Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft
File:                     IRcCLfYdpCG55OG7hIPYXkmCv5E.mft (raw, json)
Hash identifier:          L7fy+1kQK+FDXD7J00loy9myBemv0QC0ylB0GnUrJYI=
Subject key identifier:   70:71:D2:41:3A:2E:16:4C:B3:81:91:28:37:A7:59:AA:48:B5:B4:B4
Authority key identifier: 21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91
Certificate issuer:       /CN=A9169382/serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91
Certificate serial:       060A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft
Manifest number:          05F4
Signing time:             Sat 14 Nov 2026 22:44:51 +0000
Manifest this update:     Sat 14 Nov 2026 22:44:51 +0000
Manifest next update:     Sat 21 Nov 2026 22:44:51 +0000
Files and hashes:         1: IRcCLfYdpCG55OG7hIPYXkmCv5E.crl (hash: BBIFgg5KSY4SFgtbmYbNjBKN7NG04QwaEwQcriNrqbE=)
                          2: B5D70D9ACE3311EFA7B9B640C4F9AE02.roa (hash: fYR2MJvmCXrxSHARKk7G9fAe2ZBvdVfxIJCi66TyVKY=)
                          3: E41BF8841CDC11ECBA794120C4F9AE02.roa (hash: xRjJWqVI9qBIZE1EYxdX91DP5QDSPpCzKr+yuI90grs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl
                          rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 22:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1546 (0x60a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169382, serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91
        Validity
            Not Before: Nov 14 22:44:51 2026 GMT
            Not After : Nov 21 22:44:51 2026 GMT
        Subject: CN=6af8e463-af1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6d:cb:94:20:bb:10:9c:42:00:f3:6e:98:c1:
                    d3:98:1f:35:ce:a2:73:87:21:db:ca:be:96:d9:80:
                    97:24:b4:d1:86:d1:f6:7a:c5:c7:ea:af:43:ab:a4:
                    2a:55:fa:71:71:3d:de:d1:45:a5:9a:a2:d3:43:82:
                    b8:ef:9a:89:b1:d8:00:4d:51:80:d4:84:7e:27:d9:
                    0e:e0:87:6c:f9:0a:ec:53:42:f7:98:42:1a:4f:2e:
                    dd:91:14:12:75:ea:f0:5e:28:8d:ce:31:fa:cf:96:
                    b4:6f:7b:ed:df:c1:19:15:48:83:53:35:b5:bc:59:
                    ee:3d:f7:17:b4:48:f7:d7:f6:df:a7:e6:75:ed:19:
                    ca:54:68:4f:c1:d2:e5:15:78:c5:82:e0:60:08:f7:
                    26:7f:f1:05:a2:f7:61:87:77:ac:b6:df:8f:40:19:
                    7b:5b:43:66:c2:d9:39:a1:29:8e:36:7f:61:3e:55:
                    3d:93:95:ba:e9:d7:24:3f:c4:87:22:a6:43:bf:74:
                    11:7a:8b:24:3a:23:6d:8f:c3:24:b1:c3:a7:1b:34:
                    80:64:62:90:9d:1f:5c:af:ea:70:1b:0d:b0:ff:ee:
                    15:e1:f9:18:30:9c:f3:31:55:06:07:51:cd:e7:1e:
                    6b:db:29:f8:f8:07:99:66:4c:ad:c6:42:40:de:47:
                    98:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:71:D2:41:3A:2E:16:4C:B3:81:91:28:37:A7:59:AA:48:B5:B4:B4
            X509v3 Authority Key Identifier:
                keyid:21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:65:78:5e:f4:16:96:75:cc:dc:39:84:51:7a:9a:e1:76:97:
         47:11:5f:70:a7:18:76:bf:54:e1:70:b2:a9:ba:a1:78:3e:57:
         6d:28:6d:f5:d7:8d:0e:bc:46:7a:23:63:48:d7:f8:98:b6:ba:
         d9:66:38:ad:33:59:84:0d:93:44:09:a6:e9:72:2a:ca:c3:37:
         0a:63:54:51:52:22:77:ef:9e:2b:b0:05:e6:28:5c:2d:a6:1b:
         e7:c8:b3:da:12:af:c7:0b:6d:82:9b:32:68:1d:df:10:c6:af:
         ff:d5:25:b8:f5:c6:84:06:8c:d6:ee:fc:d7:99:4c:7f:31:50:
         aa:3e:37:5f:33:6e:a8:57:8b:9a:cf:2d:20:a8:68:11:cc:6b:
         d1:2a:bf:d6:c9:3c:42:bc:c0:bb:89:37:a2:1c:7b:c0:e2:a9:
         e7:33:b5:50:b3:2b:73:7c:08:6c:04:28:10:9e:41:ca:41:d1:
         28:74:ea:6e:f0:4a:94:8c:56:1c:1e:05:c3:2f:cf:dc:f8:b7:
         77:3f:8d:4f:df:99:81:e4:1a:49:5f:12:ab:eb:5b:8c:27:f8:
         ac:27:bc:cf:da:76:87:9e:79:8a:9f:89:3c:67:36:ea:d5:74:
         ca:5c:33:4c:ba:ab:23:cf:ee:30:db:87:2a:10:1d:69:94:f1:
         f3:e1:25:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:03:13 2026 by rpki-client