Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/WwWCW_uisqVUHPPwnZchE67MjXU.mft
File:                     WwWCW_uisqVUHPPwnZchE67MjXU.mft (raw, json)
Hash identifier:          eULUn3a6CWbgX+yYd3gE463/E8ZEa1qgTeJ1lZN+UsY=
Subject key identifier:   0A:32:42:DC:6E:52:DF:F3:6B:C8:A3:A3:A5:2B:25:CB:DA:24:C5:E5
Authority key identifier: 5B:05:82:5B:FB:A2:B2:A5:54:1C:F3:F0:9D:97:21:13:AE:CC:8D:75
Certificate issuer:       /CN=A9139504/serialNumber=5B05825BFBA2B2A5541CF3F09D972113AECC8D75
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WwWCW_uisqVUHPPwnZchE67MjXU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/WwWCW_uisqVUHPPwnZchE67MjXU.mft
Manifest number:          2F
Signing time:             Fri 31 Jan 2025 06:44:42 +0000
Manifest this update:     Fri 31 Jan 2025 06:44:41 +0000
Manifest next update:     Fri 07 Feb 2025 06:44:41 +0000
Files and hashes:         1: WwWCW_uisqVUHPPwnZchE67MjXU.crl (hash: TiktEqvQiLPT+31MSAzhIhX7CmFQuzy39c5/cvfsOWk=)
                          2: 15DF0B709C5211EFB58CEA09C4F9AE02.roa (hash: BPJMmkMsJ5GR7lvFcWO3tyenH3Ad6L0L8sWU/hgNQ5Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139504/serialNumber=5B05825BFBA2B2A5541CF3F09D972113AECC8D75
        Validity
            Not Before: Jan 31 06:44:41 2025 GMT
            Not After : Feb  7 06:44:41 2025 GMT
        Subject: CN=679c715a-7875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:13:c6:87:76:6a:ff:48:ba:da:30:8e:57:d6:
                    b8:df:d4:58:28:67:57:b4:c9:a8:64:2c:51:68:a8:
                    c3:c6:6b:7f:ad:44:06:70:8f:49:d8:c1:92:d3:21:
                    be:a8:c5:44:67:0d:dd:98:20:e0:03:c0:6b:61:7d:
                    02:24:0b:7f:35:a9:fb:94:08:88:52:a4:86:f3:1b:
                    35:b6:61:34:be:c4:be:08:2e:fd:e2:17:8a:33:2d:
                    6c:cc:2d:22:7c:b3:49:46:64:ec:d4:4c:08:e4:25:
                    2c:39:50:7f:6c:16:85:61:df:86:17:54:b0:93:67:
                    87:c8:67:81:a5:2f:49:52:ce:3e:4b:8e:c3:33:c7:
                    ca:08:c2:a5:b4:8f:2a:66:36:a7:8e:c7:3a:e4:e2:
                    cc:dd:be:dd:a0:b8:c9:65:55:7b:3c:e5:2f:8f:97:
                    f7:4c:83:99:6e:b2:51:07:4b:69:28:ac:83:7d:a1:
                    9d:25:3f:55:b8:20:5d:dd:f2:85:9e:57:d6:a6:00:
                    99:42:9e:a9:97:13:74:97:d8:8f:47:bd:34:01:7d:
                    78:b5:ae:ad:29:0f:8c:7b:1c:07:84:9d:2e:e5:54:
                    0e:ed:75:55:f1:30:be:06:44:0e:93:9f:78:39:74:
                    a2:fd:e4:18:70:2a:01:35:10:c0:a0:9a:40:a2:fc:
                    78:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:32:42:DC:6E:52:DF:F3:6B:C8:A3:A3:A5:2B:25:CB:DA:24:C5:E5
            X509v3 Authority Key Identifier:
