Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft
File:                     CygSqDkChy-62yLLBA3ssw_v9Ww.mft (raw, json)
Hash identifier:          rDuGU3+248YsPsXKnjr+4V95Y5hG6YnRzpdMb08Rr4Y=
Subject key identifier:   1F:A7:FE:A1:A0:8F:7A:67:E1:45:52:D7:6F:40:84:01:B5:0D:21:E3
Authority key identifier: 0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C
Certificate issuer:       /CN=A91EAE0A/serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C
Certificate serial:       014C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft
Manifest number:          0148
Signing time:             Sat 05 Sep 2026 05:09:43 +0000
Manifest this update:     Sat 05 Sep 2026 05:09:43 +0000
Manifest next update:     Sat 12 Sep 2026 05:09:43 +0000
Files and hashes:         1: CygSqDkChy-62yLLBA3ssw_v9Ww.crl (hash: soRqvTjNY/KsHGTldfnjqz3NZvC0C+kGH2gtl5kZppE=)
                          2: 54D1F77EB84611EFB170E471C4F9AE02.roa (hash: hqd1IWEEQ15NpnicK1cKDed4buwLUEv1gnSNh0RZ/T4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 05:09:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE0A, serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C
        Validity
            Not Before: Sep  5 05:09:43 2026 GMT
            Not After : Sep 12 05:09:43 2026 GMT
        Subject: CN=6a9ba417-944f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:44:50:a2:bb:78:a2:9f:04:1a:61:c0:e4:5a:
                    fb:98:aa:3a:1e:23:3d:75:53:d2:53:3d:cc:00:a3:
                    ae:d0:bc:4d:41:9a:06:c2:20:e7:8f:d4:5a:5e:36:
                    4f:c4:a8:e7:40:ac:33:8c:26:5a:19:27:d7:a8:15:
                    c0:eb:94:9f:b9:28:eb:43:97:64:11:be:ec:b2:f3:
                    dd:0e:7f:a4:d1:3f:11:af:53:05:1a:03:6d:51:42:
                    2d:29:e4:66:f7:5e:df:fb:a4:32:80:11:81:c1:b4:
                    24:68:14:61:8e:b3:d0:7d:54:0d:d4:6a:b2:27:3f:
                    7e:3a:e3:ce:f8:e5:28:62:e4:46:db:40:e5:e5:cc:
                    bf:b8:57:47:2c:93:72:6a:26:b4:ea:17:5e:b3:47:
                    35:b3:57:31:31:a0:54:1e:ae:50:85:29:af:c0:fd:
                    9a:6b:39:d9:58:e3:36:a3:85:27:ea:ae:1c:78:6f:
                    cf:c4:98:c0:68:81:d8:ed:26:2d:c4:a7:ff:8a:ec:
                    6f:d0:16:1d:b1:c2:ad:6f:95:e8:87:2c:54:f1:9f:
                    34:bb:b3:42:40:99:d0:49:8a:ed:65:85:26:7c:52:
                    58:2c:8a:af:33:8d:a9:da:3d:9a:d3:07:3e:c0:8e:
                    fa:5d:d4:5e:21:57:3f:be:52:c7:c3:33:05:f5:59:
                    1a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A7:FE:A1:A0:8F:7A:67:E1:45:52:D7:6F:40:84:01:B5:0D:21:E3
