Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
File:                     WKGWp78G8uFukJ0ncUG6RJEfH08.mft (raw, json)
Hash identifier:          nURKV2zKfoiyogaJoZsH5OsmXes04DycSDGYcOFr6B8=
Subject key identifier:   3C:3F:6C:3B:26:DD:B2:D3:60:E2:49:1D:19:FE:9A:4F:F9:77:07:B6
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       35D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
Manifest number:          3506
Signing time:             Sat 10 May 2025 14:47:17 +0000
Manifest this update:     Sat 10 May 2025 14:47:16 +0000
Manifest next update:     Sat 17 May 2025 14:47:16 +0000
Files and hashes:         1: WKGWp78G8uFukJ0ncUG6RJEfH08.crl (hash: whX0gahkv2JzsB/dQuvhTbllRLG1CTO8D5szY4eSquk=)
                          2: EFF618B85C7311EF9CC47281C4F9AE02.roa (hash: Pf2MnnhmDrIwYiVJrAMzmgmX91XwAMLmBq+CMRQ9ITg=)
                          3: AC8A67CA100311F085EE3D29C4F9AE02.roa (hash: GNpuswIm+G6D5OwUx8uxAOUcNrCwK1Z/Tj1cmKrG5Uc=)
                          4: 493BCC24BC6911EFBA2E5C78C4F9AE02.roa (hash: P+SVMecRmlSzLHmZJYs7OTgRtoq2uV1xwoBkAlCMLfs=)
                          5: 6142006627A511F0BD64AC72C4F9AE02.roa (hash: aNWtXREBPS7XRBdND3PnsSs8FUUw+FFgm3V8IksP10s=)
                          6: 5553B5FEE90E11EA998F5735C4F9AE02.roa (hash: oSJab/EVi+ifqNiMiViOLz8HkZ1QwjUJBAjTyuVCBBE=)
                          7: E0342C7AACF811EDA84F9711C4F9AE02.roa (hash: AA2EGEjDGl9i4FsYA91Ikir5YCSOz7E8lHeITUN7tLY=)
                          8: 5D001D76932811E8BC93865BC4F9AE02.roa (hash: xOTr/5KGUUM34JKJY1lwfTVBRDQmjApqpEKH2Iu8g7I=)
                          9: 183E52D8224711EB9EC51D58C4F9AE02.roa (hash: qgDfVvJM4t2nmo/ZdmRVYasGnroWUOtYNFtKUMd8mAw=)
                          10: 5C5998765AD611EFA2E29C7BC4F9AE02.roa (hash: xnJz9CbWIuAsxAPEZuUOdvS3/6CU2AdVOkfsin07HJk=)
                          11: F1120B125C7311EF9CC47281C4F9AE02.roa (hash: D1LuX3usa0tBox0sSCc8jcGl3+07/Mmi9S6IkrSaNU0=)
                          12: 2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa (hash: PHAUjchkulAgFgushqKaTiFT8Ff/mwtL2jMnBLLBhyY=)
                          13: 6064297627A511F0BD64AC72C4F9AE02.roa (hash: ZmxvZ6F2HfZBJIqUD1KIyD3YLmWldyr3OWp7w/lgDEc=)
                          14: 309268DCBB7E11E9AFB49C42C4F9AE02.roa (hash: selOomNAFksb1Hw1lPQaCIu26iQta1741v3Ucrg1QH0=)
                          15: 312AAAD4BB7E11E9AFB49C42C4F9AE02.roa (hash: k6jn/HtB7ksK0AYue3Gi2YlXKybN47y+89NwaYeQS2Y=)
                          16: EF706AC45C7311EF9CC47281C4F9AE02.roa (hash: vjLJIbHY8cYp0MYdF36S+lma3wzeIloym0TLu9Xd1c4=)
                          17: D121B70001EE11F0A7D9470DC4F9AE02.roa (hash: CEHEvt43ETDPLDp9hKG9cm+Mn22jdV7HHfSJ6J+OsTQ=)
                          18: 5C3F2BB6932811E8BC93865BC4F9AE02.roa (hash: EYATmfrVQplrHeXLwwsW1L6CDc1lZrLnBOvjrWbcFfM=)
                          19: F097E10C5C7311EF9CC47281C4F9AE02.roa (hash: 1ruZSUxAHFBtpg74cN22UGy/DbQsooH9+ozLl8ocAGA=)
                          20: 184CBE58768B11EFAF7A8C68C4F9AE02.roa (hash: NRD5JEMwxnAIyegq+yDnZE3cvxLvnDvPFwXtytdSo9U=)
                          21: 97DFFA2AD39E11EF9395C676C4F9AE02.roa (hash: tYNZDrfG+2ivcq2p9DfNp1fhz8gxojjjQmCChm3l52M=)
                          22: 81ACB3888C9611EE88DE0726C4F9AE02.roa (hash: k8UmxA4SbwbaZ421n0imukn2nmBZM0f5sHMchmg01MM=)
                          23: 8987F942335911E8A1642A7FC4F9AE02.roa (hash: r7nt+0YR0gcp9UZZg6iqfoS5mJ5OaWvN1C2TW4aaCpg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 14:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13782 (0x35d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: May 10 14:47:16 2025 GMT
            Not After : May 17 14:47:16 2025 GMT
