Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft
File:                     7VRR-GERmCtnraCkwGxR1KCAAXA.mft (raw, json)
Hash identifier:          3WdGtHSJLlfKSVTx/IuDaCyww7UmS3Vh7N/7PovEnV8=
Subject key identifier:   F8:A4:5E:A2:0A:5B:64:E8:BC:B0:DC:03:7B:1A:FD:0C:D6:A0:29:95
Authority key identifier: ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70
Certificate issuer:       /CN=A9154786/serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170
Certificate serial:       311B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft
Manifest number:          311A
Signing time:             Sat 04 Apr 2026 15:23:39 +0000
Manifest this update:     Sat 04 Apr 2026 15:23:39 +0000
Manifest next update:     Sat 11 Apr 2026 15:23:39 +0000
Files and hashes:         1: 7VRR-GERmCtnraCkwGxR1KCAAXA.crl (hash: sjBHcGOAbhHeWee3KITs4Cp7OfkwqpZ8y9QvdI0leFU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl
                          rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12571 (0x311b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154786, serialNumber=ED5451F86111982B67ADA0A4C06C51D4A0800170
        Validity
            Not Before: Apr  4 15:23:39 2026 GMT
            Not After : Apr 11 15:23:39 2026 GMT
        Subject: CN=69d12cfb-eb43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:55:cb:5c:6b:17:87:22:b0:3d:4b:6d:b2:12:
                    70:d0:fc:82:6e:e8:66:97:1c:0c:92:14:80:c7:58:
                    8f:8e:0c:12:02:a7:12:62:59:ce:a7:8f:1d:eb:d9:
                    8c:28:82:f1:b5:8c:b5:4f:36:04:e9:c5:45:10:77:
                    bb:75:73:d4:12:81:78:a9:ab:cb:1f:af:47:02:a8:
                    d1:6d:65:8d:16:b2:5b:f3:a1:3f:bc:95:e7:e4:27:
                    88:14:2a:2e:6a:1f:e4:b1:74:ed:25:4a:0e:0c:1e:
                    7f:ea:06:07:f7:2f:86:33:41:06:8f:f0:be:70:b0:
                    9e:84:72:94:b0:02:0c:2d:18:ff:0f:af:58:a5:fa:
                    ff:49:43:50:6a:cd:2c:ae:f1:82:cb:62:da:37:bb:
                    a5:3a:00:14:76:8e:e4:52:77:f4:e8:1b:f0:4d:e4:
                    f6:e6:f5:89:14:ed:23:84:db:50:36:3e:00:1b:cc:
                    de:a8:30:99:ae:96:6e:e3:d6:79:4f:db:5b:29:bc:
                    44:bf:f8:b1:45:36:ff:b6:30:42:4a:a5:fc:97:6e:
                    cc:50:e9:79:e3:cc:9d:10:c3:f3:b4:e1:f8:c9:d5:
                    dc:79:18:3f:4f:0e:e8:93:c2:8e:3a:fd:03:a0:0c:
                    a5:0d:18:c4:1e:79:cc:97:bb:80:d7:19:be:21:22:
                    20:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A4:5E:A2:0A:5B:64:E8:BC:B0:DC:03:7B:1A:FD:0C:D6:A0:29:95
            X509v3 Authority Key Identifier:
                keyid:ED:54:51:F8:61:11:98:2B:67:AD:A0:A4:C0:6C:51:D4:A0:80:01:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7VRR-GERmCtnraCkwGxR1KCAAXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154786/EECD4604E92B11E287F3BD945911EA32/7VRR-GERmCtnraCkwGxR1KCAAXA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:58:e2:68:49:54:46:fb:0f:85:20:68:8f:4c:81:78:8a:5f:
         18:84:25:fd:f4:20:e1:4b:80:85:10:58:41:cc:da:11:e8:83:
         e2:54:2f:df:0e:fa:f6:e1:3f:6b:69:4a:9c:e6:f4:32:1a:94:
         62:0d:59:4d:24:f2:4a:bc:97:35:de:6d:f7:67:a6:ee:34:6f:
         db:b0:55:2f:e0:52:ac:4d:88:33:52:f3:da:51:d0:ef:ab:c2:
         a1:bc:62:23:8e:98:5b:99:45:d0:9e:f6:b4:6f:0f:86:60:64:
         6c:fc:26:2b:f7:c6:fd:21:0c:92:f2:e5:01:24:0e:cf:bc:ef:
         8b:22:f1:ec:8a:b0:2a:27:03:9e:9c:54:7d:fc:21:51:73:8e:
         f2:87:e0:46:dc:ba:0d:77:2d:a3:e2:33:a0:71:b7:c4:85:81:
         2a:f8:18:f9:c4:f9:df:39:d5:49:c0:23:78:ac:65:1e:da:21:
         a6:2c:b6:4b:4b:28:5b:24:f7:7f:f5:1b:2e:95:e2:80:8d:8b:
         dd:13:c2:c6:fd:50:fb:89:0b:db:df:7f:d0:4e:79:d2:ed:af:
         32:18:bb:3e:1b:5a:5a:69:ba:c6:73:f2:2f:13:a2:df:82:50:
         fc:05:68:75:8f:d3:53:21:0d:98:04:eb:6c:43:98:fb:2e:4f:
         c8:3a:08:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:16 2026 by rpki-client