Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
File:                     WKGWp78G8uFukJ0ncUG6RJEfH08.mft (raw, json)
Hash identifier:          JjScaWg33OdjwsAfrnuzzWvjRYv3Y+CSVX7Hzka7PRs=
Subject key identifier:   28:64:6E:13:C2:94:2E:18:1E:78:E5:F3:0F:44:16:E2:1C:67:37:64
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       35E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
Manifest number:          3510
Signing time:             Fri 30 May 2025 14:51:47 +0000
Manifest this update:     Fri 30 May 2025 14:51:46 +0000
Manifest next update:     Fri 06 Jun 2025 14:51:46 +0000
Files and hashes:         1: WKGWp78G8uFukJ0ncUG6RJEfH08.crl (hash: qvDPGGyzcrQyNLOt8+LB4hcxJ0iHtbs2f5AMLbhZtz0=)
                          2: EFF618B85C7311EF9CC47281C4F9AE02.roa (hash: Pf2MnnhmDrIwYiVJrAMzmgmX91XwAMLmBq+CMRQ9ITg=)
                          3: AC8A67CA100311F085EE3D29C4F9AE02.roa (hash: GNpuswIm+G6D5OwUx8uxAOUcNrCwK1Z/Tj1cmKrG5Uc=)
                          4: 493BCC24BC6911EFBA2E5C78C4F9AE02.roa (hash: P+SVMecRmlSzLHmZJYs7OTgRtoq2uV1xwoBkAlCMLfs=)
                          5: 6142006627A511F0BD64AC72C4F9AE02.roa (hash: aNWtXREBPS7XRBdND3PnsSs8FUUw+FFgm3V8IksP10s=)
                          6: 5553B5FEE90E11EA998F5735C4F9AE02.roa (hash: oSJab/EVi+ifqNiMiViOLz8HkZ1QwjUJBAjTyuVCBBE=)
                          7: E0342C7AACF811EDA84F9711C4F9AE02.roa (hash: AA2EGEjDGl9i4FsYA91Ikir5YCSOz7E8lHeITUN7tLY=)
                          8: 5D001D76932811E8BC93865BC4F9AE02.roa (hash: xOTr/5KGUUM34JKJY1lwfTVBRDQmjApqpEKH2Iu8g7I=)
                          9: 183E52D8224711EB9EC51D58C4F9AE02.roa (hash: qgDfVvJM4t2nmo/ZdmRVYasGnroWUOtYNFtKUMd8mAw=)
                          10: 5C5998765AD611EFA2E29C7BC4F9AE02.roa (hash: xnJz9CbWIuAsxAPEZuUOdvS3/6CU2AdVOkfsin07HJk=)
                          11: F1120B125C7311EF9CC47281C4F9AE02.roa (hash: D1LuX3usa0tBox0sSCc8jcGl3+07/Mmi9S6IkrSaNU0=)
                          12: 2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa (hash: PHAUjchkulAgFgushqKaTiFT8Ff/mwtL2jMnBLLBhyY=)
                          13: 6064297627A511F0BD64AC72C4F9AE02.roa (hash: ZmxvZ6F2HfZBJIqUD1KIyD3YLmWldyr3OWp7w/lgDEc=)
                          14: 309268DCBB7E11E9AFB49C42C4F9AE02.roa (hash: selOomNAFksb1Hw1lPQaCIu26iQta1741v3Ucrg1QH0=)
                          15: 312AAAD4BB7E11E9AFB49C42C4F9AE02.roa (hash: k6jn/HtB7ksK0AYue3Gi2YlXKybN47y+89NwaYeQS2Y=)
                          16: EF706AC45C7311EF9CC47281C4F9AE02.roa (hash: vjLJIbHY8cYp0MYdF36S+lma3wzeIloym0TLu9Xd1c4=)
                          17: D121B70001EE11F0A7D9470DC4F9AE02.roa (hash: CEHEvt43ETDPLDp9hKG9cm+Mn22jdV7HHfSJ6J+OsTQ=)
                          18: 5C3F2BB6932811E8BC93865BC4F9AE02.roa (hash: EYATmfrVQplrHeXLwwsW1L6CDc1lZrLnBOvjrWbcFfM=)
                          19: F097E10C5C7311EF9CC47281C4F9AE02.roa (hash: 1ruZSUxAHFBtpg74cN22UGy/DbQsooH9+ozLl8ocAGA=)
                          20: 184CBE58768B11EFAF7A8C68C4F9AE02.roa (hash: NRD5JEMwxnAIyegq+yDnZE3cvxLvnDvPFwXtytdSo9U=)
