Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/WwWCW_uisqVUHPPwnZchE67MjXU.mft
File:                     WwWCW_uisqVUHPPwnZchE67MjXU.mft (raw, json)
Hash identifier:          /CGFVfgaek4K9QWz0nxhrsjXxlBbajvQukxU7Z0zU4U=
Subject key identifier:   5E:21:DE:4A:0E:21:45:F4:1A:CA:D2:81:37:3D:17:94:F8:CD:91:48
Authority key identifier: 5B:05:82:5B:FB:A2:B2:A5:54:1C:F3:F0:9D:97:21:13:AE:CC:8D:75
Certificate issuer:       /CN=A9139504/serialNumber=5B05825BFBA2B2A5541CF3F09D972113AECC8D75
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WwWCW_uisqVUHPPwnZchE67MjXU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/WwWCW_uisqVUHPPwnZchE67MjXU.mft
Manifest number:          64
Signing time:             Thu 15 May 2025 06:18:14 +0000
Manifest this update:     Thu 15 May 2025 06:18:14 +0000
Manifest next update:     Thu 22 May 2025 06:18:14 +0000
Files and hashes:         1: WwWCW_uisqVUHPPwnZchE67MjXU.crl (hash: STI/jX+aPOlCpbqAn8mH6LZutL2kpWobyTjGx+NEU9M=)
                          2: 15DF0B709C5211EFB58CEA09C4F9AE02.roa (hash: BPJMmkMsJ5GR7lvFcWO3tyenH3Ad6L0L8sWU/hgNQ5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/WwWCW_uisqVUHPPwnZchE67MjXU.crl
                          rsync://rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/WwWCW_uisqVUHPPwnZchE67MjXU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WwWCW_uisqVUHPPwnZchE67MjXU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 06:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139504, serialNumber=5B05825BFBA2B2A5541CF3F09D972113AECC8D75
        Validity
            Not Before: May 15 06:18:14 2025 GMT
            Not After : May 22 06:18:14 2025 GMT
        Subject: CN=68258726-84a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:69:63:cd:0b:dc:7e:7f:35:3d:39:d4:be:60:
                    e9:b5:3d:98:96:48:37:f8:b8:f3:33:61:03:43:fa:
                    62:42:a9:d8:e2:50:d9:62:f8:d5:f0:c3:8f:c3:2c:
                    14:20:9f:bf:50:ee:d5:bd:93:e9:dc:74:15:5d:76:
                    08:6e:f5:b1:50:69:cf:0c:ad:ac:70:f6:8f:b3:e2:
                    07:83:5d:68:53:c8:c4:6b:2a:1c:c7:f6:b0:e8:f5:
                    4a:ce:c8:f5:d4:f7:35:3f:86:0b:e9:0b:c6:55:27:
                    62:28:cb:53:01:a2:55:ff:76:4f:8b:b7:5a:2f:e8:
                    1b:24:59:bd:b7:4b:b3:ed:8a:7a:14:4f:d2:6b:ce:
                    fe:1e:28:c3:d1:2b:c5:b8:39:9e:e5:44:f4:be:79:
                    41:d6:b9:30:b7:89:d8:e8:34:ec:50:68:cc:93:47:
                    7b:71:d7:7e:db:81:31:fb:c6:ce:31:9a:38:35:7f:
                    be:53:60:90:e2:82:e6:4e:29:6f:2b:44:2e:3f:29:
                    23:7c:28:b9:86:6b:70:33:d7:a4:c7:4a:4a:ed:cf:
                    16:27:63:d3:d6:89:8e:a2:b7:e2:a2:9f:52:46:75:
                    fd:16:cf:4e:0d:5a:d0:37:85:34:e9:4b:85:c3:16:
                    55:21:ff:9b:fe:15:0a:41:be:17:88:c8:41:85:36:
                    18:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:21:DE:4A:0E:21:45:F4:1A:CA:D2:81:37:3D:17:94:F8:CD:91:48
