Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
File:                     WKGWp78G8uFukJ0ncUG6RJEfH08.mft (raw, json)
Hash identifier:          DBQHCryod+09P3wN/CAxTAEPTQoVBgf9hRYonilbMgk=
Subject key identifier:   34:76:CE:F2:9A:DB:DD:C9:D5:2C:C2:F4:6C:17:1A:F2:71:28:3B:D9
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       363B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
Manifest number:          354D
Signing time:             Thu 04 Sep 2025 14:50:26 +0000
Manifest this update:     Thu 04 Sep 2025 14:50:26 +0000
Manifest next update:     Thu 11 Sep 2025 14:50:26 +0000
Files and hashes:         1: WKGWp78G8uFukJ0ncUG6RJEfH08.crl (hash: oRyiCL5lS4mZJB0J+gvq5iNnmA6vdjydjlmu2LONmTo=)
                          2: EFF618B85C7311EF9CC47281C4F9AE02.roa (hash: lIANGK6Kn2MugRFq01BJgGhUwBHYhGPRL+AhDQBA5Do=)
                          3: AC8A67CA100311F085EE3D29C4F9AE02.roa (hash: T/rcx/oBePx/fFY5liuYl1FWNJgd5CikRWxOV60Eb+s=)
                          4: 493BCC24BC6911EFBA2E5C78C4F9AE02.roa (hash: ED0l+M3XW8yfiIKv/qBb5H5Y5anJhlkDWFxpGJ+C/jc=)
                          5: 5553B5FEE90E11EA998F5735C4F9AE02.roa (hash: 7Y+BMS/66rPoGcFQGfUmmEmIY/lvqgpMP8T/jWrEFog=)
                          6: E0342C7AACF811EDA84F9711C4F9AE02.roa (hash: JW9VEUpPQX6Yip1p8OuIfJey2xwoc83kLB7ewV443Q0=)
                          7: 5D001D76932811E8BC93865BC4F9AE02.roa (hash: pHntxFpGcz85fh4g8wJJV0K9ZMyE2AlZpDPCheVdfGE=)
                          8: 183E52D8224711EB9EC51D58C4F9AE02.roa (hash: ZGq5JFpnBl6F/9RJYSzWIqvoJrxf/ut9GoB7c3G4b0w=)
                          9: 5C5998765AD611EFA2E29C7BC4F9AE02.roa (hash: I3gilpNI/WjtxsTD/w6Z3Y+IRfSXnYHa5irJjXL586Y=)
                          10: F1120B125C7311EF9CC47281C4F9AE02.roa (hash: lWRvTuPg6LzSZBPd+6lJM0jAzSYZ9gW7/FAk9bnrczc=)
                          11: 0E9272DA768611F08998521AC4F9AE02.roa (hash: bGBXDK+xcvHyPNZ/oI+s2EN0dL3EuzSCaA64bObOVdg=)
                          12: 2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa (hash: pC+fVhWZhAlHI54GzrYegWShgGirXMUII/btkAhefI4=)
                          13: 6BCA89E6834D11F0941AF77EC4F9AE02.roa (hash: SeNQjgRC0BDq/cICInRm5JLh8KoApd9upKmoYivcUBE=)
                          14: 309268DCBB7E11E9AFB49C42C4F9AE02.roa (hash: vkdEUpa0uX2LdRNKslgCoqxAxrazYilRXx4dGIkC7ss=)
                          15: 312AAAD4BB7E11E9AFB49C42C4F9AE02.roa (hash: tm6lZWT2jSaQ2mTovYZkiilxmKWiSUYMcY5Ywr80DlM=)
                          16: EF706AC45C7311EF9CC47281C4F9AE02.roa (hash: KFqiJvZSOQ4AGYSeiVNs4qK0DY9PSIDgrHR+mxW9KOs=)
                          17: 5C3F2BB6932811E8BC93865BC4F9AE02.roa (hash: tZHLP6nM/PTOaw/rmeUMVa1wU4QqlWqKu6p2vcEjWm8=)
                          18: 3D57CE0A738711F0B8F64625C4F9AE02.roa (hash: RH2aXvvd5385Bl/wV+ldH4sWx8Nfzkrys/SFfqx2DgU=)
                          19: F097E10C5C7311EF9CC47281C4F9AE02.roa (hash: 7CjS9ffPyOrzJz1ZAktWX3KaOjOKC/5jGyfAIJ4BJyo=)
                          20: 184CBE58768B11EFAF7A8C68C4F9AE02.roa (hash: LT9r+sRto5ZOYudi5sFYiwbtxYl/cY+w1R+R7OKpEeI=)
