Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
File:                     MOCAPeumAKyakmRMlveKjohdfFA.mft (raw, json)
Hash identifier:          WD7z4iqNcfqkdpr3rMNQ2iOV/xTNpTb54XGSSHf6cq0=
Subject key identifier:   B3:EB:16:68:45:8D:B1:62:15:D4:6C:45:10:D4:E9:90:07:92:6F:B6
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Certificate issuer:       /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial:       05E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
Manifest number:          05C3
Signing time:             Tue 24 Mar 2026 22:50:36 +0000
Manifest this update:     Tue 24 Mar 2026 22:50:35 +0000
Manifest next update:     Tue 31 Mar 2026 22:50:35 +0000
Files and hashes:         1: MOCAPeumAKyakmRMlveKjohdfFA.crl (hash: 7W7JpgT5x8x+ichDnGTYNhnoB1LmGtwEJCdcA8HVkSw=)
                          2: 04A930F6629211EE90D5AD6CC4F9AE02.roa (hash: JO9xwTDX2VEkQyhxcJmsHR0urhQbQnXAugWcM/cCSHY=)
                          3: 7A532A308E1D11EE9CC5535CC4F9AE02.roa (hash: tqfm8VN716zf1zv8pnoSL1lDbOKXA/4mIuo6tNqb0hg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
                          rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1507 (0x5e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CEE3, serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
        Validity
            Not Before: Mar 24 22:50:35 2026 GMT
            Not After : Mar 31 22:50:35 2026 GMT
        Subject: CN=69c3153c-7d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a1:b4:af:75:7e:35:d6:2a:c5:59:4c:d7:f4:
                    2c:ea:4d:ee:13:f5:37:95:b0:43:52:1c:08:9d:83:
                    85:bb:81:72:a3:9b:00:90:5e:59:f5:ab:6a:a0:30:
                    0e:b5:84:36:cc:ee:73:3f:5f:e7:7f:a8:e3:8c:86:
                    b6:a3:f0:5e:ed:77:4b:9a:75:1d:da:f4:7f:41:d1:
                    c0:1e:9a:ea:b3:24:c0:eb:c1:42:d3:f3:9c:be:f0:
                    5c:94:4b:3d:f8:24:34:36:b0:3f:64:9b:eb:e4:30:
                    e5:24:f8:c9:73:79:9b:8b:ef:b2:b6:7d:8c:46:c3:
                    35:ea:7a:8e:b6:7b:59:2b:91:bb:1a:26:74:cc:30:
                    e1:66:1b:30:e6:18:42:42:4f:fc:ae:e4:55:b9:0e:
                    d6:3e:ef:22:6e:99:9b:2b:49:67:0d:61:17:cd:34:
                    c8:b0:0c:5f:37:ea:89:4a:10:d2:74:86:14:e7:81:
                    02:f5:64:60:7f:ed:fc:1a:62:21:81:fd:de:00:ad:
                    9c:24:66:3f:a5:74:b3:26:fa:c6:ae:05:81:81:bc:
                    8e:bf:bb:93:7c:14:2c:0e:da:86:a2:d6:ee:d5:41:
                    c3:53:df:f5:1e:61:70:94:b6:3a:f4:0a:c6:a5:15:
                    94:00:2f:28:c8:f0:61:f5:f9:a5:10:e9:6b:ee:84:
                    ae:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EB:16:68:45:8D:B1:62:15:D4:6C:45:10:D4:E9:90:07:92:6F:B6
            X509v3 Authority Key Identifier:
                keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:46:00:63:b2:13:86:7d:d0:1d:52:18:d5:a7:cf:18:5f:d7:
         ab:a0:1a:22:a0:b7:bd:5f:b2:b1:17:db:00:12:26:58:44:16:
         d3:8a:88:04:f5:92:e8:91:c9:9b:06:85:e5:fb:a5:02:8e:2f:
         d9:d9:36:a1:45:4d:73:87:f8:ec:f1:03:0a:fb:16:55:ed:87:
         06:60:8a:0f:1d:1a:94:b8:89:e7:e2:e5:10:ea:f0:ad:cd:2d:
         37:e6:0c:94:33:a1:c3:c4:65:03:3d:89:f8:9f:23:92:62:af:
         7b:e2:42:bf:9f:47:51:6a:a1:88:7d:79:d0:c2:99:51:f5:19:
         d9:dc:01:93:d7:85:0c:18:6b:6f:09:3b:4d:f2:c5:a6:09:1e:
         88:b6:bb:15:15:88:8b:75:66:e6:e5:4f:b7:e1:00:1f:3b:dc:
         7d:c9:91:bd:fa:4a:5f:09:be:bf:37:99:90:c7:0a:b9:29:4d:
         2d:c2:10:cc:5e:93:72:09:ec:1d:9f:9e:09:57:68:62:91:18:
         82:6c:38:9c:67:57:36:c1:f8:f2:3d:7e:1d:f3:32:b8:b1:84:
         69:0e:e7:f5:ac:65:9e:3d:bb:e9:ce:6a:aa:73:76:a7:71:8c:
         1f:ea:1e:e7:cf:8a:c4:f4:e2:f8:c1:b2:df:95:e0:a0:62:4f:
         9b:4e:94:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:04:33 2026 by rpki-client