5vg.mft (raw, json)
Hash identifier:          uM0V795wU3SsApy8AOmvRSItRXHmOEMqHY6/ySXV9hk=
Subject key identifier:   E8:3C:D0:E1:7D:8B:EC:0B:B1:0D:91:27:23:A2:9C:B8:20:C4:3E:03
Authority key identifier: DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8
Certificate issuer:       /CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8
Certificate serial:       0D2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
Manifest number:          0D1A
Signing time:             Wed 22 Jul 2026 18:31:14 +0000
Manifest this update:     Wed 22 Jul 2026 18:31:13 +0000
Manifest next update:     Wed 29 Jul 2026 18:31:13 +0000
Files and hashes:         1: 37ZyNnIVHsLEbNBOccWfkWnK5vg.crl (hash: eB81FLie+NI5sk9A8cJoq/HXOpedOfF6WdPek/UoaTE=)
                          2: 9DF59BFADA1611ED87B4D357C4F9AE02.roa (hash: pK5FZXPjDd+TKj14dtLaTi8ME4/aS4fDTZjurF0aAOg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl
                          rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3373 (0xd2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A62F, serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8
        Validity
            Not Before: Jul 22 18:31:13 2026 GMT
            Not After : Jul 29 18:31:13 2026 GMT
        Subject: CN=6a610c72-0339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:69:a0:86:48:a5:8a:66:1b:a7:0f:60:41:91:
                    15:83:89:f4:a1:28:d9:1a:33:86:d5:3d:ec:51:9e:
                    68:57:fb:b8:eb:29:f8:9b:94:f0:71:41:cc:6b:e1:
                    63:d9:14:96:78:d6:f7:b5:0c:56:a4:eb:4c:94:4c:
                    74:14:ab:a8:73:73:a5:af:e9:42:9b:76:95:a1:3a:
                    aa:b5:f0:af:f6:75:e3:60:93:39:60:26:4c:fe:9f:
                    be:d7:df:71:90:dc:ae:c1:60:c6:98:e3:60:50:0d:
                    79:0c:63:08:30:85:07:0e:a9:33:6a:cf:c7:0d:eb:
                    a1:67:c4:27:88:73:65:c4:72:c4:99:11:f3:24:8d:
                    84:d7:6a:c6:b3:12:62:30:fd:39:a3:e7:cc:4d:37:
                    bd:3f:da:97:b8:4c:18:fe:73:63:9d:48:86:de:7a:
                    c6:8c:66:b6:ba:82:76:22:b2:d1:38:03:5d:07:4f:
                    36:87:fc:cb:ef:78:b1:2e:c8:1f:ad:26:30:af:32:
                    a1:bd:fb:76:eb:c8:42:f9:73:22:3a:a6:88:6f:5f:
                    cd:d2:97:f7:aa:19:04:88:45:f6:b0:9a:0a:62:63:
                    8a:d6:4e:aa:b9:e8:e8:ac:d4:c7:9d:72:4e:8d:ba:
                    10:34:85:94:92:ea:56:7a:5f:16:c8:07:3e:b0:3f:
                    93:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3C:D0:E1:7D:8B:EC:0B:B1:0D:91:27:23:A2:9C:B8:20:C4:3E:03
            X509v3 Authority Key Identifier:
                keyid:DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:3f:8c:f2:bf:e5:eb:1d:da:41:84:dd:cc:a3:0a:0d:fe:ae:
         c7:f9:38:05:b0:07:39:37:81:e0:ef:fc:f6:1b:ed:fd:50:b5:
         ad:a5:01:3b:64:2e:50:12:63:c9:45:51:d2:87:de:06:51:92:
         02:d0:32:a2:56:a3:6f:92:7a:f6:4f:49:67:24:cc:b8:4c:3b:
         a9:80:94:0e:42:85:22:ee:f2:81:2f:25:9d:33:ce:91:7b:ae:
         45:d7:63:c9:24:23:ea:8e:91:da:23:43:fa:f5:67:a7:f3:7e:
         a7:92:f6:07:7b:d5:09:9e:00:7b:14:db:4f:7d:52:26:6f:3b:
         64:f6:19:f7:23:4c:6b:89:cd:e1:66:8b:f7:de:64:e7:93:0f:
         6d:6e:b7:65:34:58:d0:b6:58:f6:1c:d2:e8:22:ad:36:53:a6:
         3c:d3:7c:d4:55:7f:06:ca:f9:91:c8:2a:ce:73:85:ce:f5:11:
         44:4e:bd:d0:ce:4a:6c:41:82:c6:4c:28:50:7c:e8:bc:2a:c0:
         d2:2b:49:56:02:82:20:10:97:a0:29:1f:f8:a9:4e:cf:b2:ad:
         5e:ac:48:00:d0:02:5f:ab:58:a1:c2:37:71:af:1a:94:7f:89:
         45:e8:aa:f7:9e:e1:15:55:d4:89:55:b8:d8:a7:36:8f:b1:b1:
         b8:c3:c2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:27:55 2026 by rpki-client