Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
File:                     MOCAPeumAKyakmRMlveKjohdfFA.mft (raw, json)
Hash identifier:          0YoEVathHHp+fKTVNwD7hFXepVuCeAQWZQt5g2/wEds=
Subject key identifier:   D7:EC:01:A3:70:C5:53:3F:54:C6:DB:ED:8F:31:3E:66:6A:F6:6E:A0
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Certificate issuer:       /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial:       0549
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
Manifest number:          052F
Signing time:             Sat 14 Jun 2025 23:19:20 +0000
Manifest this update:     Sat 14 Jun 2025 23:19:20 +0000
Manifest next update:     Sat 21 Jun 2025 23:19:20 +0000
Files and hashes:         1: MOCAPeumAKyakmRMlveKjohdfFA.crl (hash: 9Ae9d0E9RKbuPKI00b+T8L1zFF6KlJyXTzrPRJ8hPpk=)
                          2: 7A532A308E1D11EE9CC5535CC4F9AE02.roa (hash: /+OweeXh479/cD9G0b5e+2Jv53y0ihaHpeHFAQKxiuY=)
                          3: 04A930F6629211EE90D5AD6CC4F9AE02.roa (hash: MzCxa5//voyTa1PWfOUraFYhl6MRI6DeuUFpM68sXZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
                          rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 23:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1353 (0x549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CEE3, serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
        Validity
            Not Before: Jun 14 23:19:20 2025 GMT
            Not After : Jun 21 23:19:20 2025 GMT
        Subject: CN=684e0378-62ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:8c:ae:85:dc:45:cd:e5:40:20:66:89:73:
                    32:48:43:8b:16:1c:e6:88:89:d3:a7:dc:53:c3:19:
                    4a:17:10:af:ed:6b:12:ee:0f:23:ce:2c:f2:b1:ba:
                    01:f1:a5:63:0d:13:48:c8:f1:9b:89:51:a5:64:b4:
                    18:0c:2b:a7:32:49:83:1c:cf:0c:a7:10:83:ac:95:
                    47:61:0b:12:9b:c9:09:06:72:30:a4:cf:da:80:45:
                    85:2b:5f:dd:f8:54:15:69:df:34:e6:c9:18:0c:d1:
                    f9:d7:07:4d:7d:33:93:fe:f3:b8:89:86:4f:e4:d9:
                    7a:15:4e:2d:e3:b7:cd:eb:de:44:41:7f:99:fd:70:
                    d1:6a:91:8e:32:16:35:0e:56:54:b8:cb:9a:f5:92:
                    b6:0d:00:03:5b:2b:92:d2:31:c3:31:3a:4b:d5:45:
                    53:c9:17:fd:e9:ed:2a:aa:32:2a:43:44:f4:ec:40:
                    5d:c1:f4:ae:e2:92:22:7a:cd:66:12:93:d6:bc:a9:
                    dd:07:ec:da:04:ea:d5:c1:5c:c2:94:bc:ed:58:4c:
                    a1:71:74:0d:5d:f7:c8:62:9f:ab:33:1d:74:b6:6f:
                    47:75:c2:f9:2c:a2:26:17:dc:9f:c6:c4:63:49:31:
                    bb:f0:a7:97:7f:0c:db:61:ab:f2:55:9f:f9:f8:d2:
                    24:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EC:01:A3:70:C5:53:3F:54:C6:DB:ED:8F:31:3E:66:6A:F6:6E:A0
            X509v3 Authority Key Identifier:
                keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:bc:1a:16:0b:04:05:e6:4a:64:d6:4d:8c:f0:61:4a:ae:f2:
         90:51:9a:2a:57:ac:50:c1:57:c5:d1:c4:5d:8e:4e:62:1c:0f:
         b8:0d:b6:4c:97:c8:e0:08:4d:34:52:00:43:3d:1d:2e:51:ef:
         2f:5f:26:e7:f1:ab:3d:b5:4d:f1:b7:1e:84:b5:22:18:50:82:
         54:6c:0f:ed:6e:ed:2d:73:e5:00:e0:ca:0f:b0:96:23:d1:f2:
         3a:6c:32:57:a3:52:e9:0d:66:a0:e3:44:2d:53:fa:4f:30:fc:
         4a:06:1c:44:2a:8e:a9:b3:91:86:85:cf:07:c0:d1:21:fc:4d:
         57:05:fb:ac:2b:c9:78:40:d0:22:b0:09:d5:9c:8f:9d:1d:12:
         3b:b0:6c:3f:2c:ee:8d:07:7f:8b:ac:83:50:e8:10:03:2a:db:
         d8:17:d5:f6:de:b4:82:0e:f7:81:69:b6:e5:a0:4b:96:f5:67:
         9e:ed:c0:7b:f0:67:99:45:b5:42:d1:2e:f7:80:06:4b:90:7f:
         9f:df:19:6a:b3:34:81:b8:7d:76:91:70:1b:0d:e8:c1:45:0d:
         61:b8:56:f4:3c:e6:95:2c:07:3d:75:19:62:eb:9f:3c:22:a0:
         66:d4:aa:8d:47:f4:ac:75:c8:13:05:72:ca:6c:50:d4:7e:94:
         c0:02:79:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:22:39 2025 by rpki-client