Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
File:                     7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft (raw, json)
Hash identifier:          JTciXJtRW0t8lKh7wpOa0dPzDXBx0YkCslhSPvt9CEs=
Subject key identifier:   19:9A:87:55:5F:1D:22:B2:01:F7:8D:B9:F0:82:79:8C:C8:A6:5C:96
Authority key identifier: EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE
Certificate issuer:       /CN=A91A3AD9/serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
Manifest number:          67
Signing time:             Mon 27 Jul 2026 10:22:04 +0000
Manifest this update:     Mon 27 Jul 2026 10:22:03 +0000
Manifest next update:     Mon 03 Aug 2026 10:22:03 +0000
Files and hashes:         1: 7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl (hash: E/ZOL0izH0FEhvJAmQfmHmkq6IWKc86Gk0d2TubPFtU=)
                          2: CCCD5D78F98011F0A50135134F6F56BC.roa (hash: 1M2DD/iZFFo8+gHRyKlwxw6SxZSzmI1dVyv8AHl5J7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl
                          rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3AD9, serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
        Validity
            Not Before: Jul 27 10:22:03 2026 GMT
            Not After : Aug  3 10:22:03 2026 GMT
        Subject: CN=6a67314c-609b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d8:d3:b2:12:f7:9e:1a:b1:53:49:fa:57:79:
                    ec:b6:5b:bf:4c:c2:18:a4:5d:46:76:ef:6d:5b:ee:
                    65:0f:b4:96:11:25:ed:e5:7e:51:41:f9:9a:77:6d:
                    dd:8e:e8:cc:11:75:58:4e:24:0a:27:60:cc:d9:d0:
                    30:eb:68:69:68:e8:26:fc:61:d1:8e:2b:25:54:d1:
                    4c:4d:09:df:59:96:a7:3b:0a:68:96:0e:bf:93:37:
                    34:1d:24:9d:ed:26:01:cb:06:4a:64:e1:a0:3e:85:
                    22:2a:23:49:40:2b:81:d4:4c:26:f1:47:1c:3f:3e:
                    7d:af:a3:59:4a:9c:b2:d5:c9:c2:01:f2:df:f5:d4:
                    37:04:36:07:12:ad:ad:15:2f:ae:3c:f6:bf:1f:55:
                    6b:7c:33:ad:cc:1b:ed:da:94:58:ad:6e:83:40:b9:
                    21:8c:30:45:e7:a5:3c:15:4b:3c:e3:09:07:d9:15:
                    d6:8d:03:e4:28:32:a5:22:34:e0:77:4f:b6:da:67:
                    bc:b1:41:d8:ca:3a:bc:8e:15:51:17:ce:2d:9d:db:
                    ea:f8:ef:f9:d4:93:24:fe:74:3b:d1:56:ed:e4:17:
                    74:fb:11:1c:82:ca:46:bd:1e:b3:59:e4:08:39:3a:
                    9b:09:f1:a4:7d:e8:0a:20:9e:95:86:37:42:42:71:
                    b2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9A:87:55:5F:1D:22:B2:01:F7:8D:B9:F0:82:79:8C:C8:A6:5C:96
            X509v3 Authority Key Identifier:
                keyid:EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f0:ca:71:43:40:63:00:70:04:c9:84:18:97:ff:fa:54:6b:
         64:d7:8a:a4:87:a1:70:73:26:6a:0d:3c:33:79:94:6d:2c:b3:
         e2:fa:5f:48:1a:34:0a:31:f5:1d:15:e8:ac:11:27:93:21:58:
         7b:42:d7:f9:48:22:cb:62:a4:1d:38:3a:69:7a:ef:5a:56:4c:
         3f:22:9c:2d:b6:01:81:f7:66:7c:39:e5:27:8f:24:34:ab:d4:
         49:1a:91:22:28:ce:f7:91:a6:0f:6d:b2:21:1b:cc:b9:78:ba:
         7f:1c:cc:70:7d:87:a7:7b:20:fd:b7:e3:20:e7:0a:f7:8d:d0:
         87:6a:1e:80:bc:01:a9:c1:b9:bf:f1:b1:33:1b:5a:12:fb:6f:
         a2:4d:64:6e:04:70:0e:81:60:26:8c:bd:be:4a:4b:6f:8e:b5:
         8d:76:63:e9:f3:f3:8c:e9:47:35:d4:3a:c7:06:73:25:9e:8c:
         ec:b2:6c:13:92:16:e2:e4:84:ef:88:b0:ea:f9:d9:fd:36:96:
         bd:82:72:a3:f8:5c:14:a9:8e:b5:55:10:ed:6d:25:9c:04:ac:
         b0:f0:58:b7:5a:cd:3c:f0:91:76:f3:b3:60:9e:26:53:89:93:
         3a:5e:0d:b2:17:ef:37:17:a2:b0:b9:74:2d:01:a8:73:3a:46:
         95:bc:83:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:55:47 2026 by rpki-client