Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
File:                     WKGWp78G8uFukJ0ncUG6RJEfH08.mft (raw, json)
Hash identifier:          zZHcJ94e9PrbECVaI/WR0vTx2iIUTpu0WehmJEne9vY=
Subject key identifier:   AA:DA:53:6B:C0:29:87:A1:FB:EB:9E:A2:BD:37:19:D5:1A:72:A6:32
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       36EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
Manifest number:          35CF
Signing time:             Fri 17 Apr 2026 02:13:17 +0000
Manifest this update:     Fri 17 Apr 2026 02:13:17 +0000
Manifest next update:     Fri 24 Apr 2026 02:13:17 +0000
Files and hashes:         1: WKGWp78G8uFukJ0ncUG6RJEfH08.crl (hash: 88QF/4O9WRboOlOSsDMGmdPwhMQSEsK/ZXBx4ZuCJ+w=)
                          2: AC8A67CA100311F085EE3D29C4F9AE02.roa (hash: x7wMdNtws0Zk8todAFQAVhvhVj8vpXnpLHAo0o0q0EI=)
                          3: 5D001D76932811E8BC93865BC4F9AE02.roa (hash: pnq2HjvX+VS1IJEyx1/G8baR9Q04KAF0DCxLCQuG8cY=)
                          4: 493BCC24BC6911EFBA2E5C78C4F9AE02.roa (hash: VW7cuYgRFMAxVvfNs/yCn19RQX/HKB7xjGUiTI8NO4Q=)
                          5: 309268DCBB7E11E9AFB49C42C4F9AE02.roa (hash: YmGFgwUypcFh5OijZSTGp22AvvVEqAYggryXmPGaV1g=)
                          6: 81ACB3888C9611EE88DE0726C4F9AE02.roa (hash: TqThcjGCZdcUCFCB5iBMES4y4Hmtcv0QzeWoAJ38VUs=)
                          7: 5553B5FEE90E11EA998F5735C4F9AE02.roa (hash: eyAZbbtItdVCD0trW/+j/FNlPCIgtEJrjEuk2yOz4cg=)
                          8: EF706AC45C7311EF9CC47281C4F9AE02.roa (hash: 5t2Yq05hPwtXuLtqs8kweaIaku2qocKgZs9gLGmRXRc=)
                          9: F097E10C5C7311EF9CC47281C4F9AE02.roa (hash: eIEz+HOUkpHE2Yid4Ib+bwGWkf99JpQePY3ZBP5agtw=)
                          10: 183E52D8224711EB9EC51D58C4F9AE02.roa (hash: 0GPHGJSwVSQN+HbeQHFY1E7yMWeA5ao5zjgE2dX2Ib0=)
                          11: 92B41AACB17B11F0A5D78E54C4F9AE02.roa (hash: iYAnt767P+k9FiLxROTY3OzyA9z+btPHTlDDG1LpQr8=)
                          12: EFF618B85C7311EF9CC47281C4F9AE02.roa (hash: 0sKcvUYxjYjLTTrWzUhBUTZKYSo+/DzfvIKZqW3DAPk=)
                          13: 2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa (hash: fWSj9dAgYw9nG3wqv+J+lqVoRiH88B3Y/i3ikVgewC4=)
                          14: 5C3F2BB6932811E8BC93865BC4F9AE02.roa (hash: kiic5/OTQTtn1z2lkfPAndpHchp8QnMx93thaVLeWyM=)
                          15: F1120B125C7311EF9CC47281C4F9AE02.roa (hash: D9vDHtH3V7RQG+Zx0bZ20FinYokxnT2cxn2H3B3MXXw=)
                          16: 8987F942335911E8A1642A7FC4F9AE02.roa (hash: 2NVh/4Y5D2OTZDSW56ekK5upiHvTQpJeMadJ6WP+B1w=)
                          17: E0342C7AACF811EDA84F9711C4F9AE02.roa (hash: VLpZ241wVDEpWgAarSP8WgjDb1LnfEipWDP1xjst+Es=)
                          18: 312AAAD4BB7E11E9AFB49C42C4F9AE02.roa (hash: xwFRv4+36h+Qv5qqEuC5mbYdz3jPK7pHI/k9Akot9jk=)
                          19: BA0DF746D9F611F08511A4D47CD3641D.roa (hash: tPsB/mFPPLvgfNpniANFq0WNy30CGEztpU7Bq2UHrLs=)
