Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft
File:                     iNavzrjz-JAnRNYaYmhLlFnbwfY.mft (raw, json)
Hash identifier:          Qkt87q0H3ZT6DI02lTNR1bUdobqyNdKNHm2wFoOwCwY=
Subject key identifier:   F9:FF:3F:FE:40:63:5C:8C:7F:60:C1:F9:8E:18:1C:3A:B6:D5:B6:D6
Authority key identifier: 88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6
Certificate issuer:       /CN=A914A550/serialNumber=88D6AFCEB8F3F8902744D61A62684B9459DBC1F6
Certificate serial:       04DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft
Manifest number:          04D4
Signing time:             Thu 26 Mar 2026 23:36:32 +0000
Manifest this update:     Thu 26 Mar 2026 23:36:32 +0000
Manifest next update:     Thu 02 Apr 2026 23:36:32 +0000
Files and hashes:         1: iNavzrjz-JAnRNYaYmhLlFnbwfY.crl (hash: +8dqFuQspEDeNdTZ0fXy9PUZ3MfHVqgC8nf629U2w3E=)
                          2: 66D714485D6F11EC9A00E41DC4F9AE02.roa (hash: E2UsVIZQ4uNbMaFV3Qyof5LoS1bwjC2fZkatxRLSL94=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.crl
                          rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1244 (0x4dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A550, serialNumber=88D6AFCEB8F3F8902744D61A62684B9459DBC1F6
        Validity
            Not Before: Mar 26 23:36:32 2026 GMT
            Not After : Apr  2 23:36:32 2026 GMT
        Subject: CN=69c5c300-41b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:64:20:89:45:eb:c2:e4:e1:4a:17:74:0b:6d:
                    8c:e8:bf:56:f8:f9:38:b5:49:ac:d1:93:0a:73:38:
                    cb:e7:fb:03:b6:63:d3:8a:16:35:35:c9:79:b5:40:
                    f0:6b:c5:55:1e:56:eb:45:ce:e4:80:10:51:2a:11:
                    b9:92:30:6b:22:45:6c:a0:7d:da:53:45:28:77:53:
                    11:34:e0:30:f8:49:74:d1:00:da:92:4b:4f:5b:5e:
                    6b:52:0b:98:d0:8b:6f:e3:c9:5c:a8:ae:a9:e1:ee:
                    ec:ec:3a:53:95:f9:b4:f4:8f:66:d0:bb:97:35:53:
                    34:42:ce:2c:d5:d5:59:ab:50:fa:ef:b8:6e:f1:15:
                    81:2e:3b:75:56:48:fc:10:dd:e9:59:0a:90:5d:cc:
                    da:ad:70:44:4f:47:f0:c7:64:03:44:e3:47:5d:05:
                    7d:7c:d7:e7:88:d4:da:1d:e9:d1:5e:69:6e:5e:5a:
                    73:e3:2b:a3:5d:47:33:5c:c4:4b:4e:b8:b7:f4:fe:
                    bc:50:b2:86:f3:9a:01:7a:e0:05:b3:6e:cd:6c:33:
                    0d:6e:66:bb:6f:03:e2:18:c2:f3:80:1e:87:7c:1d:
                    c0:69:24:93:2c:0b:cd:b6:da:54:84:25:90:18:dd:
                    1f:5b:88:67:96:0b:f1:d6:8a:b4:71:e7:ea:8d:65:
                    29:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FF:3F:FE:40:63:5C:8C:7F:60:C1:F9:8E:18:1C:3A:B6:D5:B6:D6