            X509v3 Authority Key Identifier:
                keyid:0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:fb:08:25:e2:39:29:9b:de:7f:8b:27:b7:e3:35:20:8c:66:
         88:45:ba:34:0a:71:48:c8:91:ea:24:9c:88:f2:66:9e:37:a7:
         a0:18:5a:02:c9:b3:e6:c7:ad:e5:5c:b5:85:77:dd:09:1f:f0:
         f3:25:e5:c2:4b:b3:52:d3:00:df:f5:f6:e4:53:08:91:ca:46:
         7d:2d:72:8c:6a:93:e0:bb:77:c9:9f:60:c7:64:c1:ee:3c:54:
         d8:50:55:87:46:46:12:ac:a2:3d:0f:13:8b:f4:d0:8c:70:ae:
         00:4d:57:41:05:99:1a:d4:56:46:a6:bf:2e:0c:ea:b7:9b:1e:
         3c:0b:18:fc:cd:21:e7:1f:eb:36:f7:5e:a1:75:e7:94:3e:9d:
         90:90:f1:00:14:8f:3c:ef:4a:51:2a:07:db:dd:0f:f5:23:a7:
         6f:3e:4e:f4:da:fd:43:37:05:18:be:16:46:5b:d5:c2:b7:41:
         9d:82:38:35:e6:93:91:23:a4:93:e0:fe:ae:21:16:8c:6c:61:
         ac:53:70:86:87:a9:4d:6d:d7:9c:2e:04:e3:47:f2:a2:88:a7:
         0e:3d:5b:4b:54:e0:03:1c:16:ae:36:78:99:80:03:38:80:e0:
         7e:51:b3:29:d3:ba:55:1d:e1:05:cc:17:a3:49:d5:82:6c:1c:
         c3:2a:7c:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFFMEExMTAvBgNVBAUTKDBCMjgxMkE4MzkwMjg3MkZCQURCMjJDQjA0MERFQ0Iz
MEZFRkY1NkMwHhcNMjYwOTA1MDUwOTQzWhcNMjYwOTEyMDUwOTQzWjAYMRYwFAYD
VQQDEw02YTliYTQxNy05NDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArERQort4op8EGmHA5Fr7mKo6HiM9dVPSUz3MAKOu0LxNQZoGwiDnj9RaXjZP
xKjnQKwzjCZaGSfXqBXA65SfuSjrQ5dkEb7ssvPdDn+k0T8Rr1MFGgNtUUItKeRm
917f+6QygBGBwbQkaBRhjrPQfVQN1GqyJz9+OuPO+OUoYuRG20Dl5cy/uFdHLJNy
aia06hdes0c1s1cxMaBUHq5QhSmvwP2aaznZWOM2o4Un6q4ceG/PxJjAaIHY7SYt
xKf/iuxv0BYdscKtb5XohyxU8Z80u7NCQJnQSYrtZYUmfFJYLIqvM42p2j2a0wc+
wI76XdReIVc/vlLHwzMF9VkaXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB+n/qGg
j3pn4UVS129AhAG1DSHjMB8GA1UdIwQYMBaAFAsoEqg5AocvutsiywQN7LMP7/Vs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUwQS9FMzgzNjZEMEI3
MjIxMUVGQkMzNkE3NDhDNEY5QUUwMi9DeWdTcURrQ2h5LTYyeUxMQkEzc3N3X3Y5
V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0N5Z1NxRGtDaHktNjJ5TExCQTNzc3dfdjlXdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUUwQS9FMzgzNjZEMEI3MjIxMUVGQkMzNkE3NDhDNEY5QUUwMi9DeWdTcURrQ2h5
LTYyeUxMQkEzc3N3X3Y5V3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqvsIJeI5KZvef4snt+M1IIxmiEW6NApxSMiR6iSciPJmnjenoBhaAsmz5set
5Vy1hXfdCR/w8yXlwkuzUtMA3/X25FMIkcpGfS1yjGqT4Lt3yZ9gx2TB7jxU2FBV
h0ZGEqyiPQ8Ti/TQjHCuAE1XQQWZGtRWRqa/Lgzqt5sePAsY/M0h5x/rNvdeoXXn
lD6dkJDxABSPPO9KUSoH290P9SOnbz5O9Nr9QzcFGL4WRlvVwrdBnYI4NeaTkSOk
k+D+riEWjGxhrFNwhoepTW3XnC4E40fyooinDj1bS1TgAxwWrjZ4mYADOIDgflGz
KdO6VR3hBcwXo0nVgmwcwyp8zw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:54:29 2026 by rpki-client