        Subject: CN=681f66f5-948c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8c:10:9b:1c:0e:cf:08:c3:a6:eb:58:9c:4d:
                    86:a6:5c:0b:eb:7b:25:4b:0e:bc:e5:a4:da:c2:c1:
                    e8:65:6a:90:97:ca:c6:c6:58:14:ed:99:c6:90:c6:
                    a1:d0:89:a1:45:08:e3:88:f3:ad:fc:a4:17:07:7c:
                    dc:f8:df:3f:d6:61:bd:dd:0a:cd:6b:13:25:bc:eb:
                    39:f9:e4:95:bf:37:8d:58:5d:df:05:1c:df:c4:c6:
                    8a:46:21:56:03:7e:a8:ad:5c:b7:66:b4:9a:c2:3f:
                    1d:9b:79:ed:12:98:15:53:64:3d:31:1d:b3:fc:9d:
                    5c:10:0c:a1:5c:b0:0f:dd:07:a0:6a:b3:3f:4c:9b:
                    f9:c2:94:ab:d0:5f:7f:2c:dd:dc:fd:90:eb:de:7a:
                    9c:7c:75:8f:8d:96:de:5e:2a:c0:f6:1c:9a:bc:ff:
                    4c:5a:5f:df:06:94:ee:88:fe:fc:c8:7d:76:02:a6:
                    79:21:fe:0d:f2:5f:a6:7c:13:f5:db:e3:86:b4:1c:
                    fc:b0:31:6a:82:cf:41:51:66:58:50:ff:bb:3a:f7:
                    47:06:e7:c8:50:89:7e:f6:00:af:f4:2a:cb:fa:8f:
                    38:9e:08:b2:e5:8c:fe:7f:62:d0:76:d1:3c:7b:b4:
                    a0:6e:da:0d:41:70:8c:72:90:44:01:d8:7f:49:41:
                    9b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3F:6C:3B:26:DD:B2:D3:60:E2:49:1D:19:FE:9A:4F:F9:77:07:B6
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5b:19:14:e2:6e:c1:fe:0b:a6:85:7b:e5:21:9b:a3:f4:06:
         56:a1:e2:e0:c5:14:45:56:5a:cd:1f:1a:6c:5c:fd:fb:b1:75:
         e0:93:d7:3e:7d:33:42:98:24:29:ca:23:af:ae:1e:df:99:13:
         1d:98:f3:a5:b4:8c:be:3f:af:f8:57:f3:6d:87:1d:ec:5e:8d:
         c9:b4:89:f2:45:ac:41:19:87:11:fe:38:d6:4d:e6:9c:24:e6:
         59:60:14:06:17:21:04:33:cd:61:d5:cf:5c:4d:1f:13:38:e0:
         5e:54:3a:a8:4c:cf:c5:10:6c:11:95:bd:ab:cc:95:86:c5:03:
         8b:c8:f3:51:9f:91:f5:7b:15:88:44:c3:23:c1:03:c9:38:3b:
         6f:06:7b:6d:fd:79:f3:2a:1b:61:8a:3c:ab:21:47:cb:b4:46:
         86:a6:df:f2:33:21:0b:ff:a6:2c:09:d9:16:92:76:04:be:8b:
         44:70:d6:ec:96:d3:f6:0f:93:8f:73:13:42:dd:de:3a:bb:6a:
         af:9d:20:b6:3f:f9:49:b9:c1:eb:2b:36:a2:42:25:5b:42:f6:
         45:db:56:59:dd:17:f1:c5:09:71:37:3a:43:fc:0b:32:cf:54:
         a9:b9:76:70:3c:17:c8:f0:b2:59:33:48:4a:64:f3:42:da:35:
         11:27:17:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0
OTExRjFGNEYwHhcNMjUwNTEwMTQ0NzE2WhcNMjUwNTE3MTQ0NzE2WjAYMRYwFAYD
VQQDEw02ODFmNjZmNS05NDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu4wQmxwOzwjDputYnE2GplwL63slSw685aTawsHoZWqQl8rGxlgU7ZnGkMah
0ImhRQjjiPOt/KQXB3zc+N8/1mG93QrNaxMlvOs5+eSVvzeNWF3fBRzfxMaKRiFW
A36orVy3ZrSawj8dm3ntEpgVU2Q9MR2z/J1cEAyhXLAP3QegarM/TJv5wpSr0F9/
LN3c/ZDr3nqcfHWPjZbeXirA9hyavP9MWl/fBpTuiP78yH12AqZ5If4N8l+mfBP1
2+OGtBz8sDFqgs9BUWZYUP+7OvdHBufIUIl+9gCv9CrL+o84ngiy5Yz+f2LQdtE8
e7SgbtoNQXCMcpBEAdh/SUGbYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDw/bDsm
3bLTYOJJHRn+mk/5dwe2MB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE
OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEM5MC8yRDFCRUJFNDFEOTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1
RnVrSjBuY1VHNlJKRWZIMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAIWxkU4m7B/gumhXvlIZuj9AZWoeLgxRRFVlrNHxpsXP37sXXgk9c+
fTNCmCQpyiOvrh7fmRMdmPOltIy+P6/4V/Nthx3sXo3JtInyRaxBGYcR/jjWTeac
JOZZYBQGFyEEM81h1c9cTR8TOOBeVDqoTM/FEGwRlb2rzJWGxQOLyPNRn5H1exWI
RMMjwQPJODtvBntt/XnzKhthijyrIUfLtEaGpt/yMyEL/6YsCdkWknYEvotEcNbs
ltP2D5OPcxNC3d46u2qvnSC2P/lJucHrKzaiQiVbQvZF21ZZ3RfxxQlxNzpD/Asy
z1SpuXZwPBfI8LJZM0hKZPNC2jURJxcG
-----END CERTIFICATE-----
Generated at Sat May 10 18:52:49 2025 by rpki-client