Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
File:                     WKGWp78G8uFukJ0ncUG6RJEfH08.mft (raw, json)
Hash identifier:          OdBO7/TMbVYOpqNsBGZTIbFPNVdHZYqil6lXc7SRqRY=
Subject key identifier:   10:B2:AB:24:66:AC:BB:0D:BD:A9:54:65:F8:0D:F3:D1:C9:3B:82:DA
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       35F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
Manifest number:          3522
Signing time:             Mon 30 Jun 2025 14:52:36 +0000
Manifest this update:     Mon 30 Jun 2025 14:52:35 +0000
Manifest next update:     Mon 07 Jul 2025 14:52:35 +0000
Files and hashes:         1: WKGWp78G8uFukJ0ncUG6RJEfH08.crl (hash: 1yeXPWWsv9/aNoRaUsMTt7xFcXG99Q6gmDYzoAPcmTA=)
                          2: EFF618B85C7311EF9CC47281C4F9AE02.roa (hash: Pf2MnnhmDrIwYiVJrAMzmgmX91XwAMLmBq+CMRQ9ITg=)
                          3: AC8A67CA100311F085EE3D29C4F9AE02.roa (hash: GNpuswIm+G6D5OwUx8uxAOUcNrCwK1Z/Tj1cmKrG5Uc=)
                          4: 493BCC24BC6911EFBA2E5C78C4F9AE02.roa (hash: P+SVMecRmlSzLHmZJYs7OTgRtoq2uV1xwoBkAlCMLfs=)
                          5: 6142006627A511F0BD64AC72C4F9AE02.roa (hash: aNWtXREBPS7XRBdND3PnsSs8FUUw+FFgm3V8IksP10s=)
                          6: 5553B5FEE90E11EA998F5735C4F9AE02.roa (hash: oSJab/EVi+ifqNiMiViOLz8HkZ1QwjUJBAjTyuVCBBE=)
                          7: E0342C7AACF811EDA84F9711C4F9AE02.roa (hash: AA2EGEjDGl9i4FsYA91Ikir5YCSOz7E8lHeITUN7tLY=)
                          8: 5D001D76932811E8BC93865BC4F9AE02.roa (hash: xOTr/5KGUUM34JKJY1lwfTVBRDQmjApqpEKH2Iu8g7I=)
                          9: 183E52D8224711EB9EC51D58C4F9AE02.roa (hash: qgDfVvJM4t2nmo/ZdmRVYasGnroWUOtYNFtKUMd8mAw=)
                          10: 5C5998765AD611EFA2E29C7BC4F9AE02.roa (hash: xnJz9CbWIuAsxAPEZuUOdvS3/6CU2AdVOkfsin07HJk=)
                          11: F1120B125C7311EF9CC47281C4F9AE02.roa (hash: D1LuX3usa0tBox0sSCc8jcGl3+07/Mmi9S6IkrSaNU0=)
                          12: 966F906E55AE11F0B578B836C4F9AE02.roa (hash: 0n1zPL4rVbVCk5gwzWvN1WDwMGw6EDJeAlAYWGk44Ec=)
                          13: 2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa (hash: PHAUjchkulAgFgushqKaTiFT8Ff/mwtL2jMnBLLBhyY=)
                          14: 6064297627A511F0BD64AC72C4F9AE02.roa (hash: ZmxvZ6F2HfZBJIqUD1KIyD3YLmWldyr3OWp7w/lgDEc=)
                          15: 309268DCBB7E11E9AFB49C42C4F9AE02.roa (hash: selOomNAFksb1Hw1lPQaCIu26iQta1741v3Ucrg1QH0=)
                          16: 312AAAD4BB7E11E9AFB49C42C4F9AE02.roa (hash: k6jn/HtB7ksK0AYue3Gi2YlXKybN47y+89NwaYeQS2Y=)
                          17: EF706AC45C7311EF9CC47281C4F9AE02.roa (hash: vjLJIbHY8cYp0MYdF36S+lma3wzeIloym0TLu9Xd1c4=)
                          18: 5C3F2BB6932811E8BC93865BC4F9AE02.roa (hash: EYATmfrVQplrHeXLwwsW1L6CDc1lZrLnBOvjrWbcFfM=)
                          19: F097E10C5C7311EF9CC47281C4F9AE02.roa (hash: 1ruZSUxAHFBtpg74cN22UGy/DbQsooH9+ozLl8ocAGA=)
                          20: 184CBE58768B11EFAF7A8C68C4F9AE02.roa (hash: NRD5JEMwxnAIyegq+yDnZE3cvxLvnDvPFwXtytdSo9U=)
