$ rpki-client -vvf rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft File: CY_SGGFwSV_ovLN9lbkmPxn8zok.mft (raw, json) Hash identifier: mVa+nAa13V98Nr+jTqG/Vt8+2A9M9Hy5NPlKsw45X2o= Subject key identifier: EE:F0:2A:85:87:11:88:95:C7:CB:09:0C:BA:9B:63:A0:B2:7C:B6:B4 Authority key identifier: 09:8F:D2:18:61:70:49:5F:E8:BC:B3:7D:95:B9:26:3F:19:FC:CE:89 Certificate issuer: /CN=A9165EA3/serialNumber=098FD2186170495FE8BCB37D95B9263F19FCCE89 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft Manifest number: 2F Signing time: Sun 11 May 2025 06:23:19 +0000 Manifest this update: Sun 11 May 2025 06:23:19 +0000 Manifest next update: Sun 18 May 2025 06:23:19 +0000 Files and hashes: 1: CY_SGGFwSV_ovLN9lbkmPxn8zok.crl (hash: B6OuFnnDkRvZ6jY8ZNsdVuYjbPBwbjHeiSpSsK7uYFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.crl rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165EA3, serialNumber=098FD2186170495FE8BCB37D95B9263F19FCCE89 Validity Not Before: May 11 06:23:19 2025 GMT Not After : May 18 06:23:19 2025 GMT Subject: CN=68204257-c5f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:87:db:28:45:8d:8a:05:5a:19:6a:3c:88:73: 41:88:56:84:61:3f:8e:d5:2c:37:10:a3:c4:3f:84: 9c:df:b6:f3:80:e4:47:36:50:c3:d5:f0:aa:c9:e0: db:3e:d8:11:52:62:52:3e:7f:86:6b:78:26:d5:75: 2e:8a:90:b4:67:f4:fd:da:ef:ae:d0:dd:29:f4:45: a9:5f:d6:37:89:1c:d3:da:3a:fa:f5:5c:ea:ae:92: ca:a5:18:2b:4d:ee:b5:11:ee:de:a7:87:fc:4a:2f: 51:4e:fc:7a:8f:54:dc:36:ae:69:27:86:71:59:4a: 70:2a:44:b2:25:35:bc:da:a1:f7:52:a6:96:be:33: 07:97:de:12:30:50:d5:c7:18:86:4b:96:cf:32:77: 31:4d:59:f7:06:04:f5:d9:aa:36:a5:ec:4e:dd:06: 9e:6f:7d:02:65:32:81:cb:49:61:9d:b5:1c:c7:d4: 72:30:de:30:0f:f8:61:c7:7a:0d:c2:10:6f:cd:f7: 08:e8:40:dd:98:2a:24:be:ca:75:94:1d:b6:db:97: 9c:59:a1:97:7e:63:f2:a9:d7:f5:38:5b:5a:42:30: 86:76:9c:7a:2d:1e:35:fd:a3:95:4a:bc:ba:ef:fa: 98:2a:68:1b:3f:e0:95:37:8c:59:5a:f4:a6:c2:2d: c6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F0:2A:85:87:11:88:95:C7:CB:09:0C:BA:9B:63:A0:B2:7C:B6:B4 X509v3 Authority Key Identifier: keyid:09:8F:D2:18:61:70:49:5F:E8:BC:B3:7D:95:B9:26:3F:19:FC:CE:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:65:34:37:24:71:41:cc:ca:6c:62:c2:e7:1f:a9:a3:81:93: 4c:6b:3e:67:7b:b2:0d:54:15:ee:c7:44:f3:4d:2d:e6:86:f4: 