Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/WwWCW_uisqVUHPPwnZchE67MjXU.mft
File:                     WwWCW_uisqVUHPPwnZchE67MjXU.mft (raw, json)
Hash identifier:          NFIu4Drt8Gb9NHHW5LDWv1u5657IaJtoThbgUkNxzjo=
Subject key identifier:   82:1F:E8:70:AC:02:60:F3:24:AE:D8:31:18:EF:B3:58:AE:76:9B:51
Authority key identifier: 5B:05:82:5B:FB:A2:B2:A5:54:1C:F3:F0:9D:97:21:13:AE:CC:8D:75
Certificate issuer:       /CN=A9139504/serialNumber=5B05825BFBA2B2A5541CF3F09D972113AECC8D75
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WwWCW_uisqVUHPPwnZchE67MjXU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/WwWCW_uisqVUHPPwnZchE67MjXU.mft
Manifest number:          86
Signing time:             Sat 19 Jul 2025 06:51:18 +0000
Manifest this update:     Sat 19 Jul 2025 06:51:18 +0000
Manifest next update:     Sat 26 Jul 2025 06:51:17 +0000
Files and hashes:         1: WwWCW_uisqVUHPPwnZchE67MjXU.crl (hash: OgFKXzTvbiiLwJFyKjSK5GORrsq7DOlUD7V8kmEgPAY=)
                          2: 15DF0B709C5211EFB58CEA09C4F9AE02.roa (hash: +jnQtndd1JtQ2aj7KFJeKUFP4ZfCE+tFYtWPlvQZFIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/WwWCW_uisqVUHPPwnZchE67MjXU.crl
                          rsync://rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/WwWCW_uisqVUHPPwnZchE67MjXU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WwWCW_uisqVUHPPwnZchE67MjXU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 06:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139504, serialNumber=5B05825BFBA2B2A5541CF3F09D972113AECC8D75
        Validity
            Not Before: Jul 19 06:51:18 2025 GMT
            Not After : Jul 26 06:51:17 2025 GMT
        Subject: CN=687b4066-a79c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:95:01:e7:dd:82:9d:4f:91:12:9d:78:b5:01:
                    f5:c5:ab:a2:a1:c9:2f:3d:a3:1a:80:5c:82:70:36:
                    50:88:58:11:03:b7:a6:0b:8e:56:29:a4:7d:3c:b2:
                    0e:8d:20:46:84:49:28:1e:d9:13:2d:13:b2:34:e7:
                    8b:62:56:21:87:32:b1:b3:96:2f:be:20:31:4f:de:
                    fe:3b:29:33:d0:8e:db:dc:f4:88:3a:c9:f6:0a:07:
                    e2:b9:4a:8d:d2:76:93:91:71:15:67:93:11:b7:5b:
                    ef:ab:bf:71:93:7c:c4:8b:7b:78:22:69:bf:a5:94:
                    8c:3c:68:06:3f:44:34:c5:05:20:1e:b5:8d:08:0f:
                    ae:f0:36:8f:ca:a0:c2:1f:89:7e:8a:ee:92:79:60:
                    4f:72:cb:32:82:a1:e8:f3:a0:fe:fc:4e:fc:3b:03:
                    76:f9:26:b6:18:61:a2:49:dd:8e:51:0a:d9:9b:76:
                    35:ac:d3:63:c0:e7:0a:61:17:1e:e7:b2:b1:64:8c:
                    a2:37:8b:5a:51:55:05:f7:99:df:7d:75:bd:06:b0:
                    08:62:21:4a:31:02:ee:bf:ef:b0:3b:7b:73:60:ac:
                    2a:9a:ea:5a:0b:d2:de:b1:bc:59:a4:53:e3:6c:a9:
                    31:f1:45:ae:e6:d2:01:38:e5:a8:dd:9a:ae:9c:3a:
                    3a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1F:E8:70:AC:02:60:F3:24:AE:D8:31:18:EF:B3:58:AE:76:9B:51
            X509v3 Authority Key Identifier:
                keyid:5B:05:82:5B:FB:A2:B2:A5:54:1C:F3:F0:9D:97:21:13:AE:CC:8D:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/WwWCW_uisqVUHPPwnZchE67MjXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WwWCW_uisqVUHPPwnZchE67MjXU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/WwWCW_uisqVUHPPwnZchE67MjXU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f3:26:ed:70:e7:48:1b:f3:b5:96:58:59:0b:13:da:86:34:
         e6:94:a4:00:56:18:0b:20:a7:93:db:bf:c8:95:05:2c:fe:46:
         a4:e9:b6:2f:20:65:f1:f4:4a:3c:06:05:bd:c0:e2:1d:8f:86:
         51:ea:43:8a:3e:83:5c:a5:e6:c1:10:02:ce:24:ec:fd:79:d4:
         27:c9:c1:bc:1d:29:2a:e7:c7:4c:3d:d1:b3:8e:4c:72:9e:bf:
         66:42:8f:ae:b7:04:9e:dd:80:0d:cc:38:c2:1f:a8:a2:3b:0e:
         9d:6c:b3:b6:92:07:c9:a8:5d:fc:2e:86:74:33:39:e4:97:e3:
         03:3a:6f:9d:5e:27:6c:f5:ab:59:8a:d3:d8:7f:ba:71:c1:dc:
         2b:fa:27:b1:34:8b:1c:58:38:e4:8e:0f:d0:e7:1c:a6:fc:86:
         27:a1:88:8e:cb:20:2d:fc:44:c8:71:cd:07:fd:61:c7:36:ab:
         af:b6:47:3f:27:b3:25:ed:8c:0c:0c:db:97:37:58:b1:66:2e:
         b8:2a:d5:35:80:1c:38:37:c8:a7:a2:dc:5b:9e:e4:b4:84:f7:
         fb:25:a8:8b:8d:75:a3:89:54:1e:10:87:2d:4b:47:07:e8:0f:
         ea:86:ae:e2:62:ff:a7:01:45:fb:f8:a9:83:f4:61:a0:dc:e6:
         20:fb:0e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:03:14 2025 by rpki-client