Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
File:                     7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft (raw, json)
Hash identifier:          LXnTJnfALT6GCzpPpzT5L6lQV1BpboCze+++Pnx9pMw=
Subject key identifier:   C0:66:4A:7B:14:1E:58:B8:35:CD:EB:51:1D:21:E4:5A:CE:C1:68:29
Authority key identifier: EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE
Certificate issuer:       /CN=A91A3AD9/serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
Manifest number:          84
Signing time:             Mon 21 Sep 2026 07:44:17 +0000
Manifest this update:     Mon 21 Sep 2026 07:44:16 +0000
Manifest next update:     Mon 28 Sep 2026 07:44:16 +0000
Files and hashes:         1: 7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl (hash: 4VFwhe29cOQazp0xqN48v2HJFhWJrx44htdsrtsMVhA=)
                          2: CCCD5D78F98011F0A50135134F6F56BC.roa (hash: 1M2DD/iZFFo8+gHRyKlwxw6SxZSzmI1dVyv8AHl5J7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl
                          rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:44:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3AD9, serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
        Validity
            Not Before: Sep 21 07:44:16 2026 GMT
            Not After : Sep 28 07:44:16 2026 GMT
        Subject: CN=6ab0e050-7118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:72:30:13:b2:25:37:1b:e0:ca:db:e7:64:4d:
                    31:d9:65:03:2a:11:c8:79:60:fd:e1:93:00:29:3d:
                    2d:d5:e8:22:df:00:84:f1:de:0b:ac:fe:a5:3d:85:
                    46:9b:ad:06:e4:e3:a7:03:45:cd:cb:d1:a0:c6:4f:
                    e1:92:fa:4f:6c:bf:9d:c8:e1:b3:be:e3:b3:28:a5:
                    84:08:ca:89:07:4b:b4:3a:cb:a2:5e:0e:a2:1c:12:
                    d8:20:a1:06:75:d4:d7:08:25:15:9a:1c:12:6c:53:
                    17:85:b4:cc:c3:ff:e9:a8:02:09:5a:9b:c9:49:41:
                    c3:33:2f:f8:ba:68:cc:f1:55:70:36:7d:5a:10:d5:
                    fb:a0:97:36:5f:3a:9d:40:da:41:a4:e7:69:b3:cd:
                    13:e3:9f:5a:d6:0d:e1:25:6a:c1:ad:9f:ed:91:a4:
                    95:98:29:09:9d:9e:80:6b:a5:99:03:c6:3e:4e:e0:
                    f6:1c:44:0c:f0:f9:84:f8:4a:be:d9:85:60:c5:4c:
                    4d:06:8d:fb:2d:61:b5:db:f1:09:59:68:1b:77:c6:
                    c9:19:e3:80:e4:01:00:10:21:64:12:c9:db:eb:a4:
                    00:77:c6:99:c2:46:59:4a:a0:1a:38:00:e4:01:20:
                    af:e0:84:f6:7a:e8:30:ec:ee:18:20:96:9a:c6:3d:
                    9a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:66:4A:7B:14:1E:58:B8:35:CD:EB:51:1D:21:E4:5A:CE:C1:68:29
            X509v3 Authority Key Identifier:
                keyid:EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:81:be:9f:ac:dd:1f:e2:38:41:d0:29:dc:e2:42:e2:27:60:
         9c:c5:0e:1d:2f:c0:38:2e:fd:fa:93:b5:90:7c:5d:db:5b:90:
         44:d8:0d:d1:be:72:02:78:6e:60:03:eb:57:09:d2:34:38:2c:
         c5:22:bd:b7:de:e4:34:ba:02:20:b8:c9:4d:68:54:97:6a:7b:
         75:02:a6:7a:a0:21:d2:7f:65:d1:71:1f:5d:ca:37:4a:40:46:
         c8:c7:66:f3:ff:81:56:7e:91:f0:a6:85:09:e6:91:a3:3f:39:
         e5:1b:b0:a7:ce:d5:38:55:ff:4f:75:24:f1:fe:25:f1:62:2a:
         57:5a:69:eb:cf:42:fa:bd:6b:09:b6:2d:9e:eb:42:3b:41:ec:
         3c:c9:6c:ff:19:e4:b4:98:de:91:a2:6b:22:3e:99:2e:52:cb:
         41:43:57:e2:2a:58:ee:3b:fb:22:93:75:0c:1c:68:e4:60:bb:
         21:c2:5d:88:53:fd:89:73:50:ba:c6:6e:6a:3c:6d:69:42:43:
         e6:16:55:b6:92:8a:d7:6b:65:0c:33:38:3d:42:c7:ca:3f:d2:
         60:ca:d3:e1:20:1d:be:89:1b:ef:86:2a:73:c1:60:94:f6:a5:
         6f:34:b4:56:2e:78:9c:b3:e1:1a:5e:10:e7:ee:d6:d7:b5:92:
         ac:ab:cb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:59:46 2026 by rpki-client