Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
File:                     ChPG4rpUSZlzhSD56zNYNsRgyMg.mft (raw, json)
Hash identifier:          Uwb6DTIu8R6f0U6roZASBqv1n8x5rBx9ApP+tG7Z4XI=
Subject key identifier:   8B:EE:20:26:3E:51:5E:07:C7:5A:73:F5:31:43:1C:EB:FE:29:6B:5F
Authority key identifier: 0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8
Certificate issuer:       /CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8
Certificate serial:       022B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
Manifest number:          0223
Signing time:             Sun 29 Mar 2026 02:28:32 +0000
Manifest this update:     Sun 29 Mar 2026 02:28:31 +0000
Manifest next update:     Sun 05 Apr 2026 02:28:31 +0000
Files and hashes:         1: ChPG4rpUSZlzhSD56zNYNsRgyMg.crl (hash: Yvtv/rNnb3UVZaoiaHvG9RbpUxxKskgl2jFykf7ReXs=)
                          2: F1999E04EB4211EDB83DE270C4F9AE02.roa (hash: vQqHYkst+bMR6ApHsX1n4KtnteWAgZISRRJ/Cx97K+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl
                          rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 02:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911503D, serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8
        Validity
            Not Before: Mar 29 02:28:31 2026 GMT
            Not After : Apr  5 02:28:31 2026 GMT
        Subject: CN=69c88e4f-caa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:a8:97:d2:2c:81:0a:bd:a7:17:c2:68:a2:
                    48:64:1f:74:be:01:93:ae:13:4b:4f:40:48:80:b3:
                    c3:3d:f4:bc:1c:ad:d1:77:16:74:ed:52:da:8a:5e:
                    75:8f:90:f0:16:77:a4:3c:65:8c:fe:8c:17:b2:98:
                    5a:47:7e:55:77:7a:e3:4a:82:3c:bd:08:d8:ed:ef:
                    47:ad:d7:a8:64:46:6b:9f:63:49:99:09:22:5e:3b:
                    4d:0f:0d:97:ad:d8:a8:28:99:99:a8:2a:a1:d2:5d:
                    9d:f6:c8:10:4c:6d:f1:9f:c5:d9:f6:f6:fe:68:5a:
                    74:3e:a7:63:3e:3a:c3:b0:3e:65:2f:c8:17:d5:bd:
                    4d:68:78:5a:d9:32:6e:53:b8:af:4d:64:c0:8e:8b:
                    7e:60:24:e6:8c:f4:e5:6d:20:f3:43:f0:44:6f:50:
                    5e:2f:1e:a9:47:29:41:d8:18:f0:b0:fd:82:f2:2d:
                    19:c5:e4:6c:c9:fa:b8:8b:2b:15:26:cb:5e:d8:1a:
                    60:d7:5a:3c:91:61:44:50:b0:15:42:fd:f3:2e:a4:
                    91:23:29:75:49:88:ca:88:c9:2a:9d:47:1d:30:cc:
                    ab:17:0c:23:89:6e:9a:88:e0:a2:5e:6b:69:b8:c3:
                    45:62:c0:59:9a:dc:4d:ec:5a:ad:a4:7f:89:49:b2:
                    74:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EE:20:26:3E:51:5E:07:C7:5A:73:F5:31:43:1C:EB:FE:29:6B:5F
            X509v3 Authority Key Identifier:
                keyid:0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:2e:53:f8:d8:e1:f8:90:84:3a:68:b2:59:72:7c:d3:f6:26:
         a4:c5:58:e2:b9:93:0d:ce:39:77:06:eb:b1:d1:af:3a:1c:86:
         fb:7e:bc:4e:84:6e:ed:bb:39:b5:3f:57:37:8f:88:b5:7c:a4:
         b3:b7:6d:c4:57:52:c8:4f:1a:9e:0c:cf:04:27:9f:a9:1c:e0:
         38:83:ac:ae:53:6d:64:20:09:fc:19:00:a9:ab:5f:b7:d7:5d:
         d6:15:9d:0e:98:bf:73:6d:e7:8c:32:92:e2:5c:19:1e:a6:bc:
         14:2d:bf:7d:ce:df:0c:70:48:d6:65:b0:4a:b0:7c:e5:de:eb:
         9b:34:87:43:d9:16:97:a2:f3:5b:8c:a7:26:2c:57:a4:3a:91:
         2a:5b:ad:24:8c:48:45:cf:ac:e1:7b:d7:7b:cc:0e:e5:e8:b8:
         62:8c:9c:c9:7d:e1:00:6c:ea:44:d0:7b:77:49:1b:a1:b7:f5:
         53:00:5d:61:16:3d:4a:e3:2d:6f:c1:b4:2f:1e:10:54:d6:64:
         fb:30:e3:67:60:a8:46:e4:1b:57:be:e3:3f:22:4e:65:cc:00:
         8b:af:cb:ac:ba:b7:76:e8:06:ca:50:b8:35:37:59:5e:e0:c0:
         a5:9c:cf:f4:85:fd:13:a9:b7:34:9a:88:ae:82:50:f9:a3:ca:
         95:7d:31:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:18 2026 by rpki-client