Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft
File:                     iNavzrjz-JAnRNYaYmhLlFnbwfY.mft (raw, json)
Hash identifier:          qgbmLUZ+E8DmOnUqg3UKrhWkAH6+jWXBQ7lWAI6V2SQ=
Subject key identifier:   5E:54:8D:88:4B:C1:F1:3F:DD:F0:BE:35:74:6D:BB:4C:52:3E:93:A7
Authority key identifier: 88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6
Certificate issuer:       /CN=A914A550/serialNumber=88D6AFCEB8F3F8902744D61A62684B9459DBC1F6
Certificate serial:       044D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft
Manifest number:          0448
Signing time:             Thu 03 Jul 2025 00:35:21 +0000
Manifest this update:     Thu 03 Jul 2025 00:35:21 +0000
Manifest next update:     Thu 10 Jul 2025 00:35:21 +0000
Files and hashes:         1: iNavzrjz-JAnRNYaYmhLlFnbwfY.crl (hash: hKPHkYFv891ePI8UOvsbnmJwc9DRa80LAeVawYFzY7M=)
                          2: 66D714485D6F11EC9A00E41DC4F9AE02.roa (hash: Zv2OqRWOOIraCVGgHs0pDMOMrHeeVent3h8K/ky95JI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.crl
                          rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 00:35:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1101 (0x44d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A550, serialNumber=88D6AFCEB8F3F8902744D61A62684B9459DBC1F6
        Validity
            Not Before: Jul  3 00:35:21 2025 GMT
            Not After : Jul 10 00:35:21 2025 GMT
        Subject: CN=6865d049-4209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cb:d5:82:7a:88:43:3c:83:12:b9:21:9e:db:
                    25:92:d5:5b:b9:aa:aa:9c:67:1c:26:b7:3e:3b:3e:
                    d8:1e:88:cb:de:6c:bd:56:1c:2e:09:b6:83:1c:6e:
                    35:60:2d:0f:41:d3:a2:f9:e3:75:82:68:f0:7f:be:
                    3f:c7:28:9e:73:68:8a:b4:ed:c0:3d:31:02:db:87:
                    44:54:9d:ea:d0:e5:9e:32:b4:15:b4:e3:a5:f8:8b:
                    e6:14:9e:5f:e9:6f:c6:8a:4c:00:14:c9:35:96:95:
                    21:b8:5e:48:68:62:95:1f:79:4b:25:5d:70:6c:3c:
                    13:56:97:03:2d:b8:e2:b2:93:a1:12:78:43:63:d5:
                    08:db:3a:2a:15:68:0a:67:fb:d9:d4:93:c8:03:13:
                    a0:00:e8:73:25:80:99:8c:51:2c:7f:9c:9e:57:8b:
                    1c:61:58:ef:b0:42:a2:6a:fc:64:10:76:35:23:c2:
                    aa:5b:da:08:5e:14:bc:13:85:08:27:83:d4:44:9b:
                    e1:93:74:e2:3f:14:a9:fc:d0:2e:cf:5a:68:48:7a:
                    52:e2:b6:21:a2:83:98:6a:74:bb:a7:d9:02:e6:8e:
                    4a:07:eb:a2:23:29:e4:47:ae:1d:13:27:a7:9b:5c:
                    50:de:0f:a3:2d:19:da:de:92:96:6d:3e:50:ba:cd:
                    88:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:54:8D:88:4B:C1:F1:3F:DD:F0:BE:35:74:6D:BB:4C:52:3E:93:A7
            X509v3 Authority Key Identifier:
                keyid:88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:da:43:de:1d:36:7c:a5:d1:a0:13:a2:e4:98:56:19:7c:68:
         66:e8:33:78:07:ef:e7:41:1b:2a:be:b3:8a:38:3c:39:24:f2:
         a4:17:34:ba:4f:9f:1e:7a:1e:d6:dc:72:82:6e:a2:f6:c3:f9:
         71:7e:c2:a4:e2:73:82:44:11:cb:67:55:e8:07:68:19:65:8e:
         70:e2:eb:48:f2:2e:ba:a4:45:b5:ca:54:0e:9a:9f:75:40:59:
         ce:81:ac:48:98:27:8e:11:cd:a8:c8:2a:d8:22:99:92:4b:9a:
         9a:17:9d:ae:c3:cf:c2:9d:35:2b:11:0b:b5:96:b6:a1:ef:80:
         aa:6b:28:cc:81:46:fc:92:c1:0c:6b:26:7d:a5:96:83:c0:49:
         42:de:b9:c2:88:1a:a4:4d:22:7d:b7:7a:b1:dd:7a:37:54:c4:
         87:14:c4:04:db:88:49:3a:12:9c:f1:b5:2c:0d:33:1a:e3:7e:
         1e:f1:e9:ab:c7:b7:1f:92:f5:f8:f7:74:c8:92:58:62:41:e5:
         fd:b6:4e:14:b8:dc:a2:eb:31:9b:6d:c8:7d:99:be:ea:2e:ad:
         f8:b2:4f:75:cb:77:53:bd:9a:a1:83:37:4e:20:f9:4f:4f:7c:
         72:f5:ec:da:43:70:fb:4c:9d:c3:f6:9e:ad:85:7d:57:e9:95:
         b8:08:48:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:52:24 2025 by rpki-client