                          21: 97DFFA2AD39E11EF9395C676C4F9AE02.roa (hash: tYNZDrfG+2ivcq2p9DfNp1fhz8gxojjjQmCChm3l52M=)
                          22: 81ACB3888C9611EE88DE0726C4F9AE02.roa (hash: k8UmxA4SbwbaZ421n0imukn2nmBZM0f5sHMchmg01MM=)
                          23: 8987F942335911E8A1642A7FC4F9AE02.roa (hash: r7nt+0YR0gcp9UZZg6iqfoS5mJ5OaWvN1C2TW4aaCpg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 14:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13811 (0x35f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Jun 30 14:52:35 2025 GMT
            Not After : Jul  7 14:52:35 2025 GMT
        Subject: CN=6862a4b4-d573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d9:c0:2c:32:12:de:9a:a3:cb:58:24:d2:11:
                    f4:be:33:d9:7e:41:60:12:cb:73:27:f9:d5:52:1a:
                    a2:6b:3f:7f:c8:a2:94:e2:aa:0e:28:ca:3b:14:77:
                    93:a9:99:25:58:a8:13:8b:50:44:e9:ed:39:5e:6e:
                    2a:a1:dc:74:eb:11:d0:3f:fa:d8:fa:2a:ff:0f:49:
                    97:ef:28:e1:91:fd:bd:0b:67:21:99:ab:4e:cc:5e:
                    15:b3:67:4a:67:17:86:5c:31:b4:85:4c:c2:10:4c:
                    2e:02:ca:67:a7:30:c6:6a:7c:84:5c:d7:2e:96:d7:
                    d2:de:00:20:ba:94:de:6b:22:4e:a4:37:42:42:81:
                    c0:f9:33:ae:c9:0e:48:af:f0:0a:c3:1d:7f:ef:56:
                    be:17:2e:72:2e:a8:bf:ac:4f:02:53:e7:23:35:46:
                    1b:b3:fa:96:e6:3a:22:09:de:1d:a8:2a:de:37:4b:
                    5a:ff:6a:89:d3:e1:9c:be:d0:69:0d:18:7c:d5:3a:
                    91:03:c4:28:e9:48:62:f4:fc:a1:46:90:0a:e8:20:
                    b5:97:79:5d:8b:e0:6d:af:5a:5e:4f:ed:38:45:2e:
                    c1:0b:d3:3b:a4:9a:2d:01:ca:9a:ca:0d:f5:b2:45:
                    8c:e1:40:e4:5c:cd:19:ab:49:48:81:c4:ec:c4:88:
                    58:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B2:AB:24:66:AC:BB:0D:BD:A9:54:65:F8:0D:F3:D1:C9:3B:82:DA
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:56:44:70:5e:16:52:ce:71:6f:56:56:e6:cb:32:23:12:de:
         43:93:33:e5:98:34:76:20:89:e0:9c:87:72:89:a6:c0:43:cd:
         58:8d:46:38:d7:ab:86:e3:ee:36:87:4d:da:54:67:3f:98:82:
         aa:90:6f:a6:b7:80:3f:6f:41:77:d6:8a:46:95:7c:ad:c7:41:
         cd:0f:2b:75:f1:4d:27:d0:e0:61:8a:64:25:84:20:65:de:ca:
         b6:4e:90:2f:58:71:e0:24:bc:fc:a8:ce:c8:9e:54:ba:ac:fc:
         fb:c7:3d:f6:e4:36:b2:98:f5:32:b4:db:07:c3:c5:15:60:5e:
         71:fd:0d:f0:1a:74:69:98:ea:d8:5a:ff:25:64:00:4e:dc:28:
         b2:ed:bb:b7:21:a5:bc:19:28:c1:3b:4c:9a:16:07:e6:24:5f:
         e0:af:bc:ed:e7:52:67:af:d1:fb:09:b3:bf:cc:9a:42:48:c6:
         0a:5c:ac:cb:80:92:9a:dc:e9:40:24:1f:ca:0b:0c:bc:8f:f1:
         6a:80:e5:53:80:a4:07:d8:1c:d8:a6:eb:56:33:11:3e:2a:0b:
         08:7e:f5:84:76:de:96:51:f2:6e:50:44:2b:b8:7b:41:bf:f6:
         1e:23:95:25:31:57:b9:b5:98:dd:cb:06:c9:9f:28:a9:71:77:
         57:1c:d4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:06:04 2025 by rpki-client