Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
File:                     RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft (raw, json)
Hash identifier:          ft3NBmJdHbGHuwegaJf/4wUkiw0Pddk4Pm3Ytn3g3hc=
Subject key identifier:   FD:B9:F7:F6:EB:10:8D:96:C3:58:D0:C3:F2:EC:FA:1D:86:A7:01:FD
Authority key identifier: 46:EB:E2:4C:55:91:4D:32:2F:99:92:32:8F:8A:A1:F9:0B:3D:CA:59
Certificate issuer:       /CN=A9156BBA/serialNumber=46EBE24C55914D322F9992328F8AA1F90B3DCA59
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
Manifest number:          16
Signing time:             Wed 25 Mar 2026 08:12:03 +0000
Manifest this update:     Wed 25 Mar 2026 08:12:03 +0000
Manifest next update:     Wed 01 Apr 2026 08:12:03 +0000
Files and hashes:         1: RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl (hash: SdbjuZ9t3AyEzDn5vlvd/PYeH7mEpy7j1VEGqF84xdY=)
                          2: 744F20840D2E11F181CDED510B3D8C67.roa (hash: WtiTSxbmWCc/++xLglkmvzKOWhOCbvAuOXxIHIMkStg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl
                          rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156BBA, serialNumber=46EBE24C55914D322F9992328F8AA1F90B3DCA59
        Validity
            Not Before: Mar 25 08:12:03 2026 GMT
            Not After : Apr  1 08:12:03 2026 GMT
        Subject: CN=69c398d3-691d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:26:dd:9b:a7:d9:e3:e5:0c:0f:d0:fe:46:92:
                    7a:aa:b5:ad:61:19:96:0c:d7:6a:62:68:83:15:6e:
                    d8:ba:3a:f6:fb:ce:86:93:7a:02:cf:60:4a:9d:fe:
                    15:b1:c4:97:39:e5:d6:d6:f6:40:bf:94:27:e6:05:
                    d7:ab:52:06:a7:ff:ee:1d:27:58:e2:f0:2b:dc:02:
                    5d:4a:f1:a8:f3:d6:0a:7e:02:2a:42:7e:2d:e4:45:
                    5c:1f:42:80:3a:81:81:0f:bb:81:b9:a0:8b:be:83:
                    76:a3:d0:06:1a:ce:50:b3:eb:67:04:c8:07:fd:85:
                    a7:80:29:17:f9:88:6f:e4:57:5a:30:5e:73:cd:bd:
                    bd:7f:a8:8b:b8:83:b0:04:da:14:57:06:f5:e0:94:
                    15:d6:61:59:3e:9a:6f:b2:6b:d3:63:04:16:96:0f:
                    0c:71:06:77:67:65:19:89:ce:f3:e8:6e:da:40:c1:
                    ae:3e:c1:a9:56:75:e1:af:27:fe:75:63:8c:ee:cc:
                    54:d6:c5:50:66:7b:6f:dd:e3:c2:f4:01:df:35:d7:
                    99:e0:e0:64:bf:06:2e:8a:0b:62:fd:2c:0b:b7:ee:
                    18:40:77:3f:9e:1f:0a:75:d0:dc:4c:6f:df:60:49:
                    ef:7e:e2:f4:ed:56:18:7d:da:0e:e6:be:bb:42:50:
                    cd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B9:F7:F6:EB:10:8D:96:C3:58:D0:C3:F2:EC:FA:1D:86:A7:01:FD
            X509v3 Authority Key Identifier:
                keyid:46:EB:E2:4C:55:91:4D:32:2F:99:92:32:8F:8A:A1:F9:0B:3D:CA:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:77:7f:a3:ee:30:d1:28:c9:4b:a8:e3:30:6b:b8:8b:4c:e6:
         23:1f:df:07:2a:aa:41:d1:35:b2:04:be:a5:e1:42:95:12:e5:
         69:11:a6:f0:a2:09:94:56:24:88:e5:99:ea:33:46:30:5b:32:
         8a:a2:ed:e0:02:f1:1f:91:38:ee:4e:8b:c4:e5:20:41:95:9c:
         7b:d1:e7:61:ad:16:f2:7f:fc:b1:3a:48:87:56:03:19:60:d5:
         44:e3:e7:d3:0b:0b:6b:7c:a3:5b:30:0a:80:b1:3a:03:1c:f3:
         6c:c6:0a:ae:a1:51:8f:94:c6:1a:8e:93:be:b2:f2:a3:a3:ba:
         92:14:8b:52:e6:f2:53:15:0a:f0:fd:e5:06:c4:af:cd:a9:fb:
         70:46:41:4b:35:56:08:de:82:6f:f6:9c:9e:36:f6:cc:61:89:
         40:d9:f6:c7:0f:e3:fa:02:ee:eb:54:45:cf:eb:c1:96:1d:11:
         ab:7e:81:d1:03:13:cb:d4:39:e0:b8:62:a2:ef:4c:c9:46:17:
         91:c7:17:98:bc:b4:01:a7:f6:7c:c0:3c:8b:39:b0:60:0d:e6:
         e8:a5:39:6f:b8:1a:cf:50:34:2a:a2:25:f4:1b:58:e6:eb:f1:
         9c:aa:40:e3:c4:2d:8e:c9:67:9a:49:f6:40:0c:48:6d:e2:cb:
         93:fc:a9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:10 2026 by rpki-client