Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft
File:                     7VRR-GERmCtnraCkwGxR1KCAAXA.mft (raw, json)
Hash identifier:          KAsuxqpdXMwMeEm0HveVxJqgJ3C2LPiltf+V9Yh9/lU=
Subject key identifier:   EE:62:7D:EF:42:BB:F0:8C:38:31:DF:10:D5:3B:AA:B5:28:C5:76:E3
Authority key identifier: ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70
Certificate issuer:       /CN=A9154786/serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170
Certificate serial:       3092
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft
Manifest number:          3091
Signing time:             Sun 20 Jul 2025 15:27:45 +0000
Manifest this update:     Sun 20 Jul 2025 15:27:45 +0000
Manifest next update:     Sun 27 Jul 2025 15:27:45 +0000
Files and hashes:         1: 7VRR-GERmCtnraCkwGxR1KCAAXA.crl (hash: uJXjyOCqpzFxn7tfgaNQfQKqiVBM8T+XvglRo/+gpaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl
                          rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 15:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12434 (0x3092)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154786, serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170
        Validity
            Not Before: Jul 20 15:27:45 2025 GMT
            Not After : Jul 27 15:27:45 2025 GMT
        Subject: CN=687d0af1-eb70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:45:cc:c3:50:3f:6c:a0:39:c3:97:3a:87:7c:
                    82:b7:cc:6c:cd:d2:a7:d2:72:25:49:d5:94:cd:a7:
                    a6:6b:e4:d5:ac:f0:d6:c3:f4:12:45:32:e5:39:25:
                    73:0e:1d:d3:08:52:ff:8c:3e:b5:98:a7:e0:6f:12:
                    d2:2e:0a:06:6c:e3:05:7d:df:de:ba:1d:f6:c0:02:
                    d3:e4:3c:7a:d9:28:72:af:a8:f4:34:b0:2d:3e:f4:
                    e7:63:b0:36:cc:0e:90:ef:59:cd:ab:6a:e1:34:f5:
                    85:28:bf:38:cf:ee:bc:6e:cc:0f:f9:e0:6f:3e:cb:
                    2f:fb:cb:08:0b:e4:b5:c5:bc:07:3d:99:03:fa:6f:
                    8a:e1:dd:65:ac:a8:e0:d9:72:51:b2:33:55:63:0a:
                    21:d3:24:30:ce:36:3a:3f:d5:68:92:82:3d:47:c2:
                    9a:34:b5:3b:06:ce:a5:ec:8b:19:40:38:2a:76:62:
                    eb:7a:96:93:ba:f8:8b:63:c2:28:96:66:ea:10:28:
                    16:de:16:9b:a6:69:24:1b:eb:00:4e:1d:d7:bc:e5:
                    b8:9c:db:da:07:33:5e:e6:95:f5:74:35:4f:a4:15:
                    0c:3e:5e:82:f5:ff:d5:3b:af:d5:e3:5e:a5:26:a6:
                    82:73:5e:c4:d6:87:a1:93:a5:a6:35:86:f6:8b:6c:
                    79:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:62:7D:EF:42:BB:F0:8C:38:31:DF:10:D5:3B:AA:B5:28:C5:76:E3
            X509v3 Authority Key Identifier:
                keyid:ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:e8:c1:2d:45:59:a8:55:57:23:dc:d3:cf:10:12:a5:9e:cd:
         8c:10:50:28:52:6c:37:14:aa:6a:f5:6a:f4:3d:46:23:48:7d:
         27:da:3f:78:06:00:19:4f:00:b0:6f:d8:e7:d3:da:d3:49:a1:
         77:a9:0c:8a:d6:fb:8f:b3:af:2c:f0:7d:54:de:5c:52:3b:49:
         50:04:7e:ce:66:11:75:74:90:a0:e6:c2:1b:05:87:66:2d:78:
         ec:fe:d0:f0:d5:cb:ef:2d:83:e0:86:ea:98:d4:5c:1e:07:8c:
         85:f2:bf:e9:31:85:f7:28:de:2e:9e:17:d3:47:99:cc:9e:74:
         97:7c:bc:5a:07:cc:73:e6:c3:9e:c1:ba:a3:08:80:6e:dc:1c:
         fd:3b:29:45:2e:3c:7c:e9:aa:e4:dc:b9:55:f0:49:3b:f8:20:
         d6:bb:f1:8c:01:b4:49:01:80:a3:e5:f6:7e:04:ff:b4:39:ee:
         9b:0c:24:de:c9:a8:ca:98:c9:62:48:cb:1f:55:92:49:2d:f4:
         ab:5d:db:78:0a:97:9d:ae:57:33:15:b7:7e:90:e9:75:07:44:
         83:bf:c8:cf:1e:bf:20:bc:99:f7:e7:ce:b1:4b:d1:c9:cf:e8:
         db:06:92:85:6c:7e:d8:7c:e0:31:e3:42:8d:bc:4b:2d:ec:e3:
         0e:27:92:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:06:56 2025 by rpki-client