Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
File:                     WKGWp78G8uFukJ0ncUG6RJEfH08.mft (raw, json)
Hash identifier:          MEIzfTNEXI+Kjrb53IoRK9WoqhvJWChatdUj5dEmn+w=
Subject key identifier:   0E:9A:3F:D0:12:91:8A:B9:50:92:46:80:52:00:02:D8:63:D6:01:92
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       3617
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
Manifest number:          3542
Signing time:             Fri 22 Aug 2025 14:49:46 +0000
Manifest this update:     Fri 22 Aug 2025 14:49:45 +0000
Manifest next update:     Fri 29 Aug 2025 14:49:45 +0000
Files and hashes:         1: WKGWp78G8uFukJ0ncUG6RJEfH08.crl (hash: Vahukt7ae4xsQEio3D6hJEYaolpQrRsCCNGo4gef/GQ=)
                          2: EFF618B85C7311EF9CC47281C4F9AE02.roa (hash: Pf2MnnhmDrIwYiVJrAMzmgmX91XwAMLmBq+CMRQ9ITg=)
                          3: AC8A67CA100311F085EE3D29C4F9AE02.roa (hash: GNpuswIm+G6D5OwUx8uxAOUcNrCwK1Z/Tj1cmKrG5Uc=)
                          4: 493BCC24BC6911EFBA2E5C78C4F9AE02.roa (hash: P+SVMecRmlSzLHmZJYs7OTgRtoq2uV1xwoBkAlCMLfs=)
                          5: 5553B5FEE90E11EA998F5735C4F9AE02.roa (hash: oSJab/EVi+ifqNiMiViOLz8HkZ1QwjUJBAjTyuVCBBE=)
                          6: E0342C7AACF811EDA84F9711C4F9AE02.roa (hash: AA2EGEjDGl9i4FsYA91Ikir5YCSOz7E8lHeITUN7tLY=)
                          7: 5D001D76932811E8BC93865BC4F9AE02.roa (hash: xOTr/5KGUUM34JKJY1lwfTVBRDQmjApqpEKH2Iu8g7I=)
                          8: 183E52D8224711EB9EC51D58C4F9AE02.roa (hash: qgDfVvJM4t2nmo/ZdmRVYasGnroWUOtYNFtKUMd8mAw=)
                          9: 5C5998765AD611EFA2E29C7BC4F9AE02.roa (hash: xnJz9CbWIuAsxAPEZuUOdvS3/6CU2AdVOkfsin07HJk=)
                          10: F1120B125C7311EF9CC47281C4F9AE02.roa (hash: D1LuX3usa0tBox0sSCc8jcGl3+07/Mmi9S6IkrSaNU0=)
                          11: 0E9272DA768611F08998521AC4F9AE02.roa (hash: toNJ35N8De+LXQG2ocnpOolYfF2p8Cho/HejN6g2EvE=)
                          12: 2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa (hash: PHAUjchkulAgFgushqKaTiFT8Ff/mwtL2jMnBLLBhyY=)
                          13: 309268DCBB7E11E9AFB49C42C4F9AE02.roa (hash: selOomNAFksb1Hw1lPQaCIu26iQta1741v3Ucrg1QH0=)
                          14: 312AAAD4BB7E11E9AFB49C42C4F9AE02.roa (hash: k6jn/HtB7ksK0AYue3Gi2YlXKybN47y+89NwaYeQS2Y=)
                          15: EF706AC45C7311EF9CC47281C4F9AE02.roa (hash: vjLJIbHY8cYp0MYdF36S+lma3wzeIloym0TLu9Xd1c4=)
                          16: 5C3F2BB6932811E8BC93865BC4F9AE02.roa (hash: EYATmfrVQplrHeXLwwsW1L6CDc1lZrLnBOvjrWbcFfM=)
                          17: 3D57CE0A738711F0B8F64625C4F9AE02.roa (hash: SsjfPy3285cqZnwOkAHIiuBOBs1QjnEnU6GLjCGa8oY=)
                          18: F097E10C5C7311EF9CC47281C4F9AE02.roa (hash: 1ruZSUxAHFBtpg74cN22UGy/DbQsooH9+ozLl8ocAGA=)
                          19: 184CBE58768B11EFAF7A8C68C4F9AE02.roa (hash: NRD5JEMwxnAIyegq+yDnZE3cvxLvnDvPFwXtytdSo9U=)
                          20: 97DFFA2AD39E11EF9395C676C4F9AE02.roa (hash: tYNZDrfG+2ivcq2p9DfNp1fhz8gxojjjQmCChm3l52M=)
                          21: 81ACB3888C9611EE88DE0726C4F9AE02.roa (hash: k8UmxA4SbwbaZ421n0imukn2nmBZM0f5sHMchmg01MM=)
                          22: 8987F942335911E8A1642A7FC4F9AE02.roa (hash: r7nt+0YR0gcp9UZZg6iqfoS5mJ5OaWvN1C2TW4aaCpg=)
                          23: 0DD00CA4768611F08998521AC4F9AE02.roa (hash: c8y89LyG6b+250uspuDTEMcZBqvjFij/jxS159cZxHs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 14:49:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13847 (0x3617)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Aug 22 14:49:45 2025 GMT
            Not After : Aug 29 14:49:45 2025 GMT
