Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft
File:                     CygSqDkChy-62yLLBA3ssw_v9Ww.mft (raw, json)
Hash identifier:          gV+PjCcmswC09knAC+g8TZseueboyMDgWLr1cZxodiA=
Subject key identifier:   D4:18:0A:75:69:E7:8D:5D:EA:BF:01:0C:E0:81:1C:84:CB:70:81:E2
Authority key identifier: 0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C
Certificate issuer:       /CN=A91EAE0A/serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft
Manifest number:          7D
Signing time:             Sat 09 Aug 2025 07:13:20 +0000
Manifest this update:     Sat 09 Aug 2025 07:13:20 +0000
Manifest next update:     Sat 16 Aug 2025 07:13:20 +0000
Files and hashes:         1: CygSqDkChy-62yLLBA3ssw_v9Ww.crl (hash: L26x4JGTJsuGFWkKEpCRNdZnHL5HhXnG4U03JaC6zXs=)
                          2: 54D1F77EB84611EFB170E471C4F9AE02.roa (hash: +biwJF0qQl4PAaHILuta0LOfQdS1SMB1VEPi0AmtR6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE0A, serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C
        Validity
            Not Before: Aug  9 07:13:20 2025 GMT
            Not After : Aug 16 07:13:20 2025 GMT
        Subject: CN=6896f510-9b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:ad:25:7a:3e:e1:f9:28:53:d8:eb:c1:7d:
                    58:9e:35:e1:af:d8:b5:37:e5:bd:10:58:02:d3:af:
                    39:b9:a4:e6:d5:f8:a3:6b:e9:85:8d:f2:90:ce:64:
                    e6:4a:e3:0f:c6:5d:cd:72:78:e1:6b:9f:69:a0:0a:
                    fe:e1:e9:af:08:7b:f4:64:d5:50:5d:6d:68:90:6d:
                    ac:48:b6:e0:85:00:91:ea:18:56:16:04:db:47:4f:
                    d6:e8:41:f7:33:f4:32:96:d4:f9:83:d0:a5:eb:ef:
                    d3:d0:aa:5a:0b:41:3f:af:1f:ef:a0:c8:68:96:27:
                    ac:59:0d:a9:8b:24:85:bd:0a:3a:47:3d:5e:72:28:
                    2b:3c:4c:c4:be:84:7c:94:cb:75:83:5e:cc:b6:db:
                    f9:bb:13:2c:6e:da:ac:a4:99:d6:a0:e4:71:b5:8e:
                    16:42:7e:90:b9:88:e2:38:b4:70:7c:ed:d5:97:4e:
                    7f:fe:98:2a:6c:52:f3:65:55:b2:71:5d:e4:48:63:
                    40:0c:28:2d:3c:76:eb:6a:95:31:c1:b2:36:07:4d:
                    40:49:8b:03:6a:cb:04:7d:1f:da:63:cc:9f:1d:01:
                    6b:28:d8:d8:99:f2:64:04:4e:7a:f3:6a:80:24:82:
                    dc:4b:d4:36:07:e0:42:f5:22:dd:3e:c9:e6:5a:6f:
                    74:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:18:0A:75:69:E7:8D:5D:EA:BF:01:0C:E0:81:1C:84:CB:70:81:E2
            X509v3 Authority Key Identifier:
                keyid:0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c0:ee:30:df:0c:83:86:87:1e:75:9c:7b:cc:2a:00:e2:89:
         b4:ce:a3:4f:71:24:2c:5b:1d:6f:01:7b:b4:ff:fd:c1:b8:08:
         d8:1f:14:f0:65:60:5f:33:4c:72:b9:8b:f5:e8:56:c0:fc:a1:
         f7:b7:c9:38:c4:55:d9:de:fe:4c:41:20:56:ca:e6:8f:28:f4:
         fe:14:1e:f1:ee:36:5e:af:7c:0f:21:9c:b1:0e:09:3a:49:e8:
         63:34:8a:e9:8f:e5:04:5f:c7:4c:f9:81:a9:61:51:9f:cd:1d:
         16:e0:9f:76:7a:cb:6b:6e:32:7e:36:ef:c4:95:8c:2e:ca:bb:
         2d:0a:ed:0f:16:ef:bc:0f:ac:fd:c1:5e:5a:4c:2a:b6:64:17:
         60:34:93:34:09:91:58:af:6f:d6:0d:28:1e:47:08:e5:36:62:
         72:36:cd:6b:df:f9:57:95:a6:88:70:67:23:07:8a:42:bc:89:
         fb:63:a8:f9:2a:86:c9:a4:e9:7c:7f:e6:3d:65:80:7a:ad:d6:
         03:67:e3:6d:a4:1a:51:86:5e:60:64:19:a5:0c:db:e9:e8:45:
         d7:90:92:3d:7a:6e:8f:2f:ad:7e:a7:e9:ac:84:d7:b4:ff:9f:
         08:16:93:6d:48:c2:dc:62:34:49:c9:67:7e:3a:38:b7:9c:5a:
         3a:50:2b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:56:58 2025 by rpki-client