                keyid:5B:05:82:5B:FB:A2:B2:A5:54:1C:F3:F0:9D:97:21:13:AE:CC:8D:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/WwWCW_uisqVUHPPwnZchE67MjXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WwWCW_uisqVUHPPwnZchE67MjXU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/WwWCW_uisqVUHPPwnZchE67MjXU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e8:55:d6:78:42:9d:da:a0:32:94:f0:98:f1:4e:eb:2f:1d:
         b9:96:dc:8f:83:60:30:0c:0e:0c:81:dd:86:84:7e:89:f8:50:
         7a:26:59:83:ea:de:a6:c2:94:d1:52:52:7b:ef:32:47:81:05:
         cd:1f:86:93:43:72:64:44:b3:68:1b:e1:b2:ff:93:35:86:ac:
         e6:03:97:10:3f:c5:c2:ae:40:e0:78:94:0e:ad:24:c5:ad:1a:
         08:81:3d:dc:d1:fb:a9:63:51:c6:e2:c9:5d:a5:99:34:a4:44:
         9b:70:6d:38:d1:59:b0:fb:57:05:6c:71:ae:09:37:fd:e2:d9:
         67:4d:3d:60:c9:c3:3a:67:f5:51:ca:8e:ed:5d:bd:4c:da:1a:
         19:9a:1f:50:75:18:f7:be:52:df:7a:10:6b:88:6b:3a:f0:57:
         0c:5e:93:33:0b:a6:81:7e:64:fa:7e:58:06:08:17:ae:06:3a:
         2a:3b:aa:67:6f:f2:db:05:b1:d5:f8:67:cb:69:11:2f:f2:2b:
         b1:77:43:2e:bf:77:4e:86:e8:09:13:ef:ca:66:53:cc:ed:c5:
         0a:49:33:e7:94:03:36:1e:2e:a5:ed:f3:48:06:81:66:74:8f:
         b0:75:92:6e:c7:02:e4:6e:f2:09:82:e0:aa:a2:02:69:d9:6f:
         15:8d:3a:1a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
OTUwNDExMC8GA1UEBRMoNUIwNTgyNUJGQkEyQjJBNTU0MUNGM0YwOUQ5NzIxMTNB
RUNDOEQ3NTAeFw0yNTAxMzEwNjQ0NDFaFw0yNTAyMDcwNjQ0NDFaMBgxFjAUBgNV
BAMTDTY3OWM3MTVhLTc4NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDdE8aHdmr/SLraMI5X1rjf1FgoZ1e0yahkLFFoqMPGa3+tRAZwj0nYwZLTIb6o
xURnDd2YIOADwGthfQIkC381qfuUCIhSpIbzGzW2YTS+xL4ILv3iF4ozLWzMLSJ8
s0lGZOzUTAjkJSw5UH9sFoVh34YXVLCTZ4fIZ4GlL0lSzj5LjsMzx8oIwqW0jypm
NqeOxzrk4szdvt2guMllVXs85S+Pl/dMg5luslEHS2korIN9oZ0lP1W4IF3d8oWe
V9amAJlCnqmXE3SX2I9HvTQBfXi1rq0pD4x7HAeEnS7lVA7tdVXxML4GRA6Tn3g5
dKL95BhwKgE1EMCgmkCi/HjTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCjJC3G5S
3/NryKOjpSsly9okxeUwHwYDVR0jBBgwFoAUWwWCW/uisqVUHPPwnZchE67MjXUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5NTA0LzYwNEQ5QkQ0OUM0
RjExRUZBOTgzNUI2QUM0RjlBRTAyL1d3V0NXX3Vpc3FWVUhQUHduWmNoRTY3TWpY
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvV3dXQ1dfdWlzcVZVSFBQd25aY2hFNjdNalhVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5
NTA0LzYwNEQ5QkQ0OUM0RjExRUZBOTgzNUI2QUM0RjlBRTAyL1d3V0NXX3Vpc3FW
VUhQUHduWmNoRTY3TWpYVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIroVdZ4Qp3aoDKU8JjxTusvHbmW3I+DYDAMDgyB3YaEfon4UHomWYPq
3qbClNFSUnvvMkeBBc0fhpNDcmREs2gb4bL/kzWGrOYDlxA/xcKuQOB4lA6tJMWt
GgiBPdzR+6ljUcbiyV2lmTSkRJtwbTjRWbD7VwVsca4JN/3i2WdNPWDJwzpn9VHK
ju1dvUzaGhmaH1B1GPe+Ut96EGuIazrwVwxekzMLpoF+ZPp+WAYIF64GOio7qmdv
8tsFsdX4Z8tpES/yK7F3Qy6/d06G6AkT78pmU8ztxQpJM+eUAzYeLqXt80gGgWZ0
j7B1km7HAuRu8gmC4KqiAmnZbxWNOho=
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:20 2025 by rpki-client