$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft File: CygSqDkChy-62yLLBA3ssw_v9Ww.mft (raw, json) Hash identifier: RDzYNUl0bkRoieGYQRKe+AHp9+9oqmut5eNDVs4vrzA= Subject key identifier: 17:B5:A7:BD:15:E7:13:DF:BA:1F:D3:00:8E:F5:90:86:9A:5C:14:96 Authority key identifier: 0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C Certificate issuer: /CN=A91EAE0A/serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft Manifest number: 69 Signing time: Tue 01 Jul 2025 07:45:20 +0000 Manifest this update: Tue 01 Jul 2025 07:45:20 +0000 Manifest next update: Tue 08 Jul 2025 07:45:20 +0000 Files and hashes: 1: CygSqDkChy-62yLLBA3ssw_v9Ww.crl (hash: Pt7Eok367Q352mNOClIE33L4qufPWMTw7vVv5TpUri0=) 2: 54D1F77EB84611EFB170E471C4F9AE02.roa (hash: +biwJF0qQl4PAaHILuta0LOfQdS1SMB1VEPi0AmtR6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE0A, serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C Validity Not Before: Jul 1 07:45:20 2025 GMT Not After : Jul 8 07:45:20 2025 GMT Subject: CN=68639210-01e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:34:d5:2a:7d:f4:7b:20:3e:93:9b:8b:ad:bc: 02:4c:9b:9b:5d:c9:b6:c9:83:d6:54:ae:70:42:c9: d1:8d:ec:44:3d:c1:3b:6f:5b:f9:43:5a:87:b4:eb: 79:b7:f4:dc:ac:08:c7:16:45:d9:f9:b0:9f:fc:fc: 48:41:25:85:de:64:70:76:c8:fc:1c:91:f3:21:6b: ef:dd:20:85:b1:75:0f:a3:df:74:f7:e3:25:ef:11: 1c:d6:06:44:a9:10:6c:6e:13:70:76:6b:b6:a5:dc: e2:08:26:30:a1:6a:27:a0:70:6c:10:0d:94:57:d8: 57:2b:78:1f:ba:b0:87:80:63:c2:04:15:e8:50:92: 93:b1:a2:63:f4:06:02:12:40:38:39:e4:a0:31:b2: 49:20:b0:bd:d2:97:0b:23:5e:2e:ea:59:4a:d7:f7: c2:90:94:59:96:28:ed:b2:04:d0:a8:c6:b5:9c:56: 05:f2:f2:c9:63:55:8f:f3:ee:21:f7:f4:12:81:b7: f5:5c:4b:8e:12:51:49:6d:e9:d8:7c:b2:17:be:91: c3:c0:28:05:d9:6e:1a:53:ca:e8:fa:4f:c2:ff:3a: 7a:4d:75:d3:47:05:5b:b2:9b:fc:69:0b:53:89:a8: 63:90:03:ed:df:15:d3:81:c3:56:20:b5:03:cd:59: 4d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B5:A7:BD:15:E7:13:DF:BA:1F:D3:00:8E:F5:90:86:9A:5C:14:96 X509v3 Authority Key Identifier: keyid:0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:a8:c2:8d:e0:19:4c:eb:83:09:c4:26:9b:e4:a7:67:cf:5c: c0:cd:9f:4a:70:d2:b9:a2:59:4a:2d:23:d0:c6:98:a1:45:11: 46:53:68:fb:44:9f:ea:54:8b:3a:cf:4f:c9:83:07:cb:53:30: e3:be:e1:03:c0:73:ec:31:2b:41:ed:d5:b2:51:19:08:e4:59: d2:a8:0f:e4:7e:d2:9f:9c:d6:38:84:2d:37:47:ea:b6:a3:fc: a1:95:c3:c6:3d:be:7e:e7:54:7a:4b:5e:a4:bd:08:65:d2:82: 49:44:80:aa:a5:eb:cb:87:43:8d:87:ec:4a:2b:01:45:54:44: 7e:29:e5:67:ce:17:50:3a:6e:1f:0f:ed:1c:47:dd:65:ff:a4: ec:57:f5:78:34:5c:07:49:4f:a9:57:b7:bc:a7:70:97:48:b8: 0d:21:33:99:53:53:dd:2b:cd:42:26:d3:18:95:2c:3b:85:ae: 2e:2d:72:de:67:9e:2e:d9:b2:b1:db:34:37:d4:c3:49:1d:1f: bb:e3:d3:b3:98:c0:43:ed:53:3a:20:81:21:2a:fa:29:18:11: 40:bb:24:d8:eb:ec:a7:29:d7:28:dc:24:ae:07:72:aa:05:78: a6:9c:9a:f9:82:1d:58:1b:1c:71:c8:3b:21:1e:d3:45:9e:d5: 40:92:ef:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QUUwQTExMC8GA1UEBRMoMEIyODEyQTgzOTAyODcyRkJBREIyMkNCMDQwREVDQjMw RkVGRjU2QzAeFw0yNTA3MDEwNzQ1MjBaFw0yNTA3MDgwNzQ1MjBaMBgxFjAUBgNV BAMTDTY4NjM5MjEwLTAxZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKNNUqffR7ID6Tm4utvAJMm5tdybbJg9ZUrnBCydGN7EQ9wTtvW/lDWoe063m3 9NysCMcWRdn5sJ/8/EhBJYXeZHB2yPwckfMha+/dIIWxdQ+j33T34yXvERzWBkSp EGxuE3B2a7al3OIIJjChaiegcGwQDZRX2FcreB+6sIeAY8IEFehQkpOxomP0BgIS QDg55KAxskkgsL3SlwsjXi7qWUrX98KQlFmWKO2yBNCoxrWcVgXy8sljVY/z7iH3 9BKBt/VcS44SUUlt6dh8she+kcPAKAXZbhpTyuj6T8L/OnpNddNHBVuym/xpC1OJ qGOQA+3fFdOBw1YgtQPNWU09AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF7WnvRXn E9+6H9MAjvWQhppcFJYwHwYDVR0jBBgwFoAUCygSqDkChy+62yLLBA3ssw/v9Www DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBRTBBL0UzODM2NkQwQjcy MjExRUZCQzM2QTc0OEM0RjlBRTAyL0N5Z1NxRGtDaHktNjJ5TExCQTNzc3dfdjlX dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3lnU3FEa0NoeS02MnlMTEJBM3Nzd192OVd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB RTBBL0UzODM2NkQwQjcyMjExRUZCQzM2QTc0OEM0RjlBRTAyL0N5Z1NxRGtDaHkt NjJ5TExCQTNzc3dfdjlXdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAACowo3gGUzrgwnEJpvkp2fPXMDNn0pw0rmiWUotI9DGmKFFEUZTaPtE n+pUizrPT8mDB8tTMOO+4QPAc+wxK0Ht1bJRGQjkWdKoD+R+0p+c1jiELTdH6raj /KGVw8Y9vn7nVHpLXqS9CGXSgklEgKql68uHQ42H7EorAUVURH4p5WfOF1A6bh8P 7RxH3WX/pOxX9Xg0XAdJT6lXt7yncJdIuA0hM5lTU90rzUIm0xiVLDuFri4tct5n ni7ZsrHbNDfUw0kdH7vj07OYwEPtUzoggSEq+ikYEUC7JNjr7Kcp1yjcJK4HcqoF eKacmvmCHVgbHHHIOyEe00We1UCS72I= -----END CERTIFICATE-----Generated at Wed Jul 2 23:23:45 2025 by rpki-client