        Subject: CN=68a88389-8569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9a:41:a1:73:3e:9c:34:91:f0:91:ef:5d:7d:
                    9c:d3:39:c9:a8:8a:96:4e:c1:28:16:da:80:85:18:
                    85:b2:3d:76:21:7e:e6:97:4e:12:0c:71:96:8a:6e:
                    4c:93:ef:83:23:67:a0:99:f5:8e:f1:d7:68:20:5c:
                    0c:2d:bd:5d:a6:5d:58:88:13:9d:09:c3:ec:8b:c0:
                    09:79:ee:dc:05:56:6a:0a:3c:45:34:f3:e2:47:1d:
                    c5:9c:62:8f:3e:fa:6f:79:1c:7b:96:4d:b0:22:60:
                    dc:55:e5:39:0a:48:f5:61:28:d0:5a:fc:50:14:d8:
                    87:b2:a7:d9:00:cc:43:67:05:22:e1:28:be:9a:8d:
                    12:87:86:60:da:33:81:03:96:54:7b:78:a1:66:20:
                    50:86:f7:7b:ee:05:d4:b5:a2:6f:92:f6:75:ef:b8:
                    2e:c5:6c:73:ba:48:28:93:a8:b8:93:8e:c1:d2:83:
                    fa:47:d6:b7:f7:60:f9:bd:5d:0b:f8:85:55:78:05:
                    9d:f5:48:74:85:7a:34:d2:85:26:f7:1b:41:4d:98:
                    d0:0b:ff:dc:01:d3:4c:b5:8c:3f:a0:e7:3b:46:e2:
                    97:61:bc:0f:78:9c:08:24:4e:4d:a4:2a:ad:d2:c8:
                    06:74:a6:9f:37:54:a6:0a:54:61:c2:0a:8d:8d:8b:
                    cb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9A:3F:D0:12:91:8A:B9:50:92:46:80:52:00:02:D8:63:D6:01:92
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a1:67:58:5f:9f:bb:66:32:33:60:6b:7d:53:72:72:fc:ec:
         b4:d6:0b:a4:de:c1:85:70:47:02:cc:56:a9:4b:22:f9:d6:fc:
         01:a1:83:2d:35:b1:34:52:54:b6:1e:de:a5:aa:a4:75:cc:cb:
         0e:8a:5a:e4:f4:eb:44:01:ad:1a:03:c6:14:8c:b5:7c:16:3f:
         bb:1a:b5:5c:de:f9:9d:63:bd:d7:59:47:83:dc:d2:b3:7d:7b:
         98:64:71:30:89:ce:e5:77:e6:af:0c:b3:70:fa:65:ad:f7:f5:
         89:ea:12:3a:27:4b:49:cc:b1:4f:0c:00:3d:e9:4f:5b:a3:f8:
         9f:0b:74:6a:e5:ad:62:c4:67:a3:b9:88:d1:00:e0:3b:ae:fb:
         0e:d7:a6:9c:af:26:14:5d:9a:b6:58:2c:b4:40:cd:3a:83:ca:
         44:32:8b:c4:92:9c:57:a3:04:ef:a8:b3:b4:b8:04:62:68:67:
         6e:01:03:0b:85:b2:a5:b0:1f:38:16:fe:cf:e2:83:2b:71:c8:
         d2:0d:ba:1a:62:2f:d1:ea:88:49:23:b2:ce:cb:d0:6e:50:82:
         41:1d:5b:cd:ba:f4:1f:2d:a9:58:1c:d6:fb:f0:cc:80:c4:5a:
         0f:85:01:c0:7b:64:5d:8a:da:3e:e1:b7:fe:7f:a8:4e:6d:d3:
         39:9b:c3:ee
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0
OTExRjFGNEYwHhcNMjUwODIyMTQ0OTQ1WhcNMjUwODI5MTQ0OTQ1WjAYMRYwFAYD
VQQDEw02OGE4ODM4OS04NTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvZpBoXM+nDSR8JHvXX2c0znJqIqWTsEoFtqAhRiFsj12IX7ml04SDHGWim5M
k++DI2egmfWO8ddoIFwMLb1dpl1YiBOdCcPsi8AJee7cBVZqCjxFNPPiRx3FnGKP
PvpveRx7lk2wImDcVeU5Ckj1YSjQWvxQFNiHsqfZAMxDZwUi4Si+mo0Sh4Zg2jOB
A5ZUe3ihZiBQhvd77gXUtaJvkvZ177guxWxzukgok6i4k47B0oP6R9a392D5vV0L
+IVVeAWd9Uh0hXo00oUm9xtBTZjQC//cAdNMtYw/oOc7RuKXYbwPeJwIJE5NpCqt
0sgGdKafN1SmClRhwgqNjYvLJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6aP9AS
kYq5UJJGgFIAAthj1gGSMB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE
OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEM5MC8yRDFCRUJFNDFEOTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1
RnVrSjBuY1VHNlJKRWZIMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCWoWdYX5+7ZjIzYGt9U3Jy/Oy01guk3sGFcEcCzFapSyL51vwBoYMt
NbE0UlS2Ht6lqqR1zMsOilrk9OtEAa0aA8YUjLV8Fj+7GrVc3vmdY73XWUeD3NKz
fXuYZHEwic7ld+avDLNw+mWt9/WJ6hI6J0tJzLFPDAA96U9bo/ifC3Rq5a1ixGej
uYjRAOA7rvsO16acryYUXZq2WCy0QM06g8pEMovEkpxXowTvqLO0uARiaGduAQML
hbKlsB84Fv7P4oMrccjSDboaYi/R6ohJI7LOy9BuUIJBHVvNuvQfLalYHNb78MyA
xFoPhQHAe2Rdito+4bf+f6hObdM5m8Pu
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:53 2025 by rpki-client