Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
File:                     ChPG4rpUSZlzhSD56zNYNsRgyMg.mft (raw, json)
Hash identifier:          fqHSubc4y/SUl7vtYt7T7RpGSG6wUEM3yB9wsVsUgMY=
Subject key identifier:   3B:7F:7C:BB:EA:21:D2:48:92:67:6A:58:FE:43:92:A9:21:ED:25:6D
Authority key identifier: 0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8
Certificate issuer:       /CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8
Certificate serial:       0242
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
Manifest number:          023A
Signing time:             Wed 13 May 2026 02:37:18 +0000
Manifest this update:     Wed 13 May 2026 02:37:17 +0000
Manifest next update:     Wed 20 May 2026 02:37:17 +0000
Files and hashes:         1: ChPG4rpUSZlzhSD56zNYNsRgyMg.crl (hash: PCtN3LZy9hr6+1xuEsp5nYf3f81+xXrtW+zd3KmL6qE=)
                          2: F1999E04EB4211EDB83DE270C4F9AE02.roa (hash: vQqHYkst+bMR6ApHsX1n4KtnteWAgZISRRJ/Cx97K+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl
                          rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911503D, serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8
        Validity
            Not Before: May 13 02:37:17 2026 GMT
            Not After : May 20 02:37:17 2026 GMT
        Subject: CN=6a03e3de-3e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:95:3e:b6:5b:bd:bc:eb:90:e0:60:73:35:91:
                    66:34:ce:bf:d9:29:85:ef:50:8a:2e:b5:ba:23:c5:
                    f4:79:30:22:10:d1:59:5b:d3:39:4f:8c:4d:77:a1:
                    09:0b:9a:46:9e:b0:2b:09:8a:5e:80:bf:6c:56:a9:
                    39:2e:1c:ec:13:26:85:a4:84:83:11:30:e5:76:20:
                    fc:50:f1:d6:51:0a:46:81:0a:6a:b6:76:cf:fc:56:
                    cd:71:ba:69:c6:84:db:2d:2e:2b:79:2a:e6:5a:d7:
                    20:d0:ba:ac:7c:f9:f9:c1:db:50:08:24:1f:71:75:
                    b5:6d:a9:ff:8c:84:73:91:a7:5c:60:e1:fd:43:04:
                    e4:66:cb:54:dd:bc:39:6f:fd:96:ce:a1:8d:26:e3:
                    fc:e0:d1:9b:43:f7:3c:56:8c:7c:99:dc:61:f9:94:
                    01:15:f2:3e:1c:67:10:a7:49:f7:6e:2c:8f:5b:60:
                    52:0b:d7:4f:85:46:00:51:8e:2b:0f:27:f0:f8:6a:
                    af:6d:3f:16:70:29:e9:c6:d1:be:99:6b:9e:8a:77:
                    37:a6:02:84:61:b7:56:1f:87:39:a3:a5:11:c1:15:
                    91:51:28:27:ae:13:ee:d2:41:04:4a:15:b8:6f:61:
                    2f:ed:4d:69:99:b6:fd:c1:6c:3a:94:af:95:33:86:
                    a2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7F:7C:BB:EA:21:D2:48:92:67:6A:58:FE:43:92:A9:21:ED:25:6D
            X509v3 Authority Key Identifier:
                keyid:0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:be:59:c8:dc:52:d9:ab:62:e2:ce:a1:76:7b:a2:21:b3:7b:
         d3:e7:e7:b9:2d:44:19:a1:b4:1e:f3:87:a3:3e:ca:b9:03:54:
         1d:a2:e4:c1:a8:90:bc:c9:54:2b:b0:ce:63:e5:0f:21:e0:8a:
         95:f4:06:25:30:da:76:39:08:ea:57:e1:d4:14:47:d9:ae:bf:
         f1:0b:b8:8a:81:e6:96:e2:c0:01:03:88:c8:af:6c:07:98:66:
         57:47:9b:c9:ee:a8:1f:23:01:aa:5c:06:bf:75:ac:cc:79:41:
         29:6e:e1:ba:21:43:ee:3c:3c:c3:e2:19:33:d5:8a:0d:23:49:
         29:68:fa:2e:2a:bb:d7:49:26:b8:4b:fe:ed:9d:f1:b8:3b:fa:
         16:91:29:4e:1c:5c:7f:51:80:49:ce:dd:b1:9e:ad:82:30:b3:
         32:53:e0:31:36:c5:87:48:f3:f9:65:de:5e:01:8a:e6:9d:f2:
         b3:27:40:f5:72:b9:d7:36:20:5f:29:ff:1f:18:6b:ff:ed:f6:
         d5:a5:2b:a0:c4:11:79:83:36:cb:ab:a5:17:cb:0e:dc:01:89:
         97:65:17:25:05:dd:a4:cc:24:7b:21:90:34:72:b6:00:80:f8:
         53:ac:51:f6:c1:c6:f9:6a:99:ba:ee:3e:34:21:6f:4d:4b:c9:
         d9:b0:df:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:07 2026 by rpki-client