Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
File:                     RUCi-buGGfZIYtCWyEyTjoivPGw.mft (raw, json)
Hash identifier:          LyHAO6Qwlw+bffRNi3XdIkctkst/M3Mg+P6dmcp92kA=
Subject key identifier:   DC:EF:07:DB:E1:1E:BC:09:C9:B5:E5:A7:CC:AB:2D:DD:79:25:9E:04
Authority key identifier: 45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C
Certificate issuer:       /CN=A91DCF3D/serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C
Certificate serial:       0203
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
Manifest number:          0202
Signing time:             Wed 25 Mar 2026 02:24:42 +0000
Manifest this update:     Wed 25 Mar 2026 02:24:41 +0000
Manifest next update:     Wed 01 Apr 2026 02:24:41 +0000
Files and hashes:         1: RUCi-buGGfZIYtCWyEyTjoivPGw.crl (hash: nhcgqX5YcNlK1G/6ofEKpaj1fETqRVHuC3KGoVZ1fwE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl
                          rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:24:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCF3D, serialNumber=4540A2F9BB8619F64862D096C84C938E88AF3C6C
        Validity
            Not Before: Mar 25 02:24:41 2026 GMT
            Not After : Apr  1 02:24:41 2026 GMT
        Subject: CN=69c3476a-5e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b6:f4:3f:cc:0e:d0:33:dc:b3:65:7b:ff:9a:
                    da:c8:df:d5:73:a9:25:d4:1e:42:de:2e:f2:10:9e:
                    b3:c2:49:41:f2:ab:6a:46:b2:2b:6d:65:44:4a:12:
                    99:c3:9b:6d:fe:a8:96:2f:27:57:f9:52:9f:7b:55:
                    3d:99:25:1c:75:9d:b8:b1:79:08:d0:ca:48:a0:d3:
                    6a:58:c9:aa:c0:b3:08:f7:2c:63:64:e9:8b:34:6f:
                    83:c8:0a:c0:f0:34:d8:4e:9d:f3:c4:c4:f8:af:26:
                    67:22:4a:9d:c3:bc:ea:50:89:4f:3f:c6:f4:67:87:
                    4f:16:2e:0e:44:b5:0d:5c:74:c8:98:2a:7f:67:01:
                    44:9c:14:75:ff:7e:ed:f3:97:5c:08:c2:77:24:08:
                    11:9f:2b:7c:bf:0c:b5:28:3d:54:d1:54:86:c5:2a:
                    4b:5b:4a:e1:6f:16:8f:ce:6f:73:42:3f:9c:bf:d8:
                    66:12:1c:fd:30:67:55:13:82:9f:68:a3:62:a7:a9:
                    79:27:ac:18:c5:72:66:14:2d:c1:03:21:3c:aa:12:
                    3e:2e:a1:77:7a:d1:4a:be:a7:6d:2b:1f:a3:07:93:
                    d5:f2:a9:a6:cf:43:98:63:10:38:5c:75:0a:c4:75:
                    b0:50:3d:86:18:fb:90:96:41:ef:89:ea:3a:de:33:
                    31:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EF:07:DB:E1:1E:BC:09:C9:B5:E5:A7:CC:AB:2D:DD:79:25:9E:04
            X509v3 Authority Key Identifier:
