Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
File:                     7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft (raw, json)
Hash identifier:          +PepszXToctXnz0FiUpuj5zL9WDKOuOvPao8z/p4JJw=
Subject key identifier:   22:C0:8A:E6:F7:68:CB:86:61:33:AA:2B:95:D2:E7:46:BB:8A:A7:6D
Authority key identifier: EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE
Certificate issuer:       /CN=A91A3AD9/serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
Manifest number:          4D
Signing time:             Fri 05 Jun 2026 08:48:22 +0000
Manifest this update:     Fri 05 Jun 2026 08:48:22 +0000
Manifest next update:     Fri 12 Jun 2026 08:48:22 +0000
Files and hashes:         1: 7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl (hash: cHOgGYrvPfxeRZvvzI0u9Tb9PYrHt6KWUcaEwqHmncg=)
                          2: CCCD5D78F98011F0A50135134F6F56BC.roa (hash: 1M2DD/iZFFo8+gHRyKlwxw6SxZSzmI1dVyv8AHl5J7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl
                          rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 08:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3AD9, serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
        Validity
            Not Before: Jun  5 08:48:22 2026 GMT
            Not After : Jun 12 08:48:22 2026 GMT
        Subject: CN=6a228d56-edee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:e3:ff:37:05:d2:2e:bd:2b:07:28:56:5f:
                    01:3a:94:24:9e:f3:11:39:e5:41:65:b4:fd:27:15:
                    74:1c:7d:2a:be:ab:ce:92:47:00:cc:63:86:0e:fd:
                    a6:b0:b6:e8:a3:2f:91:73:75:09:82:b4:a6:e0:cb:
                    bb:86:cf:ce:a6:21:5c:8d:d3:7c:67:cc:15:67:6a:
                    0f:6b:b7:50:2a:c5:67:a4:5d:e4:0c:5d:25:81:99:
                    85:d8:a9:40:78:2f:8d:8e:a5:d2:2e:f2:72:80:48:
                    c8:f9:77:07:67:fe:96:b3:6a:d2:93:72:2e:ac:56:
                    d0:2d:3e:7b:1d:07:a7:b1:08:5c:a7:1f:25:f6:11:
                    84:d9:67:93:ff:4f:f8:02:7d:e9:3c:9a:0a:25:3c:
                    11:70:ac:5e:da:ea:d2:57:99:44:66:db:74:0f:d7:
                    c2:7a:63:61:71:be:2a:3a:a8:df:c6:09:75:77:7f:
                    85:91:9d:4a:d0:e5:6b:97:88:ed:b6:54:e0:3a:2f:
                    2e:20:bd:f0:b8:bb:fd:d4:da:51:da:64:a0:5f:d0:
                    52:a0:79:31:e3:95:ce:ce:7b:c6:3a:15:a8:5f:23:
                    9a:c4:f8:09:aa:ca:bc:16:00:e6:25:75:b3:bb:70:
                    8a:2d:c3:41:6f:e9:d1:b6:1c:2b:da:ec:a0:39:de:
                    b6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C0:8A:E6:F7:68:CB:86:61:33:AA:2B:95:D2:E7:46:BB:8A:A7:6D
            X509v3 Authority Key Identifier:
                keyid:EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:9e:34:15:03:a2:6c:2f:5f:d6:ad:fe:30:14:2f:b5:67:e4:
         8e:15:2c:30:dd:65:a6:f2:f9:d4:86:91:e7:6b:90:e6:de:39:
         25:08:77:3f:89:fe:c2:c5:ce:a0:dc:27:66:0c:85:3a:2b:4e:
         94:78:46:6c:85:67:4b:40:10:1b:1c:75:0e:52:08:d4:4a:78:
         e1:b1:c6:91:f8:be:ba:0f:61:4e:1a:36:31:7d:ca:20:08:29:
         de:93:6d:8d:89:2d:06:7f:4b:db:7f:70:54:1a:ca:6c:83:da:
         8f:30:9f:64:96:3f:3f:9b:9f:dd:4d:60:e3:52:a0:b5:ad:90:
         b9:92:c9:b7:d5:68:32:2e:f7:cf:71:33:d0:95:3d:29:d6:e1:
         83:ac:10:c0:d4:50:07:74:46:72:e1:45:9f:61:34:54:69:d3:
         27:0c:49:4f:d6:b3:bf:5f:fb:ae:44:57:88:2b:22:0e:11:c6:
         a4:8c:6a:ce:d5:af:ba:4a:be:98:22:6a:d7:f1:76:36:f6:fa:
         d2:88:b9:ea:54:02:df:b5:04:ee:5e:72:33:a0:0c:a1:dc:75:
         bd:ed:6b:ea:05:31:d1:15:91:10:fa:38:ae:6e:9b:77:6c:dc:
         94:87:34:ee:59:d1:e8:11:8c:f5:21:6e:d9:d5:b5:43:0c:2d:
         63:a3:84:c8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
M0FEOTExMC8GA1UEBRMoRUMyQUYwNzQwRkQ3ODk5REU1REExMkQ0MTI3QTVERkNG
QTZFNjNERTAeFw0yNjA2MDUwODQ4MjJaFw0yNjA2MTIwODQ4MjJaMBgxFjAUBgNV
BAMTDTZhMjI4ZDU2LWVkZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2b+P/NwXSLr0rByhWXwE6lCSe8xE55UFltP0nFXQcfSq+q86SRwDMY4YO/aaw
tuijL5FzdQmCtKbgy7uGz86mIVyN03xnzBVnag9rt1AqxWekXeQMXSWBmYXYqUB4
L42OpdIu8nKASMj5dwdn/pazatKTci6sVtAtPnsdB6exCFynHyX2EYTZZ5P/T/gC
fek8mgolPBFwrF7a6tJXmURm23QP18J6Y2Fxvio6qN/GCXV3f4WRnUrQ5WuXiO22
VOA6Ly4gvfC4u/3U2lHaZKBf0FKgeTHjlc7Oe8Y6FahfI5rE+AmqyrwWAOYldbO7
cIotw0Fv6dG2HCva7KA53rbdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIsCK5vdo
y4ZhM6orldLnRruKp20wHwYDVR0jBBgwFoAU7CrwdA/XiZ3l2hLUEnpd/PpuY94w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzQUQ5LzkxNTBEQTRBRjk4
MDExRjA4N0RBOTkwODRGNkY1NkJDLzdDcndkQV9YaVozbDJoTFVFbnBkX1BwdVk5
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvN0Nyd2RBX1hpWjNsMmhMVUVucGRfUHB1WTk0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz
QUQ5LzkxNTBEQTRBRjk4MDExRjA4N0RBOTkwODRGNkY1NkJDLzdDcndkQV9YaVoz
bDJoTFVFbnBkX1BwdVk5NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBynjQVA6JsL1/Wrf4wFC+1Z+SOFSww3WWm8vnUhpHna5Dm3jklCHc/if7Cxc6g
3CdmDIU6K06UeEZshWdLQBAbHHUOUgjUSnjhscaR+L66D2FOGjYxfcogCCnek22N
iS0Gf0vbf3BUGspsg9qPMJ9klj8/m5/dTWDjUqC1rZC5ksm31WgyLvfPcTPQlT0p
1uGDrBDA1FAHdEZy4UWfYTRUadMnDElP1rO/X/uuRFeIKyIOEcakjGrO1a+6Sr6Y
ImrX8XY29vrSiLnqVALftQTuXnIzoAyh3HW97WvqBTHRFZEQ+jiubpt3bNyUhzTu
WdHoEYz1IW7Z1bVDDC1jo4TI
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:08:20 2026 by rpki-client