                          21: 97DFFA2AD39E11EF9395C676C4F9AE02.roa (hash: tYNZDrfG+2ivcq2p9DfNp1fhz8gxojjjQmCChm3l52M=)
                          22: 81ACB3888C9611EE88DE0726C4F9AE02.roa (hash: k8UmxA4SbwbaZ421n0imukn2nmBZM0f5sHMchmg01MM=)
                          23: 8987F942335911E8A1642A7FC4F9AE02.roa (hash: r7nt+0YR0gcp9UZZg6iqfoS5mJ5OaWvN1C2TW4aaCpg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 14:51:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13792 (0x35e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: May 30 14:51:46 2025 GMT
            Not After : Jun  6 14:51:46 2025 GMT
        Subject: CN=6839c602-3ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:75:6a:55:9b:7e:bd:ed:dd:6e:fd:c0:c1:64:
                    e3:44:47:07:e1:89:a1:31:e4:d0:a1:3a:74:2e:d4:
                    0d:d9:97:f3:c2:40:43:65:39:80:f2:5c:12:6f:44:
                    94:79:26:54:fa:8e:d8:2e:63:73:40:d8:b7:9d:21:
                    f0:f7:92:b7:4b:56:48:3b:02:7b:24:5b:ad:2b:5c:
                    97:90:a1:db:10:7e:5c:c8:c8:7d:90:b9:74:87:d6:
                    0d:b3:26:b6:6c:23:47:e1:c8:c3:45:6f:1d:a2:29:
                    83:a4:41:e1:5f:f1:3f:c3:68:48:49:22:33:d5:32:
                    75:3b:ca:25:73:bb:c8:50:8f:40:d8:9a:ee:79:ee:
                    bb:30:7d:04:85:c8:48:f2:c9:a3:84:f1:a5:66:81:
                    3e:44:50:50:6b:1e:d4:41:bd:5a:4c:4c:de:19:0f:
                    63:1a:e0:99:1b:86:cf:1e:ab:91:99:75:cd:38:e9:
                    fd:2e:e5:1a:f8:c5:2a:a0:af:ad:3b:bb:31:a0:e4:
                    03:0b:da:ef:ee:b9:3c:50:db:3c:2b:ea:4c:b8:a9:
                    ba:9a:68:51:21:61:cf:80:42:ca:36:69:d2:97:9e:
                    47:4f:cc:28:2f:53:d4:60:94:dd:09:fe:c1:11:37:
                    cf:cd:f0:8a:76:d9:d4:9a:71:83:d1:45:ea:8a:55:
                    22:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:64:6E:13:C2:94:2E:18:1E:78:E5:F3:0F:44:16:E2:1C:67:37:64
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:b9:2f:b9:d3:1d:a4:e4:df:17:5b:d9:a9:c3:f9:6c:e0:e6:
         96:99:be:9e:a3:1c:cc:c6:c0:c6:0e:e2:31:e3:01:b0:be:89:
         79:87:6c:f6:41:9b:6a:50:7c:0a:2c:d0:ff:03:48:ce:34:f0:
         5c:5a:43:44:61:ea:bf:68:b2:bf:96:ad:b7:b3:b9:c2:87:76:
         45:3d:3c:b6:c6:6e:a4:ba:01:f3:eb:c9:94:f0:35:44:e4:3a:
         3c:5d:c4:06:d9:62:db:c1:37:94:50:ec:b5:a8:c9:20:f5:7b:
         25:e3:d7:fc:94:c8:1e:b0:59:b3:d5:ae:04:b4:7d:5a:c8:21:
         63:b5:dc:37:46:4a:6e:64:0f:be:9d:2c:ff:d1:f7:9f:09:20:
         e4:59:59:0d:13:13:78:4e:f6:f4:08:33:88:c0:69:6a:94:85:
         d0:5f:4b:4b:11:78:e8:91:5e:e8:3e:d8:f6:0f:2b:52:bf:be:
         d8:a9:bd:05:40:09:c9:b2:b0:22:d5:83:95:01:76:c2:e9:de:
         3d:1d:99:41:c6:b1:bf:3d:20:93:9e:3e:c0:d7:40:24:86:93:
         89:ba:57:d0:22:19:58:f5:64:5c:6b:95:9a:12:02:62:6d:e1:
         ad:39:22:c3:72:d8:d5:5b:04:c0:b3:08:e7:07:7b:18:04:be:
         5d:6d:f5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:33:56 2025 by rpki-client