Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.mft
File:                     Ruh8_9-wwWKCqx7qxt0kJzKDdqY.mft (raw, json)
Hash identifier:          Hhg5S/mUS8ZZG66BVdH7mRMunTiSfLO5jLRVzmykjok=
Subject key identifier:   1D:09:F3:07:19:94:1E:E7:A1:E5:EA:33:35:7B:82:97:D5:91:DC:08
Authority key identifier: 46:E8:7C:FF:DF:B0:C1:62:82:AB:1E:EA:C6:DD:24:27:32:83:76:A6
Certificate issuer:       /CN=A91175BA/serialNumber=46E87CFFDFB0C16282AB1EEAC6DD2427328376A6
Certificate serial:       05AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.mft
Manifest number:          068C
Signing time:             Fri 28 Mar 2025 23:30:11 +0000
Manifest this update:     Fri 28 Mar 2025 23:30:11 +0000
Manifest next update:     Fri 04 Apr 2025 23:30:11 +0000
Files and hashes:         1: Ruh8_9-wwWKCqx7qxt0kJzKDdqY.crl (hash: EW8aUcp7ksddnrytAIFPtdkuL2VEBX2cQ1FjcMunFDo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.crl
                          rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Apr 2025 23:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1450 (0x5aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91175BA
        Validity
            Not Before: Mar 28 23:30:11 2025 GMT
            Not After : Apr  4 23:30:11 2025 GMT
        Subject: CN=67e73103-ef38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:52:8b:66:78:82:28:e0:74:3d:90:ca:eb:d2:
                    ac:e1:80:02:c9:d8:14:cd:cd:b3:66:06:71:cc:dd:
                    a3:e6:13:2a:ae:e8:46:4a:c0:dc:17:dc:b1:56:73:
                    1f:e2:66:e9:ae:ef:d0:dc:7e:4d:8d:f4:65:63:84:
                    7b:98:3b:d6:4a:43:4b:13:1c:8e:47:f4:01:12:88:
                    1f:27:4a:df:4f:e9:91:0d:94:2b:4d:a3:88:67:71:
                    ff:e1:36:42:b3:bf:70:e9:d3:83:16:76:f2:2a:e2:
                    2f:4b:ce:68:27:92:e4:ed:16:41:47:1d:71:c7:f4:
                    2c:3f:17:8c:4e:0b:8f:3a:bb:78:59:fc:73:24:52:
                    3b:c5:f7:2a:d2:cc:be:0b:b1:e0:fe:a7:87:c8:e0:
                    5f:a3:0c:8a:fc:17:9b:4b:31:43:b3:17:c6:1f:9c:
                    b4:65:3c:bb:ee:49:89:5e:63:30:70:59:66:05:c5:
                    31:5d:72:ab:19:ba:46:e5:42:a9:85:79:44:50:e4:
                    a8:94:96:9a:74:cc:c7:22:b2:9c:91:66:3a:6e:4c:
                    47:ed:8b:7c:89:98:a3:6a:b3:75:36:3c:f9:02:2f:
                    8f:9b:6d:e6:8c:91:38:2d:62:fa:b8:7c:c7:d7:bf:
                    78:dd:a1:86:95:d3:5c:98:6c:e0:3f:4a:62:b1:9c:
                    e1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:09:F3:07:19:94:1E:E7:A1:E5:EA:33:35:7B:82:97:D5:91:DC:08
            X509v3 Authority Key Identifier:
