Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
File:                     ChPG4rpUSZlzhSD56zNYNsRgyMg.mft (raw, json)
Hash identifier:          MmMxSPeg0bN5vNOvQLxXKwIX3NjG3Ijy8TwJHBi2Dv4=
Subject key identifier:   F7:F7:9D:F1:DD:B7:BF:36:60:35:48:47:7A:F6:96:28:9F:BB:B4:BC
Authority key identifier: 0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8
Certificate issuer:       /CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8
Certificate serial:       0251
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
Manifest number:          0249
Signing time:             Sat 13 Jun 2026 02:24:55 +0000
Manifest this update:     Sat 13 Jun 2026 02:24:55 +0000
Manifest next update:     Sat 20 Jun 2026 02:24:55 +0000
Files and hashes:         1: ChPG4rpUSZlzhSD56zNYNsRgyMg.crl (hash: SMpGxjGZqQfd3ELU3JjOGMyNcOv17c2b/ouHO6xJVOo=)
                          2: F1999E04EB4211EDB83DE270C4F9AE02.roa (hash: vQqHYkst+bMR6ApHsX1n4KtnteWAgZISRRJ/Cx97K+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl
                          rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911503D, serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8
        Validity
            Not Before: Jun 13 02:24:55 2026 GMT
            Not After : Jun 20 02:24:55 2026 GMT
        Subject: CN=6a2cbf77-ad03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:42:39:36:3f:86:4e:88:51:19:d2:65:0e:98:
                    03:af:ca:1a:72:92:a4:48:24:0c:56:bd:84:53:ec:
                    79:64:d1:48:99:94:46:37:4f:bc:a1:23:57:52:ff:
                    cf:3f:4c:8f:c2:ac:5a:ab:77:73:65:ad:be:4c:07:
                    bf:9d:03:c2:d7:f4:22:2b:91:21:e6:70:7d:bc:e1:
                    62:be:28:d2:3e:c8:f3:0b:56:3d:48:96:e4:b9:50:
                    d8:a1:99:04:22:a9:1f:2d:ab:b3:02:f4:99:9a:1d:
                    18:4f:5e:e4:89:9e:27:5e:50:c1:f3:51:65:b8:5d:
                    49:7c:2f:7d:1a:b3:7c:18:a0:f7:34:f1:01:02:93:
                    8d:77:41:95:8a:ba:4b:e6:6d:55:af:11:ca:76:05:
                    33:8b:4a:85:6e:1a:1d:45:53:8a:10:1e:be:e7:a2:
                    05:07:21:2b:e7:00:47:30:5a:06:47:24:37:76:32:
                    45:59:ce:89:54:4d:54:7f:bc:3a:41:11:23:52:37:
                    1f:d7:4d:39:68:e3:90:28:78:ae:70:0e:93:7a:cf:
                    c7:81:77:30:33:fd:d6:dc:de:0c:c9:de:31:95:9e:
                    1a:b0:d3:d6:82:3b:b8:5d:d1:a2:c9:50:f9:05:a1:
                    0b:23:a9:bc:0c:2a:0d:23:99:e4:c5:a9:9c:69:f1:
                    4d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F7:9D:F1:DD:B7:BF:36:60:35:48:47:7A:F6:96:28:9F:BB:B4:BC
            X509v3 Authority Key Identifier:
                keyid:0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:0f:38:39:71:1c:b4:56:26:b2:3c:a9:b6:89:6f:79:4a:16:
         b6:6c:c2:17:46:ea:22:b1:1d:ea:f1:c1:13:ee:ec:c2:c4:06:
         c8:46:ba:d8:44:08:ef:ff:eb:3f:79:17:94:86:36:b2:a4:f6:
         4c:95:85:5b:00:1f:0f:65:9c:7b:2d:64:61:ba:07:6e:5b:f3:
         53:5e:9e:be:26:56:f7:a7:ee:b5:b7:32:d5:d6:12:19:ee:a8:
         28:da:0f:43:a2:69:f1:96:82:53:20:fd:bb:26:a9:b3:d2:17:
         ca:ee:e1:86:b4:89:19:10:1f:b6:4f:97:06:84:c3:a6:3a:53:
         0d:da:42:5a:79:5c:7e:eb:8e:ad:da:e1:e2:6a:4e:7d:63:07:
         a1:2b:fc:d2:57:8a:4c:d8:48:91:14:d0:15:c6:9c:5d:d0:ab:
         ec:84:07:ab:6d:c7:55:a9:ea:08:d0:d4:45:65:33:e3:63:b0:
         47:77:76:f8:2f:12:9b:bf:dd:05:fc:65:9c:28:14:c8:d7:db:
         94:db:79:f7:d8:11:f9:36:3f:0b:4b:b8:97:da:41:72:26:cd:
         d5:2b:5d:22:96:1a:3e:9c:fe:0a:46:5e:d8:fb:e6:ac:44:b1:
         c0:ce:38:43:19:c6:08:4a:4c:48:d6:70:53:6f:35:71:65:a2:
         df:f6:d9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:49:40 2026 by rpki-client