7c:27:58:64:82:4c:f5:67:79:51:dc:a8:f2:28:d2:4f:b0:5a: 1d:9a:38:e4:82:bb:ce:34:a0:b1:00:38:d3:22:3d:4d:2d:1d: 1f:f2:30:ac:35:aa:e6:cf:94:b6:30:cf:e8:48:50:ae:57:b5: 64:a4:ec:14:9e:a5:22:29:2a:be:bf:58:34:38:6b:37:38:2c: 5d:4a:90:09:25:75:71:10:65:48:ba:91:a7:34:bc:97:de:d5: 8d:4c:45:64:14:3c:a2:4d:c7:4d:d0:eb:7c:e6:01:20:f0:63: 72:60:8d:bd:ef:9c:f9:a9:a2:ad:83:7d:5c:14:a4:bb:17:67: 1a:da:c1:74:8e:d3:88:c6:b6:db:e8:20:d9:7a:67:e6:1f:9b: d4:13:68:20:66:a6:0e:eb:d3:e4:88:24:26:27:49:ef:a1:63: d3:7b:63:26:05:8e:e3:59:70:16:71:ca:4f:be:40:ae:7a:dd: 80:0c:c3:9b:ef:7d:9e:d7:66:d0:42:40:47:ef:7b:2d:48:c5: 4d:51:c1:c5:9c:64:4c:4a:35:87:c7:79:87:e7:7b:ce:2c:7f: 13:80:c7:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NUVBMzExMC8GA1UEBRMoMDk4RkQyMTg2MTcwNDk1RkU4QkNCMzdEOTVCOTI2M0Yx OUZDQ0U4OTAeFw0yNTA1MTEwNjIzMTlaFw0yNTA1MTgwNjIzMTlaMBgxFjAUBgNV BAMTDTY4MjA0MjU3LWM1ZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHh9soRY2KBVoZajyIc0GIVoRhP47VLDcQo8Q/hJzftvOA5Ec2UMPV8KrJ4Ns+ 2BFSYlI+f4ZreCbVdS6KkLRn9P3a767Q3Sn0Ralf1jeJHNPaOvr1XOquksqlGCtN 7rUR7t6nh/xKL1FO/HqPVNw2rmknhnFZSnAqRLIlNbzaofdSppa+MweX3hIwUNXH GIZLls8ydzFNWfcGBPXZqjal7E7dBp5vfQJlMoHLSWGdtRzH1HIw3jAP+GHHeg3C EG/N9wjoQN2YKiS+ynWUHbbbl5xZoZd+Y/Kp1/U4W1pCMIZ2nHotHjX9o5VKvLrv +pgqaBs/4JU3jFla9KbCLcZBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7vAqhYcR iJXHywkMuptjoLJ8trQwHwYDVR0jBBgwFoAUCY/SGGFwSV/ovLN9lbkmPxn8zokw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1RUEzLzkyMzAyNERFRTgx RjExRUY5RUZDQkY1MEM0RjlBRTAyL0NZX1NHR0Z3U1Zfb3ZMTjlsYmttUHhuOHpv ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1lfU0dHRndTVl9vdkxOOWxia21QeG44em9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 RUEzLzkyMzAyNERFRTgxRjExRUY5RUZDQkY1MEM0RjlBRTAyL0NZX1NHR0Z3U1Zf b3ZMTjlsYmttUHhuOHpvay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGhlNDckcUHMymxiwucfqaOBk0xrPmd7sg1UFe7HRPNNLeaG9HwnWGSC TPVneVHcqPIo0k+wWh2aOOSCu840oLEAONMiPU0tHR/yMKw1qubPlLYwz+hIUK5X tWSk7BSepSIpKr6/WDQ4azc4LF1KkAkldXEQZUi6kac0vJfe1Y1MRWQUPKJNx03Q 63zmASDwY3Jgjb3vnPmpoq2DfVwUpLsXZxrawXSO04jGttvoINl6Z+Yfm9QTaCBm pg7r0+SIJCYnSe+hY9N7YyYFjuNZcBZxyk++QK563YAMw5vvfZ7XZtBCQEfvey1I xU1RwcWcZExKNYfHeYfne84sfxOAxw0= -----END CERTIFICATE-----Generated at Tue May 13 03:56:38 2025 by rpki-client