Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
File:                     7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft (raw, json)
Hash identifier:          YRa6BG3/Xr6YMl99sCEJ+0ORypzXl+nA7wbruEYVeTQ=
Subject key identifier:   8F:94:FC:57:A4:95:10:4F:56:09:E7:CE:8D:79:C4:E0:AC:3C:D2:42
Authority key identifier: EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE
Certificate issuer:       /CN=A91A3AD9/serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
Manifest number:          7B
Signing time:             Thu 03 Sep 2026 08:04:43 +0000
Manifest this update:     Thu 03 Sep 2026 08:04:42 +0000
Manifest next update:     Thu 10 Sep 2026 08:04:42 +0000
Files and hashes:         1: 7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl (hash: MnzwPTym8wjyyRUjLjKeRmRsiYxtzXnwD4YkXG+3en4=)
                          2: CCCD5D78F98011F0A50135134F6F56BC.roa (hash: 1M2DD/iZFFo8+gHRyKlwxw6SxZSzmI1dVyv8AHl5J7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl
                          rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3AD9, serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
        Validity
            Not Before: Sep  3 08:04:42 2026 GMT
            Not After : Sep 10 08:04:42 2026 GMT
        Subject: CN=6a992a1a-6ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:39:72:3b:da:a6:48:e4:64:60:62:82:0f:79:
                    c6:45:7e:d5:d3:25:17:2c:cb:ac:cd:e3:cf:a6:b9:
                    0a:9c:3b:f0:43:18:cf:59:3f:a6:bf:66:4e:01:1b:
                    05:8c:80:f4:07:d9:1f:e4:4a:5c:cb:2a:c2:8b:0a:
                    8c:77:fc:7d:ff:b9:7f:69:c2:58:e4:9a:8d:11:f9:
                    c9:de:52:cd:d8:5c:f3:0d:b3:af:dd:b9:bb:b8:f9:
                    e9:10:47:43:9b:26:9b:ac:76:6b:41:bb:64:e3:d9:
                    5a:7c:0a:52:ec:1c:b8:41:5e:ec:a8:37:8e:21:17:
                    7d:d3:62:95:fa:99:96:10:5c:25:01:86:9f:b3:8e:
                    7e:78:e9:90:5d:da:f9:39:6a:e0:36:fe:b5:22:ad:
                    14:80:9f:db:21:66:ae:82:44:9f:1d:9b:b2:92:ca:
                    49:5b:8a:14:d5:89:04:54:4c:a2:c4:5c:93:f6:40:
                    0f:57:26:0a:13:32:f1:98:31:45:b1:70:c8:67:0a:
                    63:8f:88:f9:8f:32:33:0a:74:7a:86:34:df:36:15:
                    91:d7:cc:ef:93:7f:bd:f0:1f:e5:53:e8:07:f6:bf:
                    6e:60:dd:49:da:54:27:20:ba:20:40:d4:5c:c7:6f:
                    22:fc:0d:e5:e0:16:7a:21:e6:df:3b:01:2a:c9:d9:
                    06:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:94:FC:57:A4:95:10:4F:56:09:E7:CE:8D:79:C4:E0:AC:3C:D2:42
            X509v3 Authority Key Identifier:
                keyid:EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:f2:ee:52:00:72:69:df:cb:03:ff:b7:8a:94:9c:04:2a:63:
         e2:51:45:ba:79:92:2a:4d:e0:b1:dd:00:3e:ed:2b:35:57:e6:
         49:e9:a7:72:88:9a:f2:82:6a:07:6a:f8:b8:89:48:5c:8e:c8:
         60:1e:4c:fe:bf:7e:53:0a:b0:e2:dc:e7:dc:89:1f:e1:69:0b:
         75:15:8f:b7:94:12:dc:3d:48:a1:10:67:b1:13:52:4d:2d:a0:
         df:52:74:6b:52:df:80:49:06:cd:14:ee:f6:21:34:14:85:76:
         2d:bb:30:99:d6:70:4b:4b:b5:cf:02:ec:c0:bd:fb:d0:02:25:
         33:e6:26:09:2a:11:5e:44:85:0e:23:a4:57:07:4e:88:b0:a7:
         52:c0:cd:3f:b4:7c:02:9b:47:93:eb:0a:95:dc:28:19:ba:c2:
         f8:81:f9:43:e2:bc:bd:f6:8b:29:c0:8e:12:ac:a4:9c:3b:66:
         ce:a9:72:2b:7d:08:f5:b2:e6:16:6f:37:63:34:c1:26:ca:fd:
         38:8c:70:b4:64:93:3d:3f:3c:e5:06:77:f8:35:0b:c5:c5:c6:
         03:65:ce:fd:41:57:cc:d3:e7:b9:cc:82:23:42:0d:4e:77:be:
         be:9f:29:c0:ff:5b:0c:6e:63:7f:e5:f1:b1:d9:c4:b1:1b:e4:
         a4:16:a5:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNBRDkxMTAvBgNVBAUTKEVDMkFGMDc0MEZENzg5OURFNURBMTJENDEyN0E1REZD
RkE2RTYzREUwHhcNMjYwOTAzMDgwNDQyWhcNMjYwOTEwMDgwNDQyWjAYMRYwFAYD
VQQDEw02YTk5MmExYS02YWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyTlyO9qmSORkYGKCD3nGRX7V0yUXLMuszePPprkKnDvwQxjPWT+mv2ZOARsF
jID0B9kf5EpcyyrCiwqMd/x9/7l/acJY5JqNEfnJ3lLN2FzzDbOv3bm7uPnpEEdD
myabrHZrQbtk49lafApS7By4QV7sqDeOIRd902KV+pmWEFwlAYafs45+eOmQXdr5
OWrgNv61Iq0UgJ/bIWaugkSfHZuykspJW4oU1YkEVEyixFyT9kAPVyYKEzLxmDFF
sXDIZwpjj4j5jzIzCnR6hjTfNhWR18zvk3+98B/lU+gH9r9uYN1J2lQnILogQNRc
x28i/A3l4BZ6IebfOwEqydkGLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI+U/Fek
lRBPVgnnzo15xOCsPNJCMB8GA1UdIwQYMBaAFOwq8HQP14md5doS1BJ6Xfz6bmPe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0FEOS85MTUwREE0QUY5
ODAxMUYwODdEQTk5MDg0RjZGNTZCQy83Q3J3ZEFfWGlaM2wyaExVRW5wZF9QcHVZ
OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzdDcndkQV9YaVozbDJoTFVFbnBkX1BwdVk5NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
M0FEOS85MTUwREE0QUY5ODAxMUYwODdEQTk5MDg0RjZGNTZCQy83Q3J3ZEFfWGla
M2wyaExVRW5wZF9QcHVZOTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUvLuUgByad/LA/+3ipScBCpj4lFFunmSKk3gsd0APu0rNVfmSemncoia8oJq
B2r4uIlIXI7IYB5M/r9+Uwqw4tzn3Ikf4WkLdRWPt5QS3D1IoRBnsRNSTS2g31J0
a1LfgEkGzRTu9iE0FIV2LbswmdZwS0u1zwLswL370AIlM+YmCSoRXkSFDiOkVwdO
iLCnUsDNP7R8AptHk+sKldwoGbrC+IH5Q+K8vfaLKcCOEqyknDtmzqlyK30I9bLm
Fm83YzTBJsr9OIxwtGSTPT885QZ3+DULxcXGA2XO/UFXzNPnucyCI0INTne+vp8p
wP9bDG5jf+XxsdnEsRvkpBalmQ==
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:21:22 2026 by rpki-client