Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
File:                     7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft (raw, json)
Hash identifier:          5eOhx0/UaCgX0XQR1gmsreZF+Q+UCV3gc0j8WkH5xls=
Subject key identifier:   89:1E:F5:E7:33:B2:AE:C2:5B:2B:6C:31:26:95:5C:21:1B:58:EC:B6
Authority key identifier: EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE
Certificate issuer:       /CN=A91A3AD9/serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
Manifest number:          85
Signing time:             Wed 23 Sep 2026 07:28:48 +0000
Manifest this update:     Wed 23 Sep 2026 07:28:47 +0000
Manifest next update:     Wed 30 Sep 2026 07:28:47 +0000
Files and hashes:         1: 7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl (hash: j/hHKvK5uHw95C1roBJTc4lSzJVwhTdRhTwCkQTVs9I=)
                          2: CCCD5D78F98011F0A50135134F6F56BC.roa (hash: 1M2DD/iZFFo8+gHRyKlwxw6SxZSzmI1dVyv8AHl5J7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl
                          rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3AD9, serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
        Validity
            Not Before: Sep 23 07:28:47 2026 GMT
            Not After : Sep 30 07:28:47 2026 GMT
        Subject: CN=6ab37fb0-8254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2a:04:b0:a3:7f:23:28:87:5f:f4:16:0b:98:
                    79:f4:1d:98:6c:7b:54:90:3f:90:37:18:a2:db:dc:
                    af:fe:5e:2c:f6:cd:4f:57:05:dc:75:78:09:67:bd:
                    25:0a:7c:f8:a8:e3:fe:6d:ad:01:5d:33:16:71:5d:
                    4a:af:2b:62:73:cf:2e:38:09:6f:ae:a5:24:3d:cf:
                    54:b3:9b:df:ab:a7:60:b7:fc:d1:a0:c5:a0:04:08:
                    42:28:4f:e0:02:df:fd:4c:31:f5:6a:fb:1a:01:6a:
                    83:54:4d:1f:8d:85:7c:f7:49:45:0f:d9:20:e2:42:
                    3a:12:7d:8f:a5:ea:58:fb:54:f4:c2:8b:60:2e:98:
                    aa:1e:3c:1c:10:82:c7:90:35:b7:c3:64:a4:22:25:
                    55:d7:94:60:64:9d:49:54:b7:27:73:38:51:ba:35:
                    69:70:76:90:c9:da:ee:3a:9f:3f:16:f9:2a:ee:90:
                    26:ec:f3:a8:b5:25:66:78:77:e1:69:d1:07:11:2b:
                    8b:18:40:de:76:5c:24:e0:3a:dc:f7:63:41:d9:af:
                    49:0f:e6:2c:74:bf:de:25:cb:4d:c1:5b:56:b8:14:
                    8d:a8:97:3b:34:e7:ec:ea:f8:86:70:db:ae:fa:9b:
                    67:99:49:65:e6:67:52:09:23:e1:f4:f0:bf:cc:e8:
                    e8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1E:F5:E7:33:B2:AE:C2:5B:2B:6C:31:26:95:5C:21:1B:58:EC:B6
            X509v3 Authority Key Identifier:
                keyid:EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:77:4d:9d:29:3f:68:be:8c:e8:8d:b3:67:70:de:96:70:09:
         5b:93:1c:55:71:89:0e:00:b3:fd:e9:31:d3:a3:be:46:94:ef:
         4e:f1:28:33:21:00:b4:fd:a7:c0:0f:d7:61:cc:29:ed:7c:29:
         fa:c1:4a:b4:01:de:f1:ba:57:9d:1b:63:b2:d4:37:6d:b2:55:
         21:49:d1:89:b3:64:51:23:d5:ac:4e:6c:97:54:1a:ce:1d:20:
         c0:1e:ba:03:c2:31:02:d5:6e:21:13:3e:b8:93:b4:f1:f9:58:
         13:02:d9:8d:cc:43:52:31:51:2e:06:dc:c0:8f:85:b6:59:a4:
         b7:92:c4:ba:ee:8e:1c:62:ee:fe:4d:ce:94:2c:d2:21:12:1f:
         ef:ec:d2:b8:64:2f:83:32:39:55:e9:d1:4f:eb:b4:e2:e2:a7:
         d6:e9:80:b1:8d:5d:fa:3f:b2:75:03:c6:5e:0e:3b:86:fc:f1:
         ef:57:d0:cd:bc:f6:b8:2a:3c:5d:a7:ae:b4:4c:34:c4:b7:8a:
         1f:18:2d:86:22:82:d6:c2:ac:5b:e4:32:98:a6:bb:f9:0c:eb:
         c3:eb:dc:ba:38:b9:16:9e:4b:9c:a7:c6:37:9f:ff:8b:68:7a:
         97:a7:af:75:2b:b9:33:f1:f1:84:f2:c5:4d:c6:87:59:3f:d6:
         35:b6:af:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:10:11 2026 by rpki-client