Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
File:                     ChPG4rpUSZlzhSD56zNYNsRgyMg.mft (raw, json)
Hash identifier:          yY8UjojuhyhdtAnvYxxQlm808UnU+0C4D9s4YZYVS9o=
Subject key identifier:   01:91:A7:44:8E:57:59:C3:1F:E2:F1:0B:33:D8:61:DC:45:15:4D:49
Authority key identifier: 0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8
Certificate issuer:       /CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8
Certificate serial:       0243
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
Manifest number:          023B
Signing time:             Fri 15 May 2026 02:35:27 +0000
Manifest this update:     Fri 15 May 2026 02:35:26 +0000
Manifest next update:     Fri 22 May 2026 02:35:26 +0000
Files and hashes:         1: ChPG4rpUSZlzhSD56zNYNsRgyMg.crl (hash: QS1pe/JFdd4O2GPbiZp2IENWzGWv1ux1hOgjNU+lPqg=)
                          2: F1999E04EB4211EDB83DE270C4F9AE02.roa (hash: vQqHYkst+bMR6ApHsX1n4KtnteWAgZISRRJ/Cx97K+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl
                          rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 02:35:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911503D, serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8
        Validity
            Not Before: May 15 02:35:26 2026 GMT
            Not After : May 22 02:35:26 2026 GMT
        Subject: CN=6a06866f-9069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:65:88:36:7d:77:90:98:d7:b2:3e:91:3c:2a:
                    dd:38:14:57:8e:b6:99:0c:1b:f6:e1:c4:3b:fa:b3:
                    7f:ab:67:6b:b2:88:71:0e:a7:64:30:91:4a:86:c8:
                    b9:64:cf:58:15:cf:91:47:b5:2a:33:5c:73:14:b5:
                    8f:a1:8a:b5:b8:e6:8e:ee:72:a0:a0:65:80:84:c0:
                    52:96:0f:47:1e:eb:0a:d7:1c:0d:d5:a8:95:0a:6b:
                    c7:5b:1b:41:23:0a:1e:ac:7a:38:14:45:a4:c8:06:
                    c3:cf:6c:9b:f9:56:34:bd:20:2f:02:55:35:69:c2:
                    0a:52:b7:3e:3a:94:3f:0a:55:76:a2:3b:2c:1d:36:
                    8a:bc:ad:c5:ac:cd:de:07:41:6a:d9:43:2c:21:3d:
                    3f:b7:d7:e0:a8:b5:28:c4:fc:08:68:22:eb:38:d3:
                    33:ae:ec:20:d0:b6:b4:e8:ec:51:a7:cf:c7:09:8a:
                    2a:ee:f7:f1:da:ef:e1:ac:98:5d:80:94:30:f9:66:
                    47:db:bd:34:ab:7f:09:9e:b3:70:04:ab:1a:c6:1a:
                    2b:d4:9a:b6:2b:55:9d:8d:74:1e:6f:c7:77:7f:6d:
                    ff:1f:34:7f:d4:7d:fb:15:c1:8b:80:b2:1e:92:c8:
                    3a:a4:9d:fd:cb:b6:18:2a:4d:3e:d9:97:b6:1b:50:
                    73:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:91:A7:44:8E:57:59:C3:1F:E2:F1:0B:33:D8:61:DC:45:15:4D:49
            X509v3 Authority Key Identifier:
                keyid:0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:d6:0d:e9:a8:7c:d1:47:f5:62:b6:c2:f1:84:2d:ec:58:5d:
         b8:7f:65:1a:81:08:06:b1:49:2e:d7:d8:57:2f:2d:c2:73:4b:
         6e:71:5b:83:83:06:d3:c7:36:81:67:83:5f:67:5e:d1:e3:08:
         06:22:8a:18:27:4d:49:eb:00:32:88:27:23:4b:e2:c6:6b:c1:
         94:b2:54:ae:28:85:54:49:05:d9:0b:f5:ce:75:38:ff:f0:6c:
         32:e5:37:48:1a:d6:9c:04:b3:c1:9a:0a:dc:c2:06:94:45:88:
         04:e0:37:05:80:24:18:cc:01:f9:7e:4a:47:e3:95:69:46:2f:
         22:e9:02:d0:dd:b1:69:a9:75:33:50:64:7f:30:09:94:7c:20:
         9b:aa:a5:32:b5:f7:44:e0:03:9d:25:8c:a3:5c:b2:5c:87:9e:
         68:86:53:c7:25:eb:bb:77:bb:26:98:62:38:1b:e0:1b:22:a6:
         40:f4:e0:2f:24:1b:cf:48:ba:57:36:e9:20:da:39:3f:28:a7:
         c9:4e:00:f1:85:99:13:2b:62:06:86:2a:0d:58:d8:3d:84:5c:
         d4:89:a0:4f:06:94:41:43:7b:88:bd:e5:d0:9e:f1:bb:4e:e1:
         c3:ac:44:fd:8f:1c:29:bc:19:9e:db:3e:64:0e:88:4c:1d:73:
         38:2f:8b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:51 2026 by rpki-client