Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
File:                     WKGWp78G8uFukJ0ncUG6RJEfH08.mft (raw, json)
Hash identifier:          lXvfjTS6NXcHnpNBTBNL/75bEmxqeyvQACxPzzAShKE=
Subject key identifier:   DE:59:37:12:E6:60:2C:50:A8:72:4C:73:08:68:55:44:E6:1C:6A:87
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       3724
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
Manifest number:          3603
Signing time:             Mon 20 Jul 2026 14:50:27 +0000
Manifest this update:     Mon 20 Jul 2026 14:50:26 +0000
Manifest next update:     Mon 27 Jul 2026 14:50:26 +0000
Files and hashes:         1: WKGWp78G8uFukJ0ncUG6RJEfH08.crl (hash: /6PX+hjWJmyHjdmMpEcdd3amDz8mtFZfRt4CtCkv2wU=)
                          2: E0342C7AACF811EDA84F9711C4F9AE02.roa (hash: VLpZ241wVDEpWgAarSP8WgjDb1LnfEipWDP1xjst+Es=)
                          3: 6201F1DEC46F11F08682F936C4F9AE02.roa (hash: efx8+5xrcECmjvvHmgG7O7h52QnxQQAcGyhoXJoZs2g=)
                          4: 312AAAD4BB7E11E9AFB49C42C4F9AE02.roa (hash: xwFRv4+36h+Qv5qqEuC5mbYdz3jPK7pHI/k9Akot9jk=)
                          5: 5D001D76932811E8BC93865BC4F9AE02.roa (hash: pnq2HjvX+VS1IJEyx1/G8baR9Q04KAF0DCxLCQuG8cY=)
                          6: 2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa (hash: fWSj9dAgYw9nG3wqv+J+lqVoRiH88B3Y/i3ikVgewC4=)
                          7: 493BCC24BC6911EFBA2E5C78C4F9AE02.roa (hash: VW7cuYgRFMAxVvfNs/yCn19RQX/HKB7xjGUiTI8NO4Q=)
                          8: EF706AC45C7311EF9CC47281C4F9AE02.roa (hash: 5t2Yq05hPwtXuLtqs8kweaIaku2qocKgZs9gLGmRXRc=)
                          9: F1120B125C7311EF9CC47281C4F9AE02.roa (hash: D9vDHtH3V7RQG+Zx0bZ20FinYokxnT2cxn2H3B3MXXw=)
                          10: 97DFFA2AD39E11EF9395C676C4F9AE02.roa (hash: 7eIKxIs5ApKcSsqSTsxpl/ToP4LMHKxxhepDk6zeUbE=)
                          11: 184CBE58768B11EFAF7A8C68C4F9AE02.roa (hash: FxAkH14gN3qeGyp7CAwPM1GGueqiuEJR03b+75cT2Ys=)
                          12: 81ACB3888C9611EE88DE0726C4F9AE02.roa (hash: TqThcjGCZdcUCFCB5iBMES4y4Hmtcv0QzeWoAJ38VUs=)
                          13: AC8A67CA100311F085EE3D29C4F9AE02.roa (hash: x7wMdNtws0Zk8todAFQAVhvhVj8vpXnpLHAo0o0q0EI=)
                          14: 8A84DF3C777E11F19AE22E7C6DA30FBC.roa (hash: OiRldKBJFKFZbflYLKAxoYLuhLNvM1Sm4iREol2TvWI=)
                          15: 5553B5FEE90E11EA998F5735C4F9AE02.roa (hash: eyAZbbtItdVCD0trW/+j/FNlPCIgtEJrjEuk2yOz4cg=)
                          16: ACBE9D886BCE11F190D386B58047A888.roa (hash: wzA3Q1n/Ym5vQVGakgnRQ0/0/5N1KiNndOy36YFgSvE=)
                          17: 183E52D8224711EB9EC51D58C4F9AE02.roa (hash: 0GPHGJSwVSQN+HbeQHFY1E7yMWeA5ao5zjgE2dX2Ib0=)
                          18: 309268DCBB7E11E9AFB49C42C4F9AE02.roa (hash: YmGFgwUypcFh5OijZSTGp22AvvVEqAYggryXmPGaV1g=)
                          19: 8987F942335911E8A1642A7FC4F9AE02.roa (hash: 2NVh/4Y5D2OTZDSW56ekK5upiHvTQpJeMadJ6WP+B1w=)
                          20: 5C3F2BB6932811E8BC93865BC4F9AE02.roa (hash: kiic5/OTQTtn1z2lkfPAndpHchp8QnMx93thaVLeWyM=)