                          21: 97DFFA2AD39E11EF9395C676C4F9AE02.roa (hash: P6z1l/i5fCMa+njXzS/IVZH5AnBAQ64cA+kn7DDOLo0=)
                          22: 81ACB3888C9611EE88DE0726C4F9AE02.roa (hash: SGgawQJ8e+bc7GkpKZMh+cEtFBap2rFAVcln1BmNOkI=)
                          23: B9379E74865611F0A52CCA3EC4F9AE02.roa (hash: UWSF1pfWeO881gCSl6I5ELn4d9ZwwfUgPvvo1upOr+U=)
                          24: 8987F942335911E8A1642A7FC4F9AE02.roa (hash: bo4+lqzgHx9mwwzNsiPnPqvLCTaS+zSdlr02VCrtbuY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 14:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13883 (0x363b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Sep  4 14:50:26 2025 GMT
            Not After : Sep 11 14:50:26 2025 GMT
        Subject: CN=68b9a732-8924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ad:80:62:8d:d9:a1:08:66:4c:2c:30:07:51:
                    b6:81:ca:70:a7:1b:dc:4e:bc:41:d4:bb:0a:72:b3:
                    36:1a:b0:3a:3d:bf:43:27:37:b2:fb:0f:d0:5e:64:
                    2f:f0:9d:7c:1a:b7:e6:c0:3e:92:3d:fb:2f:3c:bc:
                    33:67:21:60:f9:f2:50:13:9b:26:65:e3:09:47:da:
                    2e:3c:90:5d:2f:e5:a5:f7:4f:cc:3a:a9:ff:ed:31:
                    a4:cc:31:56:54:92:9b:8a:1f:f0:ff:7f:a7:1a:e9:
                    aa:65:78:a8:09:d3:28:af:a0:83:38:ea:c2:ce:88:
                    38:4d:6b:c8:03:57:7a:a2:ec:20:0a:88:6e:8b:3a:
                    f4:c8:e0:4a:c3:77:ab:56:1a:80:96:b5:8c:c0:22:
                    cc:ee:d2:20:73:ab:58:57:47:7d:9f:e3:ba:47:ed:
                    71:85:b7:44:aa:bb:30:8e:25:24:43:0d:01:0a:4d:
                    d1:5f:85:5e:ac:f1:51:a1:4a:dd:61:bf:61:d2:d2:
                    a3:14:dd:fa:b8:c6:4f:9f:cb:39:4b:84:81:cd:b5:
                    e5:b7:98:e8:7b:39:06:48:d3:14:8f:a2:f5:bb:25:
                    f4:51:d0:c7:05:6f:0c:a5:c3:57:3e:d1:83:8c:65:
                    cc:d0:a9:a7:81:0e:2a:aa:4b:55:59:e0:5b:fd:8e:
                    fa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:76:CE:F2:9A:DB:DD:C9:D5:2C:C2:F4:6C:17:1A:F2:71:28:3B:D9
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b8:e7:c7:e7:71:3d:46:81:b3:14:ec:b5:c8:5d:8d:1b:55:
         99:75:05:48:ae:fc:b6:3f:8f:b5:75:62:87:88:09:27:db:89:
         0a:22:10:88:2f:29:8e:e2:e0:2c:dd:61:b5:68:32:b6:63:df:
         ef:24:1c:1e:18:5c:e1:3a:00:b5:5c:ee:02:b1:5d:ca:80:e3:
         f4:2f:f7:e5:25:08:18:dc:13:b5:00:a8:20:15:dd:63:1d:77:
         53:27:c0:46:6e:9d:4c:f2:bf:ea:29:9e:09:90:4b:19:57:13:
         04:cf:e3:13:29:60:46:e8:29:71:10:78:6b:79:03:89:c4:fb:
         57:7d:7b:da:44:19:28:bb:50:8f:b2:3f:29:76:97:a3:90:79:
         7e:38:e8:c8:a7:d7:fa:ac:9c:45:77:21:66:27:ed:7e:57:bc:
         99:7c:02:07:b3:be:9b:25:f8:dc:ac:a6:db:be:4a:22:81:00:
         01:da:bb:7a:fe:bb:13:27:62:50:69:97:3b:62:fa:8a:c5:96:
         4a:9a:8d:8e:c6:2b:18:7c:1a:f3:95:10:c1:8b:4d:95:2b:28:
         74:83:f1:cb:56:55:92:22:90:32:23:b6:d3:cc:6b:68:ba:40:
         d0:57:b1:cb:12:ac:5b:d0:5a:00:ec:02:32:28:39:ad:6e:e0:
         f5:6b:ff:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:27:43 2025 by rpki-client