Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
File:                     WKGWp78G8uFukJ0ncUG6RJEfH08.mft (raw, json)
Hash identifier:          e6XYyfKHw3mndpfpSV62KbXoeHqKu51kc09uSrzQ7R4=
Subject key identifier:   82:48:42:4F:42:D7:FC:2C:C8:2C:19:BA:B6:60:85:9E:5B:43:16:BA
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       3653
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
Manifest number:          3565
Signing time:             Sat 18 Oct 2025 14:54:08 +0000
Manifest this update:     Sat 18 Oct 2025 14:54:08 +0000
Manifest next update:     Sat 25 Oct 2025 14:54:08 +0000
Files and hashes:         1: WKGWp78G8uFukJ0ncUG6RJEfH08.crl (hash: yxR7lH79AUMl4teXaPqUhi+V9DvbSd0ItChAtWBem4c=)
                          2: EFF618B85C7311EF9CC47281C4F9AE02.roa (hash: lIANGK6Kn2MugRFq01BJgGhUwBHYhGPRL+AhDQBA5Do=)
                          3: AC8A67CA100311F085EE3D29C4F9AE02.roa (hash: T/rcx/oBePx/fFY5liuYl1FWNJgd5CikRWxOV60Eb+s=)
                          4: 493BCC24BC6911EFBA2E5C78C4F9AE02.roa (hash: ED0l+M3XW8yfiIKv/qBb5H5Y5anJhlkDWFxpGJ+C/jc=)
                          5: 5553B5FEE90E11EA998F5735C4F9AE02.roa (hash: 7Y+BMS/66rPoGcFQGfUmmEmIY/lvqgpMP8T/jWrEFog=)
                          6: E0342C7AACF811EDA84F9711C4F9AE02.roa (hash: JW9VEUpPQX6Yip1p8OuIfJey2xwoc83kLB7ewV443Q0=)
                          7: 5D001D76932811E8BC93865BC4F9AE02.roa (hash: pHntxFpGcz85fh4g8wJJV0K9ZMyE2AlZpDPCheVdfGE=)
                          8: 183E52D8224711EB9EC51D58C4F9AE02.roa (hash: ZGq5JFpnBl6F/9RJYSzWIqvoJrxf/ut9GoB7c3G4b0w=)
                          9: 5C5998765AD611EFA2E29C7BC4F9AE02.roa (hash: I3gilpNI/WjtxsTD/w6Z3Y+IRfSXnYHa5irJjXL586Y=)
                          10: F1120B125C7311EF9CC47281C4F9AE02.roa (hash: lWRvTuPg6LzSZBPd+6lJM0jAzSYZ9gW7/FAk9bnrczc=)
                          11: 0E9272DA768611F08998521AC4F9AE02.roa (hash: bGBXDK+xcvHyPNZ/oI+s2EN0dL3EuzSCaA64bObOVdg=)
                          12: 2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa (hash: pC+fVhWZhAlHI54GzrYegWShgGirXMUII/btkAhefI4=)
                          13: 309268DCBB7E11E9AFB49C42C4F9AE02.roa (hash: vkdEUpa0uX2LdRNKslgCoqxAxrazYilRXx4dGIkC7ss=)
                          14: 312AAAD4BB7E11E9AFB49C42C4F9AE02.roa (hash: tm6lZWT2jSaQ2mTovYZkiilxmKWiSUYMcY5Ywr80DlM=)
                          15: EF706AC45C7311EF9CC47281C4F9AE02.roa (hash: KFqiJvZSOQ4AGYSeiVNs4qK0DY9PSIDgrHR+mxW9KOs=)
                          16: 5C3F2BB6932811E8BC93865BC4F9AE02.roa (hash: tZHLP6nM/PTOaw/rmeUMVa1wU4QqlWqKu6p2vcEjWm8=)
                          17: 3D57CE0A738711F0B8F64625C4F9AE02.roa (hash: RH2aXvvd5385Bl/wV+ldH4sWx8Nfzkrys/SFfqx2DgU=)
                          18: F097E10C5C7311EF9CC47281C4F9AE02.roa (hash: 7CjS9ffPyOrzJz1ZAktWX3KaOjOKC/5jGyfAIJ4BJyo=)
                          19: 184CBE58768B11EFAF7A8C68C4F9AE02.roa (hash: LT9r+sRto5ZOYudi5sFYiwbtxYl/cY+w1R+R7OKpEeI=)
