Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft
File:                     7VRR-GERmCtnraCkwGxR1KCAAXA.mft (raw, json)
Hash identifier:          G+fcvFX9Q6Mq6LNdh2lfqm6+wH/HWVMhfKrEANmUwgw=
Subject key identifier:   CA:9D:49:0B:1A:D0:02:BD:5E:1D:C8:CB:ED:66:A8:B1:AD:9E:A4:62
Authority key identifier: ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70
Certificate issuer:       /CN=A9154786/serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170
Certificate serial:       3116
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft
Manifest number:          3115
Signing time:             Thu 26 Mar 2026 15:27:21 +0000
Manifest this update:     Thu 26 Mar 2026 15:27:21 +0000
Manifest next update:     Thu 02 Apr 2026 15:27:21 +0000
Files and hashes:         1: 7VRR-GERmCtnraCkwGxR1KCAAXA.crl (hash: kbeg4qD89iuipH2gh88GpkOdUeO+nt7Yr0IhwNm5LaM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl
                          rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12566 (0x3116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154786, serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170
        Validity
            Not Before: Mar 26 15:27:21 2026 GMT
            Not After : Apr  2 15:27:21 2026 GMT
        Subject: CN=69c55059-db23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f5:5e:0e:f8:83:c7:90:9b:8d:42:a4:17:7c:
                    fd:27:8a:38:3b:76:ce:d1:c1:fd:cd:a1:09:78:a2:
                    6a:f6:c4:d7:44:39:53:19:a0:aa:ac:bd:e8:73:60:
                    20:b9:57:98:66:18:8e:7e:2e:dc:7a:35:af:0b:86:
                    e0:97:9c:9c:21:8e:3d:25:a3:da:88:ad:01:48:8a:
                    0b:cd:b0:08:32:ea:3a:72:1e:5c:c9:d0:50:62:03:
                    bc:0a:f4:a2:9e:8d:0f:e1:7d:3e:87:ed:52:90:1b:
                    90:89:9e:e4:95:d0:fc:2c:21:c6:8a:bd:d7:cf:3f:
                    5b:38:84:84:44:32:a9:a2:26:66:86:8d:9d:36:f7:
                    80:61:3b:ce:a3:e9:e7:78:48:40:1e:db:bb:02:d1:
                    6d:63:a3:26:8c:85:40:01:20:74:7e:77:2d:50:f6:
                    23:38:74:4e:3d:fa:2e:34:85:96:9c:87:7b:b2:8c:
                    91:d1:9d:3b:5a:12:6a:b1:3c:2c:39:97:cc:ad:ea:
                    c7:9c:8c:7c:d9:dd:75:1a:b2:3a:98:f4:ef:28:39:
                    92:b0:35:bb:08:d1:d0:6f:43:a5:4d:29:2c:28:15:
                    62:bb:aa:cf:3b:ab:7c:3b:4c:54:ff:c3:28:8e:66:
                    05:f8:a2:c7:0c:b2:04:2e:ab:87:22:60:55:6d:ac:
                    35:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9D:49:0B:1A:D0:02:BD:5E:1D:C8:CB:ED:66:A8:B1:AD:9E:A4:62
            X509v3 Authority Key Identifier:
                keyid:ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:fa:64:66:15:d3:18:46:54:e2:17:f3:33:62:19:a1:4d:72:
         73:76:77:56:ab:7a:1c:ce:4a:3c:c7:35:cd:42:95:64:c3:72:
         43:5e:f9:43:03:1a:00:d5:f6:a6:8b:c7:78:ab:0b:ec:0c:34:
         f8:2e:dd:65:10:1c:b9:9f:94:f2:68:4e:60:8e:cc:59:4a:f1:
         a4:bf:e8:3f:0e:f4:8f:ad:36:2b:ec:7d:c7:9d:20:db:36:5a:
         2f:4a:c1:a7:5d:1b:3f:a0:70:3d:0a:e5:ce:83:26:a8:39:da:
         35:ec:c0:c6:7e:a6:7f:8b:52:41:11:08:92:fb:8a:4a:a3:5d:
         63:53:b0:fa:89:7e:1b:78:5a:b0:df:05:a9:1c:26:af:8d:0a:
         0b:42:04:70:67:97:34:aa:48:d2:6e:dc:6a:68:1a:d3:f0:b2:
         89:9d:25:57:7c:9e:10:5a:b1:c1:44:87:5f:a7:e0:47:a7:5f:
         f1:ff:15:22:a8:c2:2c:bb:79:64:3b:4a:87:af:31:02:fa:40:
         55:f6:76:7e:09:29:52:9f:60:70:b8:d4:c7:f5:8f:4f:e0:56:
         b4:a8:6f:a6:5a:51:f4:0d:17:bc:5f:f3:ee:2f:8f:3b:33:05:
         f1:f0:96:3c:7b:75:de:5a:d5:d3:72:2c:46:96:8b:cd:aa:11:
         09:e6:4d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:50:32 2026 by rpki-client