Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
File:                     ChPG4rpUSZlzhSD56zNYNsRgyMg.mft (raw, json)
Hash identifier:          8A2HKYej4i0p0QVshPMLUGsa98x/Rv9DZA3SyXRSGgY=
Subject key identifier:   ED:9A:81:F5:6B:FB:FE:29:C1:4E:39:A5:EE:63:79:DB:61:B4:9E:87
Authority key identifier: 0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8
Certificate issuer:       /CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8
Certificate serial:       0271
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
Manifest number:          0269
Signing time:             Sat 15 Aug 2026 02:13:36 +0000
Manifest this update:     Sat 15 Aug 2026 02:13:35 +0000
Manifest next update:     Sat 22 Aug 2026 02:13:35 +0000
Files and hashes:         1: ChPG4rpUSZlzhSD56zNYNsRgyMg.crl (hash: 9s1iCXXouFdE99adjcoz6X1/Js+462LGSRT0TFOqsOM=)
                          2: F1999E04EB4211EDB83DE270C4F9AE02.roa (hash: vQqHYkst+bMR6ApHsX1n4KtnteWAgZISRRJ/Cx97K+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl
                          rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Aug 2026 02:13:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911503D, serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8
        Validity
            Not Before: Aug 15 02:13:35 2026 GMT
            Not After : Aug 22 02:13:35 2026 GMT
        Subject: CN=6a7fcb50-2669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:5b:03:df:4c:4c:64:34:cc:15:40:7f:25:cb:
                    29:4a:1a:88:73:8b:64:f6:5f:fc:eb:11:67:7b:b9:
                    18:ca:5f:51:0b:d8:db:cc:ed:b6:d8:ac:97:30:fd:
                    4c:9c:f9:5d:50:b7:c0:af:da:85:12:65:bf:24:8d:
                    a8:a6:74:49:d2:f3:ec:a0:ac:eb:cd:47:b5:71:60:
                    6b:2b:d0:07:54:c2:d1:80:dd:90:c1:8a:4e:9e:5f:
                    d2:ee:f6:b4:f8:6b:76:37:a6:2e:73:54:03:99:9e:
                    39:8b:51:7f:b3:e6:08:8b:b9:5a:9d:ff:73:56:e1:
                    7f:e8:89:f9:06:08:e4:66:53:16:3b:d5:ed:57:6c:
                    e5:bf:fe:b7:62:8e:d0:82:c5:e1:08:c0:87:b9:1c:
                    05:ce:76:a5:d0:3f:f5:d8:56:5b:0a:f0:84:37:94:
                    7d:73:55:a4:ae:d8:44:71:45:3a:18:71:3f:5d:d0:
                    e5:20:34:97:b4:e3:75:0a:7a:c2:a4:72:ac:ed:ca:
                    73:48:50:54:f6:4e:9f:e0:20:2c:80:12:7b:38:6f:
                    e5:9d:60:20:84:18:77:f3:94:30:67:86:9a:bb:f0:
                    58:47:b5:25:f0:53:f7:57:36:a6:3a:e3:46:21:a2:
                    dc:59:e9:b3:c4:8f:62:47:89:49:e7:ba:94:dd:cf:
                    d7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9A:81:F5:6B:FB:FE:29:C1:4E:39:A5:EE:63:79:DB:61:B4:9E:87
            X509v3 Authority Key Identifier:
                keyid:0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:4d:f7:4c:59:33:5a:96:9d:f2:fa:e6:d3:fd:25:ac:2d:7a:
         8b:4a:bc:93:22:5b:81:10:8c:12:af:29:6c:3c:2c:a4:2e:4a:
         63:1c:c5:88:7e:4d:92:af:52:1a:2d:89:03:d1:3a:07:6a:58:
         5f:14:f4:d5:fc:bf:19:ff:3d:c7:30:62:73:4f:16:54:03:1d:
         6d:6b:a7:0b:93:f6:18:d0:47:e7:f8:2f:78:6c:5a:b8:6e:e9:
         1f:9b:91:55:fc:b8:e0:7f:2a:0f:af:8a:6f:b9:1f:07:f9:33:
         4d:6e:4b:91:cd:25:0b:e7:6b:4b:9b:3d:18:56:5c:6f:8e:f0:
         46:f3:99:8c:83:75:aa:a0:3d:95:38:f1:6f:4c:3d:f5:8e:d0:
         00:1f:29:63:66:ae:bd:81:5c:62:9a:6d:bd:83:8c:d5:f7:c2:
         e1:26:7a:b9:b4:aa:db:9b:c7:9c:c2:f1:35:ce:43:28:06:d3:
         de:68:f2:15:2f:c0:94:08:26:7b:e8:98:e1:2c:cc:79:7d:05:
         43:06:77:96:ae:48:84:78:54:66:c0:9a:e7:4f:dc:17:a9:73:
         6f:36:c9:f1:bf:63:8f:0d:37:07:a3:30:b4:97:fa:e1:73:55:
         1e:3d:ce:ba:02:87:ba:1f:66:b1:51:81:13:38:d1:59:23:3a:
         37:d3:fa:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:23:01 2026 by rpki-client