                          20: 184CBE58768B11EFAF7A8C68C4F9AE02.roa (hash: FxAkH14gN3qeGyp7CAwPM1GGueqiuEJR03b+75cT2Ys=)
                          21: 97DFFA2AD39E11EF9395C676C4F9AE02.roa (hash: 7eIKxIs5ApKcSsqSTsxpl/ToP4LMHKxxhepDk6zeUbE=)
                          22: 6201F1DEC46F11F08682F936C4F9AE02.roa (hash: efx8+5xrcECmjvvHmgG7O7h52QnxQQAcGyhoXJoZs2g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14059 (0x36eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Apr 17 02:13:17 2026 GMT
            Not After : Apr 24 02:13:17 2026 GMT
        Subject: CN=69e1973d-1ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7e:58:53:8a:69:6b:a6:22:cd:e3:13:59:5c:
                    8b:99:2e:8e:c4:22:e5:2e:3f:4b:1d:ce:ac:0a:14:
                    8e:87:cc:2a:22:c5:08:2d:1e:e4:80:59:eb:2b:cc:
                    d9:82:af:69:24:19:fd:08:15:28:79:e7:32:48:53:
                    d0:47:24:2d:ea:6c:1e:8c:1f:9c:4a:0b:31:c2:ba:
                    d2:68:7c:99:9d:c7:30:b8:28:f1:da:1a:4c:be:8e:
                    8b:4f:77:b9:09:ac:9d:64:7a:7f:b6:95:18:b5:87:
                    92:a5:e1:79:e9:3a:8c:e6:00:4c:18:9f:ff:63:b6:
                    19:a7:e4:bc:45:86:0e:73:d9:aa:eb:6e:2a:45:da:
                    77:db:c5:72:72:0d:04:3c:e9:b3:11:bc:c9:6b:54:
                    6c:cb:5d:64:3e:51:97:b9:69:2d:1e:d2:0f:22:33:
                    08:cf:da:36:14:f6:3e:22:38:3b:bc:cb:f3:fa:39:
                    fb:ef:e3:b6:7a:da:f2:be:42:d5:0d:96:d5:95:a8:
                    29:6f:33:3c:89:f5:72:83:7f:33:28:eb:b7:1d:3b:
                    c1:ca:b2:82:83:10:f1:82:f8:c3:93:bb:f3:bb:96:
                    58:1f:ac:bc:1b:74:31:a3:0b:cc:fb:ea:66:bb:3b:
                    b7:70:43:c6:03:da:ef:fe:9d:cf:ce:ec:68:cd:9b:
                    1d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DA:53:6B:C0:29:87:A1:FB:EB:9E:A2:BD:37:19:D5:1A:72:A6:32
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:54:56:fd:ca:be:8d:49:6a:d1:72:6f:3c:ea:b7:78:ab:1d:
         3c:18:f9:82:cb:6f:7e:50:82:ca:ee:10:30:ff:cb:cd:9e:17:
         b2:b5:b9:08:80:be:b8:c9:53:50:d7:28:83:c5:d5:d8:89:50:
         23:46:92:cb:b5:13:6e:08:6e:67:95:fa:30:9e:e1:14:6e:a5:
         04:2d:b6:a6:02:3a:4b:fa:cb:81:91:a9:72:ec:d9:c8:e1:7c:
         63:05:53:a9:e9:1a:84:e0:3e:9b:ea:94:9a:be:b4:3f:ef:78:
         94:dd:b4:e5:2e:cc:21:64:d3:60:5d:58:aa:5b:ad:f7:d6:10:
         36:9d:c4:44:9a:6a:99:cc:a3:4a:94:16:79:a2:24:b3:6c:9c:
         0e:81:24:3c:bd:fb:c6:ca:3f:c9:c4:f4:56:2a:80:2d:db:30:
         6b:85:01:e9:19:9b:85:a4:75:e9:04:df:aa:c9:55:ec:79:82:
         df:2d:70:6d:fe:a7:c5:50:0f:3f:06:33:92:69:aa:50:f5:4f:
         fd:07:3a:a0:ce:2c:e9:48:f7:10:90:16:2b:68:fa:8f:b3:56:
         0a:33:f7:07:44:21:49:3d:54:7d:0a:7c:15:55:e4:77:9a:ca:
         1a:96:99:83:f8:30:12:b5:c4:d0:56:30:61:58:cf:90:b3:3e:
         83:b8:ec:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:38:56 2026 by rpki-client