Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
File:                     9UTm_uoP5rnfex2j2aWS_Lispik.mft (raw, json)
Hash identifier:          XT68y3+4yvuYXa3924HAxjYaUezkLKel079bqvOzZ8A=
Subject key identifier:   1F:F2:29:9C:6D:20:30:1E:A3:7C:A2:26:5D:F9:C8:3D:99:3C:61:9B
Authority key identifier: F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29
Certificate issuer:       /CN=A91DD55B/serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629
Certificate serial:       020D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
Manifest number:          0207
Signing time:             Thu 23 Jul 2026 04:21:04 +0000
Manifest this update:     Thu 23 Jul 2026 04:21:03 +0000
Manifest next update:     Thu 30 Jul 2026 04:21:03 +0000
Files and hashes:         1: 9UTm_uoP5rnfex2j2aWS_Lispik.crl (hash: bOkSA236LoKBug4nnQDQ4V3X3OqSSXa7pVQEt0no/hI=)
                          2: 6C3D2A826D7911EEBA9F0F7AC4F9AE02.roa (hash: 8cmE8F4UCrlxdeOGd34FNofKondX/VjcSsTipjEaDj4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl
                          rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:21:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD55B, serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629
        Validity
            Not Before: Jul 23 04:21:03 2026 GMT
            Not After : Jul 30 04:21:03 2026 GMT
        Subject: CN=6a6196b0-9d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c4:c5:53:8c:cc:c4:c9:79:4f:cd:78:f8:a3:
                    63:2d:3c:aa:01:94:3d:9a:f3:4b:a2:5e:99:6f:87:
                    b1:a3:6d:50:a3:84:b1:c6:7e:ba:69:e0:0f:dc:ec:
                    c9:ac:e3:a9:31:05:4d:77:98:2d:e5:0a:ed:63:05:
                    a3:d3:58:0f:e8:3a:cb:77:a8:98:36:36:1a:e8:a6:
                    43:0b:0d:8c:9b:29:ed:e8:b3:7c:73:85:3c:49:4c:
                    9d:d4:b1:60:63:e5:d8:f3:65:ed:a7:8f:05:ed:d8:
                    ee:c6:cb:a0:6c:84:b2:11:61:ff:80:78:9b:f7:4c:
                    25:a0:ce:0f:66:88:90:76:79:3f:69:28:65:02:fc:
                    9f:bb:cc:0c:b4:fc:30:47:c0:3a:7a:e0:de:0f:d8:
                    8f:65:0a:bb:45:72:3a:60:ad:a1:f8:1f:b4:59:9c:
                    0d:91:49:de:08:a7:ea:0a:ef:d2:ae:57:8f:d6:a8:
                    8d:31:95:9a:ca:97:0f:11:fd:dd:fb:9e:b4:57:e6:
                    d8:3e:de:55:27:98:b6:b8:f6:39:25:2f:1e:29:44:
                    68:d0:c5:d7:e7:09:fc:f7:a0:ac:b0:69:e5:8b:d5:
                    ac:4c:f1:73:c7:53:92:f1:42:be:cd:52:5c:1b:0e:
                    84:85:de:d7:33:3f:36:42:96:8c:90:e3:f6:0c:9f:
                    ae:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F2:29:9C:6D:20:30:1E:A3:7C:A2:26:5D:F9:C8:3D:99:3C:61:9B
            X509v3 Authority Key Identifier:
                keyid:F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:52:e8:1e:5c:fc:00:10:5f:6b:8e:d0:da:18:09:63:99:cc:
         4e:fe:bc:d5:d0:3b:b9:df:06:77:5e:26:19:b5:01:b3:b8:0f:
         fe:a1:fd:2b:2d:a6:a0:c2:e5:e1:0e:c6:82:36:a4:18:0a:80:
         cc:47:3a:87:e0:0d:e8:fb:06:d1:85:32:38:cc:66:93:e0:92:
         ef:6b:05:df:83:73:97:15:44:82:75:1a:ff:08:bc:d4:14:6d:
         9b:88:21:c7:78:bb:22:86:34:da:55:5a:23:95:e2:92:2e:bf:
         36:b9:bc:b1:29:30:19:47:e6:fd:a4:5c:bb:5a:9b:f2:4b:dc:
         c1:f3:03:70:5b:2a:dc:3b:c0:43:e8:d6:a8:5d:02:e2:ba:a7:
         05:93:7a:e8:ec:23:37:5f:92:fc:4b:60:8b:31:86:7e:1d:ec:
         b5:a4:ff:48:3f:6c:a5:03:97:c6:16:53:4b:e6:1b:16:5f:8f:
         09:d0:0c:c6:8f:ed:b5:0e:31:95:7d:4c:fa:66:08:5e:62:95:
         69:89:23:a2:39:62:3c:b8:44:c5:49:81:d2:d5:0a:22:a4:2e:
         be:5d:2a:9c:24:7b:61:7a:9a:7e:1d:61:92:7e:ae:43:16:6d:
         ec:c9:70:c1:60:7b:3d:26:cf:54:91:a8:a6:b9:94:73:93:f4:
         e9:78:3f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:46:08 2026 by rpki-client