$ rpki-client -vvf rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft File: CY_SGGFwSV_ovLN9lbkmPxn8zok.mft (raw, json) Hash identifier: uj1XVdF+ulT2hbfzamVCs4eW8/G+iqlID+g5ug1xoGI= Subject key identifier: 09:00:D9:2C:C8:91:B6:E4:0C:2F:5B:D6:4E:D0:BA:B7:DD:E6:95:C3 Authority key identifier: 09:8F:D2:18:61:70:49:5F:E8:BC:B3:7D:95:B9:26:3F:19:FC:CE:89 Certificate issuer: /CN=A9165EA3/serialNumber=098FD2186170495FE8BCB37D95B9263F19FCCE89 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft Manifest number: 5C Signing time: Sat 09 Aug 2025 07:35:45 +0000 Manifest this update: Sat 09 Aug 2025 07:35:45 +0000 Manifest next update: Sat 16 Aug 2025 07:35:45 +0000 Files and hashes: 1: CY_SGGFwSV_ovLN9lbkmPxn8zok.crl (hash: eQryOu/HOGD5EniQxquF9i5d4+a4zFXIFP4fBCx9Glc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.crl rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165EA3, serialNumber=098FD2186170495FE8BCB37D95B9263F19FCCE89 Validity Not Before: Aug 9 07:35:45 2025 GMT Not After : Aug 16 07:35:45 2025 GMT Subject: CN=6896fa51-848a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7d:47:a9:89:84:6a:d8:8d:83:d8:1d:8e:75: 78:22:b8:bd:f5:ae:6d:59:45:e8:4c:38:69:96:09: b5:62:0c:a6:f0:00:74:33:20:98:a2:85:0c:c7:ad: 76:fe:ce:4f:55:cf:86:83:e5:61:79:a4:5d:50:24: 42:2a:68:05:07:92:20:38:cb:8c:3b:49:24:db:dc: 62:2e:05:b3:b9:ae:c4:22:cb:2f:48:94:ea:40:cf: 34:2c:e5:d6:b1:85:0c:98:b5:e7:55:6d:ff:fc:61: 4d:31:89:71:40:c6:79:b4:95:95:c5:78:29:17:fa: 7a:42:5a:4d:b4:73:46:5b:5c:d2:bf:20:f0:52:ed: 31:f7:11:4c:3c:ec:b6:4b:2f:b0:84:db:54:06:61: 82:4b:a1:45:70:82:bb:a0:ff:7e:2f:0e:2c:68:8d: c9:46:90:1f:1c:55:06:cb:ac:e2:3a:aa:e7:2b:dd: 7f:79:4e:77:97:88:b7:94:f2:7d:ed:24:d4:99:be: 44:10:6b:60:5f:de:df:f2:78:d5:70:66:a1:1f:f3: ae:0e:d4:29:c5:eb:dc:ec:0e:4e:ce:54:22:7d:d2: 8f:89:ad:28:3c:6b:1d:e6:19:dd:25:fd:42:e5:a2: fd:c3:0c:55:e7:ab:b6:68:04:43:bb:c4:50:0e:e3: ec:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:00:D9:2C:C8:91:B6:E4:0C:2F:5B:D6:4E:D0:BA:B7:DD:E6:95:C3 X509v3 Authority Key Identifier: keyid:09:8F:D2:18:61:70:49:5F:E8:BC:B3:7D:95:B9:26:3F:19:FC:CE:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e2:d7:92:76:9b:dd:21:02:9e:8a:b1:73:87:59:d6:f4:fe: 9e:e6:9e:cb:0c:c7:c8:f1:e8:ea:fd:14:62:ba:fa:69:85:11: 