Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
File:                     RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft (raw, json)
Hash identifier:          h2R61shwGC5+RBmNtt3XHpwFAi1xPqt/rsohNK+Iaos=
Subject key identifier:   23:71:BE:18:5F:C4:0F:32:AD:16:88:49:01:DE:91:11:9A:18:FD:DE
Authority key identifier: 46:EB:E2:4C:55:91:4D:32:2F:99:92:32:8F:8A:A1:F9:0B:3D:CA:59
Certificate issuer:       /CN=A9156BBA/serialNumber=46EBE24C55914D322F9992328F8AA1F90B3DCA59
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
Manifest number:          73
Signing time:             Fri 25 Sep 2026 07:59:48 +0000
Manifest this update:     Fri 25 Sep 2026 07:59:47 +0000
Manifest next update:     Fri 02 Oct 2026 07:59:47 +0000
Files and hashes:         1: RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl (hash: gBB/ZumNOyyNJU8/YsslT7P5EJ6Gb+RwSsxFly9LnBA=)
                          2: 744F20840D2E11F181CDED510B3D8C67.roa (hash: WtiTSxbmWCc/++xLglkmvzKOWhOCbvAuOXxIHIMkStg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl
                          rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156BBA, serialNumber=46EBE24C55914D322F9992328F8AA1F90B3DCA59
        Validity
            Not Before: Sep 25 07:59:47 2026 GMT
            Not After : Oct  2 07:59:47 2026 GMT
        Subject: CN=6ab629f3-ee9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:80:e6:74:5b:34:01:ae:3a:d4:8a:ca:90:fa:
                    d8:df:37:65:a4:29:cd:81:ad:24:46:10:06:65:07:
                    86:d1:74:d3:34:78:f6:a6:e3:a8:62:3b:f8:18:33:
                    2f:17:2f:8c:1c:82:41:70:22:b5:22:37:f5:c7:89:
                    ef:56:48:bd:04:86:8b:99:6e:3e:e0:47:39:f9:69:
                    05:f1:3e:6b:cd:01:92:30:39:81:1c:1c:3a:ec:e1:
                    8c:7f:66:7f:05:d6:82:86:b6:da:11:5d:ef:08:2c:
                    7e:b3:ff:fd:a7:46:be:c6:e2:db:4b:21:0e:83:94:
                    72:4c:73:bc:e6:0d:c6:10:1f:d0:0c:b1:e4:18:88:
                    0b:9e:a8:d2:8f:96:78:15:e1:e6:15:79:32:a8:1b:
                    3f:10:5b:98:ab:91:9d:dd:7a:58:e8:21:66:1c:47:
                    a9:96:a6:13:7f:a9:70:e0:32:ef:ea:9e:c4:af:99:
                    41:50:48:d5:b8:6f:bd:9a:ff:5e:da:e4:61:08:5b:
                    cd:33:d1:d1:00:dc:37:a6:e4:32:7b:40:0d:4c:5a:
                    be:54:f1:f1:72:00:f2:d5:49:d2:9a:24:06:6b:e6:
                    67:6c:bc:f9:5b:81:f9:11:80:38:a5:1e:52:6a:10:
                    49:28:b3:d9:5e:6e:34:a2:fb:b9:82:82:60:8c:c4:
                    06:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:71:BE:18:5F:C4:0F:32:AD:16:88:49:01:DE:91:11:9A:18:FD:DE
            X509v3 Authority Key Identifier:
                keyid:46:EB:E2:4C:55:91:4D:32:2F:99:92:32:8F:8A:A1:F9:0B:3D:CA:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e7:23:64:0d:aa:1c:a5:dd:40:65:ed:05:a1:cd:e1:c7:05:
         b6:7a:22:4e:d0:23:58:54:fd:2f:a0:74:07:72:66:64:9a:5d:
         7b:c3:26:11:ae:fc:02:84:fe:53:0d:53:a0:ed:4d:c3:f0:fa:
         1e:9b:29:f7:1b:8c:99:7c:93:18:ff:b9:4e:ba:78:bc:4e:6f:
         85:5a:87:d4:f7:7a:57:3c:a8:66:63:2e:bf:21:85:2a:80:98:
         56:16:a4:01:63:b7:59:75:8d:c9:4d:e0:f1:fa:43:31:65:37:
         a1:58:15:53:a9:d5:46:39:76:e3:6f:ea:be:d5:cb:47:37:5a:
         24:31:3b:23:97:64:65:f4:e9:a8:c7:70:24:4a:bf:de:ec:ab:
         d2:cc:71:3c:30:ac:a1:e9:0f:b3:28:43:7b:88:9a:2d:41:27:
         9c:e9:bd:4b:a0:a7:14:f8:9c:cd:57:9b:48:fa:70:7d:8f:14:
         fe:dd:50:88:b8:91:dc:bd:01:56:7e:ae:ab:02:b5:dc:9b:fb:
         da:a7:fe:24:a4:7e:d8:d8:89:18:2a:54:52:90:a8:f6:c8:dd:
         55:ab:e0:4d:ba:45:a2:36:ec:2f:6a:e1:2e:dc:be:5f:a6:90:
         41:fe:b7:07:e6:db:12:f4:ee:4b:06:4f:9e:76:c4:3a:84:79:
         77:2b:0e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:59:54 2026 by rpki-client