                          20: 97DFFA2AD39E11EF9395C676C4F9AE02.roa (hash: P6z1l/i5fCMa+njXzS/IVZH5AnBAQ64cA+kn7DDOLo0=)
                          21: 81ACB3888C9611EE88DE0726C4F9AE02.roa (hash: SGgawQJ8e+bc7GkpKZMh+cEtFBap2rFAVcln1BmNOkI=)
                          22: 8987F942335911E8A1642A7FC4F9AE02.roa (hash: bo4+lqzgHx9mwwzNsiPnPqvLCTaS+zSdlr02VCrtbuY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:54:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13907 (0x3653)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Oct 18 14:54:08 2025 GMT
            Not After : Oct 25 14:54:08 2025 GMT
        Subject: CN=68f3aa10-5c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:23:d7:2f:56:89:36:76:a8:5a:27:99:be:b5:
                    e6:8c:ab:c6:83:bc:49:09:08:d7:4e:88:56:70:77:
                    e3:bd:88:b8:e2:f0:72:3b:bd:58:f8:78:03:67:50:
                    5a:0f:ae:5e:05:60:3b:47:44:f5:46:92:75:20:4f:
                    0f:76:c2:9a:05:04:6c:74:66:4c:96:bc:70:57:5a:
                    c7:f8:84:e8:25:1b:83:5b:75:af:13:50:8b:6b:f1:
                    ed:88:78:f6:56:99:2b:e9:18:c9:11:0a:8b:ae:2e:
                    5f:b2:80:81:7e:03:64:7c:68:16:47:a9:7d:5e:60:
                    a7:ba:ca:36:5d:7e:06:ad:8c:38:9e:59:de:02:b4:
                    41:81:c0:43:20:7e:64:ea:3d:8c:de:d0:c6:df:aa:
                    39:17:89:2e:26:cb:29:65:2b:fe:86:4d:e8:f2:4b:
                    c2:7f:b3:f1:b6:5c:bc:01:64:88:3d:ac:7b:2c:be:
                    ef:f7:00:99:a4:00:0f:6a:a1:01:07:01:8e:85:17:
                    d1:6c:19:64:5a:84:ee:02:95:d7:54:69:d7:11:07:
                    e6:8a:49:1a:de:1b:a3:50:d3:02:ba:52:34:14:08:
                    0e:78:43:0d:5a:4d:8a:85:6d:95:2d:57:40:26:24:
                    20:e2:0e:80:5d:b8:59:25:87:b7:23:3b:e6:80:00:
                    16:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:48:42:4F:42:D7:FC:2C:C8:2C:19:BA:B6:60:85:9E:5B:43:16:BA
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:6a:d3:4f:c8:32:87:ea:29:c2:17:80:7a:2f:b8:41:0f:27:
         c7:3f:bd:02:a8:50:a8:a1:bf:40:e6:84:26:20:6e:05:d2:a6:
         37:05:6e:06:b3:ef:2e:40:92:e7:f7:fe:21:fc:7c:47:ab:6b:
         69:d1:9c:d8:cc:21:9c:56:02:d4:87:15:f7:13:7b:6b:fb:58:
         4f:84:bb:b7:87:15:ca:69:a0:e4:03:ea:09:51:33:e6:ca:af:
         fc:47:70:4b:f1:19:69:6a:66:f7:15:2c:d0:68:da:eb:48:9b:
         e7:41:92:9e:43:a3:4b:74:9c:c6:9a:4e:41:ef:f4:d3:76:fa:
         97:30:e5:36:73:bf:35:b0:01:41:98:ab:38:40:d2:60:8c:08:
         ab:35:f8:67:71:8f:4d:b1:44:10:35:09:82:58:5e:28:aa:94:
         c4:4b:0d:5d:42:98:4a:72:9a:18:d4:04:16:2a:d5:11:ea:e5:
         b0:4f:e3:fd:8f:bd:e9:e4:a9:2e:73:3f:f5:67:a0:df:ba:3e:
         47:f0:8b:74:39:b8:e9:5a:bd:cd:80:25:0b:54:03:4e:3c:29:
         0a:22:63:90:e7:0f:88:40:b1:9c:f0:ca:c1:67:60:c7:e5:bd:
         1c:62:4f:31:8f:50:49:d0:62:3e:13:69:ff:03:d0:7e:a9:e1:
         8d:88:cc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:09:43 2025 by rpki-client