$ rpki-client -vvf rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft File: CY_SGGFwSV_ovLN9lbkmPxn8zok.mft (raw, json) Hash identifier: M25mRM/y0FDCyXQwm3g0nvmV3qS3ogjRlMrhdX2fLKo= Subject key identifier: AA:81:80:D1:B2:6C:38:A3:68:F9:C3:86:EE:22:6F:CC:23:6C:F2:C1 Authority key identifier: 09:8F:D2:18:61:70:49:5F:E8:BC:B3:7D:95:B9:26:3F:19:FC:CE:89 Certificate issuer: /CN=A9165EA3/serialNumber=098FD2186170495FE8BCB37D95B9263F19FCCE89 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft Manifest number: 63 Signing time: Sat 23 Aug 2025 07:15:19 +0000 Manifest this update: Sat 23 Aug 2025 07:15:19 +0000 Manifest next update: Sat 30 Aug 2025 07:15:19 +0000 Files and hashes: 1: CY_SGGFwSV_ovLN9lbkmPxn8zok.crl (hash: rCsA/uyKOJkmfW5aT8XJc/M28t4xqgzh3xD4ZRYBfq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.crl rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165EA3, serialNumber=098FD2186170495FE8BCB37D95B9263F19FCCE89 Validity Not Before: Aug 23 07:15:19 2025 GMT Not After : Aug 30 07:15:19 2025 GMT Subject: CN=68a96a87-f79a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:79:c4:0f:fc:ca:b8:40:b5:a7:fb:10:67: 70:ca:18:93:31:6f:95:cc:44:1c:62:f2:82:80:01: f3:73:75:ff:5e:7f:e8:3c:63:96:d9:f3:a2:2f:49: 52:41:55:3d:f4:fe:a2:9b:46:0c:8c:11:b2:5d:35: ea:80:82:b1:0b:f3:eb:5a:82:ac:53:66:76:10:a2: ba:5b:68:a7:a9:27:85:ab:f8:d5:0f:ae:c0:cf:fe: 23:c0:80:29:09:a5:c0:80:0b:ce:d4:37:1f:f1:1a: ca:46:88:50:84:da:6c:8e:40:60:55:ec:dd:3f:09: c8:f8:b4:c6:00:4a:4a:2a:73:99:81:78:00:e5:e8: 28:f5:59:99:0d:78:52:0a:1e:67:1b:56:93:3b:f1: a4:81:5a:01:05:24:da:23:71:ee:dd:8d:4c:fb:47: 5f:02:5a:24:20:c1:56:72:3a:8c:57:4a:62:49:c9: 2e:c9:f2:8d:f4:d0:e1:4f:8d:83:a6:57:d6:76:34: 92:e1:d9:75:84:8d:e0:f5:84:56:5c:06:5f:8b:b8: 47:b0:72:c6:6d:7d:4f:4f:18:c2:39:85:90:ad:8a: 58:54:9b:8f:49:f4:a8:d9:14:ec:78:92:b8:6b:06: a1:99:a4:b7:db:1e:5c:f1:e2:62:9e:6f:5d:70:9d: 6f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:81:80:D1:B2:6C:38:A3:68:F9:C3:86:EE:22:6F:CC:23:6C:F2:C1 X509v3 Authority Key Identifier: keyid:09:8F:D2:18:61:70:49:5F:E8:BC:B3:7D:95:B9:26:3F:19:FC:CE:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:22:72:4b:f6:6b:e2:d7:8f:1c:4e:cb:8e:55:4a:95:17:bd: 37:80:21:01:d5:30:23:21:de:c9:95:36:4e:44:f4:76:0d:7c: a1:17:8d:f4:3e:ca:39:e7:b8:34:91:59:93:af:86:53:ae:a5: 16:14:1e:66:86:7a:31:ab:6f:da:9c:e2:94:ad:6c:27:40:a6: c1:15:8b:5e:b9:08:00:c5:a9:85:f2:50:f8:19:e6:91:6f:7b: 7f:c9:65:28:84:6b:bb:5c:04:5a:0e:9e:17:cf:dd:c0:7a:1b: e5:57:71:c0:93:3f:0e:d1:8c:9d:9e:51:47:c0:d3:22:14:6a: c0:88:17:19:a0:9c:c6:e5:01:55:4a:28:4e:8b:46:c3:31:0b: 84:8c:02:d8:e5:94:cf:6c:d4:35:99:08:6d:5e:8f:36:9c:51: 44:70:32:2a:88:27:ae:c2:dd:71:69:f8:28:1d:69:0b:35:a2: e1:7c:7d:11:2f:1f:03:b4:51:f1:5d:19:5b:3b:22:14:e8:9e: fc:2a:ab:3a:96:7d:e4:ad:b5:f9:75:81:a3:46:d0:62:56:3a: 9f:02:d8:97:ee:89:92:f2:7b:40:ca:18:b5:e7:f4:33:42:e4: 57:d3:4a:7f:00:b4:02:d1:4a:77:8b:6c:75:ce:6b:3c:69:19: e2:9a:2e:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NUVBMzExMC8GA1UEBRMoMDk4RkQyMTg2MTcwNDk1RkU4QkNCMzdEOTVCOTI2M0Yx OUZDQ0U4OTAeFw0yNTA4MjMwNzE1MTlaFw0yNTA4MzAwNzE1MTlaMBgxFjAUBgNV BAMTDTY4YTk2YTg3LWY3OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKG3nED/zKuEC1p/sQZ3DKGJMxb5XMRBxi8oKAAfNzdf9ef+g8Y5bZ86IvSVJB VT30/qKbRgyMEbJdNeqAgrEL8+tagqxTZnYQorpbaKepJ4Wr+NUPrsDP/iPAgCkJ pcCAC87UNx/xGspGiFCE2myOQGBV7N0/Ccj4tMYASkoqc5mBeADl6Cj1WZkNeFIK HmcbVpM78aSBWgEFJNojce7djUz7R18CWiQgwVZyOoxXSmJJyS7J8o300OFPjYOm V9Z2NJLh2XWEjeD1hFZcBl+LuEewcsZtfU9PGMI5hZCtilhUm49J9KjZFOx4krhr BqGZpLfbHlzx4mKeb11wnW+3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqoGA0bJs OKNo+cOG7iJvzCNs8sEwHwYDVR0jBBgwFoAUCY/SGGFwSV/ovLN9lbkmPxn8zokw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1RUEzLzkyMzAyNERFRTgx RjExRUY5RUZDQkY1MEM0RjlBRTAyL0NZX1NHR0Z3U1Zfb3ZMTjlsYmttUHhuOHpv ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1lfU0dHRndTVl9vdkxOOWxia21QeG44em9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 RUEzLzkyMzAyNERFRTgxRjExRUY5RUZDQkY1MEM0RjlBRTAyL0NZX1NHR0Z3U1Zf b3ZMTjlsYmttUHhuOHpvay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIQickv2a+LXjxxOy45VSpUXvTeAIQHVMCMh3smVNk5E9HYNfKEXjfQ+ yjnnuDSRWZOvhlOupRYUHmaGejGrb9qc4pStbCdApsEVi165CADFqYXyUPgZ5pFv e3/JZSiEa7tcBFoOnhfP3cB6G+VXccCTPw7RjJ2eUUfA0yIUasCIFxmgnMblAVVK KE6LRsMxC4SMAtjllM9s1DWZCG1ejzacUURwMiqIJ67C3XFp+CgdaQs1ouF8fREv HwO0UfFdGVs7IhTonvwqqzqWfeSttfl1gaNG0GJWOp8C2JfuiZLye0DKGLXn9DNC 5FfTSn8AtALRSneLbHXOazxpGeKaLhs= -----END CERTIFICATE-----Generated at Sat Aug 23 17:23:23 2025 by rpki-client