            X509v3 Authority Key Identifier:
                keyid:5B:05:82:5B:FB:A2:B2:A5:54:1C:F3:F0:9D:97:21:13:AE:CC:8D:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/WwWCW_uisqVUHPPwnZchE67MjXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WwWCW_uisqVUHPPwnZchE67MjXU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/WwWCW_uisqVUHPPwnZchE67MjXU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:47:22:33:cc:be:a4:e6:aa:5c:a7:3c:d9:6b:22:4b:25:88:
         81:23:e8:bd:ab:12:53:a6:77:51:cc:37:be:7f:65:81:8f:9e:
         04:3f:67:c3:05:53:52:70:ce:92:60:08:56:30:33:11:d1:06:
         48:c2:b9:c7:78:ae:82:23:dd:2e:aa:82:f4:55:0c:64:90:fc:
         cf:6f:45:68:04:61:9a:7e:39:ab:27:c1:e2:1c:db:bf:9f:6c:
         47:d3:1d:10:14:59:97:19:35:0d:1b:74:26:00:e9:64:6c:f6:
         ae:b2:59:a1:e8:5f:ba:25:3f:15:c1:e9:fc:d0:8e:12:5e:87:
         e3:1a:c5:d3:20:99:47:63:64:7e:6b:37:3d:8e:3f:b6:e8:10:
         88:b3:82:a4:10:f9:79:bb:d0:11:db:fa:4b:4b:f0:3b:76:bb:
         52:b0:74:d8:38:ec:38:e5:3b:d0:7f:df:24:b2:57:69:b9:22:
         ef:0c:1f:9d:f6:f7:61:7b:02:10:70:dd:e9:f8:ed:f2:ab:46:
         3e:f5:e5:7b:b3:dc:a9:9b:ba:77:a4:35:ba:74:69:a6:8d:ca:
         56:99:83:e4:8e:c8:dd:c6:93:78:20:a7:17:a5:8d:18:3d:0f:
         e9:86:6b:67:30:0e:61:b8:c5:68:93:e7:5c:68:6f:e4:bb:dc:
         fb:84:46:17
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
OTUwNDExMC8GA1UEBRMoNUIwNTgyNUJGQkEyQjJBNTU0MUNGM0YwOUQ5NzIxMTNB
RUNDOEQ3NTAeFw0yNTA1MTUwNjE4MTRaFw0yNTA1MjIwNjE4MTRaMBgxFjAUBgNV
BAMTDTY4MjU4NzI2LTg0YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDmaWPNC9x+fzU9OdS+YOm1PZiWSDf4uPMzYQND+mJCqdjiUNli+NXww4/DLBQg
n79Q7tW9k+ncdBVddghu9bFQac8Mraxw9o+z4geDXWhTyMRrKhzH9rDo9UrOyPXU
9zU/hgvpC8ZVJ2Ioy1MBolX/dk+Lt1ov6BskWb23S7PtinoUT9Jrzv4eKMPRK8W4
OZ7lRPS+eUHWuTC3idjoNOxQaMyTR3tx137bgTH7xs4xmjg1f75TYJDiguZOKW8r
RC4/KSN8KLmGa3Az16THSkrtzxYnY9PWiY6it+Kin1JGdf0Wz04NWtA3hTTpS4XD
FlUh/5v+FQpBvheIyEGFNhhhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXiHeSg4h
RfQaytKBNz0XlPjNkUgwHwYDVR0jBBgwFoAUWwWCW/uisqVUHPPwnZchE67MjXUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5NTA0LzYwNEQ5QkQ0OUM0
RjExRUZBOTgzNUI2QUM0RjlBRTAyL1d3V0NXX3Vpc3FWVUhQUHduWmNoRTY3TWpY
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvV3dXQ1dfdWlzcVZVSFBQd25aY2hFNjdNalhVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5
NTA0LzYwNEQ5QkQ0OUM0RjExRUZBOTgzNUI2QUM0RjlBRTAyL1d3V0NXX3Vpc3FW
VUhQUHduWmNoRTY3TWpYVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAI9HIjPMvqTmqlynPNlrIksliIEj6L2rElOmd1HMN75/ZYGPngQ/Z8MF
U1JwzpJgCFYwMxHRBkjCucd4roIj3S6qgvRVDGSQ/M9vRWgEYZp+OasnweIc27+f
bEfTHRAUWZcZNQ0bdCYA6WRs9q6yWaHoX7olPxXB6fzQjhJeh+MaxdMgmUdjZH5r
Nz2OP7boEIizgqQQ+Xm70BHb+ktL8Dt2u1KwdNg47DjlO9B/3ySyV2m5Iu8MH532
92F7AhBw3en47fKrRj715Xuz3KmbunekNbp0aaaNylaZg+SOyN3Gk3ggpxeljRg9
D+mGa2cwDmG4xWiT51xob+S73PuERhc=
-----END CERTIFICATE-----
Generated at Sat May 17 05:42:17 2025 by rpki-client