Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft
File:                     IRcCLfYdpCG55OG7hIPYXkmCv5E.mft (raw, json)
Hash identifier:          FlU4VSPkWyC2rBWkXmRFaLJHjsKWoszlDfIiGE2NaPc=
Subject key identifier:   0D:10:FD:A1:48:EB:9F:A7:E2:EB:FE:30:CB:C4:5B:09:FA:72:3A:1F
Authority key identifier: 21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91
Certificate issuer:       /CN=A9169382/serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91
Certificate serial:       059A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft
Manifest number:          0586
Signing time:             Thu 16 Apr 2026 23:10:31 +0000
Manifest this update:     Thu 16 Apr 2026 23:10:31 +0000
Manifest next update:     Thu 23 Apr 2026 23:10:31 +0000
Files and hashes:         1: IRcCLfYdpCG55OG7hIPYXkmCv5E.crl (hash: yJYZsQQ3zP79wgi9Q4hRY1ZyTh+qcehfxp80CVwBmI8=)
                          2: E41BF8841CDC11ECBA794120C4F9AE02.roa (hash: +WJvFTxAonY5wxNQGiwRI3ZI8HmyeaPv5VFRCqzMfWE=)
                          3: B5D70D9ACE3311EFA7B9B640C4F9AE02.roa (hash: Axsa0uyuPTjbrC5wnPZ4BHAIMgaPThG3uMiLY0ziBzQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl
                          rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1434 (0x59a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169382, serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91
        Validity
            Not Before: Apr 16 23:10:31 2026 GMT
            Not After : Apr 23 23:10:31 2026 GMT
        Subject: CN=69e16c67-7da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cc:ac:78:7d:93:38:9d:9a:c8:ae:0b:99:c5:
                    b5:ce:fa:c6:e9:8e:b9:c6:33:fd:11:fa:3b:32:97:
                    a8:d4:57:24:a6:da:5d:f0:db:44:8f:71:f2:c1:c2:
                    59:61:f4:f7:c6:07:68:ad:d9:9b:8e:c6:c1:dc:94:
                    7c:98:58:ae:a8:86:ef:24:35:3b:2e:9c:e9:b6:fd:
                    62:1b:4a:85:69:18:86:0b:9f:c6:ae:29:b9:e2:e8:
                    49:31:86:6d:61:29:f2:08:b3:9c:fc:86:79:a8:f1:
                    48:c0:a9:6d:c5:3f:91:4b:63:1e:9e:1b:ec:18:89:
                    4f:e0:a2:b4:26:5f:c6:24:4e:cc:fd:37:df:1f:01:
                    b3:27:d8:b7:e3:88:2f:36:f4:8c:33:73:f2:57:35:
                    53:4b:dd:31:63:33:f1:26:7d:fb:41:dc:65:a5:69:
                    a7:8e:f5:ec:50:7c:89:e1:ac:ce:b7:da:b5:dd:a8:
                    14:49:7a:c3:14:ea:4f:1c:12:23:08:91:12:44:7b:
                    e0:74:64:da:d7:98:70:32:54:5f:f6:a2:24:48:21:
                    21:95:6d:e7:7f:cc:29:fe:ce:4b:63:67:73:23:72:
                    cd:73:ff:5d:18:fd:b4:e4:6d:77:0a:5b:91:5e:6a:
                    2e:a5:ac:67:b5:1a:b1:c4:1d:47:1f:23:30:65:d2:
                    9c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:10:FD:A1:48:EB:9F:A7:E2:EB:FE:30:CB:C4:5B:09:FA:72:3A:1F
            X509v3 Authority Key Identifier:
                keyid:21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:45:26:98:6c:f3:e0:1b:24:d6:8a:35:3b:c4:29:0c:35:af:
         c1:7a:68:bd:5a:f4:96:b2:43:fd:1f:9b:9a:90:f4:29:24:61:
         ed:b7:5f:9a:ae:37:22:21:26:0a:e1:06:61:ef:8a:0e:72:69:
         1b:b9:c4:8d:1c:f2:a4:73:5b:17:5f:f1:b4:84:73:41:40:09:
         16:fc:86:e4:2c:4a:b2:7b:e9:11:24:38:96:72:e2:09:32:e6:
         52:d1:2a:42:b0:99:bf:ec:86:5b:87:4a:79:71:bb:55:49:b4:
         94:72:97:0e:0e:c5:3e:cf:56:ee:1e:82:bf:35:29:04:f8:2a:
         d3:53:df:f9:c8:7a:5c:4a:fe:0b:b6:cd:c5:6e:eb:56:0b:45:
         fd:04:87:d1:ee:11:aa:64:0b:d8:88:17:ef:c1:59:3b:29:fe:
         2f:35:fe:4e:b0:fc:da:be:13:0e:ec:93:c8:fc:a2:fa:a7:ba:
         cb:98:92:24:15:1f:3d:e0:50:16:4a:4b:37:38:1c:02:63:34:
         f7:5a:36:0a:18:97:c0:9a:86:ea:40:51:9b:cf:0f:bc:0d:0d:
         f9:db:11:b8:3c:7e:84:78:43:a2:43:71:30:af:84:6b:b1:64:
         c6:66:f5:bb:4d:58:a9:6b:60:23:78:f0:d0:89:41:f5:b2:8b:
         1d:84:c5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:17:58 2026 by rpki-client