                          21: ADC20B986BCE11F190D386B58047A888.roa (hash: HA6Y/mCGw2yaPjZrohd5Bz3JW+KNRtW1kyc+CoKAAps=)
                          22: BA0DF746D9F611F08511A4D47CD3641D.roa (hash: tPsB/mFPPLvgfNpniANFq0WNy30CGEztpU7Bq2UHrLs=)
                          23: 92B41AACB17B11F0A5D78E54C4F9AE02.roa (hash: iYAnt767P+k9FiLxROTY3OzyA9z+btPHTlDDG1LpQr8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14116 (0x3724)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Jul 20 14:50:26 2026 GMT
            Not After : Jul 27 14:50:26 2026 GMT
        Subject: CN=6a5e35b2-5331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:48:a7:f3:6c:31:cc:f2:04:68:bc:99:b2:27:
                    10:d4:fb:61:91:64:44:ac:29:a8:cb:6d:cd:79:8b:
                    5c:43:b6:bb:9e:1d:62:f7:51:0f:8f:4d:dd:5a:40:
                    bb:a5:2e:a6:3b:f3:7d:01:e4:51:d7:f7:23:3c:1b:
                    b1:a3:2f:2e:9d:99:6f:16:99:69:01:0b:dd:9c:07:
                    18:bd:a7:7b:a0:b8:f7:cd:55:41:fc:1d:4f:a2:8a:
                    7f:3a:63:bc:c4:eb:e4:63:4d:bc:f4:ca:8b:d5:b9:
                    3a:15:e5:9c:92:64:53:c1:95:43:b4:95:39:c5:fe:
                    b5:49:56:d0:5e:81:bb:d0:39:5b:54:6f:4f:8e:0c:
                    79:8a:a2:d4:d5:dd:be:ad:36:d7:34:9c:fe:93:9d:
                    a8:09:c0:45:6b:53:9f:a7:33:c0:41:97:cd:4d:b0:
                    f8:74:7b:7a:0f:5f:65:4e:f0:17:1b:e7:af:54:97:
                    1f:01:23:6b:54:9c:36:cd:12:87:0c:7c:3a:06:61:
                    ae:4b:26:6d:25:f3:74:fc:f5:ef:27:53:f5:43:0a:
                    72:5b:56:7a:f8:2c:c1:56:3d:31:7d:ed:93:76:93:
                    26:17:f9:90:a5:c3:11:ad:dc:4f:a5:53:0a:0e:1e:
                    ee:f6:7a:4b:34:ad:5b:7f:9a:f4:25:a2:d0:9f:3b:
                    29:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:59:37:12:E6:60:2C:50:A8:72:4C:73:08:68:55:44:E6:1C:6A:87
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ec:2e:ee:6f:b6:96:15:a5:3a:bd:b2:bd:24:33:87:7a:c9:
         a2:c9:6b:dc:c1:d3:51:1c:82:eb:ca:b7:3a:9b:c6:d1:ff:a9:
         cb:1e:3c:fd:ef:ec:c7:87:27:83:b3:54:7a:bf:68:4b:1b:88:
         f1:85:04:54:1e:6d:ad:2a:01:0a:9a:f8:1a:f1:fd:8a:e2:c6:
         a5:a5:eb:98:e6:c4:17:05:ee:64:50:8b:0e:d7:a3:10:4b:00:
         27:fe:97:97:12:34:94:99:b2:c7:e6:d6:27:50:36:2f:b2:42:
         c9:c3:a8:a4:d0:7a:5f:7d:17:7e:b5:2a:7b:58:ef:55:14:a7:
         5b:b7:f5:58:5c:33:9e:fb:d3:f3:c9:93:3c:57:40:9f:1d:fe:
         36:c0:49:c4:cf:2b:c7:6c:d8:ab:02:9b:d7:54:2d:9f:32:f6:
         14:b1:da:92:11:02:65:d2:3c:28:f9:01:0d:a7:7e:91:bb:02:
         8b:b8:8d:65:23:49:35:78:25:73:b3:10:7c:07:eb:6f:84:28:
         07:87:e6:77:03:c3:9c:d5:c1:6a:67:40:d6:cf:6b:14:3b:7b:
         10:dd:d5:29:9f:52:d5:f4:0e:cf:17:95:c7:4d:e5:fe:cc:c6:
         9d:96:9e:cd:06:7b:1a:df:53:a6:60:f5:c4:d8:15:c6:78:b6:
         9a:df:17:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:55:11 2026 by rpki-client