Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
File:                     WKGWp78G8uFukJ0ncUG6RJEfH08.mft (raw, json)
Hash identifier:          J+QLhFFZhXTe8qrnduf3VyXE82oPA5VRF1SDPCFIODI=
Subject key identifier:   09:33:44:67:19:A0:08:3F:60:61:FD:E5:09:68:30:1C:0F:B2:DC:AD
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       36F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
Manifest number:          35D2
Signing time:             Sat 18 Apr 2026 14:47:29 +0000
Manifest this update:     Sat 18 Apr 2026 14:47:29 +0000
Manifest next update:     Sat 25 Apr 2026 14:47:29 +0000
Files and hashes:         1: WKGWp78G8uFukJ0ncUG6RJEfH08.crl (hash: 5HFg9WtRKT7hwWnNCWPQfzG03LSp0GDCE+5i82vJOOE=)
                          2: 8987F942335911E8A1642A7FC4F9AE02.roa (hash: 2NVh/4Y5D2OTZDSW56ekK5upiHvTQpJeMadJ6WP+B1w=)
                          3: 2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa (hash: fWSj9dAgYw9nG3wqv+J+lqVoRiH88B3Y/i3ikVgewC4=)
                          4: BA0DF746D9F611F08511A4D47CD3641D.roa (hash: tPsB/mFPPLvgfNpniANFq0WNy30CGEztpU7Bq2UHrLs=)
                          5: 81ACB3888C9611EE88DE0726C4F9AE02.roa (hash: TqThcjGCZdcUCFCB5iBMES4y4Hmtcv0QzeWoAJ38VUs=)
                          6: 183E52D8224711EB9EC51D58C4F9AE02.roa (hash: 0GPHGJSwVSQN+HbeQHFY1E7yMWeA5ao5zjgE2dX2Ib0=)
                          7: 5C3F2BB6932811E8BC93865BC4F9AE02.roa (hash: kiic5/OTQTtn1z2lkfPAndpHchp8QnMx93thaVLeWyM=)
                          8: F097E10C5C7311EF9CC47281C4F9AE02.roa (hash: K6jEuDhrI6n4J7VT22Lor71QYUQWjz6kVz3VBemDBVw=)
                          9: 97DFFA2AD39E11EF9395C676C4F9AE02.roa (hash: 7eIKxIs5ApKcSsqSTsxpl/ToP4LMHKxxhepDk6zeUbE=)
                          10: 309268DCBB7E11E9AFB49C42C4F9AE02.roa (hash: YmGFgwUypcFh5OijZSTGp22AvvVEqAYggryXmPGaV1g=)
                          11: EF706AC45C7311EF9CC47281C4F9AE02.roa (hash: 5t2Yq05hPwtXuLtqs8kweaIaku2qocKgZs9gLGmRXRc=)
                          12: 5D001D76932811E8BC93865BC4F9AE02.roa (hash: pnq2HjvX+VS1IJEyx1/G8baR9Q04KAF0DCxLCQuG8cY=)
                          13: 184CBE58768B11EFAF7A8C68C4F9AE02.roa (hash: FxAkH14gN3qeGyp7CAwPM1GGueqiuEJR03b+75cT2Ys=)
                          14: AC8A67CA100311F085EE3D29C4F9AE02.roa (hash: x7wMdNtws0Zk8todAFQAVhvhVj8vpXnpLHAo0o0q0EI=)
                          15: EFF618B85C7311EF9CC47281C4F9AE02.roa (hash: mGpn4fk4is7HUl0qtOV6vnB3CoPIaZAKtJG24CreZn0=)
                          16: 5553B5FEE90E11EA998F5735C4F9AE02.roa (hash: eyAZbbtItdVCD0trW/+j/FNlPCIgtEJrjEuk2yOz4cg=)
                          17: 312AAAD4BB7E11E9AFB49C42C4F9AE02.roa (hash: xwFRv4+36h+Qv5qqEuC5mbYdz3jPK7pHI/k9Akot9jk=)
                          18: 493BCC24BC6911EFBA2E5C78C4F9AE02.roa (hash: VW7cuYgRFMAxVvfNs/yCn19RQX/HKB7xjGUiTI8NO4Q=)
                          19: E0342C7AACF811EDA84F9711C4F9AE02.roa (hash: VLpZ241wVDEpWgAarSP8WgjDb1LnfEipWDP1xjst+Es=)
