Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft
File:                     CygSqDkChy-62yLLBA3ssw_v9Ww.mft (raw, json)
Hash identifier:          1sSVsUK7HtN3u8dY1E4fzXZOMnmVstwLCCM1X5OWhUY=
Subject key identifier:   61:45:BF:FE:21:DC:23:19:75:D3:2F:F9:46:7B:28:44:1B:86:12:68
Authority key identifier: 0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C
Certificate issuer:       /CN=A91EAE0A/serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C
Certificate serial:       0155
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft
Manifest number:          0151
Signing time:             Wed 23 Sep 2026 05:05:10 +0000
Manifest this update:     Wed 23 Sep 2026 05:05:10 +0000
Manifest next update:     Wed 30 Sep 2026 05:05:10 +0000
Files and hashes:         1: CygSqDkChy-62yLLBA3ssw_v9Ww.crl (hash: QPlqeWni6kM45Ji5LYemlCal1PDEbBkpjnCfhpAVnSs=)
                          2: 54D1F77EB84611EFB170E471C4F9AE02.roa (hash: hqd1IWEEQ15NpnicK1cKDed4buwLUEv1gnSNh0RZ/T4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:05:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE0A, serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C
        Validity
            Not Before: Sep 23 05:05:10 2026 GMT
            Not After : Sep 30 05:05:10 2026 GMT
        Subject: CN=6ab35e06-ce8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:85:5e:58:c8:ec:a8:8d:1d:28:e1:b4:bd:9a:
                    24:8d:78:7d:be:a3:69:56:37:e7:ce:4c:b7:9a:4d:
                    ec:95:e6:05:7f:11:bc:74:e7:d4:c8:11:5b:b7:ad:
                    54:7d:09:f2:06:d6:f5:eb:fd:df:82:71:33:7e:f1:
                    6a:f0:5e:8f:98:1b:e1:8b:38:cc:05:60:03:cc:23:
                    b0:5c:34:f5:24:30:34:34:0c:4d:ff:29:ac:7c:93:
                    ee:2a:9e:d5:62:6e:3a:db:41:17:2d:f9:e6:34:7b:
                    c6:cd:20:ae:92:c4:65:4f:c5:6f:c8:4a:96:e4:dc:
                    64:10:ca:7f:0e:3e:9c:c6:1d:48:9a:0d:9c:d3:5b:
                    9a:7e:82:a1:a0:71:17:48:85:b6:b7:a5:e5:37:94:
                    e8:79:2c:ff:4a:e6:ee:dd:df:65:75:cb:c5:c1:8d:
                    22:3d:d9:9b:9b:41:bc:e2:59:62:eb:a6:aa:ed:f8:
                    01:08:0e:cb:d1:25:2a:21:1a:0f:98:0a:da:5b:6e:
                    91:e7:aa:be:ef:e4:a0:26:49:49:8a:4d:39:c2:06:
                    41:27:99:e4:75:be:4a:e8:d1:0a:f0:ad:be:41:23:
                    b9:58:47:20:21:08:47:85:9a:de:e5:d8:ec:bc:59:
                    36:ca:0d:b2:1c:8e:7c:f0:e3:b7:e3:61:a8:6b:0f:
                    c7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:45:BF:FE:21:DC:23:19:75:D3:2F:F9:46:7B:28:44:1B:86:12:68
            X509v3 Authority Key Identifier:
                keyid:0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:58:35:c1:90:e5:1c:80:33:50:e5:d2:a5:b5:90:fa:9d:3e:
         55:4a:c7:84:4d:60:3d:12:f0:2c:63:50:f0:51:57:7a:2d:8c:
         e1:11:1b:ca:ba:aa:ff:17:bc:8f:89:b2:1d:6d:5a:bd:8c:df:
         7c:d6:1e:c4:37:15:30:3d:83:c1:29:ac:b5:bf:08:28:71:ad:
         57:bb:f2:af:f0:c6:a6:b1:8a:23:d1:e3:6d:b0:6e:10:b5:21:
         f8:e8:0e:4e:ca:f8:96:22:bc:ff:35:13:b7:62:45:89:57:c2:
         d5:42:a9:ba:66:77:4f:5e:7e:8b:f0:3a:7f:22:5c:45:5a:d5:
         ac:33:72:5d:9c:0e:45:37:16:e8:e6:94:75:f1:ff:67:7b:cb:
         c1:35:1f:b2:8b:8a:39:cb:2f:8f:80:0c:eb:87:98:2b:29:0f:
         85:92:86:21:23:5b:e4:45:09:54:e9:b1:3f:74:a0:d6:b5:8e:
         a8:21:b2:e3:08:4e:19:b6:4d:bd:69:70:32:a0:e9:da:81:68:
         15:30:02:af:f0:a6:1b:5d:51:4b:12:bf:d1:c4:fc:1f:0f:81:
         12:3d:b5:09:91:9f:b8:a2:ee:7a:32:20:be:a6:b4:de:6b:19:
         38:af:62:74:aa:a2:27:e6:50:b3:9e:70:b4:3e:8c:9b:c3:ca:
         f9:71:5d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:51:06 2026 by rpki-client