Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
File:                     tsp04BddZ-Guvoa_44xciY8mK4w.mft (raw, json)
Hash identifier:          QVWdp+v4umqPNWhlAi/5fx5l1AzVqeMwGXPuKfU/Z0s=
Subject key identifier:   74:18:4F:23:58:DD:B1:85:AD:CA:6D:40:EB:F5:B4:99:DE:4C:9C:B8
Authority key identifier: B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C
Certificate issuer:       /CN=A919EA40/serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
Certificate serial:       026C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
Manifest number:          0258
Signing time:             Mon 02 Mar 2026 02:35:17 +0000
Manifest this update:     Mon 02 Mar 2026 02:35:15 +0000
Manifest next update:     Mon 09 Mar 2026 02:35:15 +0000
Files and hashes:         1: tsp04BddZ-Guvoa_44xciY8mK4w.crl (hash: J/RkgSoJNm8Nn2jKv6KSpLrhh4pIe5IuYwVz0TgvCEk=)
                          2: 158B72F480FB11ED9B35954DC4F9AE02.roa (hash: vCFJH0y2zLT6RtNl1fKrvOFGF6otZx/dSySN5y76muE=)
                          3: 1627927480FB11ED9B35954DC4F9AE02.roa (hash: JGThLscl6gYWty7onPVj55tcNOzgZj9wzjYyxf+XyoM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl
                          rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 620 (0x26c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EA40, serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
        Validity
            Not Before: Mar  2 02:35:15 2026 GMT
            Not After : Mar  9 02:35:15 2026 GMT
        Subject: CN=69a4f764-214c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2b:ac:37:1b:88:3c:c2:a6:3d:42:f6:2b:51:
                    c3:c3:bc:c1:da:7b:b6:f9:2d:8f:6e:ae:6e:8c:86:
                    19:67:c4:d7:5f:61:63:7c:4c:d6:01:4c:b2:ad:fb:
                    a2:bb:c6:bf:11:bb:b2:e6:88:87:ba:d4:db:32:42:
                    a2:c1:fb:36:92:3f:38:b5:12:c3:c8:65:68:42:19:
                    a9:d8:fb:0f:b2:44:6c:4f:f9:73:ec:1c:5a:3a:1e:
                    ac:b2:20:ef:85:f5:8e:b3:e0:0e:b0:bd:93:4d:25:
                    dc:1f:df:fd:88:e7:19:5a:4d:f8:92:a4:9c:27:ae:
                    d6:c8:11:bd:74:37:73:9d:3d:0f:f4:26:70:9c:04:
                    94:45:74:0a:11:76:1d:d2:60:14:83:52:4c:ba:85:
                    8a:96:61:e2:f5:5e:85:95:04:de:19:d3:5f:78:be:
                    34:55:f7:18:27:b1:27:67:5b:29:11:35:de:05:5e:
                    bc:91:f5:34:34:97:11:64:6c:4a:cb:77:04:da:f7:
                    3d:95:15:cb:8d:d7:1f:06:26:f7:03:5d:06:40:3e:
                    c1:3b:d6:d0:44:98:8d:bc:13:18:8f:14:67:0e:93:
                    0b:a1:2e:bc:80:9a:5b:09:fe:cc:89:6d:33:d6:73:
                    99:40:90:b8:27:aa:87:c2:84:f1:f6:9c:84:fd:53:
                    58:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:18:4F:23:58:DD:B1:85:AD:CA:6D:40:EB:F5:B4:99:DE:4C:9C:B8
            X509v3 Authority Key Identifier:
                keyid:B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:81:cf:7c:f0:28:60:07:81:08:b4:fa:18:f9:dc:13:ba:31:
         6a:98:37:ff:87:4d:e4:48:15:5e:0f:95:ff:28:1f:a8:6f:5c:
         a6:c5:e9:fd:e1:15:95:1d:a6:78:8d:14:9b:89:83:fe:7e:c3:
         14:8d:4b:f6:2b:5c:0c:8d:1f:00:29:1c:57:80:6a:fb:20:ef:
         a9:f9:41:cc:88:6b:64:70:d8:73:78:7f:df:f1:db:dc:f6:d2:
         9c:b0:4f:80:06:e2:e9:92:32:69:bd:4b:5a:6b:05:4f:c6:3e:
         9b:e0:6d:1f:94:e4:74:1d:d2:3b:a2:59:b5:a3:29:ad:52:f9:
         30:c8:b7:78:b2:77:da:09:fa:89:9e:25:da:21:a0:65:eb:0e:
         78:61:c6:36:71:da:d6:c0:89:c7:85:38:ef:85:49:40:0a:b6:
         e0:67:e7:02:a9:57:45:c9:b1:23:3a:6a:25:06:59:45:bc:b5:
         74:8e:c4:59:90:12:d4:b8:b3:0b:32:15:83:57:7e:47:f7:80:
         ff:ce:78:7b:fd:e8:b0:ea:25:eb:34:b2:78:61:86:b1:cc:f8:
         32:93:35:bb:28:2a:0c:75:3f:13:0f:02:4a:cd:03:7d:59:4c:
         5f:f0:7c:e3:59:2e:f4:94:1a:75:2d:12:54:8d:62:4b:ae:98:
         32:64:07:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:38 2026 by rpki-client