                          20: 6201F1DEC46F11F08682F936C4F9AE02.roa (hash: efx8+5xrcECmjvvHmgG7O7h52QnxQQAcGyhoXJoZs2g=)
                          21: 92B41AACB17B11F0A5D78E54C4F9AE02.roa (hash: iYAnt767P+k9FiLxROTY3OzyA9z+btPHTlDDG1LpQr8=)
                          22: F1120B125C7311EF9CC47281C4F9AE02.roa (hash: D9vDHtH3V7RQG+Zx0bZ20FinYokxnT2cxn2H3B3MXXw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:47:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14064 (0x36f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Apr 18 14:47:29 2026 GMT
            Not After : Apr 25 14:47:29 2026 GMT
        Subject: CN=69e39981-606e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1a:82:4f:1e:a5:d7:f4:c7:f3:b3:c4:c7:92:
                    bb:05:2c:95:d1:c6:13:55:c4:f7:4c:35:f6:d1:c8:
                    2a:73:15:2f:4d:93:06:d2:24:14:02:bd:05:cf:70:
                    f4:56:2b:73:6a:80:b3:98:fa:e6:2f:be:7f:b9:4e:
                    45:81:33:92:e4:77:5e:39:03:b9:ba:91:1a:82:3f:
                    1d:88:25:31:48:1f:3a:5b:e6:dc:37:33:83:a3:69:
                    fb:f0:18:76:82:a0:a1:e7:f9:4b:c0:d3:0f:96:b6:
                    88:21:95:1e:0d:a9:39:cb:f7:74:f7:42:11:bb:a8:
                    c2:37:2d:32:06:b4:e0:30:2d:14:b2:d3:bc:b7:f4:
                    a4:d7:13:ba:c1:01:c2:0c:df:d0:6a:2f:02:65:f3:
                    cc:00:e3:ed:3b:0a:1b:ab:a9:67:e7:4e:fa:7c:03:
                    c4:83:0d:62:a4:47:b4:99:ee:1b:28:6e:c4:75:73:
                    be:c4:15:45:06:c9:30:8a:39:2c:47:bf:5f:e3:7d:
                    89:52:21:7a:b1:af:23:e0:38:62:a9:5f:b2:28:91:
                    6d:b2:8e:da:3b:99:23:98:bb:16:fe:f6:95:50:ff:
                    03:32:1a:e2:c3:fb:4a:45:bf:d1:5c:20:05:37:19:
                    d5:fe:fa:62:7d:e3:62:e3:fa:12:8f:b5:eb:05:8a:
                    1d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:33:44:67:19:A0:08:3F:60:61:FD:E5:09:68:30:1C:0F:B2:DC:AD
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:49:99:78:de:42:b5:7c:0a:d5:b0:a7:59:c4:09:3f:ad:2a:
         bb:58:be:88:36:85:02:b8:d3:20:ed:35:e4:42:33:e9:36:4d:
         58:4d:e0:12:22:84:d3:af:1c:81:db:13:6e:02:a6:d1:a2:a9:
         8b:4d:3a:af:91:0c:e9:33:ee:cb:e8:99:bb:0d:1a:b3:5f:13:
         c1:ee:3a:df:86:d0:02:0c:3e:28:38:6d:90:98:a5:a3:62:83:
         91:66:2c:b0:d0:6a:7a:a7:96:0d:8b:1e:8a:f5:25:b3:0a:57:
         59:a2:37:5f:a6:4e:91:cd:f8:f8:37:d5:71:83:11:47:f4:08:
         7d:e7:7b:ec:3b:75:ae:21:ba:b6:10:8d:0b:0b:fa:04:d9:c9:
         9b:5f:18:53:c2:33:5b:87:50:a1:08:ea:6f:05:de:09:36:98:
         dd:cc:6d:24:c8:4a:c9:69:6a:33:98:03:28:87:84:f4:45:5a:
         d3:e1:6e:1b:08:fa:d6:ef:91:cf:e2:9e:45:ab:b3:de:19:71:
         87:37:18:37:5e:2e:0c:c2:82:d5:76:bb:33:ac:e5:e5:f6:42:
         c4:b9:c7:7e:ba:44:ba:db:fa:27:6d:fe:d5:62:f3:4c:8e:cc:
         a1:ed:ca:cf:cf:d2:be:9e:9a:52:20:17:03:4b:3b:73:81:a7:
         bb:7d:9a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:55:52 2026 by rpki-client