Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
File:                     WKGWp78G8uFukJ0ncUG6RJEfH08.mft (raw, json)
Hash identifier:          yl93P9/P9XiNnYdGKpCWi2tJOHPQTnUfiM7esk8leM0=
Subject key identifier:   B2:64:CF:CF:DD:52:29:C4:48:33:06:D9:C4:A3:EE:E8:A9:3E:D4:F2
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       35E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
Manifest number:          3519
Signing time:             Sat 14 Jun 2025 14:47:49 +0000
Manifest this update:     Sat 14 Jun 2025 14:47:48 +0000
Manifest next update:     Sat 21 Jun 2025 14:47:48 +0000
Files and hashes:         1: WKGWp78G8uFukJ0ncUG6RJEfH08.crl (hash: kef91FkttNY42l827cPMUz2xNr3e88P0uEAB+SmR4yI=)
                          2: EFF618B85C7311EF9CC47281C4F9AE02.roa (hash: Pf2MnnhmDrIwYiVJrAMzmgmX91XwAMLmBq+CMRQ9ITg=)
                          3: AC8A67CA100311F085EE3D29C4F9AE02.roa (hash: GNpuswIm+G6D5OwUx8uxAOUcNrCwK1Z/Tj1cmKrG5Uc=)
                          4: 493BCC24BC6911EFBA2E5C78C4F9AE02.roa (hash: P+SVMecRmlSzLHmZJYs7OTgRtoq2uV1xwoBkAlCMLfs=)
                          5: 6142006627A511F0BD64AC72C4F9AE02.roa (hash: aNWtXREBPS7XRBdND3PnsSs8FUUw+FFgm3V8IksP10s=)
                          6: 5553B5FEE90E11EA998F5735C4F9AE02.roa (hash: oSJab/EVi+ifqNiMiViOLz8HkZ1QwjUJBAjTyuVCBBE=)
                          7: E0342C7AACF811EDA84F9711C4F9AE02.roa (hash: AA2EGEjDGl9i4FsYA91Ikir5YCSOz7E8lHeITUN7tLY=)
                          8: 5D001D76932811E8BC93865BC4F9AE02.roa (hash: xOTr/5KGUUM34JKJY1lwfTVBRDQmjApqpEKH2Iu8g7I=)
                          9: 183E52D8224711EB9EC51D58C4F9AE02.roa (hash: qgDfVvJM4t2nmo/ZdmRVYasGnroWUOtYNFtKUMd8mAw=)
                          10: 5C5998765AD611EFA2E29C7BC4F9AE02.roa (hash: xnJz9CbWIuAsxAPEZuUOdvS3/6CU2AdVOkfsin07HJk=)
                          11: F1120B125C7311EF9CC47281C4F9AE02.roa (hash: D1LuX3usa0tBox0sSCc8jcGl3+07/Mmi9S6IkrSaNU0=)
                          12: 2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa (hash: PHAUjchkulAgFgushqKaTiFT8Ff/mwtL2jMnBLLBhyY=)
                          13: 6064297627A511F0BD64AC72C4F9AE02.roa (hash: ZmxvZ6F2HfZBJIqUD1KIyD3YLmWldyr3OWp7w/lgDEc=)
                          14: 309268DCBB7E11E9AFB49C42C4F9AE02.roa (hash: selOomNAFksb1Hw1lPQaCIu26iQta1741v3Ucrg1QH0=)
                          15: 312AAAD4BB7E11E9AFB49C42C4F9AE02.roa (hash: k6jn/HtB7ksK0AYue3Gi2YlXKybN47y+89NwaYeQS2Y=)
                          16: EF706AC45C7311EF9CC47281C4F9AE02.roa (hash: vjLJIbHY8cYp0MYdF36S+lma3wzeIloym0TLu9Xd1c4=)
                          17: 5C3F2BB6932811E8BC93865BC4F9AE02.roa (hash: EYATmfrVQplrHeXLwwsW1L6CDc1lZrLnBOvjrWbcFfM=)
                          18: F097E10C5C7311EF9CC47281C4F9AE02.roa (hash: 1ruZSUxAHFBtpg74cN22UGy/DbQsooH9+ozLl8ocAGA=)
                          19: 184CBE58768B11EFAF7A8C68C4F9AE02.roa (hash: NRD5JEMwxnAIyegq+yDnZE3cvxLvnDvPFwXtytdSo9U=)
