Manifest

$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
File:                     459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft (raw, json)
Hash identifier:          2/ZAOPpQbUggi+3mtkQsm8GQaePcml2plCwNUWfFsOY=
Subject key identifier:   75:F4:83:F0:6A:51:4A:BB:22:35:AB:AA:27:85:47:93:F2:59:C1:71
Authority key identifier: 45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F
Certificate issuer:       /CN=A91F56750000/serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
Certificate serial:       135EE61AFADACF2FC974EA819171DBD2D53D7C75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
Subject info access:      rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
Manifest number:          02A1
Signing time:             Thu 16 Apr 2026 12:44:13 +0000
Manifest this update:     Thu 16 Apr 2026 12:39:13 +0000
Manifest next update:     Fri 17 Apr 2026 16:23:13 +0000
Files and hashes:         1: 3130332e3135302e3137322e302f32332d3234203d3e203338303038.roa (hash: IC14R/7PisX2xUgxvpoOXBZj7EziWG1xk34G0Uwi2U4=)
                          2: 459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl (hash: ielpj6MAuaG6jlePVfQvzEvKpTEA3yXxwlbPpcht9AI=)
                          3: 323430313a32303a313333303a3a2f34342d3436203d3e2034383432.roa (hash: O1Qc6NM/hedKx5n8P2TcJKymQoYIgoGcEleUexrHAa4=)
                          4: 323430313a32303a3a2f33322d3430203d3e2034383432.roa (hash: r7XF1F6usoHLVxdY4PL0ijZQoAdAO6Q7O9MythfN5DU=)
                          5: 3130332e3135302e3137322e302f32332d3234203d3e2034383432.roa (hash: UZ3HfpRoFPwrSlLQjUa+JXwDUWjdmwDKW3oepzOiXUA=)
Validation:               OK
Signature path:           rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl
                          rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 16:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5e:e6:1a:fa:da:cf:2f:c9:74:ea:81:91:71:db:d2:d5:3d:7c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F56750000, serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
        Validity
            Not Before: Apr 16 12:39:13 2026 GMT
            Not After : Apr 17 16:23:13 2026 GMT
        Subject: CN=75F483F06A514ABB2235ABAA27854793F259C171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:f6:e5:ba:58:0b:58:4d:3b:8a:4b:bc:1e:
                    c9:f2:74:69:aa:06:8c:dd:ac:9a:16:30:6a:25:14:
                    49:0f:8d:40:c0:02:be:ac:cf:e8:ca:e5:11:57:7f:
                    4c:df:89:91:a8:14:98:06:0c:a5:0c:b3:c2:88:ea:
                    43:21:51:22:a1:5e:30:de:e3:6c:b0:84:01:6b:41:
                    c4:45:f7:c4:cd:f8:1a:08:e7:59:0e:cc:fe:a2:d8:
                    35:1e:04:1c:bb:dc:82:df:f9:7d:b9:0a:ee:fe:14:
                    1f:89:8f:59:9e:a8:26:f9:92:89:40:83:ad:8b:1c:
                    99:95:77:2e:a9:52:7d:b4:7a:9b:7e:bf:94:56:6a:
                    37:dc:2e:fe:5e:b2:0e:f8:f7:94:91:5e:e7:e7:d3:
                    99:7f:1f:f5:a3:64:d9:54:a9:c9:bb:4b:43:44:b1:
                    85:3e:b6:ca:52:be:ab:a4:2f:95:3e:29:c5:9a:9e:
                    aa:1b:4a:4a:0f:4d:2f:48:87:87:19:4e:b6:2f:c1:
                    15:f6:01:c2:40:e5:e5:cd:df:ee:f0:98:9a:81:21:
                    30:2b:81:df:08:74:1f:1c:e6:ce:55:7a:41:36:a0:
                    c5:c1:4d:e0:14:fc:fe:62:d8:81:fe:3d:d6:71:ef:
                    65:fd:57:52:8d:72:9e:99:49:be:7f:8a:c4:5c:fa:
                    52:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F4:83:F0:6A:51:4A:BB:22:35:AB:AA:27:85:47:93:F2:59:C1:71
            X509v3 Authority Key Identifier:
                keyid:45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:ab:16:71:8e:80:22:ce:a9:d2:8a:35:43:81:06:51:73:06:
         5c:2c:2d:57:79:87:f5:21:b2:bb:4c:9e:4c:ed:22:3e:ea:87:
         08:4f:9d:29:64:43:f2:b7:a0:ec:c2:78:f8:6c:42:75:b2:66:
         ac:90:c4:3d:ca:d5:c8:26:4e:b9:56:33:97:d9:a8:95:c7:b2:
         68:94:d8:b7:24:68:4f:32:bf:25:89:c0:87:87:ec:ba:28:9d:
         ea:aa:c0:de:73:b8:55:c2:08:87:98:27:78:ba:d5:d8:57:01:
         2b:2e:95:4b:a8:1e:6c:cb:3a:42:1f:1d:f0:e4:ab:4d:2c:8c:
         77:39:e5:50:23:7a:79:9e:22:64:99:80:66:03:24:f8:b1:74:
         f5:5f:73:e5:bd:29:dc:74:06:58:68:82:31:84:6c:35:dd:d7:
         ce:fe:12:c8:19:d6:76:7b:96:4f:a8:2f:e6:ef:c9:53:e5:be:
         5a:9f:68:4b:d8:6d:ee:fd:00:ba:64:7d:3d:96:2e:3c:18:2a:
         6f:96:30:4c:70:97:cb:b3:75:c4:ba:e5:b4:75:51:ea:15:b8:
         32:f3:ec:70:2c:bf:83:a8:ed:7e:df:24:68:e7:a5:42:20:11:
         ae:e7:d1:81:53:50:54:16:f1:c6:18:ed:8c:e5:04:ac:f1:7e:
         bf:40:fe:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:04 2026 by rpki-client