Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft
File:                     7VRR-GERmCtnraCkwGxR1KCAAXA.mft (raw, json)
Hash identifier:          uRANDZtsycG1JW5htYSaKmzAOvqLxcRR7BJK/F87VDQ=
Subject key identifier:   40:D4:5D:4F:85:C1:62:E9:81:D6:9F:0A:7F:11:2A:DD:CD:93:05:6D
Authority key identifier: ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70
Certificate issuer:       /CN=A9154786/serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170
Certificate serial:       30A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft
Manifest number:          30A2
Signing time:             Fri 22 Aug 2025 15:29:13 +0000
Manifest this update:     Fri 22 Aug 2025 15:29:13 +0000
Manifest next update:     Fri 29 Aug 2025 15:29:13 +0000
Files and hashes:         1: 7VRR-GERmCtnraCkwGxR1KCAAXA.crl (hash: MKATlMjNbd1GsKW4KWOIyVa/91SjvrgUcIk8RYM67Zg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl
                          rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 15:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12451 (0x30a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154786, serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170
        Validity
            Not Before: Aug 22 15:29:13 2025 GMT
            Not After : Aug 29 15:29:13 2025 GMT
        Subject: CN=68a88cc9-33bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:9a:67:b9:50:14:67:c9:76:ad:f6:f9:13:
                    25:4d:ce:a5:5b:a7:26:9d:8b:63:4f:d0:08:9b:82:
                    13:5b:18:09:e7:0b:8e:c4:30:a3:4a:f8:07:46:57:
                    09:ec:b0:21:83:4f:e6:07:75:7a:5f:fc:b3:59:da:
                    51:63:17:92:2d:8a:45:0d:18:39:f3:56:4b:ee:6f:
                    2d:e1:37:93:b4:16:98:a3:01:38:5b:52:0f:02:7a:
                    f8:45:37:11:e1:a9:8d:f2:aa:e4:fc:98:1d:8c:d6:
                    51:07:d8:ee:e4:c1:fa:22:2e:1d:d7:7b:83:af:09:
                    89:38:48:72:68:e3:bc:8f:fd:c7:56:27:6e:f4:97:
                    8c:89:b0:1b:89:9c:a3:a8:e9:20:e4:b9:d1:b3:e4:
                    f1:bc:83:43:2f:3b:a0:00:fa:b3:1e:09:a8:76:43:
                    94:12:9a:53:0c:60:67:06:d4:ea:0d:43:36:e3:97:
                    aa:cd:d1:bf:92:93:ba:e7:28:66:01:da:2c:13:86:
                    a2:bf:7c:6d:b6:c0:56:97:9b:48:8d:3e:6e:46:58:
                    e2:c6:94:36:48:b2:1c:6c:46:60:3e:69:d6:36:73:
                    58:d5:7e:ce:15:49:21:7f:c1:61:4b:10:97:f9:d4:
                    a0:38:34:0a:81:33:89:8b:8e:b6:f3:31:29:7c:a3:
                    41:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D4:5D:4F:85:C1:62:E9:81:D6:9F:0A:7F:11:2A:DD:CD:93:05:6D
            X509v3 Authority Key Identifier:
                keyid:ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:7e:23:01:ae:8f:0e:19:23:f8:2d:7d:a4:a2:a8:4e:13:7a:
         62:ac:d3:c1:fc:81:2d:d3:29:92:3a:66:3c:13:d7:4b:43:09:
         a4:62:93:8d:78:a5:fd:70:52:2d:a1:fc:13:e1:05:00:32:12:
         2e:da:b1:f9:65:f8:1b:7c:e0:c0:38:17:18:24:d5:b7:ad:82:
         67:fe:1a:2e:6e:af:4b:69:0f:d0:ff:91:27:32:3e:ca:76:48:
         77:b4:df:4f:b8:91:25:17:d8:e8:35:7a:c6:50:44:69:d9:20:
         93:f5:73:b8:c8:4d:cb:85:96:d8:90:46:58:25:4b:40:7f:c2:
         ef:73:eb:e3:e7:88:27:06:50:78:41:85:48:55:7b:0c:7b:8c:
         24:d3:31:9a:20:79:5e:b5:6a:19:cf:0b:ed:e6:77:da:e5:9b:
         a7:07:f3:67:70:8d:cc:4e:04:66:74:dd:ae:56:45:ed:9a:92:
         89:ef:71:a4:9d:39:79:b2:e7:fb:46:c0:bb:0c:30:40:2e:f0:
         7c:b9:0d:9a:2f:fa:82:43:3d:ff:5b:b7:96:3e:6c:50:fb:98:
         ec:ba:90:40:37:e1:5c:11:89:c8:8b:1b:86:a2:7d:70:4d:f3:
         2a:f8:72:f4:27:27:c7:59:8b:b2:6c:ad:f2:10:ac:cc:b8:3a:
         ee:16:2e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:34:24 2025 by rpki-client