                          20: 97DFFA2AD39E11EF9395C676C4F9AE02.roa (hash: tYNZDrfG+2ivcq2p9DfNp1fhz8gxojjjQmCChm3l52M=)
                          21: 81ACB3888C9611EE88DE0726C4F9AE02.roa (hash: k8UmxA4SbwbaZ421n0imukn2nmBZM0f5sHMchmg01MM=)
                          22: 8987F942335911E8A1642A7FC4F9AE02.roa (hash: r7nt+0YR0gcp9UZZg6iqfoS5mJ5OaWvN1C2TW4aaCpg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 14:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13801 (0x35e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Jun 14 14:47:48 2025 GMT
            Not After : Jun 21 14:47:48 2025 GMT
        Subject: CN=684d8b94-4201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6a:ac:03:d4:39:d5:55:5a:af:d2:cf:a2:61:
                    02:48:dc:5d:dd:fb:ee:90:1d:a3:88:cd:63:76:77:
                    7e:71:8d:8a:05:e6:1e:7c:ad:0d:3d:2d:9f:fb:d4:
                    82:8f:7e:81:34:6c:10:5c:fa:8b:d4:db:45:e3:2c:
                    e6:c5:62:b4:73:e4:9c:b6:ef:02:a7:ac:07:a7:3d:
                    a1:e5:ef:b0:4d:05:2a:c1:0c:3a:c0:98:84:fa:16:
                    c9:55:67:36:51:ab:24:bb:95:72:76:8b:96:f2:11:
                    73:63:c4:a9:b4:dc:4d:b2:4c:86:c9:4e:03:ff:ff:
                    10:5d:d2:6b:d2:b6:7c:4d:2e:bd:d2:9e:f1:af:b1:
                    25:e2:74:92:4c:d5:72:72:6c:d7:5b:e0:24:eb:f6:
                    2b:98:4b:ce:18:1a:5b:9f:fe:6e:02:93:37:a7:14:
                    c4:5a:35:53:7a:16:31:e7:bf:f7:ab:fc:48:11:de:
                    48:8a:5e:6a:d9:6e:97:23:9a:fb:6b:80:fe:68:fd:
                    45:45:0d:5a:58:38:c2:8b:10:f1:a6:3b:a9:9a:b2:
                    88:18:95:95:42:aa:23:d6:5f:da:52:55:40:d5:30:
                    e0:19:27:14:8b:79:09:4a:b1:6a:0f:5f:d2:d9:86:
                    c9:a8:64:2a:0f:2f:ab:a6:74:67:36:00:6d:08:c8:
                    ab:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:64:CF:CF:DD:52:29:C4:48:33:06:D9:C4:A3:EE:E8:A9:3E:D4:F2
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:43:22:db:b9:cb:58:7a:d5:6f:77:cb:21:dd:f3:6c:e3:73:
         b3:41:88:9f:f3:0d:12:35:ff:53:b8:0c:33:74:dc:c2:93:65:
         41:7f:3d:68:e4:4a:50:70:30:4c:9a:96:50:e8:5d:47:5e:62:
         72:5e:78:ec:99:cf:b9:05:64:97:14:ac:3b:5b:64:36:5b:5f:
         b4:51:13:48:34:b3:b7:6c:b8:0f:49:b8:bc:df:b9:7d:ff:20:
         6b:71:5a:2c:0a:d2:03:f6:20:21:97:3f:ab:5c:8d:ed:22:07:
         07:98:47:68:f7:41:0f:64:b4:cb:f4:63:5d:e2:4b:f4:2e:d1:
         a5:c3:1a:29:0c:e4:76:37:d4:af:dc:68:f4:8d:3c:70:ca:9d:
         45:bb:e6:41:f0:f7:44:17:2d:0e:c0:26:9b:7c:11:b1:b7:5c:
         1d:49:f0:75:6d:70:d2:b1:8a:6b:6e:9d:ec:54:74:67:87:30:
         5a:a4:5e:1e:1e:12:bc:fb:0e:94:67:e6:4b:91:cc:19:b1:ea:
         00:f8:2b:ea:94:e1:a4:ca:d5:a6:b3:d6:17:92:4d:a2:cb:0d:
         1a:72:9d:8b:3e:d4:e1:e1:d5:5c:7d:ac:1a:38:43:65:c0:35:
         4e:10:e7:62:a5:6d:6d:35:5a:42:39:ac:72:fb:16:7a:86:0b:
         b0:11:4a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:43:08 2025 by rpki-client