                keyid:46:E8:7C:FF:DF:B0:C1:62:82:AB:1E:EA:C6:DD:24:27:32:83:76:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/Ruh8_9-wwWKCqx7qxt0kJzKDdqY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:48:42:c5:6c:cd:5b:a5:23:44:b7:e2:25:e2:5c:45:65:88:
         ac:a0:58:58:06:58:82:8b:5e:e0:d6:bd:ce:eb:b8:00:37:54:
         a3:15:29:07:ca:a9:61:c5:34:41:af:d5:b6:4f:36:26:fe:e7:
         23:3f:a8:e9:18:2e:fd:d9:66:b5:70:2a:c9:1f:8f:6c:6f:7b:
         48:aa:2c:e0:50:63:a0:53:dc:3b:eb:25:2f:87:a0:66:9e:81:
         cd:15:eb:54:75:6a:f4:eb:90:eb:44:92:81:f3:b5:4d:d7:a9:
         c7:ea:e0:73:71:e8:59:c9:0b:ed:3d:f2:ff:ec:dd:24:4e:c2:
         6a:2a:16:b1:0c:f9:68:f9:f9:c7:ce:19:53:03:89:fd:ea:8b:
         f6:62:85:2a:cb:f5:3c:f7:61:0a:67:a4:60:33:66:18:17:da:
         59:25:3d:83:a3:30:98:44:86:1c:fb:a3:22:17:a9:89:d0:b8:
         f7:fc:7e:a6:be:0b:10:1e:18:4a:39:52:99:af:59:a8:fc:a1:
         1e:8e:b3:5b:cf:6b:35:45:2f:03:75:37:44:17:ab:5b:5c:21:
         09:ce:e9:89:7e:8c:54:58:33:2a:40:f7:21:79:b6:14:6d:8d:
         2c:1e:8f:21:36:0b:46:03:14:f0:54:d2:71:b0:93:d4:41:ee:
         fa:79:93:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc1QkExMTAvBgNVBAUTKDQ2RTg3Q0ZGREZCMEMxNjI4MkFCMUVFQUM2REQyNDI3
MzI4Mzc2QTYwHhcNMjUwMzI4MjMzMDExWhcNMjUwNDA0MjMzMDExWjAYMRYwFAYD
VQQDEw02N2U3MzEwMy1lZjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyFKLZniCKOB0PZDK69Ks4YACydgUzc2zZgZxzN2j5hMqruhGSsDcF9yxVnMf
4mbpru/Q3H5NjfRlY4R7mDvWSkNLExyOR/QBEogfJ0rfT+mRDZQrTaOIZ3H/4TZC
s79w6dODFnbyKuIvS85oJ5Lk7RZBRx1xx/QsPxeMTguPOrt4WfxzJFI7xfcq0sy+
C7Hg/qeHyOBfowyK/BebSzFDsxfGH5y0ZTy77kmJXmMwcFlmBcUxXXKrGbpG5UKp
hXlEUOSolJaadMzHIrKckWY6bkxH7Yt8iZijarN1Njz5Ai+Pm23mjJE4LWL6uHzH
17943aGGldNcmGzgP0pisZzh0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0J8wcZ
lB7noeXqMzV7gpfVkdwIMB8GA1UdIwQYMBaAFEbofP/fsMFigqse6sbdJCcyg3am
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzVCQS8xNkM0RDJCOEM4
NEQxMUVCOTkxM0QzMkRDNEY5QUUwMi9SdWg4Xzktd3dXS0NxeDdxeHQwa0p6S0Rk
cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J1aDhfOS13d1dLQ3F4N3F4dDBrSnpLRGRxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzVCQS8xNkM0RDJCOEM4NEQxMUVCOTkxM0QzMkRDNEY5QUUwMi9SdWg4Xzktd3dX
S0NxeDdxeHQwa0p6S0RkcVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBiSELFbM1bpSNEt+Il4lxFZYisoFhYBliCi17g1r3O67gAN1SjFSkH
yqlhxTRBr9W2TzYm/ucjP6jpGC792Wa1cCrJH49sb3tIqizgUGOgU9w76yUvh6Bm
noHNFetUdWr065DrRJKB87VN16nH6uBzcehZyQvtPfL/7N0kTsJqKhaxDPlo+fnH
zhlTA4n96ov2YoUqy/U892EKZ6RgM2YYF9pZJT2DozCYRIYc+6MiF6mJ0Lj3/H6m
vgsQHhhKOVKZr1mo/KEejrNbz2s1RS8DdTdEF6tbXCEJzumJfoxUWDMqQPchebYU
bY0sHo8hNgtGAxTwVNJxsJPUQe76eZMx
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:31 2025 by rpki-client