Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
File:                     MOCAPeumAKyakmRMlveKjohdfFA.mft (raw, json)
Hash identifier:          NstsnzRnJFasUkxxYwk8+7ffOD54DCBSGUnNlGBQkOA=
Subject key identifier:   BF:A1:8F:4D:A8:21:73:A7:50:2C:25:FB:EB:1D:99:04:7B:06:37:69
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Certificate issuer:       /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial:       0575
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
Manifest number:          055B
Signing time:             Mon 08 Sep 2025 23:31:14 +0000
Manifest this update:     Mon 08 Sep 2025 23:31:13 +0000
Manifest next update:     Mon 15 Sep 2025 23:31:13 +0000
Files and hashes:         1: MOCAPeumAKyakmRMlveKjohdfFA.crl (hash: xM1AcbEsQmnTbtTwm7Xh29YIFEjr+mmXVrKW+pLhLZg=)
                          2: 7A532A308E1D11EE9CC5535CC4F9AE02.roa (hash: /+OweeXh479/cD9G0b5e+2Jv53y0ihaHpeHFAQKxiuY=)
                          3: 04A930F6629211EE90D5AD6CC4F9AE02.roa (hash: MzCxa5//voyTa1PWfOUraFYhl6MRI6DeuUFpM68sXZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
                          rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 23:31:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1397 (0x575)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CEE3, serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
        Validity
            Not Before: Sep  8 23:31:13 2025 GMT
            Not After : Sep 15 23:31:13 2025 GMT
        Subject: CN=68bf6742-f8cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:29:a8:eb:24:bd:9d:68:4c:b7:ac:78:b0:7c:
                    5c:56:63:6f:c2:41:86:ca:93:e0:33:df:8c:ff:8d:
                    cf:30:95:2d:a9:6d:af:64:5b:0b:00:79:3a:34:65:
                    4a:fe:a3:07:9e:ae:1a:34:80:f7:28:02:29:46:2f:
                    42:6a:d1:7d:fb:a7:8c:cb:75:eb:69:de:a4:f0:1b:
                    9b:05:32:c0:63:2b:5e:fc:ac:8e:47:26:e9:b3:69:
                    69:04:fa:a5:f5:95:d0:49:63:d0:ce:ef:44:b0:bb:
                    2b:5b:a6:2a:41:57:32:9b:26:9f:00:a1:30:13:5e:
                    ea:3a:f2:66:9f:59:2d:c4:e1:84:08:c0:14:0a:93:
                    fe:87:ee:fe:5c:9f:f9:e2:44:26:a7:ae:08:9a:0d:
                    f7:25:2a:61:4b:a9:b0:1a:22:76:f0:8f:78:ac:69:
                    f9:07:73:09:57:51:1d:03:ea:89:95:3e:44:96:7e:
                    97:01:fa:66:5a:8c:0b:68:ab:92:bb:6f:95:50:11:
                    f6:da:1f:dd:a0:ad:f1:40:fc:d9:72:8e:fd:d7:34:
                    82:f5:8d:c7:8f:ff:62:b3:59:07:e0:88:74:da:25:
                    18:96:d4:30:1c:98:5c:7c:cc:27:ab:0c:18:44:20:
                    b9:db:a6:32:61:ca:ed:a6:3d:74:fb:8d:4a:f5:e6:
                    15:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A1:8F:4D:A8:21:73:A7:50:2C:25:FB:EB:1D:99:04:7B:06:37:69
            X509v3 Authority Key Identifier:
                keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:6e:d5:22:e0:48:d3:7b:92:c9:e4:d3:1e:d2:c5:bc:2a:e0:
         7f:ab:ad:c4:8d:14:fb:40:22:49:32:e4:c1:75:fa:98:b6:ee:
         9b:09:62:36:0f:1d:c1:94:0e:e9:68:61:b1:59:fb:48:a7:6b:
         fd:19:4e:a0:4d:03:8a:69:f2:79:93:91:b8:4b:6f:ae:c6:4c:
         d1:67:13:e1:79:17:a6:c4:f1:e9:6f:08:97:e5:ff:a4:2c:98:
         c4:ab:c4:18:9d:c4:c4:12:ba:ee:9d:8a:fa:30:4d:c0:19:85:
         94:b0:95:28:d5:75:6d:32:98:48:ab:1e:bb:9f:3a:eb:93:f7:
         15:b4:72:6d:e4:be:46:62:b6:ad:f2:7b:be:b9:18:57:c4:48:
         18:1f:7e:c2:67:e2:17:49:1d:d2:6e:30:9f:2b:db:82:31:47:
         a9:05:72:03:e7:95:33:4f:b7:a8:e8:d5:95:d1:ea:f4:eb:04:
         fa:0d:6c:57:36:2f:3f:0e:e9:78:21:9a:81:c7:6d:0b:1f:d7:
         e7:7c:b7:9a:bd:64:3c:30:c7:5b:d8:4c:22:0e:6c:13:b4:0d:
         ae:3a:13:4d:7c:28:f0:f8:23:64:2d:04:6a:87:e4:f6:72:22:
         a9:e8:83:d4:a3:95:2f:dd:aa:36:1c:5f:5a:0b:a5:f6:40:de:
         25:86:35:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:48:57 2025 by rpki-client