Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
File:                     RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft (raw, json)
Hash identifier:          wnS0lBU9LFb7HW0Sonj6lqa78bxoUUsZrdqr4S4AZcc=
Subject key identifier:   34:3D:F4:99:0C:B4:76:86:4F:60:05:FF:D1:26:B6:92:47:CC:CE:FF
Authority key identifier: 46:EB:E2:4C:55:91:4D:32:2F:99:92:32:8F:8A:A1:F9:0B:3D:CA:59
Certificate issuer:       /CN=A9156BBA/serialNumber=46EBE24C55914D322F9992328F8AA1F90B3DCA59
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
Manifest number:          51
Signing time:             Tue 21 Jul 2026 10:08:43 +0000
Manifest this update:     Tue 21 Jul 2026 10:08:42 +0000
Manifest next update:     Tue 28 Jul 2026 10:08:42 +0000
Files and hashes:         1: RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl (hash: 1Gkb63cuWwAN98trxALTzSSMPGfnjgKBege+mkTtciE=)
                          2: 744F20840D2E11F181CDED510B3D8C67.roa (hash: WtiTSxbmWCc/++xLglkmvzKOWhOCbvAuOXxIHIMkStg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl
                          rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 10:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156BBA, serialNumber=46EBE24C55914D322F9992328F8AA1F90B3DCA59
        Validity
            Not Before: Jul 21 10:08:42 2026 GMT
            Not After : Jul 28 10:08:42 2026 GMT
        Subject: CN=6a5f452a-f6cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:09:4c:6d:33:40:f0:3c:8a:35:45:b6:60:
                    da:54:64:29:39:b2:5c:9e:68:04:7b:dd:94:6f:30:
                    47:0e:0f:70:d3:05:37:72:83:53:5b:9f:1f:a0:58:
                    e7:52:be:ec:09:ef:07:e2:72:97:40:00:ab:54:86:
                    aa:34:6f:14:bb:04:8c:6b:51:75:10:6d:f2:51:c4:
                    6d:c5:d0:89:2d:29:22:6e:06:fa:fc:59:26:60:32:
                    48:d0:6c:11:5d:20:2d:56:dd:1b:5a:9b:d1:c9:35:
                    08:b9:e9:08:65:29:05:1e:2b:97:38:2b:f1:2b:81:
                    38:fa:71:e8:42:6e:eb:19:42:05:93:fc:45:68:ec:
                    02:5b:a6:6a:5d:13:b7:50:3c:79:b9:41:55:56:d7:
                    e3:67:e9:fd:63:01:f5:b9:d7:65:d3:4f:b6:92:2c:
                    1d:35:a8:85:b5:b8:d3:6d:66:fb:84:9a:da:a4:7b:
                    4e:38:a3:19:21:dc:7b:dd:a2:2b:5f:a5:22:db:3c:
                    c9:2d:05:3d:9f:c6:e9:2e:59:b3:2b:65:40:ae:66:
                    ab:c7:9e:74:02:a9:31:77:29:cf:40:c4:94:0e:93:
                    2f:38:8a:6e:07:c5:75:01:cb:42:5c:08:1a:13:96:
                    04:76:50:1c:6c:16:71:ea:a5:16:ac:69:dd:9d:cb:
                    2d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3D:F4:99:0C:B4:76:86:4F:60:05:FF:D1:26:B6:92:47:CC:CE:FF
            X509v3 Authority Key Identifier:
                keyid:46:EB:E2:4C:55:91:4D:32:2F:99:92:32:8F:8A:A1:F9:0B:3D:CA:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RuviTFWRTTIvmZIyj4qh-Qs9ylk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156BBA/BDF38AC40D2211F1B9B71E59083D8C67/RuviTFWRTTIvmZIyj4qh-Qs9ylk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:7c:81:bc:b5:9d:6d:10:5d:91:09:91:e4:93:09:e8:55:e0:
         a9:a8:11:63:b2:55:8b:62:9b:f5:83:9b:db:74:83:27:6b:f9:
         22:9e:5f:cb:63:0f:e5:b3:5c:ea:09:cf:82:57:e2:99:42:e7:
         fa:a2:ba:d0:b2:2b:d0:78:7d:96:f0:a1:5a:aa:65:53:4d:46:
         99:6c:74:8d:1f:0a:01:68:69:62:dd:11:c6:2d:2b:0f:b9:b0:
         57:a8:11:cb:7a:06:5e:ee:5d:9e:e8:3c:ef:6e:d3:40:63:f3:
         df:67:bf:ca:ff:fb:92:f6:89:a4:2d:15:95:4b:1a:91:e7:3c:
         3f:13:5d:ca:26:39:a5:99:38:b5:24:6f:3b:4e:5c:2c:a9:10:
         d0:11:a6:67:54:f5:f3:a9:e6:d2:ed:7d:9d:3d:17:32:66:5c:
         70:75:d9:ae:60:7b:1c:90:be:07:65:1a:a7:65:b6:7f:76:c9:
         cc:e8:07:d9:31:5d:89:a9:aa:f2:08:32:ff:6a:32:bb:5f:c1:
         97:b9:1c:e6:3e:da:5d:d1:c9:0d:0d:30:6e:8c:c5:08:c2:8f:
         f4:eb:1a:bb:87:65:97:0d:fe:32:ee:cd:a8:67:94:d0:f4:48:
         ee:f9:e5:2d:e7:23:27:79:05:7e:2e:59:d0:b0:9b:c8:fb:d3:
         c2:0b:79:ec
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
NkJCQTExMC8GA1UEBRMoNDZFQkUyNEM1NTkxNEQzMjJGOTk5MjMyOEY4QUExRjkw
QjNEQ0E1OTAeFw0yNjA3MjExMDA4NDJaFw0yNjA3MjgxMDA4NDJaMBgxFjAUBgNV
BAMTDTZhNWY0NTJhLWY2Y2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8vAlMbTNA8DyKNUW2YNpUZCk5slyeaAR73ZRvMEcOD3DTBTdyg1Nbnx+gWOdS
vuwJ7wficpdAAKtUhqo0bxS7BIxrUXUQbfJRxG3F0IktKSJuBvr8WSZgMkjQbBFd
IC1W3Rtam9HJNQi56QhlKQUeK5c4K/ErgTj6cehCbusZQgWT/EVo7AJbpmpdE7dQ
PHm5QVVW1+Nn6f1jAfW512XTT7aSLB01qIW1uNNtZvuEmtqke044oxkh3Hvdoitf
pSLbPMktBT2fxukuWbMrZUCuZqvHnnQCqTF3Kc9AxJQOky84im4HxXUBy0JcCBoT
lgR2UBxsFnHqpRasad2dyy3xAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUND30mQy0
doZPYAX/0Sa2kkfMzv8wHwYDVR0jBBgwFoAURuviTFWRTTIvmZIyj4qh+Qs9ylkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QkJBL0JERjM4QUM0MEQy
MjExRjFCOUI3MUU1OTA4M0Q4QzY3L1J1dmlURldSVFRJdm1aSXlqNHFoLVFzOXls
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvUnV2aVRGV1JUVEl2bVpJeWo0cWgtUXM5eWxrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2
QkJBL0JERjM4QUM0MEQyMjExRjFCOUI3MUU1OTA4M0Q4QzY3L1J1dmlURldSVFRJ
dm1aSXlqNHFoLVFzOXlsay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAafIG8tZ1tEF2RCZHkkwnoVeCpqBFjslWLYpv1g5vbdIMna/kinl/LYw/ls1zq
Cc+CV+KZQuf6orrQsivQeH2W8KFaqmVTTUaZbHSNHwoBaGli3RHGLSsPubBXqBHL
egZe7l2e6DzvbtNAY/PfZ7/K//uS9omkLRWVSxqR5zw/E13KJjmlmTi1JG87Tlws
qRDQEaZnVPXzqebS7X2dPRcyZlxwddmuYHsckL4HZRqnZbZ/dsnM6AfZMV2Jqary
CDL/ajK7X8GXuRzmPtpd0ckNDTBujMUIwo/06xq7h2WXDf4y7s2oZ5TQ9Eju+eUt
5yMneQV+LlnQsJvI+9PCC3ns
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:50:36 2026 by rpki-client