Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
File:                     9UTm_uoP5rnfex2j2aWS_Lispik.mft (raw, json)
Hash identifier:          5/JzntEK1e3EzO6g6PZ+/USFyJmQZ9ihePfS9C9Dtjk=
Subject key identifier:   30:76:B7:AB:94:1C:C0:6B:BE:52:47:0E:52:6A:75:7C:1B:17:8F:7C
Authority key identifier: F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29
Certificate issuer:       /CN=A91DD55B/serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629
Certificate serial:       0127
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
Manifest number:          0124
Signing time:             Mon 05 May 2025 03:35:20 +0000
Manifest this update:     Mon 05 May 2025 03:35:19 +0000
Manifest next update:     Mon 12 May 2025 03:35:19 +0000
Files and hashes:         1: 9UTm_uoP5rnfex2j2aWS_Lispik.crl (hash: E5vejV3DIsnQYByTIbc96HDv/VDSeRkjGVSfTevyzrU=)
                          2: 6C3D2A826D7911EEBA9F0F7AC4F9AE02.roa (hash: bDVD8hPvc8iZ5B+yKX28yhd7xbk9dGO0omZHroVfOq0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl
                          rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 May 2025 03:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD55B, serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629
        Validity
            Not Before: May  5 03:35:19 2025 GMT
            Not After : May 12 03:35:19 2025 GMT
        Subject: CN=681831f8-4111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:91:32:7b:a7:33:70:b3:3a:a3:cb:96:1b:
                    f4:4a:16:f2:e8:66:65:c7:b9:72:3c:e3:84:e6:7d:
                    8b:11:1e:72:19:76:41:33:11:0e:e4:ff:c1:0d:bc:
                    3f:5c:4d:4c:b0:7e:b5:4a:1a:38:7d:d0:96:e3:58:
                    e9:6e:77:1e:5e:d4:1e:d7:89:62:96:c7:2b:0c:9f:
                    d8:d3:69:8a:a6:a4:bc:21:d4:16:db:a0:be:ec:0a:
                    74:85:52:51:e5:27:c5:07:73:ef:c0:d2:11:05:0f:
                    2d:e6:d1:cc:73:c5:bf:29:7c:eb:66:f4:d4:80:ed:
                    3c:8e:dd:bd:08:38:24:8a:ae:d6:a0:84:9f:45:2e:
                    88:59:64:75:dc:43:93:10:1f:fc:d7:06:93:09:4c:
                    5d:30:c4:98:16:f2:58:ac:bc:26:5f:41:5d:b7:a9:
                    35:32:70:8b:ef:cd:c8:99:93:c4:68:1b:07:60:15:
                    1f:c0:c5:1b:b9:4f:39:cd:90:bd:52:82:8f:b2:b2:
                    27:08:d7:fe:bd:df:af:33:12:5a:5e:36:2b:d5:3c:
                    f1:11:ab:98:32:da:65:8d:c3:d8:fb:04:b6:0a:8d:
                    d4:5e:b4:ea:26:ca:22:b0:80:6c:9b:ab:26:de:a3:
                    35:00:2c:83:50:b3:87:b2:19:22:41:49:4e:ee:8b:
                    96:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:76:B7:AB:94:1C:C0:6B:BE:52:47:0E:52:6A:75:7C:1B:17:8F:7C
            X509v3 Authority Key Identifier:
                keyid:F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:2d:a3:a5:e9:42:c0:ff:c4:23:a9:cb:65:a5:d2:a6:50:d1:
         8e:84:61:07:f7:0a:0c:7e:a8:aa:d0:a5:ba:91:72:44:c7:ed:
         8d:09:45:18:d7:2f:2d:b0:a4:83:58:e0:2a:b5:b0:e5:a9:0b:
         92:99:aa:02:b4:4b:2b:d6:7d:d9:83:ad:07:69:f4:69:78:66:
         f2:3a:6e:64:ba:06:60:cc:26:42:76:92:3d:fb:a5:aa:8b:b6:
         67:bf:0e:9e:c6:a7:c7:87:4d:a3:05:e6:93:cc:44:d5:87:e4:
         08:7c:ce:c1:50:35:03:09:7d:1f:90:7c:5d:8b:c3:ea:31:d4:
         4a:8d:3b:b1:84:cb:5f:95:2c:6c:71:75:3a:02:45:88:58:a7:
         86:a9:ac:4a:ce:8c:3b:6e:20:eb:6b:63:01:ad:5d:f7:9c:39:
         4e:fc:1a:03:ec:f7:c8:c9:25:42:2e:f9:16:d0:78:05:be:46:
         98:c3:27:a1:2a:d8:82:32:20:57:46:4e:d4:af:4d:77:f4:1f:
         47:47:9f:48:ac:a5:70:40:54:a4:66:15:08:6c:c5:a7:6d:17:
         17:37:22:02:10:a7:23:72:ac:68:c9:ca:6f:77:b6:35:59:8c:
         3f:94:ab:e2:6e:d0:29:80:20:56:39:15:43:34:e8:b5:68:22:
         6d:0a:16:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:18:30 2025 by rpki-client