Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/37cizTQUDBEiFDDMFWw6rJaNHP8.mft
File:                     37cizTQUDBEiFDDMFWw6rJaNHP8.mft (raw, json)
Hash identifier:          ecZEffujROJSgZCPkFiV+UlK7boNgjm5mLDATpfzri4=
Subject key identifier:   F7:F4:A1:20:12:E2:8A:27:44:56:8D:A1:B6:C2:50:40:33:CD:7E:AD
Authority key identifier: DF:B7:22:CD:34:14:0C:11:22:14:30:CC:15:6C:3A:AC:96:8D:1C:FF
Certificate issuer:       /CN=A91E64F1/serialNumber=DFB722CD34140C11221430CC156C3AAC968D1CFF
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37cizTQUDBEiFDDMFWw6rJaNHP8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/37cizTQUDBEiFDDMFWw6rJaNHP8.mft
Manifest number:          4F
Signing time:             Fri 25 Sep 2026 08:23:49 +0000
Manifest this update:     Fri 25 Sep 2026 08:23:48 +0000
Manifest next update:     Fri 02 Oct 2026 08:23:48 +0000
Files and hashes:         1: 37cizTQUDBEiFDDMFWw6rJaNHP8.crl (hash: K2P1d1Az+uTbZYLBj+mz3S7xe23LTKLdekgivYgp9gQ=)
                          2: 108D99AC3E6311F1A067C8A3CC833773.roa (hash: /JQEBfM1zZrqYFAT+lEkN7EgquebMH9d44BeOs81UzU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/37cizTQUDBEiFDDMFWw6rJaNHP8.crl
                          rsync://rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/37cizTQUDBEiFDDMFWw6rJaNHP8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37cizTQUDBEiFDDMFWw6rJaNHP8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E64F1, serialNumber=DFB722CD34140C11221430CC156C3AAC968D1CFF
        Validity
            Not Before: Sep 25 08:23:48 2026 GMT
            Not After : Oct  2 08:23:48 2026 GMT
        Subject: CN=6ab62f94-4b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:08:d1:8c:f8:b8:69:4e:81:75:1d:b6:ef:5b:
                    84:b5:38:18:32:44:8d:eb:f3:7a:83:0d:37:2a:02:
                    43:bf:70:15:79:83:da:20:51:22:cc:b1:2c:1d:c0:
                    49:db:cf:a1:30:0a:c9:ec:29:2b:cf:c0:56:c9:40:
                    87:dc:d9:5b:e0:4a:2b:09:93:23:87:79:5d:53:52:
                    db:0c:24:45:5d:ac:12:c2:ad:0e:66:7b:ed:49:42:
                    61:52:9c:c7:90:79:39:ae:43:22:9e:0c:43:cd:dc:
                    4f:a5:45:bb:95:1a:72:e9:4c:df:c4:06:ea:69:ef:
                    f0:ae:2b:d2:44:9e:d6:fe:35:ea:a3:d0:bf:3e:67:
                    cd:11:37:bf:17:27:01:67:84:db:bb:ed:75:95:4d:
                    5f:76:ae:0b:70:4b:81:1f:56:83:6f:0c:fa:fc:8d:
                    a4:d5:19:ca:1f:84:1a:6f:44:88:c0:c4:6d:18:b3:
                    81:30:07:1f:56:29:3d:d8:38:f0:46:67:0f:a4:4d:
                    69:1f:ae:12:e4:2c:04:cf:eb:81:fa:3d:72:fc:d8:
                    ec:e6:a9:9f:ee:f2:3a:ca:77:65:5c:b6:b9:b5:4b:
                    9a:92:39:f5:36:7a:d5:6e:d6:c6:72:bb:b6:be:87:
                    b7:45:cf:44:1e:d7:c9:ab:0b:75:91:18:fd:5d:78:
                    4c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F4:A1:20:12:E2:8A:27:44:56:8D:A1:B6:C2:50:40:33:CD:7E:AD
            X509v3 Authority Key Identifier:
                keyid:DF:B7:22:CD:34:14:0C:11:22:14:30:CC:15:6C:3A:AC:96:8D:1C:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/37cizTQUDBEiFDDMFWw6rJaNHP8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/37cizTQUDBEiFDDMFWw6rJaNHP8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E64F1/7808663A3E6211F18C258481CC833773/37cizTQUDBEiFDDMFWw6rJaNHP8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:d8:5a:f7:a2:db:0d:ba:07:29:9c:8d:00:68:6b:e2:e1:b0:
         91:d1:d1:c8:34:91:d7:18:5a:c7:da:5f:27:26:8b:20:a5:2d:
         df:de:fd:8a:1f:01:11:0c:80:a6:c2:28:3d:9a:f1:44:3b:b6:
         75:f7:fb:18:d2:36:a4:23:43:73:77:2a:55:ad:e9:11:fa:16:
         1c:c8:94:c5:36:57:1b:7f:4f:97:d5:f7:c2:79:cb:0c:95:85:
         31:64:8a:77:68:73:8b:39:8d:61:42:98:81:0d:0b:1b:a1:16:
         da:17:ad:99:f1:b4:39:cc:4c:a0:cb:e7:85:42:15:a7:71:d5:
         2c:53:ca:57:34:98:b5:6b:77:76:8b:34:26:01:3e:18:04:a1:
         10:5e:ed:04:80:ad:d5:af:c4:1d:cd:a7:0b:1e:67:84:f0:82:
         cf:9f:c4:30:f0:a3:40:d0:81:14:98:9f:c9:c0:3c:89:f8:58:
         2f:52:7f:3d:cc:21:a2:25:e1:20:c3:4b:b8:25:e0:98:5c:14:
         7c:cf:da:75:cc:88:bc:2c:f8:c6:70:27:93:15:36:bb:61:08:
         90:d5:c9:3f:9c:56:26:98:d5:7d:74:5e:a8:04:25:6d:7b:b3:
         10:8b:21:36:12:17:f0:29:70:94:bd:a7:1b:48:52:93:4b:eb:
         37:c5:bb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:06:35 2026 by rpki-client