Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
File:                     RUCi-buGGfZIYtCWyEyTjoivPGw.mft (raw, json)
Hash identifier:          Erb5nvakFi5qgyq61p9wsEpRDF4WgKFy0bnS2FTBSWw=
Subject key identifier:   8F:2B:D9:1F:77:17:6A:93:6E:48:11:20:5E:E6:17:31:F2:31:95:D1
Authority key identifier: 45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C
Certificate issuer:       /CN=A91DCF3D/serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
Manifest number:          0167
Signing time:             Sat 31 May 2025 03:33:27 +0000
Manifest this update:     Sat 31 May 2025 03:33:27 +0000
Manifest next update:     Sat 07 Jun 2025 03:33:27 +0000
Files and hashes:         1: RUCi-buGGfZIYtCWyEyTjoivPGw.crl (hash: L5ttyOHD/Dgv8tyU56jtE3Fo8bKUusqc9iIq0NE3dJY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl
                          rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 03:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCF3D, serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C
        Validity
            Not Before: May 31 03:33:27 2025 GMT
            Not After : Jun  7 03:33:27 2025 GMT
        Subject: CN=683a7887-1513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:83:db:13:e2:41:55:e2:d7:73:1b:7f:b6:09:
                    3c:9d:41:31:e5:cd:c5:04:d4:23:11:6b:1e:ed:3f:
                    e6:ac:15:a3:f1:17:1b:14:32:77:ac:8e:aa:c3:98:
                    16:b3:d7:23:1f:19:13:1e:8e:46:85:5e:07:42:4b:
                    17:a9:86:a9:e5:48:6c:5a:ff:eb:61:6b:94:eb:60:
                    90:40:df:79:2f:0b:a3:d2:6a:44:8b:06:d0:64:8c:
                    01:22:a9:da:ee:e3:9a:52:27:1d:77:c3:a7:0f:29:
                    c5:6b:f6:e6:ed:87:39:66:17:90:01:d6:24:09:ff:
                    9d:06:f3:b4:39:3b:99:89:2a:53:d8:7a:fb:b4:aa:
                    4d:a6:24:fe:76:66:30:45:f3:e4:2f:d8:b9:5d:ad:
                    d1:34:25:f4:8e:3a:f2:4c:55:44:4c:10:14:84:66:
                    fb:0b:d9:f3:f9:6f:99:f7:57:d2:50:5c:5a:fc:dc:
                    5d:54:06:06:91:54:c8:13:cd:09:3a:56:7c:97:71:
                    7e:28:4a:78:40:b6:8e:f2:54:3b:48:a3:bc:d6:5d:
                    23:d3:04:b2:8a:24:03:6d:04:fd:b0:2d:83:e7:fc:
                    01:1a:8a:1b:f3:06:43:40:ce:27:74:da:ac:d4:17:
                    ca:87:14:95:5d:0c:51:05:5b:2e:96:78:52:a7:9b:
                    78:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2B:D9:1F:77:17:6A:93:6E:48:11:20:5E:E6:17:31:F2:31:95:D1
            X509v3 Authority Key Identifier:
                keyid:45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:2a:ce:57:e2:35:83:82:2f:bb:40:a7:a0:08:4f:ab:18:c0:
         1c:08:62:7a:e5:78:45:22:68:c4:7a:ed:6e:ee:61:a4:58:e7:
         44:14:4b:37:b7:32:c5:a5:c4:be:28:5b:5e:5f:00:57:94:22:
         87:7b:b4:31:75:49:78:99:8b:8d:b5:6a:95:6e:e2:8b:18:88:
         13:95:18:5a:65:1c:9f:07:52:0b:59:d6:5b:b1:34:24:f8:d0:
         02:fb:41:ad:fe:56:30:01:f0:d7:6a:2b:04:71:39:a3:b3:89:
         60:23:c4:55:89:a0:0e:da:18:b7:f1:a9:34:7a:10:65:46:d6:
         d4:a1:cf:7f:b9:03:22:83:f8:80:a2:87:f7:7f:9e:90:1b:43:
         c0:2c:a4:94:d3:0e:4b:1e:d6:19:d8:17:a5:17:6f:22:94:97:
         ca:f2:10:be:bc:fe:17:7e:01:47:d9:74:d8:bb:6d:2f:c9:c4:
         b3:bf:27:bc:85:22:3c:95:dd:3c:eb:02:ef:5b:eb:d2:9a:4c:
         2e:71:46:42:1e:03:74:f5:4a:eb:73:7c:ee:96:1d:3e:82:3b:
         a6:90:17:18:f4:83:b3:9e:9f:8a:fa:60:bc:13:45:e3:a3:92:
         a7:b1:d9:3c:e1:78:f0:20:ca:99:fe:46:c9:71:89:fc:58:b5:
         7b:12:2a:e1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RENGM0QxMTAvBgNVBAUTKDQ1NDBBMkY5QkI4NjE5RjY0ODYyRDA5NkM4NEM5MzhF
ODhBRjNDNkMwHhcNMjUwNTMxMDMzMzI3WhcNMjUwNjA3MDMzMzI3WjAYMRYwFAYD
VQQDEw02ODNhNzg4Ny0xNTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz4PbE+JBVeLXcxt/tgk8nUEx5c3FBNQjEWse7T/mrBWj8RcbFDJ3rI6qw5gW
s9cjHxkTHo5GhV4HQksXqYap5UhsWv/rYWuU62CQQN95Lwuj0mpEiwbQZIwBIqna
7uOaUicdd8OnDynFa/bm7Yc5ZheQAdYkCf+dBvO0OTuZiSpT2Hr7tKpNpiT+dmYw
RfPkL9i5Xa3RNCX0jjryTFVETBAUhGb7C9nz+W+Z91fSUFxa/NxdVAYGkVTIE80J
OlZ8l3F+KEp4QLaO8lQ7SKO81l0j0wSyiiQDbQT9sC2D5/wBGoob8wZDQM4ndNqs
1BfKhxSVXQxRBVsulnhSp5t4+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8r2R93
F2qTbkgRIF7mFzHyMZXRMB8GA1UdIwQYMBaAFEVAovm7hhn2SGLQlshMk46Irzxs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0YzRC9ERTI5RDUwQzEz
RjQxMUVFQjMwNEUyMzNDNEY5QUUwMi9SVUNpLWJ1R0dmWklZdENXeUV5VGpvaXZQ
R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JVQ2ktYnVHR2ZaSVl0Q1d5RXlUam9pdlBHdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Q0YzRC9ERTI5RDUwQzEzRjQxMUVFQjMwNEUyMzNDNEY5QUUwMi9SVUNpLWJ1R0dm
WklZdENXeUV5VGpvaXZQR3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBzKs5X4jWDgi+7QKegCE+rGMAcCGJ65XhFImjEeu1u7mGkWOdEFEs3
tzLFpcS+KFteXwBXlCKHe7QxdUl4mYuNtWqVbuKLGIgTlRhaZRyfB1ILWdZbsTQk
+NAC+0Gt/lYwAfDXaisEcTmjs4lgI8RViaAO2hi38ak0ehBlRtbUoc9/uQMig/iA
oof3f56QG0PALKSU0w5LHtYZ2BelF28ilJfK8hC+vP4XfgFH2XTYu20vycSzvye8
hSI8ld086wLvW+vSmkwucUZCHgN09Urrc3zulh0+gjumkBcY9IOznp+K+mC8E0Xj
o5Knsdk84XjwIMqZ/kbJcYn8WLV7Eirh
-----END CERTIFICATE-----
Generated at Sat May 31 17:49:35 2025 by rpki-client