Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
File:                     WKGWp78G8uFukJ0ncUG6RJEfH08.mft (raw, json)
Hash identifier:          bXyPhIHK56C7CPgxRdIYfZ0ywT4ZUyoqSTeuxWYh/Gk=
Subject key identifier:   08:6D:E6:D1:70:D8:30:FE:0D:8C:66:99:CE:36:51:0C:C7:FB:A4:3F
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       35CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
Manifest number:          34FD
Signing time:             Thu 24 Apr 2025 14:47:39 +0000
Manifest this update:     Thu 24 Apr 2025 14:47:38 +0000
Manifest next update:     Thu 01 May 2025 14:47:38 +0000
Files and hashes:         1: WKGWp78G8uFukJ0ncUG6RJEfH08.crl (hash: 7W88LREhz8goRKBvmUeRbWSBjR4PZ6CJbvcbjEqz+4o=)
                          2: EFF618B85C7311EF9CC47281C4F9AE02.roa (hash: Pf2MnnhmDrIwYiVJrAMzmgmX91XwAMLmBq+CMRQ9ITg=)
                          3: AC8A67CA100311F085EE3D29C4F9AE02.roa (hash: GNpuswIm+G6D5OwUx8uxAOUcNrCwK1Z/Tj1cmKrG5Uc=)
                          4: 493BCC24BC6911EFBA2E5C78C4F9AE02.roa (hash: P+SVMecRmlSzLHmZJYs7OTgRtoq2uV1xwoBkAlCMLfs=)
                          5: 5553B5FEE90E11EA998F5735C4F9AE02.roa (hash: oSJab/EVi+ifqNiMiViOLz8HkZ1QwjUJBAjTyuVCBBE=)
                          6: E0342C7AACF811EDA84F9711C4F9AE02.roa (hash: AA2EGEjDGl9i4FsYA91Ikir5YCSOz7E8lHeITUN7tLY=)
                          7: 5D001D76932811E8BC93865BC4F9AE02.roa (hash: xOTr/5KGUUM34JKJY1lwfTVBRDQmjApqpEKH2Iu8g7I=)
                          8: 183E52D8224711EB9EC51D58C4F9AE02.roa (hash: qgDfVvJM4t2nmo/ZdmRVYasGnroWUOtYNFtKUMd8mAw=)
                          9: 5C5998765AD611EFA2E29C7BC4F9AE02.roa (hash: xnJz9CbWIuAsxAPEZuUOdvS3/6CU2AdVOkfsin07HJk=)
                          10: F1120B125C7311EF9CC47281C4F9AE02.roa (hash: D1LuX3usa0tBox0sSCc8jcGl3+07/Mmi9S6IkrSaNU0=)
                          11: 2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa (hash: PHAUjchkulAgFgushqKaTiFT8Ff/mwtL2jMnBLLBhyY=)
                          12: 309268DCBB7E11E9AFB49C42C4F9AE02.roa (hash: selOomNAFksb1Hw1lPQaCIu26iQta1741v3Ucrg1QH0=)
                          13: 312AAAD4BB7E11E9AFB49C42C4F9AE02.roa (hash: k6jn/HtB7ksK0AYue3Gi2YlXKybN47y+89NwaYeQS2Y=)
                          14: EF706AC45C7311EF9CC47281C4F9AE02.roa (hash: vjLJIbHY8cYp0MYdF36S+lma3wzeIloym0TLu9Xd1c4=)
                          15: AD6C3A10100311F085EE3D29C4F9AE02.roa (hash: lFS0OHy1yEHBH5LM24SDFW6pxXc/OCvAYzsXLbA9L4Q=)
                          16: D121B70001EE11F0A7D9470DC4F9AE02.roa (hash: CEHEvt43ETDPLDp9hKG9cm+Mn22jdV7HHfSJ6J+OsTQ=)
                          17: 5C3F2BB6932811E8BC93865BC4F9AE02.roa (hash: EYATmfrVQplrHeXLwwsW1L6CDc1lZrLnBOvjrWbcFfM=)
                          18: F097E10C5C7311EF9CC47281C4F9AE02.roa (hash: 1ruZSUxAHFBtpg74cN22UGy/DbQsooH9+ozLl8ocAGA=)
                          19: 184CBE58768B11EFAF7A8C68C4F9AE02.roa (hash: NRD5JEMwxnAIyegq+yDnZE3cvxLvnDvPFwXtytdSo9U=)
                          20: 97DFFA2AD39E11EF9395C676C4F9AE02.roa (hash: tYNZDrfG+2ivcq2p9DfNp1fhz8gxojjjQmCChm3l52M=)
                          21: 81ACB3888C9611EE88DE0726C4F9AE02.roa (hash: k8UmxA4SbwbaZ421n0imukn2nmBZM0f5sHMchmg01MM=)
                          22: 8987F942335911E8A1642A7FC4F9AE02.roa (hash: r7nt+0YR0gcp9UZZg6iqfoS5mJ5OaWvN1C2TW4aaCpg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 14:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13771 (0x35cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Apr 24 14:47:38 2025 GMT
            Not After : May  1 14:47:38 2025 GMT
