Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
File:                     ChPG4rpUSZlzhSD56zNYNsRgyMg.mft (raw, json)
Hash identifier:          YtHGg7yiIHk5mc5GY/ufg3wmOEf4x0vKpudQX9WcusM=
Subject key identifier:   46:76:9B:B4:BA:31:A0:FC:30:7E:BA:5A:F3:19:48:1E:36:39:9E:18
Authority key identifier: 0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8
Certificate issuer:       /CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8
Certificate serial:       0284
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
Manifest number:          027C
Signing time:             Mon 21 Sep 2026 01:57:08 +0000
Manifest this update:     Mon 21 Sep 2026 01:57:07 +0000
Manifest next update:     Mon 28 Sep 2026 01:57:07 +0000
Files and hashes:         1: ChPG4rpUSZlzhSD56zNYNsRgyMg.crl (hash: FOYTZ04kPCwwUv7OvuXqBYnf7xZradlhuuxMNDiIRX8=)
                          2: F1999E04EB4211EDB83DE270C4F9AE02.roa (hash: vQqHYkst+bMR6ApHsX1n4KtnteWAgZISRRJ/Cx97K+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl
                          rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911503D, serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8
        Validity
            Not Before: Sep 21 01:57:07 2026 GMT
            Not After : Sep 28 01:57:07 2026 GMT
        Subject: CN=6ab08ef4-2b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:e8:b9:01:7b:0e:d7:1f:1a:21:c0:36:6b:
                    d5:79:da:fa:68:eb:72:90:3a:03:a5:e8:36:93:24:
                    d4:2c:bc:a9:8f:ab:7a:57:34:ea:37:8a:6d:84:2b:
                    fb:b9:73:7e:bc:89:3e:d0:52:28:f7:31:bc:aa:f3:
                    dd:99:ef:f6:f4:b8:79:9d:4a:17:10:3d:0d:15:d6:
                    09:ab:71:0a:3a:05:37:5d:54:98:35:55:01:6a:1c:
                    ca:7e:b8:a8:63:ee:9b:9d:36:67:36:33:c0:3d:ff:
                    f5:d7:ae:a1:3d:14:6e:92:fc:73:43:e4:0c:b8:af:
                    98:cb:d7:f3:a4:56:f0:d0:c7:d1:04:3b:28:08:ae:
                    60:dd:6b:a8:07:19:7e:84:26:f6:4c:73:a8:92:91:
                    9d:59:33:64:85:59:32:0b:5f:17:9b:4d:81:69:44:
                    11:d3:3b:6f:6c:19:9a:ee:3c:aa:8a:da:d9:66:26:
                    fc:04:c5:00:25:25:8c:2c:df:1d:3a:62:ff:5e:c2:
                    93:fb:18:74:87:80:a9:4a:c9:10:ac:d1:32:87:6f:
                    59:1f:4b:86:07:a0:46:2e:39:48:ac:7b:a3:10:f5:
                    2e:4f:2d:43:38:35:7f:77:7e:aa:74:f6:1a:6d:90:
                    6c:89:5a:55:e5:6e:65:4d:eb:f5:35:1c:da:a5:dd:
                    31:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:76:9B:B4:BA:31:A0:FC:30:7E:BA:5A:F3:19:48:1E:36:39:9E:18
            X509v3 Authority Key Identifier:
                keyid:0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:7f:54:b9:41:bd:90:3f:9a:c5:0e:7e:f9:56:d3:6e:37:ff:
         4b:49:34:b5:ee:9f:46:94:db:67:80:ca:6c:43:c0:9b:62:9c:
         14:6e:ea:14:e7:68:1c:43:c8:d8:b8:87:40:4b:1d:0b:68:1f:
         a4:07:2e:19:9e:e8:b2:84:19:20:af:fc:eb:d1:0a:d2:89:50:
         cc:e5:73:84:f2:65:09:e9:b3:48:4b:4b:d6:3f:88:e8:6e:94:
         40:ea:24:5a:e6:e7:8b:a2:72:8a:cb:27:f8:72:be:3d:76:ca:
         a9:46:f0:f6:67:a1:55:5f:2e:5b:fe:67:02:b6:e5:eb:b1:8f:
         43:de:ff:d5:55:52:20:9b:84:d8:fc:b4:dd:15:1f:03:76:94:
         cb:ff:bf:9b:38:46:39:31:3f:67:5b:2f:fd:b0:db:11:bf:28:
         11:14:64:d4:0f:93:4c:86:aa:46:18:d1:81:8c:2c:b2:df:04:
         49:cd:21:20:60:bf:61:f7:d3:2e:76:13:22:2c:70:49:f8:68:
         bc:fc:6c:5d:77:80:c0:2b:81:dc:1c:48:63:d9:a2:84:05:81:
         fe:ba:44:b6:ef:37:a9:34:38:fe:57:9e:03:0d:95:4f:7f:f9:
         8d:52:2d:60:bd:77:dc:9d:28:78:3d:a5:c3:d4:39:3e:31:f4:
         5f:23:c7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:21:18 2026 by rpki-client