75:78:17:95:d9:bb:9c:a0:e8:c4:5c:35:06:d2:80:0e:af:9a: 09:20:cb:06:10:cc:59:3b:ba:38:bd:ec:29:cf:03:5c:f2:e4: 3c:00:59:a9:aa:b1:7b:fd:c9:b5:08:25:14:58:05:dd:49:a3: 1a:58:50:6e:1a:75:e2:f5:f2:ca:9f:00:64:28:71:d5:ce:8e: a6:d9:9b:ec:12:b0:f6:20:50:55:38:03:a8:23:a0:1e:5e:37: 44:f0:0c:fb:a6:d7:52:43:8d:3f:03:9f:a9:d2:cb:d1:f1:f4: ec:23:3a:a6:fa:ca:e3:0a:c6:92:f3:7a:99:7d:06:07:cf:9a: 4a:6b:5c:d0:07:c7:40:4a:d6:57:73:b2:96:3e:b2:59:6c:bf: 85:ed:68:e9:90:93:a5:99:4c:52:1c:2a:f0:8e:64:8b:24:1d: 1f:3e:07:c6:00:59:10:65:6f:5a:eb:1f:cf:55:3c:1a:55:80: 0a:9a:e3:05:ad:b5:66:70:2b:9e:67:5d:07:4c:55:c0:94:cd: 63:4d:14:b0:01:1e:6a:cd:d7:aa:cf:6e:db:59:3b:39:e7:22: 00:be:8e:57 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NUVBMzExMC8GA1UEBRMoMDk4RkQyMTg2MTcwNDk1RkU4QkNCMzdEOTVCOTI2M0Yx OUZDQ0U4OTAeFw0yNTA4MDkwNzM1NDVaFw0yNTA4MTYwNzM1NDVaMBgxFjAUBgNV BAMTDTY4OTZmYTUxLTg0OGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCTfUepiYRq2I2D2B2OdXgiuL31rm1ZRehMOGmWCbViDKbwAHQzIJiihQzHrXb+ zk9Vz4aD5WF5pF1QJEIqaAUHkiA4y4w7SSTb3GIuBbO5rsQiyy9IlOpAzzQs5dax hQyYtedVbf/8YU0xiXFAxnm0lZXFeCkX+npCWk20c0ZbXNK/IPBS7TH3EUw87LZL L7CE21QGYYJLoUVwgrug/34vDixojclGkB8cVQbLrOI6qucr3X95TneXiLeU8n3t JNSZvkQQa2Bf3t/yeNVwZqEf864O1CnF69zsDk7OVCJ90o+JrSg8ax3mGd0l/ULl ov3DDFXnq7ZoBEO7xFAO4+wtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCQDZLMiR tuQML1vWTtC6t93mlcMwHwYDVR0jBBgwFoAUCY/SGGFwSV/ovLN9lbkmPxn8zokw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1RUEzLzkyMzAyNERFRTgx RjExRUY5RUZDQkY1MEM0RjlBRTAyL0NZX1NHR0Z3U1Zfb3ZMTjlsYmttUHhuOHpv ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1lfU0dHRndTVl9vdkxOOWxia21QeG44em9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 RUEzLzkyMzAyNERFRTgxRjExRUY5RUZDQkY1MEM0RjlBRTAyL0NZX1NHR0Z3U1Zf b3ZMTjlsYmttUHhuOHpvay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABri15J2m90hAp6KsXOHWdb0/p7mnssMx8jx6Or9FGK6+mmFEXV4F5XZ u5yg6MRcNQbSgA6vmgkgywYQzFk7uji97CnPA1zy5DwAWamqsXv9ybUIJRRYBd1J oxpYUG4adeL18sqfAGQocdXOjqbZm+wSsPYgUFU4A6gjoB5eN0TwDPum11JDjT8D n6nSy9Hx9OwjOqb6yuMKxpLzepl9BgfPmkprXNAHx0BK1ldzspY+sllsv4XtaOmQ k6WZTFIcKvCOZIskHR8+B8YAWRBlb1rrH89VPBpVgAqa4wWttWZwK55nXQdMVcCU zWNNFLABHmrN16rPbttZOznnIgC+jlc= -----END CERTIFICATE-----Generated at Sat Aug 9 14:33:31 2025 by rpki-client