Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
File:                     7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft (raw, json)
Hash identifier:          bLhrAAUFiRQCLmdA6J+fTBqC1YLekHgyKjEiU0iUpxA=
Subject key identifier:   AD:9E:14:14:2D:E1:92:5C:03:FB:ED:00:3D:8C:6D:91:88:78:2C:30
Authority key identifier: EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE
Certificate issuer:       /CN=A91A3AD9/serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
Certificate serial:       3A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
Manifest number:          34
Signing time:             Wed 15 Apr 2026 08:16:43 +0000
Manifest this update:     Wed 15 Apr 2026 08:16:43 +0000
Manifest next update:     Wed 22 Apr 2026 08:16:43 +0000
Files and hashes:         1: 7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl (hash: 36OjPYLuMciF030O/ydEepIY49mywxpBvdqcG715xjk=)
                          2: CCCD5D78F98011F0A50135134F6F56BC.roa (hash: 1M2DD/iZFFo8+gHRyKlwxw6SxZSzmI1dVyv8AHl5J7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl
                          rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 08:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3AD9, serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
        Validity
            Not Before: Apr 15 08:16:43 2026 GMT
            Not After : Apr 22 08:16:43 2026 GMT
        Subject: CN=69df496b-0d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1f:98:1d:85:f2:f2:db:cb:6d:b2:a9:a2:2e:
                    15:77:f0:3d:79:d2:30:51:42:df:77:d4:ed:f9:b0:
                    1e:7b:90:cc:58:63:1b:d1:64:bc:6a:a0:16:0e:ae:
                    72:1e:05:45:1e:c9:08:d0:f1:21:6c:1a:ab:ed:d5:
                    0d:ca:86:ea:5e:48:f6:c3:aa:55:19:c3:89:28:c2:
                    38:c7:56:6e:33:ea:91:40:14:eb:25:7b:7b:2f:13:
                    79:a9:85:d7:93:2a:d8:21:24:49:39:94:90:3a:3c:
                    13:14:77:42:26:f0:5e:81:3f:ef:78:68:e6:40:60:
                    15:fd:a5:6c:f8:ce:c4:43:94:c2:7e:05:12:b5:ac:
                    78:5d:5f:9d:00:11:5a:e1:d9:f1:4c:ff:4d:d7:10:
                    46:24:8e:54:48:8e:69:d2:8b:13:5c:ca:28:37:74:
                    f3:11:b1:94:fb:b4:97:11:7b:1e:ef:c0:84:4d:31:
                    0f:71:e3:47:9d:f8:a0:45:6a:aa:20:55:54:b9:fd:
                    b7:87:f6:a0:a2:10:6c:01:f7:1c:3e:0a:50:8a:19:
                    83:f1:80:b9:de:1d:47:e0:c3:05:51:e8:72:83:66:
                    8f:52:db:e3:14:0e:fa:d7:51:f2:fb:19:dc:48:71:
                    aa:62:31:8c:4c:eb:b3:5a:2b:05:5f:65:8c:e1:42:
                    d9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9E:14:14:2D:E1:92:5C:03:FB:ED:00:3D:8C:6D:91:88:78:2C:30
            X509v3 Authority Key Identifier:
                keyid:EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a0:b2:9e:3e:22:c9:01:15:21:44:d3:35:8a:64:f9:8d:90:
         89:50:3a:12:c8:b1:0a:45:ba:30:86:72:98:88:12:c5:9f:90:
         01:14:ba:82:a1:b0:73:87:0c:00:d8:41:4c:6b:3e:06:ed:88:
         3d:6c:86:c4:20:70:3e:38:f2:8c:cc:0c:c5:77:18:e2:e9:84:
         3f:18:8b:ae:bf:48:a4:41:fe:81:89:af:35:ad:7b:43:e0:73:
         d1:e0:a1:b9:d8:12:44:c1:67:77:d6:50:a3:2e:4b:90:ac:27:
         ea:84:fb:4e:53:92:33:13:e4:8d:75:b9:11:ff:a2:98:ef:ed:
         26:33:8a:7f:da:48:51:30:f6:71:bc:dc:3e:5a:5f:bb:f8:0b:
         88:26:c0:6b:0a:cc:c9:4a:0e:46:4c:06:2c:82:e4:8c:a8:50:
         74:52:55:55:ef:e8:76:48:22:61:d4:b7:e5:e6:c3:a5:00:89:
         fc:7d:32:15:97:80:82:a1:54:87:0b:cd:dd:fc:9c:b7:3c:24:
         dc:be:90:4e:b2:d6:5a:71:a5:ad:23:ef:64:fe:1b:f4:44:f3:
         ad:7a:f5:36:a3:7d:72:a5:f7:d2:54:5e:fc:ad:f3:35:3f:ee:
         ae:b3:75:d2:d4:c1:9c:af:39:98:7a:47:5e:c3:8e:8c:be:12:
         1f:36:e7:b3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
M0FEOTExMC8GA1UEBRMoRUMyQUYwNzQwRkQ3ODk5REU1REExMkQ0MTI3QTVERkNG
QTZFNjNERTAeFw0yNjA0MTUwODE2NDNaFw0yNjA0MjIwODE2NDNaMBgxFjAUBgNV
BAMTDTY5ZGY0OTZiLTBkM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/H5gdhfLy28ttsqmiLhV38D150jBRQt931O35sB57kMxYYxvRZLxqoBYOrnIe
BUUeyQjQ8SFsGqvt1Q3KhupeSPbDqlUZw4kowjjHVm4z6pFAFOsle3svE3mphdeT
KtghJEk5lJA6PBMUd0Im8F6BP+94aOZAYBX9pWz4zsRDlMJ+BRK1rHhdX50AEVrh
2fFM/03XEEYkjlRIjmnSixNcyig3dPMRsZT7tJcRex7vwIRNMQ9x40ed+KBFaqog
VVS5/beH9qCiEGwB9xw+ClCKGYPxgLneHUfgwwVR6HKDZo9S2+MUDvrXUfL7GdxI
capiMYxM67NaKwVfZYzhQtmDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUrZ4UFC3h
klwD++0APYxtkYh4LDAwHwYDVR0jBBgwFoAU7CrwdA/XiZ3l2hLUEnpd/PpuY94w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzQUQ5LzkxNTBEQTRBRjk4
MDExRjA4N0RBOTkwODRGNkY1NkJDLzdDcndkQV9YaVozbDJoTFVFbnBkX1BwdVk5
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvN0Nyd2RBX1hpWjNsMmhMVUVucGRfUHB1WTk0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz
QUQ5LzkxNTBEQTRBRjk4MDExRjA4N0RBOTkwODRGNkY1NkJDLzdDcndkQV9YaVoz
bDJoTFVFbnBkX1BwdVk5NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBnoLKePiLJARUhRNM1imT5jZCJUDoSyLEKRbowhnKYiBLFn5ABFLqCobBzhwwA
2EFMaz4G7Yg9bIbEIHA+OPKMzAzFdxji6YQ/GIuuv0ikQf6Bia81rXtD4HPR4KG5
2BJEwWd31lCjLkuQrCfqhPtOU5IzE+SNdbkR/6KY7+0mM4p/2khRMPZxvNw+Wl+7
+AuIJsBrCszJSg5GTAYsguSMqFB0UlVV7+h2SCJh1Lfl5sOlAIn8fTIVl4CCoVSH
C83d/Jy3PCTcvpBOstZacaWtI+9k/hv0RPOtevU2o31ypffSVF78rfM1P+6us3XS
1MGcrzmYekdew46MvhIfNuez
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:16 2026 by rpki-client