                keyid:45:40:A2:F9:BB:86:19:F6:48:62:D0:96:C8:4C:93:8E:88:AF:3C:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RUCi-buGGfZIYtCWyEyTjoivPGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF3D/DE29D50C13F411EEB304E233C4F9AE02/RUCi-buGGfZIYtCWyEyTjoivPGw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:f1:d2:19:82:5a:4d:2f:1b:0a:84:ca:8b:38:7a:58:00:cf:
         90:1b:f0:1f:c7:0c:46:2b:9f:c0:25:b7:d2:3b:cc:ed:a9:af:
         1d:25:60:32:30:26:de:61:eb:f2:54:29:a5:7a:b5:4e:88:75:
         74:34:7b:ce:66:1d:a0:bd:40:a9:57:1e:14:0b:90:b5:ed:a9:
         af:1d:8a:7f:16:d9:89:45:21:37:e2:0f:f0:60:3f:04:d1:2b:
         eb:c1:fb:cc:94:f6:f4:02:88:db:d9:a7:7c:b2:88:e4:3d:38:
         0f:17:14:a8:0b:c8:c3:99:78:4c:57:72:02:5f:e7:08:fc:fa:
         91:60:2b:5f:57:b4:d1:b5:1d:0b:eb:84:3b:09:4e:6b:70:94:
         b3:82:11:e9:99:80:af:2e:63:c5:a5:fa:58:e4:3c:38:3a:4b:
         b5:40:47:8f:71:9f:95:d2:18:a7:bb:c7:90:d3:d1:e5:15:d8:
         a5:fe:cc:ee:c2:83:a5:0f:cb:25:13:2a:97:4e:a5:14:87:37:
         74:40:21:04:28:72:b0:18:0c:d9:a0:45:d8:ab:cb:21:71:6f:
         e7:ef:c8:3b:2c:71:c6:45:5b:cb:73:d6:41:63:10:b6:8b:f6:
         b9:f0:11:cd:58:87:43:86:85:ab:8c:eb:e6:62:39:41:d9:41:
         69:7e:ea:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RENGM0QxMTAvBgNVBAUTKDQ1NDBBMkY5QkI4NjE5RjY0ODYyRDA5NkM4NEM5MzhF
ODhBRjNDNkMwHhcNMjYwMzI1MDIyNDQxWhcNMjYwNDAxMDIyNDQxWjAYMRYwFAYD
VQQDEw02OWMzNDc2YS01ZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo7b0P8wO0DPcs2V7/5rayN/Vc6kl1B5C3i7yEJ6zwklB8qtqRrIrbWVEShKZ
w5tt/qiWLydX+VKfe1U9mSUcdZ24sXkI0MpIoNNqWMmqwLMI9yxjZOmLNG+DyArA
8DTYTp3zxMT4ryZnIkqdw7zqUIlPP8b0Z4dPFi4ORLUNXHTImCp/ZwFEnBR1/37t
85dcCMJ3JAgRnyt8vwy1KD1U0VSGxSpLW0rhbxaPzm9zQj+cv9hmEhz9MGdVE4Kf
aKNip6l5J6wYxXJmFC3BAyE8qhI+LqF3etFKvqdtKx+jB5PV8qmmz0OYYxA4XHUK
xHWwUD2GGPuQlkHvieo63jMx/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNzvB9vh
HrwJybXlp8yrLd15JZ4EMB8GA1UdIwQYMBaAFEVAovm7hhn2SGLQlshMk46Irzxs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0YzRC9ERTI5RDUwQzEz
RjQxMUVFQjMwNEUyMzNDNEY5QUUwMi9SVUNpLWJ1R0dmWklZdENXeUV5VGpvaXZQ
R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JVQ2ktYnVHR2ZaSVl0Q1d5RXlUam9pdlBHdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Q0YzRC9ERTI5RDUwQzEzRjQxMUVFQjMwNEUyMzNDNEY5QUUwMi9SVUNpLWJ1R0dm
WklZdENXeUV5VGpvaXZQR3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkfHSGYJaTS8bCoTKizh6WADPkBvwH8cMRiufwCW30jvM7amvHSVgMjAm3mHr
8lQppXq1Toh1dDR7zmYdoL1AqVceFAuQte2prx2KfxbZiUUhN+IP8GA/BNEr68H7
zJT29AKI29mnfLKI5D04DxcUqAvIw5l4TFdyAl/nCPz6kWArX1e00bUdC+uEOwlO
a3CUs4IR6ZmAry5jxaX6WOQ8ODpLtUBHj3GfldIYp7vHkNPR5RXYpf7M7sKDpQ/L
JRMql06lFIc3dEAhBChysBgM2aBF2KvLIXFv5+/IOyxxxkVby3PWQWMQtov2ufAR
zViHQ4aFq4zr5mI5QdlBaX7qQA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:57 2026 by rpki-client