            X509v3 Authority Key Identifier:
                keyid:88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:4e:01:a6:b0:f1:dc:c0:77:82:d8:23:01:1a:87:1b:7f:0d:
         3f:8b:04:30:f2:a0:f1:e5:db:08:a9:b5:8e:9e:5d:60:47:6d:
         5a:e5:cc:78:5c:b4:bb:30:37:3f:13:d8:a3:43:a3:1c:f2:cd:
         b0:e2:3b:c4:9f:c5:e2:fb:28:ef:47:de:d1:5b:e0:fc:86:b3:
         03:3a:1b:d8:1d:29:b2:d9:a3:d7:5a:90:50:e3:f1:b7:ca:29:
         a7:e5:92:5e:5f:b6:f1:2e:5a:b7:0f:35:c0:1f:7f:8a:42:85:
         df:a5:aa:20:3e:32:80:c2:6d:65:d6:b6:d7:df:dd:8a:d0:b1:
         ab:b1:82:52:7b:5b:e1:ab:b4:63:aa:14:53:ba:d9:8f:0e:e8:
         75:86:8d:54:64:80:97:d0:81:b1:1f:fe:fd:ad:fd:ae:d6:ed:
         81:4d:d6:cc:3e:b3:aa:b8:87:0f:04:a2:f3:ed:f6:e6:9c:05:
         f9:76:44:be:b0:83:06:64:90:5e:7b:87:4a:2d:3c:48:46:7c:
         e6:d7:b7:57:1f:cc:f1:81:9d:3a:e6:84:4c:76:c2:e2:23:12:
         99:7e:f4:4c:b1:a3:08:f5:42:a5:90:04:c9:f8:86:fe:fe:c7:
         96:96:0b:a7:b0:72:a6:63:b7:40:39:1e:47:c0:a2:4e:44:ca:
         a3:54:1e:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE1NTAxMTAvBgNVBAUTKDg4RDZBRkNFQjhGM0Y4OTAyNzQ0RDYxQTYyNjg0Qjk0
NTlEQkMxRjYwHhcNMjYwMzI2MjMzNjMyWhcNMjYwNDAyMjMzNjMyWjAYMRYwFAYD
VQQDEw02OWM1YzMwMC00MWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs2QgiUXrwuThShd0C22M6L9W+Pk4tUms0ZMKczjL5/sDtmPTihY1Ncl5tUDw
a8VVHlbrRc7kgBBRKhG5kjBrIkVsoH3aU0Uod1MRNOAw+El00QDakktPW15rUguY
0Itv48lcqK6p4e7s7DpTlfm09I9m0LuXNVM0Qs4s1dVZq1D677hu8RWBLjt1Vkj8
EN3pWQqQXczarXBET0fwx2QDRONHXQV9fNfniNTaHenRXmluXlpz4yujXUczXMRL
Tri39P68ULKG85oBeuAFs27NbDMNbma7bwPiGMLzgB6HfB3AaSSTLAvNttpUhCWQ
GN0fW4hnlgvx1oq0cefqjWUp0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPn/P/5A
Y1yMf2DB+Y4YHDq21bbWMB8GA1UdIwQYMBaAFIjWr8648/iQJ0TWGmJoS5RZ28H2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1MC8xMTdDMjZFQTVE
NkIxMUVDOUUzNTZDNDZDNEY5QUUwMi9pTmF2enJqei1KQW5STllhWW1oTGxGbmJ3
ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lOYXZ6cmp6LUpBblJOWWFZbWhMbEZuYndmWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTU1MC8xMTdDMjZFQTVENkIxMUVDOUUzNTZDNDZDNEY5QUUwMi9pTmF2enJqei1K
QW5STllhWW1oTGxGbmJ3ZlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArk4BprDx3MB3gtgjARqHG38NP4sEMPKg8eXbCKm1jp5dYEdtWuXMeFy0uzA3
PxPYo0OjHPLNsOI7xJ/F4vso70fe0Vvg/IazAzob2B0pstmj11qQUOPxt8opp+WS
Xl+28S5atw81wB9/ikKF36WqID4ygMJtZda219/ditCxq7GCUntb4au0Y6oUU7rZ
jw7odYaNVGSAl9CBsR/+/a39rtbtgU3WzD6zqriHDwSi8+325pwF+XZEvrCDBmSQ
XnuHSi08SEZ85te3Vx/M8YGdOuaETHbC4iMSmX70TLGjCPVCpZAEyfiG/v7HlpYL
p7BypmO3QDkeR8CiTkTKo1QegA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:54:59 2026 by rpki-client