Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft
File:                     iNavzrjz-JAnRNYaYmhLlFnbwfY.mft (raw, json)
Hash identifier:          ELXi8IW9tmoaC/+C+Yd7X2GMH4YDxhYIbCaN/tugJYk=
Subject key identifier:   1A:FC:9B:6C:DF:CA:24:CB:CD:2E:4E:7E:EA:2C:E6:FC:0D:EC:CE:31
Authority key identifier: 88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6
Certificate issuer:       /CN=A914A550/serialNumber=88D6AFCEB8F3F8902744D61A62684B9459DBC1F6
Certificate serial:       0529
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft
Manifest number:          0520
Signing time:             Tue 18 Aug 2026 23:56:44 +0000
Manifest this update:     Tue 18 Aug 2026 23:56:44 +0000
Manifest next update:     Tue 25 Aug 2026 23:56:44 +0000
Files and hashes:         1: iNavzrjz-JAnRNYaYmhLlFnbwfY.crl (hash: TG+LCfReoKjqlVgr+M2Kb/DKqFx7e1xZic2E1PXM4fU=)
                          2: 66D714485D6F11EC9A00E41DC4F9AE02.roa (hash: afTTDTLuSSKoKBFKA3AITZNqz6tQXNgOBuhjQHGWnlw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.crl
                          rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1321 (0x529)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A550, serialNumber=88D6AFCEB8F3F8902744D61A62684B9459DBC1F6
        Validity
            Not Before: Aug 18 23:56:44 2026 GMT
            Not After : Aug 25 23:56:44 2026 GMT
        Subject: CN=6a84f13c-b294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:70:a3:4d:49:08:1e:48:ee:ef:9c:d8:8c:c1:
                    9c:49:1a:f2:ae:60:7a:83:2f:48:26:f4:92:7d:b2:
                    b1:a4:46:2b:19:ef:5f:38:52:1c:3b:79:ba:30:f8:
                    37:ed:2a:4f:9b:4e:6d:c0:2c:cf:c8:99:ee:f3:c6:
                    81:0a:d3:7c:24:ff:e5:cb:95:bc:0e:f2:b1:5f:27:
                    21:60:ce:34:80:18:12:e1:12:ad:6e:58:a8:87:96:
                    bb:08:5e:37:3e:59:83:43:4e:34:80:57:ea:ab:8a:
                    b6:8d:3b:28:04:cb:8c:01:65:26:51:fe:74:e4:60:
                    29:e6:df:14:48:d6:02:b4:a9:8f:76:55:89:1d:12:
                    70:8d:29:6b:43:82:58:6b:60:e1:e6:73:ec:ea:ef:
                    27:29:0f:6c:e0:52:ee:4e:4e:9a:81:be:20:60:a8:
                    be:56:c5:39:ad:2b:1a:f7:35:2e:9d:fe:94:7c:90:
                    a0:82:81:1b:3e:71:d2:1f:54:9e:fb:2b:f5:fb:1d:
                    a9:77:9c:1c:69:a4:88:30:9e:df:76:c6:bd:bf:2a:
                    7f:ab:94:5c:13:79:c9:f3:d6:c7:ea:5c:6d:5d:72:
                    56:08:d9:59:93:4a:77:fc:c3:65:4e:e4:c8:ac:1e:
                    37:ca:64:aa:d6:8f:cf:e4:45:76:54:e3:10:60:d4:
                    87:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FC:9B:6C:DF:CA:24:CB:CD:2E:4E:7E:EA:2C:E6:FC:0D:EC:CE:31
            X509v3 Authority Key Identifier:
                keyid:88:D6:AF:CE:B8:F3:F8:90:27:44:D6:1A:62:68:4B:94:59:DB:C1:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNavzrjz-JAnRNYaYmhLlFnbwfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A550/117C26EA5D6B11EC9E356C46C4F9AE02/iNavzrjz-JAnRNYaYmhLlFnbwfY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b9:df:5a:1d:05:4a:15:16:fc:97:41:03:4d:5f:56:75:0e:
         81:ed:1d:54:20:b7:00:d3:95:e9:ec:8f:8c:28:db:49:13:b0:
         5c:a2:11:3a:65:77:5c:94:51:67:79:2d:74:08:b8:9c:f8:94:
         a3:93:66:72:3c:d9:8a:13:f7:9b:9c:94:76:bd:5f:e2:96:d1:
         36:66:98:ab:50:0c:18:31:d2:06:03:50:70:36:6a:b1:3a:58:
         b3:3a:2b:85:38:cf:b2:5e:59:8a:a7:4d:38:41:cf:3f:26:b0:
         68:5f:65:93:bb:69:15:b1:9e:70:9a:b7:cf:25:e0:b4:b4:50:
         2d:13:6e:60:11:e9:5e:a6:84:06:bb:5f:7c:e0:46:a5:1a:29:
         71:e0:fa:2a:7f:98:62:ba:a8:9b:62:06:ab:41:27:6c:25:7f:
         5c:9f:d6:b8:dd:ef:15:39:90:37:32:03:51:30:5f:05:3e:ed:
         2d:67:41:7f:b1:33:47:39:a1:49:6d:c3:36:34:16:21:42:e6:
         f2:f2:06:36:c5:9a:de:7e:61:3d:d1:f1:18:f6:1d:31:cb:e2:
         ac:50:2b:33:3b:3e:32:ca:5a:88:36:40:83:2d:5d:f4:6e:6c:
         16:ab:2a:f8:4b:c3:be:56:01:5b:1a:ce:b6:7f:2b:a6:87:c1:
         f8:4d:30:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE1NTAxMTAvBgNVBAUTKDg4RDZBRkNFQjhGM0Y4OTAyNzQ0RDYxQTYyNjg0Qjk0
NTlEQkMxRjYwHhcNMjYwODE4MjM1NjQ0WhcNMjYwODI1MjM1NjQ0WjAYMRYwFAYD
VQQDEw02YTg0ZjEzYy1iMjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3XCjTUkIHkju75zYjMGcSRryrmB6gy9IJvSSfbKxpEYrGe9fOFIcO3m6MPg3
7SpPm05twCzPyJnu88aBCtN8JP/ly5W8DvKxXychYM40gBgS4RKtblioh5a7CF43
PlmDQ040gFfqq4q2jTsoBMuMAWUmUf505GAp5t8USNYCtKmPdlWJHRJwjSlrQ4JY
a2Dh5nPs6u8nKQ9s4FLuTk6agb4gYKi+VsU5rSsa9zUunf6UfJCggoEbPnHSH1Se
+yv1+x2pd5wcaaSIMJ7fdsa9vyp/q5RcE3nJ89bH6lxtXXJWCNlZk0p3/MNlTuTI
rB43ymSq1o/P5EV2VOMQYNSHKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBr8m2zf
yiTLzS5Ofuos5vwN7M4xMB8GA1UdIwQYMBaAFIjWr8648/iQJ0TWGmJoS5RZ28H2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1MC8xMTdDMjZFQTVE
NkIxMUVDOUUzNTZDNDZDNEY5QUUwMi9pTmF2enJqei1KQW5STllhWW1oTGxGbmJ3
ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lOYXZ6cmp6LUpBblJOWWFZbWhMbEZuYndmWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTU1MC8xMTdDMjZFQTVENkIxMUVDOUUzNTZDNDZDNEY5QUUwMi9pTmF2enJqei1K
QW5STllhWW1oTGxGbmJ3ZlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQbnfWh0FShUW/JdBA01fVnUOge0dVCC3ANOV6eyPjCjbSROwXKIROmV3XJRR
Z3ktdAi4nPiUo5NmcjzZihP3m5yUdr1f4pbRNmaYq1AMGDHSBgNQcDZqsTpYszor
hTjPsl5ZiqdNOEHPPyawaF9lk7tpFbGecJq3zyXgtLRQLRNuYBHpXqaEBrtffOBG
pRopceD6Kn+YYrqom2IGq0EnbCV/XJ/WuN3vFTmQNzIDUTBfBT7tLWdBf7EzRzmh
SW3DNjQWIULm8vIGNsWa3n5hPdHxGPYdMcvirFArMzs+MspaiDZAgy1d9G5sFqsq
+EvDvlYBWxrOtn8rpofB+E0wKQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:31 2026 by rpki-client