Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft
File:                     iNavzrjz-JAnRNYaYmhLlFnbwfY.mft (raw, json)
Hash identifier:          TbvSfnRmb/OIuMYILDdae/6wv9a2tSevmbI29VHF5/I=
Subject key identifier:   86:FB:60:B1:90:21:63:D4:E0:2B:0F:2F:61:10:DB:67:F7:55:6C:23
Authority key identifier: 88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6
Certificate issuer:       /CN=A914A550/serialNumber=88D6AFCEB8F3F8902744D61A62684B9459DBC1F6
Certificate serial:       04DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft
Manifest number:          04D3
Signing time:             Tue 24 Mar 2026 23:30:22 +0000
Manifest this update:     Tue 24 Mar 2026 23:30:22 +0000
Manifest next update:     Tue 31 Mar 2026 23:30:22 +0000
Files and hashes:         1: iNavzrjz-JAnRNYaYmhLlFnbwfY.crl (hash: QG0D1gRzia1ajfhzB5UbC4C1QU1nk5Lyx5ShUcN3QLE=)
                          2: 66D714485D6F11EC9A00E41DC4F9AE02.roa (hash: E2UsVIZQ4uNbMaFV3Qyof5LoS1bwjC2fZkatxRLSL94=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.crl
                          rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1243 (0x4db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A550, serialNumber=88D6AFCEB8F3F8902744D61A62684B9459DBC1F6
        Validity
            Not Before: Mar 24 23:30:22 2026 GMT
            Not After : Mar 31 23:30:22 2026 GMT
        Subject: CN=69c31e8e-0e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3f:04:18:f1:7a:e0:de:c6:13:26:60:58:82:
                    5c:c3:07:eb:48:72:0c:b5:06:a0:24:ac:8a:0f:4e:
                    6a:1c:43:06:2a:a4:26:d6:36:68:9a:60:b7:63:2b:
                    37:cc:da:b3:c6:4a:f0:28:5f:a8:77:48:0d:3f:1c:
                    dc:31:e0:f2:a7:e6:ca:15:c2:0c:8d:29:c0:cd:34:
                    16:dd:a7:3b:c1:d9:35:1f:d0:8c:5a:b4:2d:26:b0:
                    0b:48:54:85:b7:5c:1a:12:66:3c:e3:70:19:4a:0e:
                    e9:cf:f4:06:82:48:a9:32:03:3c:3b:e9:1b:64:f3:
                    39:e4:5c:85:c1:65:36:0a:ea:6d:7f:40:52:97:dd:
                    f5:6a:da:4f:73:7b:35:37:be:ca:71:43:dd:26:fd:
                    8a:be:9a:7d:ff:72:3e:a5:9e:75:b9:12:c6:07:81:
                    a1:51:db:cb:db:94:18:83:da:6d:4a:ce:ce:99:87:
                    8e:3f:34:e6:e4:80:4a:25:c0:48:2b:92:8d:57:dd:
                    07:89:32:14:00:f4:91:82:83:b5:1c:cc:c7:e9:74:
                    7f:f6:5f:6c:49:cb:e1:57:dc:d5:97:0d:5a:a3:c0:
                    86:c2:45:69:c9:8c:b6:66:cd:2d:c9:12:aa:65:03:
                    c2:61:81:fc:80:11:46:9c:d0:ba:16:2a:fe:7d:31:
                    fd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FB:60:B1:90:21:63:D4:E0:2B:0F:2F:61:10:DB:67:F7:55:6C:23
