Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft
File:                     7VRR-GERmCtnraCkwGxR1KCAAXA.mft (raw, json)
Hash identifier:          VmRfPKf7svWKd35l2sU+SXTuV8UXpJ+5XhkKhxV3jNg=
Subject key identifier:   2D:42:58:6D:EF:72:CD:D3:7F:04:09:22:BF:4C:87:7B:6A:47:DE:F3
Authority key identifier: ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70
Certificate issuer:       /CN=A9154786/serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170
Certificate serial:       309D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft
Manifest number:          309C
Signing time:             Sun 10 Aug 2025 15:23:43 +0000
Manifest this update:     Sun 10 Aug 2025 15:23:42 +0000
Manifest next update:     Sun 17 Aug 2025 15:23:42 +0000
Files and hashes:         1: 7VRR-GERmCtnraCkwGxR1KCAAXA.crl (hash: 02uoeKJWA4cLMzQoe821BH83WzV8NkaW1caaUoxRVoM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl
                          rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12445 (0x309d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154786, serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170
        Validity
            Not Before: Aug 10 15:23:42 2025 GMT
            Not After : Aug 17 15:23:42 2025 GMT
        Subject: CN=6898b97f-bcb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:49:d4:05:52:ca:2f:43:5b:c5:40:5b:78:00:
                    55:4d:63:0b:97:ad:eb:e2:de:0b:6a:b1:82:48:cf:
                    43:d4:89:de:05:ac:b8:47:c4:ec:95:26:89:08:53:
                    2b:bf:09:79:90:de:46:e5:ce:69:53:bc:0f:31:86:
                    19:5a:34:2b:94:6e:9d:be:5e:df:d4:d0:09:12:6a:
                    29:47:c0:d0:50:97:7d:5f:f1:9f:0e:96:c4:1e:9c:
                    4c:5e:67:14:57:78:74:10:be:d4:be:20:f4:66:fd:
                    36:b3:34:14:71:3c:4e:2b:e4:89:a4:cd:aa:46:f3:
                    b1:b0:c4:3f:60:ea:7c:66:90:98:f4:1f:1e:f8:d1:
                    f3:1f:e9:a0:77:3d:30:f6:62:fd:bf:36:30:61:1b:
                    39:fd:69:fe:0c:fe:cd:2b:16:56:35:9b:36:94:68:
                    ad:33:d2:88:9e:23:59:af:65:e3:6b:06:bd:1b:3e:
                    b3:f7:cb:a1:0d:1c:7d:1e:96:5d:2c:25:25:e2:12:
                    9c:d9:74:ed:49:f1:06:94:19:05:f3:fb:81:1a:d1:
                    66:d2:98:cc:c2:b3:31:92:e9:7a:60:d9:49:28:7d:
                    ae:2b:fb:90:57:fc:82:3a:55:4b:93:63:d9:2f:df:
                    5c:0b:14:b3:63:c8:03:92:54:ff:91:4f:cf:11:3b:
                    50:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:42:58:6D:EF:72:CD:D3:7F:04:09:22:BF:4C:87:7B:6A:47:DE:F3
            X509v3 Authority Key Identifier:
                keyid:ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:33:b8:ad:34:dc:5c:50:5f:56:9e:b6:8e:a6:83:35:74:79:
         23:fe:8d:cf:a5:18:a4:82:0d:91:e9:c4:32:86:e1:22:d3:c9:
         80:26:5c:bc:ea:90:a2:b6:29:2f:91:fd:0f:d7:07:a7:ae:d4:
         e4:b5:b3:10:09:4c:6d:41:f3:81:fd:93:79:bf:84:82:f5:b6:
         5d:8f:92:4f:ba:41:58:27:dc:db:c6:c6:8c:95:df:72:b3:52:
         d6:fe:92:d7:c9:48:c0:77:b5:8a:1a:1e:b8:53:51:8c:ec:81:
         fc:12:7e:0a:09:00:0f:ba:59:25:45:0e:80:eb:6d:16:a2:46:
         92:bc:42:06:5d:49:1d:dd:ed:fb:11:9f:aa:7c:8a:12:06:19:
         d9:5e:5a:dd:ae:a8:cb:15:42:59:b3:ee:e2:72:a9:4c:5c:b1:
         ad:cd:f3:9d:3d:40:7f:63:87:15:63:17:4a:b1:00:77:2b:5a:
         2a:6d:64:60:47:84:79:ca:65:4c:fe:86:f9:cf:67:e0:e5:3b:
         80:4d:fc:73:4c:7f:ee:10:a4:16:af:15:0b:45:98:15:5c:68:
         92:ac:c2:ce:f0:6f:61:b3:0d:45:bf:20:2b:ef:3f:b3:9d:bc:
         04:89:f7:5e:30:7d:ab:d1:90:d8:5b:84:aa:f4:6b:59:d0:a9:
         b2:0e:5f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:29:00 2025 by rpki-client