$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft File: CygSqDkChy-62yLLBA3ssw_v9Ww.mft (raw, json) Hash identifier: qPrjG1gXV8gAZdnNo8GBoCLS/wP3DvX0BO1/2ONJKaw= Subject key identifier: 94:D2:8B:06:70:FB:13:88:7B:68:F4:37:B6:5F:F4:DB:3B:B1:68:46 Authority key identifier: 0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C Certificate issuer: /CN=A91EAE0A/serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft Manifest number: 51 Signing time: Tue 13 May 2025 06:29:55 +0000 Manifest this update: Tue 13 May 2025 06:29:55 +0000 Manifest next update: Tue 20 May 2025 06:29:55 +0000 Files and hashes: 1: CygSqDkChy-62yLLBA3ssw_v9Ww.crl (hash: OMO+NW85hHMABem18SIxVtcEkPB5H72ybRfvFvPA2Qc=) 2: 54D1F77EB84611EFB170E471C4F9AE02.roa (hash: +biwJF0qQl4PAaHILuta0LOfQdS1SMB1VEPi0AmtR6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE0A, serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C Validity Not Before: May 13 06:29:55 2025 GMT Not After : May 20 06:29:55 2025 GMT Subject: CN=6822e6e3-04fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:45:0e:22:8f:fe:77:ac:8d:21:ab:df:f3:8a: 2f:2b:bf:e5:bc:5b:8f:f2:53:b0:9d:b0:91:7f:d6: 15:91:c3:87:40:65:1c:22:c8:b1:37:bf:2e:91:cf: d4:ab:ca:87:bc:a3:ac:61:9a:fb:90:87:e5:66:55: cb:c8:3b:aa:67:ba:37:f9:25:54:81:50:78:36:cd: 08:6c:60:8e:81:71:a0:d2:c3:33:c6:af:1f:9f:ad: 7d:ac:27:5a:4d:1d:6b:6d:ad:ce:7c:21:a1:23:cd: b3:f4:88:5b:6a:80:35:6e:44:1b:1c:10:dd:4b:7c: 60:04:a0:ca:4a:1d:8b:58:23:77:3c:58:3a:0b:de: 2b:51:6b:58:34:5d:af:6d:d5:f2:f6:3d:bb:33:40: a7:81:11:84:71:f7:8e:77:15:a4:0f:bd:d9:03:fc: 1b:38:42:b5:05:7b:88:03:af:f6:c4:ec:3c:10:96: 72:29:ae:27:7b:8a:1b:a4:25:be:c5:2b:90:52:bf: ab:18:a3:ef:23:c0:21:de:72:fe:b8:dc:eb:5d:21: e5:de:aa:1b:0f:2e:4d:1c:03:40:c6:f2:94:69:19: c1:f5:3e:f2:8c:39:b5:5a:d4:6e:c3:b5:ab:f8:28: 94:e7:0b:86:52:93:ae:f1:f8:0d:3a:1d:c7:ec:91: 9c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D2:8B:06:70:FB:13:88:7B:68:F4:37:B6:5F:F4:DB:3B:B1:68:46 X509v3 Authority Key Identifier: keyid:0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:90:71:d1:ca:64:d7:b7:e2:37:92:c7:c3:a1:e9:43:03:72: 80:b0:31:43:54:e0:20:81:8e:4b:0a:22:b2:96:df:84:fe:a4: 6b:a7:bc:88:69:87:dc:65:a3:dc:a9:73:50:81:8b:e6:90:9a: 5e:f6:f6:b2:35:e3:20:b6:d8:7b:5b:cd:a7:1f:74:a9:c4:99: 61:30:6e:b7:e9:e8:37:96:d0:ec:58:e5:51:50:0a:df:6a:5a: ff:68:13:4e:94:b7:f2:05:a1:1b:cd:29:9f:a8:0e:0d:43:38: 2b:c9:39:f6:5f:92:46:0b:b0:db:37:e2:74:57:e5:3f:f2:50: 5e:0e:b6:22:24:1a:6a:c0:b5:b0:f1:0b:70:63:06:b6:10:40: b5:f0:aa:33:68:b1:da:4a:2c:39:2c:7a:47:33:c1:b7:85:c9: c4:75:f2:2e:df:bf:27:8b:13:f7:bb:19:a0:43:ce:8a:38:63: 17:fa:7b:8d:7d:74:8f:7d:43:51:24:e4:7d:e8:5b:32:40:29: a8:0a:fb:57:ae:db:6e:2f:ea:bc:48:8b:b9:7b:10:dc:60:24: fc:a9:85:4b:ad:b8:34:d1:31:2c:14:b1:f9:85:26:22:7a:e2: 9b:59:22:6d:e1:ee:5d:89:f5:3d:59:53:b6:64:8d:03:17:5f: 21:5e:da:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QUUwQTExMC8GA1UEBRMoMEIyODEyQTgzOTAyODcyRkJBREIyMkNCMDQwREVDQjMw RkVGRjU2QzAeFw0yNTA1MTMwNjI5NTVaFw0yNTA1MjAwNjI5NTVaMBgxFjAUBgNV BAMTDTY4MjJlNmUzLTA0ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVRQ4ij/53rI0hq9/zii8rv+W8W4/yU7CdsJF/1hWRw4dAZRwiyLE3vy6Rz9Sr yoe8o6xhmvuQh+VmVcvIO6pnujf5JVSBUHg2zQhsYI6BcaDSwzPGrx+frX2sJ1pN HWttrc58IaEjzbP0iFtqgDVuRBscEN1LfGAEoMpKHYtYI3c8WDoL3itRa1g0Xa9t 1fL2PbszQKeBEYRx9453FaQPvdkD/Bs4QrUFe4gDr/bE7DwQlnIprid7ihukJb7F K5BSv6sYo+8jwCHecv643OtdIeXeqhsPLk0cA0DG8pRpGcH1PvKMObVa1G7Dtav4 KJTnC4ZSk67x+A06HcfskZwpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlNKLBnD7 E4h7aPQ3tl/02zuxaEYwHwYDVR0jBBgwFoAUCygSqDkChy+62yLLBA3ssw/v9Www DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBRTBBL0UzODM2NkQwQjcy MjExRUZCQzM2QTc0OEM0RjlBRTAyL0N5Z1NxRGtDaHktNjJ5TExCQTNzc3dfdjlX dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3lnU3FEa0NoeS02MnlMTEJBM3Nzd192OVd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB RTBBL0UzODM2NkQwQjcyMjExRUZCQzM2QTc0OEM0RjlBRTAyL0N5Z1NxRGtDaHkt NjJ5TExCQTNzc3dfdjlXdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMqQcdHKZNe34jeSx8Oh6UMDcoCwMUNU4CCBjksKIrKW34T+pGunvIhp h9xlo9ypc1CBi+aQml729rI14yC22HtbzacfdKnEmWEwbrfp6DeW0OxY5VFQCt9q Wv9oE06Ut/IFoRvNKZ+oDg1DOCvJOfZfkkYLsNs34nRX5T/yUF4OtiIkGmrAtbDx C3BjBrYQQLXwqjNosdpKLDksekczwbeFycR18i7fvyeLE/e7GaBDzoo4Yxf6e419 dI99Q1Ek5H3oWzJAKagK+1eu224v6rxIi7l7ENxgJPyphUutuDTRMSwUsfmFJiJ6 4ptZIm3h7l2J9T1ZU7ZkjQMXXyFe2kY= -----END CERTIFICATE-----Generated at Wed May 14 19:24:09 2025 by rpki-client