Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
File:                     9UTm_uoP5rnfex2j2aWS_Lispik.mft (raw, json)
Hash identifier:          iB5BJdj2JovKMrLIrGrMFepteR/Kg5Ayc0N6EskI3go=
Subject key identifier:   9C:A0:90:69:32:98:39:1B:7B:76:D8:FA:B2:0E:A3:CA:15:84:B3:81
Authority key identifier: F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29
Certificate issuer:       /CN=A91DD55B/serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629
Certificate serial:       022B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
Manifest number:          0225
Signing time:             Sat 19 Sep 2026 02:51:52 +0000
Manifest this update:     Sat 19 Sep 2026 02:51:52 +0000
Manifest next update:     Sat 26 Sep 2026 02:51:52 +0000
Files and hashes:         1: 9UTm_uoP5rnfex2j2aWS_Lispik.crl (hash: 7Pw/NL/gY+MjwzXPqeMiQq3wH+eSMnYMJISBLw5riyk=)
                          2: 6C3D2A826D7911EEBA9F0F7AC4F9AE02.roa (hash: 8cmE8F4UCrlxdeOGd34FNofKondX/VjcSsTipjEaDj4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl
                          rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD55B, serialNumber=F544E6FEEA0FE6B9DF7B1DA3D9A592FCB8ACA629
        Validity
            Not Before: Sep 19 02:51:52 2026 GMT
            Not After : Sep 26 02:51:52 2026 GMT
        Subject: CN=6aadf8c8-ba2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:26:b2:f9:f1:5c:93:04:8b:68:1b:57:00:56:
                    d1:c0:16:50:c4:5d:da:bf:21:b5:31:5d:e1:40:35:
                    70:d8:8f:0e:20:4a:f0:22:f6:04:6e:20:71:cb:1c:
                    7b:aa:aa:ab:a6:49:d1:57:c6:3a:75:cb:c0:f1:8c:
                    eb:57:65:f7:1e:1f:94:05:64:3a:9a:1f:63:31:e7:
                    e1:35:13:2e:a4:54:0f:33:16:8d:83:bf:2d:6c:a8:
                    22:d2:f6:ce:f7:e7:d0:5a:dc:f1:5c:1a:42:01:68:
                    95:77:69:9f:10:d5:5e:75:38:23:06:1b:aa:a2:9f:
                    62:5c:93:c5:23:47:35:98:12:f5:55:3d:4a:c4:b7:
                    ac:b8:68:5a:e6:f4:c6:31:d6:94:08:f9:2d:ba:b4:
                    de:85:58:01:6d:3f:ea:29:10:7a:f1:17:c9:b0:76:
                    73:e6:60:00:f0:e9:af:a5:96:2a:de:3a:f0:e1:47:
                    10:98:b7:6d:eb:f6:3f:0a:2f:f6:c5:76:f0:87:76:
                    60:fa:ec:6c:28:81:b2:ed:b6:65:d9:5f:cb:b5:a2:
                    d7:40:b8:43:90:42:55:c0:81:0f:97:81:56:ec:2e:
                    d3:bf:c4:42:52:a2:ef:d7:40:68:a2:b0:03:ea:15:
                    84:86:62:54:09:f8:6c:4a:e1:7b:26:80:08:2a:c7:
                    81:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A0:90:69:32:98:39:1B:7B:76:D8:FA:B2:0E:A3:CA:15:84:B3:81
            X509v3 Authority Key Identifier:
                keyid:F5:44:E6:FE:EA:0F:E6:B9:DF:7B:1D:A3:D9:A5:92:FC:B8:AC:A6:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UTm_uoP5rnfex2j2aWS_Lispik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD55B/8F4349C86D7711EE83554E74C4F9AE02/9UTm_uoP5rnfex2j2aWS_Lispik.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d3:cc:0d:4d:1a:3d:51:64:02:4b:07:90:af:81:af:a3:52:
         85:d1:f5:03:1b:0e:bb:67:76:56:9a:bc:c1:76:fe:5d:1a:1f:
         e0:d5:d6:8a:2b:07:0f:41:02:c6:b0:d2:62:2b:77:78:dc:44:
         54:ce:46:71:01:00:47:0c:e5:1e:fb:db:1b:2d:ec:88:c8:f5:
         28:8e:12:c4:f3:4c:a4:03:9e:93:85:4a:8b:32:56:38:37:ec:
         21:c4:23:a2:6e:5b:a6:b9:96:46:dc:15:52:43:dd:b8:40:ad:
         b9:a2:98:59:74:ba:d6:cf:44:ef:2f:b0:55:46:d9:71:e8:bb:
         d9:84:81:95:e8:ec:54:e2:d3:9a:60:7e:40:5a:11:96:ec:d2:
         bc:5d:5a:d3:7f:7e:b0:c0:77:7f:00:3c:d7:fa:f7:da:ba:ea:
         13:f3:42:fa:ce:8d:f7:d1:74:61:7b:87:bd:9e:56:bc:f9:b1:
         79:57:b9:25:e7:e6:c1:5c:10:e2:69:e2:ad:60:04:1b:db:33:
         38:37:e8:b0:4b:35:9d:f0:00:8d:86:1c:be:47:2c:c1:b6:fc:
         7a:ce:26:85:77:2b:cd:42:41:1e:e1:a1:0c:fe:02:a7:7f:a5:
         6b:5b:b9:40:ef:09:47:c5:b1:f5:77:35:ca:1e:cf:42:fa:7a:
         7e:3c:8d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:05:44 2026 by rpki-client