$ rpki-client -vvf rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft File: CY_SGGFwSV_ovLN9lbkmPxn8zok.mft (raw, json) Hash identifier: kYigNFAX/5qddiYmc2TgY6gxxEQuAsWomVu0twhx/b4= Subject key identifier: 14:1D:97:AE:10:B4:59:24:A2:9E:0C:B3:5F:AA:CE:09:0A:8C:BA:29 Authority key identifier: 09:8F:D2:18:61:70:49:5F:E8:BC:B3:7D:95:B9:26:3F:19:FC:CE:89 Certificate issuer: /CN=A9165EA3/serialNumber=098FD2186170495FE8BCB37D95B9263F19FCCE89 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft Manifest number: 88 Signing time: Wed 05 Nov 2025 06:46:35 +0000 Manifest this update: Wed 05 Nov 2025 06:46:35 +0000 Manifest next update: Wed 12 Nov 2025 06:46:35 +0000 Files and hashes: 1: CY_SGGFwSV_ovLN9lbkmPxn8zok.crl (hash: JtaJ4s+q6oAiNHhdA080dWGNUq5J35qyslAX4CQ8e04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.crl rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165EA3, serialNumber=098FD2186170495FE8BCB37D95B9263F19FCCE89 Validity Not Before: Nov 5 06:46:35 2025 GMT Not After : Nov 12 06:46:35 2025 GMT Subject: CN=690af2cb-5e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8c:ad:29:91:9e:bf:45:35:64:ae:1e:da:88: 94:4d:de:e0:8d:76:9e:0d:f8:e6:48:64:16:62:10: 10:5c:8f:e6:2e:5d:72:97:3d:2e:92:a9:6d:ea:17: 11:6f:bf:5f:ba:d5:e3:59:3e:ab:1a:1d:60:ba:b1: 4c:46:bb:82:42:74:d5:80:d3:2f:f4:be:10:93:37: 29:76:a1:09:42:71:9d:79:ea:e3:96:cb:60:07:30: 9c:33:9b:0b:2a:b7:56:70:53:cf:e7:e0:38:5e:a0: 6f:25:74:e2:fe:03:af:0e:9a:df:e0:4e:98:06:7b: 61:58:40:80:29:55:a8:94:43:aa:dd:5f:fc:0d:59: 6b:1d:db:b9:ab:83:7b:79:96:cb:bf:2a:e1:82:62: 6a:3c:ac:fd:6b:1f:43:64:69:57:af:ca:22:64:ed: d5:09:65:6e:d2:a7:45:dc:04:84:d0:10:0e:98:93: 6c:b1:f9:c1:d0:9a:c6:30:89:24:21:75:82:59:68: d5:99:c2:73:1b:5b:91:3c:ad:dd:62:f8:51:71:78: 9f:d1:da:63:cf:40:30:b1:20:53:1b:7c:cd:84:52: c0:90:73:87:f4:38:f8:5e:ed:1a:f7:1c:93:76:b1: be:f9:2e:2d:4a:24:06:89:49:db:e5:58:91:5c:e2: 03:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1D:97:AE:10:B4:59:24:A2:9E:0C:B3:5F:AA:CE:09:0A:8C:BA:29 X509v3 Authority Key Identifier: keyid:09:8F:D2:18:61:70:49:5F:E8:BC:B3:7D:95:B9:26:3F:19:FC:CE:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:bc:1c:24:3d:ab:ec:3b:a8:c6:c1:f2:c3:d6:b4:11:24:4d: 75:c8:28:38:5e:cb:4d:d1:3a:8d:49:f0:39:29:d8:a7:cd:25: e8:ec:d3:3c:47:9d:41:e5:e8:9e:6c:ee:90:cf:98:00:60:d1: a5:a3:54:11:4b:31:49:80:ef:1a:d8:1f:19:fb:38:02:2a:42: 82:e9:e7:57:6e:6d:54:1f:16:e5:43:e6:17:01:a6:de:fd:93: b2:00:07:a3:b8:0c:24:02:84:e7:00:78:fb:47:76:53:42:9a: f8:d1:d4:e8:43:b7:5e:51:cd:9d:78:38:e1:78:15:4c:58:6a: cf:71:a5:4a:00:e1:82:d8:50:60:72:b3:b2:54:be:0a:a9:9b: 2c:18:01:b1:87:de:27:69:29:07:2c:5e:c6:ff:29:0d:f3:f6: cd:31:06:3b:5d:cf:03:c4:ff:33:25:29:e5:79:04:25:d3:52: 54:6e:cd:fb:0c:2b:6b:f2:a2:c7:6a:4f:c0:da:6c:87:0c:ed: af:95:a8:1c:95:2a:5d:15:cb:c6:11:ce:42:e8:d3:7f:a5:45: 92:64:ad:94:c0:d9:e4:de:84:3f:00:94:1f:57:97:c8:11:7f: ce:a6:66:63:85:1b:ed:a5:20:a5:3a:d0:00:4f:48:55:27:38: b6:bf:6f:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVFQTMxMTAvBgNVBAUTKDA5OEZEMjE4NjE3MDQ5NUZFOEJDQjM3RDk1QjkyNjNG MTlGQ0NFODkwHhcNMjUxMTA1MDY0NjM1WhcNMjUxMTEyMDY0NjM1WjAYMRYwFAYD VQQDEw02OTBhZjJjYi01ZTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl4ytKZGev0U1ZK4e2oiUTd7gjXaeDfjmSGQWYhAQXI/mLl1ylz0ukqlt6hcR b79futXjWT6rGh1gurFMRruCQnTVgNMv9L4QkzcpdqEJQnGdeerjlstgBzCcM5sL KrdWcFPP5+A4XqBvJXTi/gOvDprf4E6YBnthWECAKVWolEOq3V/8DVlrHdu5q4N7 eZbLvyrhgmJqPKz9ax9DZGlXr8oiZO3VCWVu0qdF3ASE0BAOmJNssfnB0JrGMIkk IXWCWWjVmcJzG1uRPK3dYvhRcXif0dpjz0AwsSBTG3zNhFLAkHOH9Dj4Xu0a9xyT drG++S4tSiQGiUnb5ViRXOIDFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQdl64Q tFkkop4Ms1+qzgkKjLopMB8GA1UdIwQYMBaAFAmP0hhhcElf6LyzfZW5Jj8Z/M6J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUVBMy85MjMwMjRERUU4 MUYxMUVGOUVGQ0JGNTBDNEY5QUUwMi9DWV9TR0dGd1NWX292TE45bGJrbVB4bjh6 b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NZX1NHR0Z3U1Zfb3ZMTjlsYmttUHhuOHpvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUVBMy85MjMwMjRERUU4MUYxMUVGOUVGQ0JGNTBDNEY5QUUwMi9DWV9TR0dGd1NW X292TE45bGJrbVB4bjh6b2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+vBwkPavsO6jGwfLD1rQRJE11yCg4XstN0TqNSfA5KdinzSXo7NM8 R51B5eiebO6Qz5gAYNGlo1QRSzFJgO8a2B8Z+zgCKkKC6edXbm1UHxblQ+YXAabe /ZOyAAejuAwkAoTnAHj7R3ZTQpr40dToQ7deUc2deDjheBVMWGrPcaVKAOGC2FBg crOyVL4KqZssGAGxh94naSkHLF7G/ykN8/bNMQY7Xc8DxP8zJSnleQQl01JUbs37 DCtr8qLHak/A2myHDO2vlagclSpdFcvGEc5C6NN/pUWSZK2UwNnk3oQ/AJQfV5fI EX/OpmZjhRvtpSClOtAAT0hVJzi2v29O -----END CERTIFICATE-----Generated at Wed Nov 5 10:28:08 2025 by rpki-client