        Subject: CN=680a4f0b-c3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:70:75:fa:c5:70:18:3e:ff:5f:b6:55:20:6f:
                    57:ff:1e:20:ca:df:6f:e3:13:5c:56:62:09:d7:9f:
                    9a:3c:61:26:a1:44:60:eb:4c:56:13:69:3f:db:d2:
                    57:3c:da:62:ca:2a:b4:db:64:1e:ba:57:86:d3:41:
                    56:47:b8:2a:46:81:81:57:3c:76:e1:90:e9:9a:4b:
                    65:bc:df:cf:2b:ce:43:39:4c:6e:d9:70:75:42:b0:
                    85:83:5b:d0:a2:4f:33:c2:a6:d0:fd:cb:51:97:a9:
                    1a:4a:b7:8c:9b:fc:a4:8b:b6:73:d0:98:84:3a:f7:
                    a0:30:95:f7:80:46:00:53:1b:62:f0:03:01:64:07:
                    60:d5:78:d2:4a:7e:31:dc:29:77:21:16:8e:d9:c0:
                    ac:08:9f:88:f1:7f:4b:c5:c8:8d:79:34:52:bd:0f:
                    95:2e:ad:cd:09:6a:9f:eb:ef:f7:9a:c6:fa:e6:0f:
                    77:ec:b8:d7:e0:70:b6:18:41:3c:72:fd:4c:ed:ee:
                    b0:d2:f0:ea:f3:37:d4:72:1a:ec:6c:69:f3:0a:19:
                    5c:e5:6e:7e:7d:f5:32:4d:5f:01:6c:bd:32:97:39:
                    e9:3a:ac:93:94:da:d0:00:3c:07:cd:be:fb:2e:4a:
                    dd:65:dc:73:08:d1:4d:aa:68:00:9e:f5:76:9c:eb:
                    9d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6D:E6:D1:70:D8:30:FE:0D:8C:66:99:CE:36:51:0C:C7:FB:A4:3F
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:66:8d:75:84:7e:04:06:fa:a4:3b:93:69:d6:de:aa:16:86:
         8c:f9:38:76:84:b4:18:f9:28:78:0a:b1:19:15:6e:d1:cb:f1:
         fa:70:d8:81:61:e8:11:59:e3:da:d7:4f:56:56:20:44:94:3c:
         bb:56:09:4f:cf:dd:68:a9:1e:75:ff:0f:af:6d:b9:ed:72:a6:
         f0:7b:45:09:71:58:bd:4c:da:94:e5:a1:52:4d:90:be:57:2b:
         b5:90:03:12:d0:ec:ca:32:7b:32:43:83:12:66:7d:d5:62:ef:
         98:a1:97:fa:cd:8a:79:ac:f1:61:43:04:04:11:17:7d:52:29:
         55:be:13:c7:bd:9b:17:12:ec:5e:71:7a:69:ad:2c:46:0e:04:
         c9:69:f9:86:94:23:53:d7:f7:8c:81:69:c2:5f:b3:d2:84:71:
         d1:ca:a1:5a:aa:cd:a3:3c:99:bc:02:ef:5b:32:0f:62:04:95:
         e8:99:d2:e2:50:9f:9b:96:86:70:40:1c:97:cd:ad:ee:ae:e2:
         60:46:38:d0:62:80:82:4f:96:b6:67:28:05:32:2e:9b:50:8f:
         f3:0e:09:09:54:56:f7:1f:55:83:4d:7e:63:4d:7b:66:c1:73:
         43:93:48:02:02:8c:c1:76:bd:3f:02:61:e8:3e:ed:59:0e:4c:
         5c:33:1d:8e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0
OTExRjFGNEYwHhcNMjUwNDI0MTQ0NzM4WhcNMjUwNTAxMTQ0NzM4WjAYMRYwFAYD
VQQDEw02ODBhNGYwYi1jM2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1XB1+sVwGD7/X7ZVIG9X/x4gyt9v4xNcVmIJ15+aPGEmoURg60xWE2k/29JX
PNpiyiq022QeuleG00FWR7gqRoGBVzx24ZDpmktlvN/PK85DOUxu2XB1QrCFg1vQ
ok8zwqbQ/ctRl6kaSreMm/yki7Zz0JiEOvegMJX3gEYAUxti8AMBZAdg1XjSSn4x
3Cl3IRaO2cCsCJ+I8X9LxciNeTRSvQ+VLq3NCWqf6+/3msb65g937LjX4HC2GEE8
cv1M7e6w0vDq8zfUchrsbGnzChlc5W5+ffUyTV8BbL0ylznpOqyTlNrQADwHzb77
LkrdZdxzCNFNqmgAnvV2nOudwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAht5tFw
2DD+DYxmmc42UQzH+6Q/MB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE
OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEM5MC8yRDFCRUJFNDFEOTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1
RnVrSjBuY1VHNlJKRWZIMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCqZo11hH4EBvqkO5Np1t6qFoaM+Th2hLQY+Sh4CrEZFW7Ry/H6cNiB
YegRWePa109WViBElDy7VglPz91oqR51/w+vbbntcqbwe0UJcVi9TNqU5aFSTZC+
Vyu1kAMS0OzKMnsyQ4MSZn3VYu+YoZf6zYp5rPFhQwQEERd9UilVvhPHvZsXEuxe
cXpprSxGDgTJafmGlCNT1/eMgWnCX7PShHHRyqFaqs2jPJm8Au9bMg9iBJXomdLi
UJ+bloZwQByXza3uruJgRjjQYoCCT5a2ZygFMi6bUI/zDgkJVFb3H1WDTX5jTXtm
wXNDk0gCAozBdr0/AmHoPu1ZDkxcMx2O
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:09:24 2025 by rpki-client on console.sobornost.net