Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
File:                     7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft (raw, json)
Hash identifier:          3hj4A7kq4avYK2ueVeoLORurOBe+kmR+4ja21mtT/tI=
Subject key identifier:   35:96:33:DE:EA:BA:48:CE:19:24:A6:54:6A:7C:B3:1D:5B:42:1F:2C
Authority key identifier: EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE
Certificate issuer:       /CN=A91A3AD9/serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
Manifest number:          51
Signing time:             Sat 13 Jun 2026 08:25:10 +0000
Manifest this update:     Sat 13 Jun 2026 08:25:09 +0000
Manifest next update:     Sat 20 Jun 2026 08:25:09 +0000
Files and hashes:         1: 7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl (hash: 5GCdWt6BVuBBmr5JGPWi1dDFC3R0UvBfD4RsJx7OwF4=)
                          2: CCCD5D78F98011F0A50135134F6F56BC.roa (hash: 1M2DD/iZFFo8+gHRyKlwxw6SxZSzmI1dVyv8AHl5J7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl
                          rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3AD9, serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
        Validity
            Not Before: Jun 13 08:25:09 2026 GMT
            Not After : Jun 20 08:25:09 2026 GMT
        Subject: CN=6a2d13e5-ce29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2e:7c:2d:38:9a:4b:fa:b6:52:88:bc:67:99:
                    f8:8f:e7:47:bb:d7:77:0a:9b:ac:0c:71:75:04:e4:
                    65:4e:f4:1b:1d:cb:bc:ef:55:28:87:e5:de:d8:9e:
                    c2:8f:e7:41:56:d4:6c:08:a0:6c:9f:ad:09:c4:37:
                    8f:32:04:48:6b:ea:fd:77:10:8b:d9:d4:14:90:84:
                    63:6b:5d:9e:56:d6:15:fd:47:c8:e8:ee:db:28:4a:
                    08:0d:b8:cc:cc:21:86:58:8d:e4:23:e0:3a:1f:54:
                    ef:4c:47:33:d3:b0:f4:36:dd:c6:72:71:ed:31:ea:
                    8c:06:94:ea:58:db:ac:b1:f2:0b:ce:9d:37:59:fc:
                    e9:95:25:71:ed:41:52:95:f1:a8:29:00:2c:03:96:
                    40:41:65:4c:c2:99:0a:0a:a7:dd:9d:7b:6f:cf:8c:
                    69:51:15:76:47:8a:cb:8d:13:3d:68:e1:f1:11:fd:
                    3e:d8:15:60:c1:fb:c4:55:20:5d:07:b0:68:1f:bd:
                    eb:18:f9:7f:7e:68:69:6a:31:5c:d1:18:f3:56:4b:
                    16:9a:ff:72:42:60:69:d9:82:99:43:4e:a8:7d:14:
                    64:85:9b:4a:9d:e2:76:58:62:35:90:de:61:1e:dc:
                    f4:8c:42:9b:21:66:68:5e:41:e6:ac:26:d9:c6:f2:
                    6a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:96:33:DE:EA:BA:48:CE:19:24:A6:54:6A:7C:B3:1D:5B:42:1F:2C
            X509v3 Authority Key Identifier:
                keyid:EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e2:2c:af:83:d0:8e:90:10:a8:11:e5:a1:e5:7c:3a:15:8f:
         f5:f1:a1:0c:27:54:d1:67:e7:a7:20:bb:07:e5:1b:c2:7a:c9:
         ab:2f:71:02:17:3a:41:4b:94:61:3d:ea:df:4b:3c:81:d8:db:
         b0:83:2e:ea:ca:ec:90:4f:6d:f3:e8:dd:01:75:49:51:40:f5:
         a5:46:6e:d7:72:75:f5:74:01:c2:e7:11:1c:c1:00:55:6c:d2:
         a4:b5:a3:de:94:d7:4f:11:cb:99:5b:37:81:7f:9b:a7:25:eb:
         44:bd:4d:dc:d2:a4:be:45:61:e8:be:1f:5f:21:e4:b2:28:b2:
         89:e1:e5:33:67:c3:d5:a0:cf:47:da:dc:0b:2c:9a:c1:13:a0:
         ee:14:c7:14:9e:41:0d:69:0c:3c:ff:52:9c:3c:cf:a2:6e:01:
         0e:6d:10:4a:6a:47:2b:b2:93:32:25:06:9a:d3:21:85:43:8c:
         01:3a:aa:b8:28:f6:e7:e1:59:fb:18:fa:b7:51:d5:66:65:ce:
         d7:2b:75:0c:19:70:3a:00:04:20:33:ad:6e:95:01:54:00:28:
         11:ce:1d:2c:52:07:10:a8:96:ef:27:5a:09:c4:be:0b:f7:fa:
         b9:4d:57:7e:f0:c5:23:c4:45:94:da:b6:56:a9:9a:9c:6b:55:
         72:0c:b7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:04:28 2026 by rpki-client