            X509v3 Authority Key Identifier:
                keyid:88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ea:8f:6f:90:4e:7b:b6:d6:b9:2b:c1:be:51:b8:41:21:75:
         4a:96:d5:b5:7c:62:f3:d7:7f:67:8e:ee:5b:dd:16:b2:66:22:
         b7:b9:3c:78:82:2c:28:fb:8f:70:f2:21:ef:89:91:d7:37:06:
         dc:1b:35:83:78:a2:c9:16:b4:d6:e7:eb:56:80:4f:c1:b9:39:
         ef:52:99:2f:27:1b:80:91:bb:ea:6a:20:a5:18:07:73:95:01:
         d1:6a:a1:55:42:43:6c:7e:4a:a8:14:27:eb:da:7f:50:23:1d:
         e8:20:ef:fb:8d:b4:9f:6d:9e:9b:62:3f:8a:cf:57:62:3a:41:
         91:2d:1b:8c:68:da:4b:60:e8:9f:13:31:e8:7e:ec:80:28:87:
         4a:ff:ff:cb:81:f7:bb:08:22:61:4f:80:fc:1c:51:a2:c8:f6:
         6c:dc:07:fa:5a:87:56:6b:c9:dc:62:74:3f:bf:ac:4e:55:5d:
         79:db:1e:ed:90:d9:75:89:1f:ff:07:91:ed:2a:a7:e4:23:6d:
         2c:4c:be:d9:e7:17:66:fa:ba:e7:c9:56:c4:a3:ca:66:f2:f6:
         23:c6:09:f3:4e:fb:c4:a0:f7:c4:fd:97:36:98:6f:7e:b6:88:
         01:2c:06:21:36:9f:11:92:c0:93:92:83:b1:93:6a:41:9c:b4:
         90:a6:08:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE1NTAxMTAvBgNVBAUTKDg4RDZBRkNFQjhGM0Y4OTAyNzQ0RDYxQTYyNjg0Qjk0
NTlEQkMxRjYwHhcNMjYwMzI0MjMzMDIyWhcNMjYwMzMxMjMzMDIyWjAYMRYwFAYD
VQQDEw02OWMzMWU4ZS0wZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3D8EGPF64N7GEyZgWIJcwwfrSHIMtQagJKyKD05qHEMGKqQm1jZommC3Yys3
zNqzxkrwKF+od0gNPxzcMeDyp+bKFcIMjSnAzTQW3ac7wdk1H9CMWrQtJrALSFSF
t1waEmY843AZSg7pz/QGgkipMgM8O+kbZPM55FyFwWU2Cuptf0BSl931atpPc3s1
N77KcUPdJv2Kvpp9/3I+pZ51uRLGB4GhUdvL25QYg9ptSs7OmYeOPzTm5IBKJcBI
K5KNV90HiTIUAPSRgoO1HMzH6XR/9l9sScvhV9zVlw1ao8CGwkVpyYy2Zs0tyRKq
ZQPCYYH8gBFGnNC6Fir+fTH9qQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIb7YLGQ
IWPU4CsPL2EQ22f3VWwjMB8GA1UdIwQYMBaAFIjWr8648/iQJ0TWGmJoS5RZ28H2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1MC8xMTdDMjZFQTVE
NkIxMUVDOUUzNTZDNDZDNEY5QUUwMi9pTmF2enJqei1KQW5STllhWW1oTGxGbmJ3
ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lOYXZ6cmp6LUpBblJOWWFZbWhMbEZuYndmWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTU1MC8xMTdDMjZFQTVENkIxMUVDOUUzNTZDNDZDNEY5QUUwMi9pTmF2enJqei1K
QW5STllhWW1oTGxGbmJ3ZlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADOqPb5BOe7bWuSvBvlG4QSF1SpbVtXxi89d/Z47uW90WsmYit7k8eIIsKPuP
cPIh74mR1zcG3Bs1g3iiyRa01ufrVoBPwbk571KZLycbgJG76mogpRgHc5UB0Wqh
VUJDbH5KqBQn69p/UCMd6CDv+420n22em2I/is9XYjpBkS0bjGjaS2DonxMx6H7s
gCiHSv//y4H3uwgiYU+A/BxRosj2bNwH+lqHVmvJ3GJ0P7+sTlVdedse7ZDZdYkf
/weR7Sqn5CNtLEy+2ecXZvq658lWxKPKZvL2I8YJ8077xKD3xP2XNphvfraIASwG
ITafEZLAk5KDsZNqQZy0kKYIwA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:17:22 2026 by rpki-client