Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft
File:                     CygSqDkChy-62yLLBA3ssw_v9Ww.mft (raw, json)
Hash identifier:          nY4N2ByINkNzuC/72MjNrAbU+27EiIxdJMJf4CYXHyY=
Subject key identifier:   AD:71:74:14:57:F6:F4:56:37:ED:ED:21:15:CF:4A:95:DC:77:C5:71
Authority key identifier: 0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C
Certificate issuer:       /CN=A91EAE0A/serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft
Manifest number:          A1
Signing time:             Sun 19 Oct 2025 09:31:52 +0000
Manifest this update:     Sun 19 Oct 2025 09:31:52 +0000
Manifest next update:     Sun 26 Oct 2025 09:31:51 +0000
Files and hashes:         1: CygSqDkChy-62yLLBA3ssw_v9Ww.crl (hash: LsdiOc0AQLlpp0iz/YabMqmShYaouahnW6CeuNSwPVs=)
                          2: 54D1F77EB84611EFB170E471C4F9AE02.roa (hash: +biwJF0qQl4PAaHILuta0LOfQdS1SMB1VEPi0AmtR6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE0A, serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C
        Validity
            Not Before: Oct 19 09:31:52 2025 GMT
            Not After : Oct 26 09:31:51 2025 GMT
        Subject: CN=68f4b008-6974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9f:a0:d9:32:db:7a:67:1f:53:df:f4:a1:b0:
                    a2:27:3c:30:26:fa:cf:e6:ce:93:f1:ef:6f:7a:3e:
                    13:26:f3:e7:51:07:c9:2c:ed:66:59:2b:76:b5:59:
                    a0:65:32:2f:d0:ef:d3:ee:be:1a:24:b3:16:92:34:
                    87:ca:be:0e:4b:f8:6c:eb:d4:43:35:e9:1a:1d:b4:
                    3a:bd:9c:81:4e:8e:e3:98:0e:28:ac:ca:55:1c:1a:
                    cd:37:ef:8f:0e:d0:8d:a9:11:c8:c3:bf:bd:4b:5f:
                    48:53:58:ba:d1:6b:d4:9c:a5:00:86:21:86:71:1a:
                    37:98:91:16:31:9e:06:7a:b6:5c:0e:c3:dc:61:72:
                    ef:c6:98:d2:4b:0f:f3:82:71:69:58:e3:4c:f5:2a:
                    e8:18:45:6a:08:a5:10:32:d7:ae:2f:77:6f:3b:90:
                    85:07:b4:d4:30:83:f9:58:6f:10:b8:4f:78:27:d7:
                    72:d2:94:14:7a:75:fd:67:11:ca:c5:da:c7:00:bc:
                    1a:13:ea:3b:53:61:39:ab:8e:42:ad:63:68:57:60:
                    86:7e:56:2f:1c:8c:7e:9d:1e:0f:3e:2f:d8:bb:5d:
                    ba:00:2b:d8:29:4e:b5:05:d6:59:05:d0:ad:4d:56:
                    ae:fe:e6:cd:07:ca:8d:48:c3:6c:b0:c7:38:b9:de:
                    1e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:71:74:14:57:F6:F4:56:37:ED:ED:21:15:CF:4A:95:DC:77:C5:71
            X509v3 Authority Key Identifier:
                keyid:0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d0:46:72:2a:27:d2:e6:92:85:27:d3:b5:5d:b2:02:26:66:
         ee:6f:c7:16:55:b7:28:8b:7b:89:b7:7c:a3:31:5b:1d:d6:91:
         67:f4:0e:4b:42:4c:6c:9b:94:b7:63:22:c4:1f:8d:35:58:65:
         0e:d6:73:26:d4:a3:3a:ff:db:b1:90:ce:74:4c:b3:3c:0c:f7:
         b3:04:d8:7c:d0:78:f3:2a:c0:25:0a:c6:d8:75:1d:c8:60:8e:
         4a:5e:a5:b4:81:3e:5c:0e:aa:f6:35:64:25:84:2c:ed:c8:1e:
         38:49:d3:91:46:d9:fc:90:39:f3:a4:48:c2:4f:ce:f8:9d:5d:
         65:01:66:8e:5c:0e:00:fc:b1:41:9d:25:c2:6b:1b:4a:3b:cd:
         87:5e:ac:3c:a0:43:c7:f9:8c:dd:23:44:5e:64:3e:d6:ee:8f:
         a4:94:8f:e1:57:a8:02:10:1e:c4:dd:33:6d:91:f3:d5:66:3b:
         13:4f:bb:95:dd:60:95:67:a7:db:01:eb:fd:bd:60:55:d1:4d:
         9d:b5:81:84:61:54:c2:47:f5:e9:f2:2c:7f:56:f1:35:b1:f9:
         4c:41:7d:a1:81:b1:9d:c8:7a:2b:72:5f:2c:d1:2f:85:f9:e8:
         7d:8d:bd:3d:ff:4a:46:d7:50:c3:e9:2c:f3:27:23:32:be:54:
         71:79:8b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:56 2025 by rpki-client