$ rpki-client -vvf rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft File: CY_SGGFwSV_ovLN9lbkmPxn8zok.mft (raw, json) Hash identifier: 0Xmirb+fEBZ7vyHhRbsKxheKwP/jfdvORhtIak0JT0I= Subject key identifier: 2A:3E:08:08:13:FB:99:D0:1C:07:9F:C2:7A:59:81:5E:17:FF:9A:FB Authority key identifier: 09:8F:D2:18:61:70:49:5F:E8:BC:B3:7D:95:B9:26:3F:19:FC:CE:89 Certificate issuer: /CN=A9165EA3/serialNumber=098FD2186170495FE8BCB37D95B9263F19FCCE89 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft Manifest number: D3 Signing time: Wed 25 Mar 2026 05:54:53 +0000 Manifest this update: Wed 25 Mar 2026 05:54:53 +0000 Manifest next update: Wed 01 Apr 2026 05:54:53 +0000 Files and hashes: 1: CY_SGGFwSV_ovLN9lbkmPxn8zok.crl (hash: 1dPZgc5ZbmUiigbjB58fZ3iWxLg4ufGVGt/s0L5CC2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.crl rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165EA3, serialNumber=098FD2186170495FE8BCB37D95B9263F19FCCE89 Validity Not Before: Mar 25 05:54:53 2026 GMT Not After : Apr 1 05:54:53 2026 GMT Subject: CN=69c378ad-844c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:73:a4:22:71:fe:69:bb:08:f2:10:a2:9a:93: 44:c2:97:7a:9f:da:98:f6:73:b3:95:56:6c:2b:2f: df:eb:6f:53:1c:d8:06:f5:65:71:6a:cc:f7:2b:17: 28:8f:7e:68:87:be:27:8d:c6:69:bd:19:48:6b:19: 99:4e:bb:ae:b2:ba:e9:ac:57:9d:6c:82:a4:0b:21: 5c:fa:e4:54:f4:22:c4:5a:14:32:bd:04:ad:65:36: ba:9e:b4:dc:59:25:9d:94:29:bc:e7:ad:90:a4:2d: 11:68:73:a4:28:e8:b7:18:2f:7e:69:6a:15:78:09: 77:29:2c:8e:ea:b1:4c:b3:03:a5:45:0b:6a:8c:3d: 52:e7:7e:58:b3:4d:43:11:5c:dc:1c:4b:c3:2c:18: 4a:c5:c0:a8:b3:dd:6a:9b:0e:99:54:16:fa:51:26: d4:97:d5:19:2b:70:1d:a8:a3:ea:0b:c0:71:d7:34: 8a:23:fe:86:6f:2c:b5:9e:7c:eb:fa:6f:41:46:f6: 43:90:03:db:e7:93:3f:cc:e9:03:08:d4:7e:5a:09: 4b:f4:4f:d1:f9:7e:46:42:48:a2:57:dd:9e:de:77: 75:9d:f0:33:12:a0:a2:66:9c:6e:80:78:ce:cc:fe: d5:1d:36:ae:48:98:f9:66:95:e5:63:ec:23:c4:ae: 0f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3E:08:08:13:FB:99:D0:1C:07:9F:C2:7A:59:81:5E:17:FF:9A:FB X509v3 Authority Key Identifier: keyid:09:8F:D2:18:61:70:49:5F:E8:BC:B3:7D:95:B9:26:3F:19:FC:CE:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:78:1a:a3:c8:49:1d:e1:48:8c:86:ea:7b:97:4f:27:ee:8c: 99:0b:98:bc:91:b2:01:47:09:68:e3:97:e0:0a:e0:5b:9d:25: 