$ rpki-client -vvf rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft File: CY_SGGFwSV_ovLN9lbkmPxn8zok.mft (raw, json) Hash identifier: wibEhe0pTYX7lQCznE59gRkJpJ7vNvHcCIZuwRRNbSM= Subject key identifier: 53:04:DE:66:00:F0:DD:AE:F4:1E:D5:01:DA:8A:B6:FE:2D:4B:FF:35 Authority key identifier: 09:8F:D2:18:61:70:49:5F:E8:BC:B3:7D:95:B9:26:3F:19:FC:CE:89 Certificate issuer: /CN=A9165EA3/serialNumber=098FD2186170495FE8BCB37D95B9263F19FCCE89 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft Manifest number: 42 Signing time: Thu 19 Jun 2025 06:47:47 +0000 Manifest this update: Thu 19 Jun 2025 06:47:47 +0000 Manifest next update: Thu 26 Jun 2025 06:47:47 +0000 Files and hashes: 1: CY_SGGFwSV_ovLN9lbkmPxn8zok.crl (hash: WWQSYrynrotL/wAWjJHZ/Z4OAtqBMa4rLXAJFYmAAqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.crl rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165EA3, serialNumber=098FD2186170495FE8BCB37D95B9263F19FCCE89 Validity Not Before: Jun 19 06:47:47 2025 GMT Not After : Jun 26 06:47:47 2025 GMT Subject: CN=6853b293-97cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:55:95:a0:81:ab:82:f3:a6:47:61:af:78:72: 36:52:a2:41:6c:ef:59:d9:ec:8e:82:29:9e:ab:05: ea:8f:fe:1e:e6:a3:a6:3b:92:6f:b2:1f:c7:b1:fa: 06:97:81:a3:3c:68:0d:97:f2:93:1a:1c:32:fa:d5: d7:67:ca:1c:34:22:ec:ba:d9:0c:88:b8:e1:0b:91: 1f:35:e4:e0:af:ae:72:0e:16:2f:d1:be:08:b9:0e: 2b:bf:72:3f:68:31:e9:28:0a:2d:dd:79:a1:ed:96: b9:72:ee:d7:4d:b7:23:e9:47:95:42:da:98:77:8a: 74:e8:f2:74:1e:4f:80:c9:a1:1a:ec:eb:29:51:35: c6:c8:ba:12:98:0c:ea:2f:fb:0d:c3:cc:3d:22:c7: 43:a3:7c:a5:3f:68:f9:f6:66:46:03:e7:24:4b:bc: fe:60:a9:18:3b:e6:67:3a:05:0a:21:3b:f1:be:d9: 26:e9:97:4b:24:b1:27:e5:f4:4f:94:24:65:95:0a: 90:ed:3d:27:c3:20:91:8e:ec:37:e5:77:2e:5b:17: cc:ad:2e:6c:74:84:63:bf:58:bc:c5:58:9f:5e:e9: b3:91:0f:fe:de:6a:2a:90:44:16:85:29:d9:93:0e: e9:e0:af:ef:a8:b2:90:96:ad:4c:03:ec:e9:7b:49: 51:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:04:DE:66:00:F0:DD:AE:F4:1E:D5:01:DA:8A:B6:FE:2D:4B:FF:35 X509v3 Authority Key Identifier: keyid:09:8F:D2:18:61:70:49:5F:E8:BC:B3:7D:95:B9:26:3F:19:FC:CE:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:f8:ee:73:33:6e:3c:4b:14:65:d2:4a:f8:77:84:3e:3a:5c: 3b:e9:3f:ae:ca:88:50:9d:9f:be:c3:56:fb:b7:ca:1e:07:bd: a7:14:25:ae:7c:62:38:44:b6:d6:e6:6e:c9:a7:b5:c2:fd:fc: 8c:9f:a2:7a:1a:5b:f6:d1:70:82:6e:ba:fb:8d:3e:18:88:e0: 15:5b:8e:94:eb:7b:c8:a6:3e:59:73:72:9d:b6:f9:d4:e8:3f: b1:70:d2:02:5a:02:a2:c7:2b:87:10:3b:12:e5:4d:f2:0b:91: bb:fd:bb:ea:c3:d4:6d:a7:d2:11:bf:2e:78:69:62:49:77:2b: 2b:cc:e6:32:f2:9e:df:cd:dc:19:04:1e:3b:d2:7a:f0:98:4b: 31:3a:af:05:b4:1d:4d:ac:a1:af:95:b0:96:c7:82:eb:7b:fd: 16:64:b5:cf:a9:68:ea:46:06:2a:8c:d9:81:3d:bd:d0:0e:d5: 38:3b:2a:c8:a6:36:0e:84:2d:bb:45:91:a7:ec:33:d5:ad:ff: d4:95:7c:d0:c6:e7:5f:2e:23:c1:e4:41:a1:cb:2f:7b:a5:f6: f7:2a:53:49:e7:23:ea:e9:a2:02:6c:0b:86:7d:4b:15:a5:7a: 67:1a:18:1d:2d:b2:6f:ce:49:b8:46:b0:98:dd:a0:13:98:93: 52:3a:2f:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NUVBMzExMC8GA1UEBRMoMDk4RkQyMTg2MTcwNDk1RkU4QkNCMzdEOTVCOTI2M0Yx OUZDQ0U4OTAeFw0yNTA2MTkwNjQ3NDdaFw0yNTA2MjYwNjQ3NDdaMBgxFjAUBgNV BAMTDTY4NTNiMjkzLTk3Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPVZWggauC86ZHYa94cjZSokFs71nZ7I6CKZ6rBeqP/h7mo6Y7km+yH8ex+gaX gaM8aA2X8pMaHDL61ddnyhw0Iuy62QyIuOELkR815OCvrnIOFi/Rvgi5Diu/cj9o MekoCi3deaHtlrly7tdNtyPpR5VC2ph3inTo8nQeT4DJoRrs6ylRNcbIuhKYDOov +w3DzD0ix0OjfKU/aPn2ZkYD5yRLvP5gqRg75mc6BQohO/G+2Sbpl0sksSfl9E+U JGWVCpDtPSfDIJGO7Dfldy5bF8ytLmx0hGO/WLzFWJ9e6bORD/7eaiqQRBaFKdmT Dungr++ospCWrUwD7Ol7SVELAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUwTeZgDw 3a70HtUB2oq2/i1L/zUwHwYDVR0jBBgwFoAUCY/SGGFwSV/ovLN9lbkmPxn8zokw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1RUEzLzkyMzAyNERFRTgx RjExRUY5RUZDQkY1MEM0RjlBRTAyL0NZX1NHR0Z3U1Zfb3ZMTjlsYmttUHhuOHpv ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1lfU0dHRndTVl9vdkxOOWxia21QeG44em9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 RUEzLzkyMzAyNERFRTgxRjExRUY5RUZDQkY1MEM0RjlBRTAyL0NZX1NHR0Z3U1Zf b3ZMTjlsYmttUHhuOHpvay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIf47nMzbjxLFGXSSvh3hD46XDvpP67KiFCdn77DVvu3yh4HvacUJa58 YjhEttbmbsmntcL9/IyfonoaW/bRcIJuuvuNPhiI4BVbjpTre8imPllzcp22+dTo P7Fw0gJaAqLHK4cQOxLlTfILkbv9u+rD1G2n0hG/LnhpYkl3KyvM5jLynt/N3BkE HjvSevCYSzE6rwW0HU2soa+VsJbHgut7/RZktc+paOpGBiqM2YE9vdAO1Tg7Ksim Ng6ELbtFkafsM9Wt/9SVfNDG518uI8HkQaHLL3ul9vcqU0nnI+rpogJsC4Z9SxWl emcaGB0tsm/OSbhGsJjdoBOYk1I6LxI= -----END CERTIFICATE-----Generated at Thu Jun 19 22:48:43 2025 by rpki-client