$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft File: CygSqDkChy-62yLLBA3ssw_v9Ww.mft (raw, json) Hash identifier: HOlcyJZ5zaj4WNyotA47Q8S+N9zHMCsdFTNcnLS2Azo= Subject key identifier: E5:4A:6C:2E:D4:F3:FF:BE:0F:A8:17:36:DC:6C:1E:49:32:44:FA:AE Authority key identifier: 0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C Certificate issuer: /CN=A91EAE0A/serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft Manifest number: 84 Signing time: Sat 23 Aug 2025 06:53:54 +0000 Manifest this update: Sat 23 Aug 2025 06:53:54 +0000 Manifest next update: Sat 30 Aug 2025 06:53:54 +0000 Files and hashes: 1: CygSqDkChy-62yLLBA3ssw_v9Ww.crl (hash: 5WqB9AOGI5emYs/H74knMbf+FP9jxBa6gB5R/jM4gXk=) 2: 54D1F77EB84611EFB170E471C4F9AE02.roa (hash: +biwJF0qQl4PAaHILuta0LOfQdS1SMB1VEPi0AmtR6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE0A, serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C Validity Not Before: Aug 23 06:53:54 2025 GMT Not After : Aug 30 06:53:54 2025 GMT Subject: CN=68a96582-9a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a2:66:30:55:8d:86:04:8c:95:80:1b:d3:df: 08:5f:09:c4:28:50:1f:b0:ab:fc:fa:ca:d7:57:36: 13:06:26:44:df:a6:72:d6:35:7c:f2:e1:09:0f:a3: 1f:61:a0:8e:01:13:ac:31:5f:61:8b:6a:0a:1b:e5: cd:68:de:a6:f4:ac:f3:ff:ba:62:05:f4:0e:3f:b2: 5d:80:77:95:18:42:23:81:1d:28:1a:a1:63:26:7e: 64:72:0e:cc:cf:e1:f5:a3:0a:a4:06:2b:1f:30:71: 74:d7:9c:14:54:92:38:2c:ab:47:bd:70:30:51:62: a0:7a:f8:ed:c8:86:e5:fa:7d:7d:95:d0:b2:b7:92: 49:47:21:c2:6f:6f:d4:0c:a2:68:87:d0:48:6d:38: 93:22:1a:e8:ff:96:59:55:8b:71:59:72:7a:22:ba: 5a:2d:23:31:61:0e:9a:b8:7d:b7:75:01:c5:7f:c7: f3:7e:1b:f7:01:0d:d0:2b:ee:22:1c:62:eb:a1:7d: ca:70:8a:91:97:c6:32:e6:f4:93:9a:4c:3c:73:07: 1e:ac:8c:61:e4:13:1e:33:bb:c3:01:ad:62:c9:1c: 9e:7b:cd:dd:88:36:84:ce:10:65:6e:2c:5c:e3:39: 4f:59:4e:1b:51:0d:af:a3:12:5c:e3:f5:7e:7a:65: 0b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4A:6C:2E:D4:F3:FF:BE:0F:A8:17:36:DC:6C:1E:49:32:44:FA:AE X509v3 Authority Key Identifier: keyid:0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:5f:dd:cb:81:a0:8f:63:72:3c:5f:3b:ed:4f:fe:21:0f:15: 68:49:5b:a2:a3:38:06:f1:d6:bd:77:fa:2e:b0:dc:1c:39:1a: 4f:33:53:63:d2:f2:5d:e5:6c:de:6d:62:22:e7:80:39:a1:d5: 53:8c:13:1f:c2:af:ba:5a:a5:13:c0:e4:f4:f4:a2:6c:ad:13: d7:9e:f8:a0:8d:fe:b9:3e:c6:d9:8a:cb:bd:1d:a0:5d:0a:8c: f1:bb:0f:5e:bc:fc:95:cf:3d:d5:88:a3:e5:cf:3f:5b:fd:e1: 77:54:33:61:0e:39:41:2a:26:c2:50:96:d4:a2:f9:7e:35:07: 54:ed:9d:56:65:46:33:54:47:35:d3:84:ac:f8:8e:63:ad:6f: 35:b6:55:0a:e1:f9:0f:90:0b:3e:1e:e7:a7:68:aa:36:45:db: 78:7d:cb:d8:94:2c:8f:53:06:f9:d9:ba:87:a7:2d:d8:91:35: a4:ff:8f:22:87:eb:09:e8:b2:49:46:c0:6c:a3:94:5f:d8:3f: de:a9:7c:88:72:d1:16:62:69:6e:65:dd:52:b4:13:1a:6e:33: 16:cf:bd:a5:b3:0a:02:31:a1:e6:9d:d2:33:2a:5f:92:82:06: 99:85:97:2c:71:be:2e:c4:3a:96:41:82:63:58:e8:05:75:c7: a5:f5:53:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFMEExMTAvBgNVBAUTKDBCMjgxMkE4MzkwMjg3MkZCQURCMjJDQjA0MERFQ0Iz MEZFRkY1NkMwHhcNMjUwODIzMDY1MzU0WhcNMjUwODMwMDY1MzU0WjAYMRYwFAYD VQQDEw02OGE5NjU4Mi05YTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KJmMFWNhgSMlYAb098IXwnEKFAfsKv8+srXVzYTBiZE36Zy1jV88uEJD6Mf YaCOAROsMV9hi2oKG+XNaN6m9Kzz/7piBfQOP7JdgHeVGEIjgR0oGqFjJn5kcg7M z+H1owqkBisfMHF015wUVJI4LKtHvXAwUWKgevjtyIbl+n19ldCyt5JJRyHCb2/U DKJoh9BIbTiTIhro/5ZZVYtxWXJ6IrpaLSMxYQ6auH23dQHFf8fzfhv3AQ3QK+4i HGLroX3KcIqRl8Yy5vSTmkw8cwcerIxh5BMeM7vDAa1iyRyee83diDaEzhBlbixc 4zlPWU4bUQ2voxJc4/V+emULOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVKbC7U 8/++D6gXNtxsHkkyRPquMB8GA1UdIwQYMBaAFAsoEqg5AocvutsiywQN7LMP7/Vs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUwQS9FMzgzNjZEMEI3 MjIxMUVGQkMzNkE3NDhDNEY5QUUwMi9DeWdTcURrQ2h5LTYyeUxMQkEzc3N3X3Y5 V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N5Z1NxRGtDaHktNjJ5TExCQTNzc3dfdjlXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUwQS9FMzgzNjZEMEI3MjIxMUVGQkMzNkE3NDhDNEY5QUUwMi9DeWdTcURrQ2h5 LTYyeUxMQkEzc3N3X3Y5V3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNX93LgaCPY3I8XzvtT/4hDxVoSVuiozgG8da9d/ousNwcORpPM1Nj 0vJd5WzebWIi54A5odVTjBMfwq+6WqUTwOT09KJsrRPXnvigjf65PsbZisu9HaBd Cozxuw9evPyVzz3ViKPlzz9b/eF3VDNhDjlBKibCUJbUovl+NQdU7Z1WZUYzVEc1 04Ss+I5jrW81tlUK4fkPkAs+HuenaKo2Rdt4fcvYlCyPUwb52bqHpy3YkTWk/48i h+sJ6LJJRsBso5Rf2D/eqXyIctEWYmluZd1StBMabjMWz72lswoCMaHmndIzKl+S ggaZhZcscb4uxDqWQYJjWOgFdcel9VM6 -----END CERTIFICATE-----Generated at Sat Aug 23 19:12:02 2025 by rpki-client