Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
File:                     MOCAPeumAKyakmRMlveKjohdfFA.mft (raw, json)
Hash identifier:          CmYIxX6xb9HK7D83ImWcEqIF1yv+54Pq0f1lKIqqwtA=
Subject key identifier:   4A:F3:5C:C1:BD:10:90:B1:83:27:96:2C:24:29:EB:C2:09:D5:0D:F9
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Certificate issuer:       /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial:       0563
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
Manifest number:          0549
Signing time:             Mon 04 Aug 2025 23:57:38 +0000
Manifest this update:     Mon 04 Aug 2025 23:57:38 +0000
Manifest next update:     Mon 11 Aug 2025 23:57:38 +0000
Files and hashes:         1: MOCAPeumAKyakmRMlveKjohdfFA.crl (hash: 2lkL8IYOorI5ZAGoT0S29wtSU9jqwf7FM98i5FzrnSY=)
                          2: 7A532A308E1D11EE9CC5535CC4F9AE02.roa (hash: /+OweeXh479/cD9G0b5e+2Jv53y0ihaHpeHFAQKxiuY=)
                          3: 04A930F6629211EE90D5AD6CC4F9AE02.roa (hash: MzCxa5//voyTa1PWfOUraFYhl6MRI6DeuUFpM68sXZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
                          rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 23:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1379 (0x563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CEE3, serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
        Validity
            Not Before: Aug  4 23:57:38 2025 GMT
            Not After : Aug 11 23:57:38 2025 GMT
        Subject: CN=689148f2-fe0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:15:81:95:61:6c:b9:7d:3e:20:e0:6c:74:a0:
                    46:de:8e:d5:5c:0a:d3:ff:d9:b7:b6:38:1a:93:04:
                    f5:27:a8:2f:94:aa:e6:5c:16:07:85:7c:73:df:73:
                    98:a7:bd:ad:1e:b2:1c:40:af:0d:dd:44:48:bc:54:
                    bc:1b:e7:0b:49:19:12:d7:d6:11:37:04:1e:51:4a:
                    71:21:36:83:cd:da:8f:ae:cf:88:14:0c:42:86:a4:
                    f9:e7:ef:58:9a:44:a3:b5:37:df:a1:de:95:09:f0:
                    4b:be:51:d6:da:ce:e5:45:6f:b1:6a:28:1b:5b:f4:
                    3c:07:06:0e:4a:31:1d:da:09:79:28:4c:2a:e5:2c:
                    00:69:2b:18:e5:8e:d6:64:23:81:99:b1:64:62:ad:
                    6a:b9:18:eb:cf:c0:56:cb:aa:f1:f9:44:3d:75:39:
                    3e:d2:fd:98:d6:77:01:56:15:17:4b:36:85:97:9a:
                    9f:c8:7e:ba:ea:93:8e:88:c6:f2:7a:f1:9c:f2:69:
                    96:f4:95:54:43:28:ef:ca:d5:1c:a1:27:4d:4f:4f:
                    ba:e1:22:3f:01:6e:2e:78:82:2e:d3:08:82:12:79:
                    4d:c5:00:f0:1b:e3:74:ab:cf:a3:bc:e1:d7:3f:ed:
                    29:6d:88:05:9d:0e:cf:7f:59:81:a4:2a:0d:b5:31:
                    cc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F3:5C:C1:BD:10:90:B1:83:27:96:2C:24:29:EB:C2:09:D5:0D:F9
            X509v3 Authority Key Identifier:
                keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7c:91:ec:26:d9:bf:65:6c:5f:0f:30:fc:62:72:cc:c5:0c:
         02:a3:3c:b0:b5:98:42:eb:22:8d:11:8d:27:a7:79:2e:fe:94:
         42:00:65:08:13:1a:64:d5:0a:72:63:ad:b6:10:a2:fa:e9:db:
         19:b1:42:e2:f2:28:4c:64:11:bb:5d:b2:ef:81:2d:85:fd:f7:
         c3:a0:0d:23:58:50:72:4b:2a:f5:92:21:00:0e:8b:d1:41:0c:
         2e:b2:b8:82:7a:e2:89:b0:5c:9f:91:a3:f3:be:b2:ff:39:63:
         1f:66:51:b3:93:d3:7e:f6:32:a9:47:b6:91:eb:a0:26:bb:ca:
         b7:83:33:e9:84:4c:50:92:ab:c5:9b:1e:90:e1:ef:bd:fa:2b:
         da:d6:a6:56:db:16:6e:53:39:f4:1f:49:f4:c8:33:8d:43:78:
         74:f8:20:8e:d5:cd:af:d1:12:f5:15:a6:33:02:16:f7:0d:4a:
         30:0d:a3:5b:39:29:83:49:3c:a0:3b:96:1d:5d:f6:81:8a:d5:
         df:4a:4c:5f:9e:4b:ba:16:e8:1d:f4:64:83:a1:bc:bd:47:de:
         f6:1e:ef:21:31:70:14:c4:37:80:8f:6a:39:b0:a5:eb:2f:45:
         f9:98:0c:35:40:7a:c3:43:fd:49:5d:95:3b:0a:8b:18:f8:c4:
         45:a5:02:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:10:52 2025 by rpki-client