Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
File:                     MOCAPeumAKyakmRMlveKjohdfFA.mft (raw, json)
Hash identifier:          mh4csOEILpWThUAmZXeQuGdR5yhiVvzo+5eoZY0/lY0=
Subject key identifier:   EB:6C:9D:1A:1F:AF:B3:39:AE:47:EF:8B:C5:60:0F:E8:7C:1D:67:96
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Certificate issuer:       /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial:       065F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
Manifest number:          063D
Signing time:             Sat 14 Nov 2026 22:36:25 +0000
Manifest this update:     Sat 14 Nov 2026 22:36:25 +0000
Manifest next update:     Sat 21 Nov 2026 22:36:25 +0000
Files and hashes:         1: MOCAPeumAKyakmRMlveKjohdfFA.crl (hash: ScvXOBQqBUW0fpuW49c0PTVLCdzieDFIMpucQwChUF0=)
                          2: 04A930F6629211EE90D5AD6CC4F9AE02.roa (hash: V0iuz/xnJ3+hJyK83U2XK/XTEGB2wqM4eFCSFkk9wQU=)
                          3: 7A532A308E1D11EE9CC5535CC4F9AE02.roa (hash: jGzTfB/d16mmgD7vo2/7hI4MWsapV53T1mDEoyw9vZ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
                          rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 22:36:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1631 (0x65f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CEE3, serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
        Validity
            Not Before: Nov 14 22:36:25 2026 GMT
            Not After : Nov 21 22:36:25 2026 GMT
        Subject: CN=6af8e269-d6ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0f:ed:e5:df:66:de:47:b8:c9:58:7a:bc:3e:
                    c5:d5:3f:3a:40:41:77:45:d4:de:71:2e:24:52:4a:
                    41:34:a7:1b:1b:aa:f4:8e:ef:f8:63:c1:8a:a0:1a:
                    ee:5e:e8:03:18:96:bf:36:39:7a:fd:5d:89:c7:17:
                    3a:8a:9e:bc:fb:1c:2f:6c:08:dd:d2:8d:70:44:b1:
                    38:3a:d1:52:12:3d:f7:cc:92:50:fd:ab:31:b9:35:
                    02:03:10:c9:5a:37:4e:5f:03:67:d1:b0:59:48:13:
                    46:b4:86:4a:60:9b:14:f7:9f:ed:c4:0b:49:51:be:
                    c3:80:ac:f4:22:86:fd:52:ae:20:2a:b6:56:2c:7f:
                    98:6c:8c:b1:16:0a:50:06:97:1f:19:58:31:35:88:
                    50:21:b4:b8:a2:5b:a8:74:97:62:fa:31:65:67:44:
                    2d:6f:05:b9:af:5a:96:b4:96:92:46:0e:0a:1f:a6:
                    29:8c:4f:15:bf:6f:0a:c7:24:6d:23:5f:c9:e0:ce:
                    f7:e1:36:56:43:5e:be:82:e6:aa:f1:89:41:16:ba:
                    21:d3:52:54:00:0c:06:54:4f:83:46:c0:21:1a:b1:
                    3b:63:82:16:cd:63:49:85:c5:04:5f:33:9b:59:65:
                    53:b2:fa:c3:1f:f4:a4:6e:32:d7:b7:c8:58:54:c3:
                    7d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6C:9D:1A:1F:AF:B3:39:AE:47:EF:8B:C5:60:0F:E8:7C:1D:67:96
            X509v3 Authority Key Identifier:
                keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:b5:ee:d0:3c:e1:4d:c8:ab:1d:e2:41:67:60:e3:36:8c:51:
         3f:35:f7:f4:f4:21:d7:e7:24:b6:2a:40:cd:d4:98:71:76:63:
         07:e3:70:0f:2d:ee:21:e4:ba:99:79:5b:65:aa:65:13:9d:d8:
         66:06:11:b7:4d:4b:20:52:a9:d0:48:0d:20:4c:60:0f:17:ba:
         9c:59:87:5e:2e:21:b8:63:5e:51:ae:a0:9a:34:00:9c:d5:84:
         2c:c8:49:09:0f:1e:47:2d:2d:64:61:b5:8a:4c:a6:5a:bb:35:
         1c:b6:00:43:b2:35:3e:d0:d1:95:9e:11:90:f3:8b:78:24:f1:
         a0:99:bb:74:da:c4:94:d3:cb:43:b6:1a:e1:fb:a3:52:41:70:
         cb:ab:b9:09:d5:9b:2c:26:76:72:49:48:7f:54:7c:71:50:ac:
         76:6f:12:73:81:01:39:5a:e0:62:6e:b9:d3:76:f5:ec:17:2c:
         ce:36:48:c1:78:60:90:11:4f:05:b1:e7:ad:ea:b5:49:84:b8:
         22:bb:b0:f1:7f:eb:23:b4:75:5d:15:4d:c6:a5:3f:da:d2:1e:
         15:4b:03:d8:ae:f7:48:a4:01:9f:c7:82:e6:7f:47:d4:3a:e4:
         6c:91:db:45:e9:13:16:82:26:1e:d7:21:66:55:da:a6:8b:80:
         0f:46:3a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:12:23 2026 by rpki-client