Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
File:                     RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft (raw, json)
Hash identifier:          u/645XYST/3O31HrbzYl90C3aWQtwYfIOQnXSPeQZbM=
Subject key identifier:   5A:A9:27:31:24:28:80:D6:F5:86:6E:2E:A7:13:34:ED:0E:8D:B9:75
Authority key identifier: 46:EB:E2:4C:55:91:4D:32:2F:99:92:32:8F:8A:A1:F9:0B:3D:CA:59
Certificate issuer:       /CN=A9156BBA/serialNumber=46EBE24C55914D322F9992328F8AA1F90B3DCA59
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
Manifest number:          0A
Signing time:             Sun 01 Mar 2026 10:40:26 +0000
Manifest this update:     Sun 01 Mar 2026 10:40:26 +0000
Manifest next update:     Sun 08 Mar 2026 10:40:26 +0000
Files and hashes:         1: RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl (hash: XXWBNUTHWEkk9vleEMYR29Qdlkwn+Y743C7gJLy5udQ=)
                          2: 744F20840D2E11F181CDED510B3D8C67.roa (hash: WtiTSxbmWCc/++xLglkmvzKOWhOCbvAuOXxIHIMkStg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl
                          rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:40:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156BBA, serialNumber=46EBE24C55914D322F9992328F8AA1F90B3DCA59
        Validity
            Not Before: Mar  1 10:40:26 2026 GMT
            Not After : Mar  8 10:40:26 2026 GMT
        Subject: CN=69a4179a-aee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6c:2f:af:64:2b:50:01:57:b1:65:d2:75:7d:
                    7d:cc:96:f1:e0:2f:f2:4d:36:bd:79:ee:67:89:b7:
                    c4:ff:b4:1e:2b:65:f1:8b:fa:0d:2e:f3:30:75:94:
                    5b:6c:cd:31:e5:29:20:29:0f:70:89:bc:5d:a9:a2:
                    19:5c:0a:56:3c:23:c0:b8:c6:5a:5b:89:cb:c1:98:
                    b1:52:bf:64:c0:c2:d6:e2:bc:e7:7f:62:50:0b:92:
                    28:ab:82:72:ab:94:26:0b:83:7b:49:03:46:a0:6e:
                    53:e9:b3:cf:fb:a6:46:99:cc:b5:83:33:eb:97:fc:
                    ef:96:ae:84:ba:8b:88:73:42:60:33:6d:26:6d:a1:
                    8d:12:cb:4a:4c:e2:61:67:1f:4a:9e:d8:35:8a:f1:
                    b0:2f:bf:27:48:29:06:e1:1d:19:05:1a:33:0f:e4:
                    28:92:e9:19:e7:01:9b:c6:18:4d:5c:a1:0f:04:ab:
                    9a:7c:cd:17:32:25:48:45:85:30:67:36:cd:4c:c8:
                    0e:1f:51:ce:08:e3:4a:2a:c7:e8:e9:15:37:00:8c:
                    d7:c6:e4:fc:87:d1:f1:de:b7:fa:49:34:98:b4:c3:
                    0a:7b:3c:53:58:c1:71:82:60:15:2c:3f:f8:56:78:
                    51:2d:19:dd:e5:f4:2b:53:b9:74:c4:27:6b:d0:84:
                    bd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A9:27:31:24:28:80:D6:F5:86:6E:2E:A7:13:34:ED:0E:8D:B9:75
            X509v3 Authority Key Identifier:
                keyid:46:EB:E2:4C:55:91:4D:32:2F:99:92:32:8F:8A:A1:F9:0B:3D:CA:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:a3:f1:15:39:3a:31:7e:7a:e9:7f:58:a8:3b:1a:89:12:dc:
         ff:74:23:62:84:5e:77:e2:5a:cd:30:8f:16:bf:da:a6:80:40:
         50:bc:23:94:44:04:18:e7:7b:00:56:48:39:89:ca:80:31:76:
         dd:ab:8e:16:68:01:28:7f:2e:55:c6:23:f2:73:34:9d:8f:51:
         a8:60:f3:fb:d3:76:85:94:f7:52:71:6f:bf:1b:b1:74:a1:2b:
         d4:e2:9d:e2:54:a9:aa:af:4c:cf:f6:93:39:30:83:76:91:e4:
         44:41:cc:1e:9f:75:83:bc:5c:82:ac:ef:d4:68:36:9d:f9:bb:
         60:ed:8c:e9:a1:00:65:5f:7c:1d:1d:16:1a:6c:cf:d9:85:5b:
         4f:e7:57:75:38:15:80:0b:80:6a:99:9f:47:10:f8:c4:28:0b:
         a0:fb:2b:b5:b7:4c:32:7a:91:ea:64:04:19:f4:73:fe:3f:ae:
         8c:b4:99:96:f5:09:dc:1f:33:c5:a6:31:5e:38:c2:1a:12:51:
         ef:e5:6d:e3:a5:86:03:9b:cd:35:d0:80:31:31:03:ed:9b:3e:
         7f:76:e2:f5:00:c5:c3:2d:b9:c7:c4:6f:2a:49:38:78:09:8e:
         4f:fd:43:69:3f:e3:64:04:d5:68:33:51:0e:54:1b:31:9c:cd:
         95:36:60:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:03:19 2026 by rpki-client