Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
File:                     37ZyNnIVHsLEbNBOccWfkWnK5vg.mft (raw, json)
Hash identifier:          cOwwrVIX+Tap8RUSYJfCeYiDjrxvNE0vlKFg6HLfvZc=
Subject key identifier:   3E:44:52:04:C9:8C:EA:15:93:E0:F8:AA:64:E3:BC:99:00:AD:B9:14
Authority key identifier: DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8
Certificate issuer:       /CN=A918A62F/serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8
Certificate serial:       0D06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
Manifest number:          0CF4
Signing time:             Tue 12 May 2026 18:21:33 +0000
Manifest this update:     Tue 12 May 2026 18:21:32 +0000
Manifest next update:     Tue 19 May 2026 18:21:32 +0000
Files and hashes:         1: 37ZyNnIVHsLEbNBOccWfkWnK5vg.crl (hash: C5WjICYUuwte8S0MO7h0uvS7V5OmOd5fe69Q8T+Pcqs=)
                          2: 9DF59BFADA1611ED87B4D357C4F9AE02.roa (hash: Ljx7IsxKp3SSCVlf/kifFj6AmtovPD1vTrmVMoxhp1o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl
                          rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3334 (0xd06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A62F, serialNumber=DFB6723672151EC2C46CD04E71C59F9169CAE6F8
        Validity
            Not Before: May 12 18:21:32 2026 GMT
            Not After : May 19 18:21:32 2026 GMT
        Subject: CN=6a036fac-978f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5e:33:49:b5:91:8f:56:6f:fb:74:43:24:00:
                    15:dd:8b:0e:e2:20:92:48:8d:8b:18:48:2e:7a:03:
                    5a:69:a6:c5:70:07:18:93:b9:1a:2b:3c:6e:a6:80:
                    89:e3:02:c3:f4:18:44:3f:0c:ea:7a:0a:40:d0:af:
                    5a:de:f6:2a:81:35:61:12:8f:eb:28:e8:c1:a0:66:
                    d6:5d:7a:88:97:a0:45:06:7c:61:21:93:2b:41:e6:
                    e9:b1:94:b1:28:73:81:9a:91:08:15:03:4a:dd:fc:
                    72:d3:fb:97:7f:3c:6c:da:30:0c:0e:cd:2b:5e:71:
                    37:4f:88:3e:e2:f5:96:8e:d6:9e:72:4c:46:fe:a3:
                    0c:16:f2:68:9a:5b:2f:51:2e:f8:0c:7f:ad:d2:27:
                    f8:c7:8f:9f:8c:92:d5:a0:89:63:a9:7e:5b:2c:b5:
                    81:b6:3b:1e:ef:27:74:ec:b6:43:73:1b:5b:3f:9a:
                    06:39:70:39:d1:cc:f9:dd:20:0e:46:22:8e:87:17:
                    fc:76:09:ab:12:3a:72:f7:bf:63:0e:8b:d4:d1:57:
                    f1:35:a5:25:b7:a3:80:83:32:4e:94:61:25:19:d7:
                    67:6d:c9:bb:de:f1:cb:f2:53:8a:b1:1f:bf:7f:5b:
                    1f:9d:59:17:26:7c:50:04:27:2d:f5:9c:17:91:d4:
                    b2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:44:52:04:C9:8C:EA:15:93:E0:F8:AA:64:E3:BC:99:00:AD:B9:14
            X509v3 Authority Key Identifier:
                keyid:DF:B6:72:36:72:15:1E:C2:C4:6C:D0:4E:71:C5:9F:91:69:CA:E6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37ZyNnIVHsLEbNBOccWfkWnK5vg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A62F/1CF98726085211EA8DF67349C4F9AE02/37ZyNnIVHsLEbNBOccWfkWnK5vg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:97:34:c3:9c:59:8a:92:de:fe:7d:da:25:72:7e:b7:64:c6:
         c3:2b:56:6c:31:f7:53:30:a5:01:bb:51:ae:3b:09:0e:b1:63:
         b7:63:1e:40:22:d5:6f:18:8c:69:a6:23:43:b3:84:ad:59:34:
         24:96:df:63:a9:53:da:61:34:b6:e1:5f:e1:08:80:e3:89:59:
         3f:4a:ba:a4:dd:31:e4:a8:49:79:0e:91:80:46:15:4e:96:78:
         51:b1:11:3d:22:1c:ca:14:2e:7e:a4:32:0a:5c:ef:a4:cc:90:
         25:17:97:11:56:27:0a:0e:fa:f7:2c:fc:04:d1:ee:4c:f4:8e:
         ec:50:4e:9c:b0:9d:52:61:31:c7:7f:40:75:67:ef:28:50:9f:
         62:81:26:16:7a:f6:9e:7b:82:a2:71:19:e9:b7:71:7b:c2:22:
         b1:6a:08:8e:87:bd:1f:b3:56:b2:49:f3:34:f1:21:92:43:62:
         1b:a7:20:58:4d:6d:27:c5:c3:3e:a9:91:df:8c:e4:ab:e7:f9:
         be:cc:8f:c3:06:cd:30:b0:4b:28:1e:87:85:73:62:04:a5:50:
         63:67:32:3f:b3:2e:6b:c9:23:5a:a0:a7:ca:fd:63:4d:93:50:
         09:ab:bc:64:1e:0c:e4:46:58:32:3c:2c:e3:7a:16:76:c5:63:
         42:8a:8f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:54:47 2026 by rpki-client