Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
File:                     tsp04BddZ-Guvoa_44xciY8mK4w.mft (raw, json)
Hash identifier:          cdVp7UTGNscC5VFMeQg0K2/iIe8CKeYd7rEu5Dnuan0=
Subject key identifier:   FA:9F:46:8E:81:6D:67:68:97:3E:63:DA:54:28:AA:6B:54:47:67:01
Authority key identifier: B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C
Certificate issuer:       /CN=A919EA40/serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
Certificate serial:       02D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
Manifest number:          02C0
Signing time:             Wed 23 Sep 2026 01:12:16 +0000
Manifest this update:     Wed 23 Sep 2026 01:12:16 +0000
Manifest next update:     Wed 30 Sep 2026 01:12:16 +0000
Files and hashes:         1: tsp04BddZ-Guvoa_44xciY8mK4w.crl (hash: nFNvRtIDSf3U4W7qFolbVCi5w9XykpkhnhmBu3oJXvQ=)
                          2: 158B72F480FB11ED9B35954DC4F9AE02.roa (hash: vCFJH0y2zLT6RtNl1fKrvOFGF6otZx/dSySN5y76muE=)
                          3: 1627927480FB11ED9B35954DC4F9AE02.roa (hash: JGThLscl6gYWty7onPVj55tcNOzgZj9wzjYyxf+XyoM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl
                          rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724 (0x2d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EA40, serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
        Validity
            Not Before: Sep 23 01:12:16 2026 GMT
            Not After : Sep 30 01:12:16 2026 GMT
        Subject: CN=6ab32770-023e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5f:2d:c1:06:98:9c:b6:99:2d:2d:e2:ae:c0:
                    94:45:a8:18:06:2d:d9:3a:dc:07:68:19:5b:f4:92:
                    ee:43:8e:48:51:6a:b1:9b:de:d2:2f:9e:ba:7e:81:
                    40:bf:6a:e2:54:77:e9:6a:1a:2f:86:08:82:30:1e:
                    cf:ff:7a:11:6e:b4:11:8b:31:4a:cc:24:81:49:7b:
                    e9:bd:c1:ef:1b:de:ba:2b:af:a2:2d:57:d3:50:e9:
                    8b:eb:10:d8:27:d7:e3:c4:72:9b:5e:c1:01:fc:5c:
                    9f:23:81:fc:58:c5:e4:47:53:65:13:52:bc:47:04:
                    86:6e:24:f6:a4:ee:2f:77:b5:45:59:26:f6:8d:66:
                    ec:eb:81:bb:83:3f:91:58:23:ee:9d:3f:20:25:af:
                    10:ba:22:34:18:67:1b:ac:96:7c:73:6f:0f:e0:ff:
                    32:1c:57:28:b6:c7:8b:43:4b:e8:7c:5c:e0:53:ee:
                    d4:d5:2b:34:2e:b1:41:77:e5:36:d2:b2:1b:9c:29:
                    4a:b7:ba:ef:cf:5f:b8:60:6c:d7:8c:a5:25:a0:67:
                    fe:e5:34:e2:83:06:d8:5b:c3:7a:3c:d4:15:9b:df:
                    0e:ea:95:53:46:46:0a:14:2c:40:2f:db:25:d6:09:
                    41:89:28:dc:e5:b1:3d:0d:d2:b5:f4:fe:48:0e:5a:
                    b9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9F:46:8E:81:6D:67:68:97:3E:63:DA:54:28:AA:6B:54:47:67:01
            X509v3 Authority Key Identifier:
                keyid:B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:bf:b4:e4:ac:75:f4:16:16:0f:9d:2d:85:7e:18:0a:b0:91:
         f1:39:62:b8:08:ff:fc:3a:d3:95:7b:47:82:db:65:b6:ff:27:
         83:c1:1b:48:e8:ff:da:27:ba:98:70:58:7f:d4:78:9c:44:6b:
         7c:df:65:ba:2b:a6:bd:ae:b0:45:37:30:b3:6d:c5:c4:6d:ef:
         f4:00:ad:df:80:03:1d:aa:3a:b2:39:a5:44:57:8d:1f:c3:84:
         ee:65:84:50:4b:fd:b8:53:54:1f:da:b8:90:e8:bb:58:0c:58:
         10:50:e8:9c:5e:af:a4:b3:d1:88:a9:ad:98:34:a6:ca:fd:71:
         ab:20:82:80:ac:f5:d6:0f:28:4f:28:89:b4:46:47:4b:c8:4f:
         39:d4:7a:20:38:f7:b2:e1:18:39:af:be:d0:db:d8:71:ca:4d:
         d5:40:91:ab:d7:60:f4:5e:f6:37:b2:bc:ec:23:36:b1:93:9c:
         d4:e0:8c:b0:ed:e9:e9:55:80:9c:90:35:d1:74:7a:9e:b0:ee:
         d2:6b:b1:34:d7:89:fa:b3:bc:cb:4f:b0:1c:ef:41:00:e1:a3:
         ad:03:65:c5:5b:52:c4:bd:c5:c4:30:4f:00:ff:de:4e:1e:a9:
         5c:3e:98:51:8f:b3:50:c3:e0:96:0f:30:ca:73:34:de:a3:cb:
         8e:aa:25:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVBNDAxMTAvBgNVBAUTKEI2Q0E3NEUwMTc1RDY3RTFBRUJFODZCRkUzOEM1Qzg5
OEYyNjJCOEMwHhcNMjYwOTIzMDExMjE2WhcNMjYwOTMwMDExMjE2WjAYMRYwFAYD
VQQDEw02YWIzMjc3MC0wMjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp18twQaYnLaZLS3irsCURagYBi3ZOtwHaBlb9JLuQ45IUWqxm97SL566foFA
v2riVHfpahovhgiCMB7P/3oRbrQRizFKzCSBSXvpvcHvG966K6+iLVfTUOmL6xDY
J9fjxHKbXsEB/FyfI4H8WMXkR1NlE1K8RwSGbiT2pO4vd7VFWSb2jWbs64G7gz+R
WCPunT8gJa8QuiI0GGcbrJZ8c28P4P8yHFcotseLQ0vofFzgU+7U1Ss0LrFBd+U2
0rIbnClKt7rvz1+4YGzXjKUloGf+5TTigwbYW8N6PNQVm98O6pVTRkYKFCxAL9sl
1glBiSjc5bE9DdK19P5IDlq57QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPqfRo6B
bWdolz5j2lQoqmtUR2cBMB8GA1UdIwQYMBaAFLbKdOAXXWfhrr6Gv+OMXImPJiuM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUE0MC80OTA2RjJBODgw
RjAxMUVEQUFFNDhGN0JDNEY5QUUwMi90c3AwNEJkZFotR3V2b2FfNDR4Y2lZOG1L
NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3RzcDA0QmRkWi1HdXZvYV80NHhjaVk4bUs0dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUE0MC80OTA2RjJBODgwRjAxMUVEQUFFNDhGN0JDNEY5QUUwMi90c3AwNEJkZFot
R3V2b2FfNDR4Y2lZOG1LNHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApb+05Kx19BYWD50thX4YCrCR8TliuAj//DrTlXtHgttltv8ng8EbSOj/2ie6
mHBYf9R4nERrfN9luiumva6wRTcws23FxG3v9ACt34ADHao6sjmlRFeNH8OE7mWE
UEv9uFNUH9q4kOi7WAxYEFDonF6vpLPRiKmtmDSmyv1xqyCCgKz11g8oTyiJtEZH
S8hPOdR6IDj3suEYOa++0NvYccpN1UCRq9dg9F72N7K87CM2sZOc1OCMsO3p6VWA
nJA10XR6nrDu0muxNNeJ+rO8y0+wHO9BAOGjrQNlxVtSxL3FxDBPAP/eTh6pXD6Y
UY+zUMPglg8wynM03qPLjqol5A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:03:40 2026 by rpki-client