Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft
File:                     ChpgX3N8mCCzMTPlo1ecFw0idOw.mft (raw, json)
Hash identifier:          gTLlahArEuVg4qd3TZ71tdIBkRrdEpeTI6yxbApsVzo=
Subject key identifier:   41:71:E7:91:3A:FB:FD:81:AA:84:D0:FD:F9:37:B2:F9:5A:24:EB:92
Authority key identifier: 0A:1A:60:5F:73:7C:98:20:B3:31:33:E5:A3:57:9C:17:0D:22:74:EC
Certificate issuer:       /CN=A91BD614/serialNumber=0A1A605F737C9820B33133E5A3579C170D2274EC
Certificate serial:       0245
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft
Manifest number:          02CB
Signing time:             Fri 27 Mar 2026 02:02:02 +0000
Manifest this update:     Fri 27 Mar 2026 02:02:01 +0000
Manifest next update:     Fri 03 Apr 2026 02:02:01 +0000
Files and hashes:         1: ChpgX3N8mCCzMTPlo1ecFw0idOw.crl (hash: dJey7kTvlcGvu52qxBTSlrasboHW6owCzkm+Nk8QEVA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.crl
                          rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD614, serialNumber=0A1A605F737C9820B33133E5A3579C170D2274EC
        Validity
            Not Before: Mar 27 02:02:01 2026 GMT
            Not After : Apr  3 02:02:01 2026 GMT
        Subject: CN=69c5e51a-32ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2d:06:ff:7f:a5:5b:1f:3e:b2:f5:e5:4e:27:
                    f8:72:18:a6:34:84:43:00:dc:0c:1d:e1:09:09:a0:
                    40:a7:8a:33:ad:97:69:f6:f4:e8:70:4d:8f:e0:9a:
                    43:be:85:1a:6f:f4:f0:05:a1:f9:55:3b:39:cb:ed:
                    b7:0c:91:be:69:2b:4c:e2:6d:fb:7c:31:0c:6a:17:
                    bb:40:2e:2b:a1:03:1d:1a:75:a6:48:2f:e3:d8:a7:
                    f1:a3:9c:59:ec:ed:3c:f5:c1:e9:96:61:21:eb:76:
                    50:16:8e:da:9f:2f:1c:d0:e3:dd:c3:a1:81:ba:e8:
                    4f:09:43:ce:62:6b:2d:e3:2e:5a:40:55:99:ad:46:
                    c8:35:ee:cd:a7:45:7a:e3:26:e1:12:61:8f:57:a3:
                    d7:17:c0:51:28:ee:c0:82:3b:c8:18:a9:e5:af:18:
                    34:db:60:d7:ea:07:7d:ba:f3:06:c5:a7:f7:6c:3b:
                    96:63:51:4c:70:39:7e:d4:f6:9a:96:49:8c:a7:3e:
                    8c:b5:af:c9:f1:81:30:bb:43:38:8f:fa:52:e2:7f:
                    c3:41:db:63:0e:d4:87:80:70:10:8d:45:0b:dc:ed:
                    49:82:d3:27:ce:50:6c:9d:4b:6d:51:3d:64:9c:97:
                    bf:41:61:99:ea:52:f7:09:d8:39:10:c2:e0:7b:c2:
                    2d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:71:E7:91:3A:FB:FD:81:AA:84:D0:FD:F9:37:B2:F9:5A:24:EB:92
            X509v3 Authority Key Identifier:
                keyid:0A:1A:60:5F:73:7C:98:20:B3:31:33:E5:A3:57:9C:17:0D:22:74:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:f5:95:ee:2d:d6:0e:25:58:30:9f:2e:0a:cd:c2:1c:7e:bd:
         7a:d3:3f:e0:0b:97:da:86:39:14:b8:44:89:85:d2:10:2d:f4:
         5e:17:eb:16:18:c7:cf:42:31:62:32:eb:d7:0d:d2:eb:86:5d:
         fa:5c:82:6d:59:3f:49:00:76:38:11:e7:f9:6d:ed:9b:08:53:
         6e:8f:32:39:39:1b:0a:1d:d7:ab:c0:7c:1f:bc:e5:e2:3d:5f:
         ff:fb:30:9c:58:fa:78:df:00:74:a3:e4:d1:c1:80:d7:30:be:
         0d:26:56:6c:ea:9a:c9:2d:ee:56:b1:6a:aa:9d:20:74:bc:7e:
         81:85:58:a3:1a:1a:f6:72:a6:b2:05:61:2c:70:eb:aa:2b:e0:
         68:a2:9b:dd:dc:fc:27:57:0d:96:44:0d:e5:70:aa:df:b5:07:
         e0:95:21:56:07:2d:a6:2f:fc:fe:ae:53:23:83:8c:f4:60:41:
         80:ab:50:55:d7:7f:f5:5a:b3:06:dc:d9:a9:fe:4b:25:f0:28:
         81:92:6a:c1:13:1f:77:2e:58:f3:4e:de:f8:8f:48:45:b9:b4:
         27:59:79:ad:a9:48:23:78:0f:85:ab:d0:72:6f:eb:57:8d:60:
         1c:9a:bc:83:c8:59:b9:da:a2:88:e3:c9:8e:07:13:0d:47:66:
         2e:1b:ff:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:15 2026 by rpki-client