9f:06:c0:ed:33:59:57:c0:a9:ae:ed:2c:a0:b2:ba:b7:c0:b0: dc:71:25:00:31:cb:48:f4:89:b6:24:f4:dd:93:90:ae:d9:8b: df:39:fd:7e:18:9f:40:a2:7b:f5:c0:86:db:d0:93:08:63:37: b9:99:54:91:d4:ce:53:b9:80:bf:73:77:25:e5:49:d4:4e:f4: 3b:47:03:56:11:28:30:59:c5:fc:8f:96:c4:76:65:9a:f4:d1: be:8f:c4:16:51:f5:4a:d4:ba:5d:b3:f5:f0:80:c7:c4:c0:bb: 9a:bd:32:aa:a8:ad:9a:c4:0c:ac:0f:ca:5f:0e:29:c6:e2:b9: fc:4c:8e:17:ec:9c:30:66:13:72:ab:27:90:d0:3c:d9:4f:26: 11:6b:fa:d7:eb:37:e4:85:81:fe:56:d6:2e:fc:3a:e1:53:40: 6d:bb:58:d5:80:73:b2:64:60:3f:32:ae:26:a6:09:f3:05:2d: b8:ec:fd:61:8b:8d:4d:7a:b1:60:c6:d4:bd:c5:65:6a:a2:3a: de:22:92:90:16:86:a9:5e:14:e5:e1:e5:17:75:fc:45:af:80: 6f:e0:77:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVFQTMxMTAvBgNVBAUTKDA5OEZEMjE4NjE3MDQ5NUZFOEJDQjM3RDk1QjkyNjNG MTlGQ0NFODkwHhcNMjYwMzI1MDU1NDUzWhcNMjYwNDAxMDU1NDUzWjAYMRYwFAYD VQQDEw02OWMzNzhhZC04NDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33OkInH+absI8hCimpNEwpd6n9qY9nOzlVZsKy/f629THNgG9WVxasz3Kxco j35oh74njcZpvRlIaxmZTruusrrprFedbIKkCyFc+uRU9CLEWhQyvQStZTa6nrTc WSWdlCm8562QpC0RaHOkKOi3GC9+aWoVeAl3KSyO6rFMswOlRQtqjD1S535Ys01D EVzcHEvDLBhKxcCos91qmw6ZVBb6USbUl9UZK3AdqKPqC8Bx1zSKI/6Gbyy1nnzr +m9BRvZDkAPb55M/zOkDCNR+WglL9E/R+X5GQkiiV92e3nd1nfAzEqCiZpxugHjO zP7VHTauSJj5ZpXlY+wjxK4PnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCo+CAgT +5nQHAefwnpZgV4X/5r7MB8GA1UdIwQYMBaAFAmP0hhhcElf6LyzfZW5Jj8Z/M6J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUVBMy85MjMwMjRERUU4 MUYxMUVGOUVGQ0JGNTBDNEY5QUUwMi9DWV9TR0dGd1NWX292TE45bGJrbVB4bjh6 b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NZX1NHR0Z3U1Zfb3ZMTjlsYmttUHhuOHpvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUVBMy85MjMwMjRERUU4MUYxMUVGOUVGQ0JGNTBDNEY5QUUwMi9DWV9TR0dGd1NW X292TE45bGJrbVB4bjh6b2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATHgao8hJHeFIjIbqe5dPJ+6MmQuYvJGyAUcJaOOX4ArgW50lnwbA7TNZV8Cp ru0soLK6t8Cw3HElADHLSPSJtiT03ZOQrtmL3zn9fhifQKJ79cCG29CTCGM3uZlU kdTOU7mAv3N3JeVJ1E70O0cDVhEoMFnF/I+WxHZlmvTRvo/EFlH1StS6XbP18IDH xMC7mr0yqqitmsQMrA/KXw4pxuK5/EyOF+ycMGYTcqsnkNA82U8mEWv61+s35IWB /lbWLvw64VNAbbtY1YBzsmRgPzKuJqYJ8wUtuOz9YYuNTXqxYMbUvcVlaqI63iKS kBaGqV4U5eHlF3X8Ra+Ab+B3dw== -----END CERTIFICATE-----Generated at Thu Mar 26 16:57:44 2026 by rpki-client