$ rpki-client -vvf rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft File: CY_SGGFwSV_ovLN9lbkmPxn8zok.mft (raw, json) Hash identifier: K8JaEFz6yHb6GS+p1dIL6ZBIhGpKODgN1NRpZjZ28Z8= Subject key identifier: 22:AD:EE:63:5F:8D:22:C0:E4:37:C9:4D:63:64:14:79:93:E2:2F:71 Authority key identifier: 09:8F:D2:18:61:70:49:5F:E8:BC:B3:7D:95:B9:26:3F:19:FC:CE:89 Certificate issuer: /CN=A9165EA3/serialNumber=098FD2186170495FE8BCB37D95B9263F19FCCE89 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft Manifest number: 2A Signing time: Thu 01 May 2025 06:45:43 +0000 Manifest this update: Thu 01 May 2025 06:45:43 +0000 Manifest next update: Thu 08 May 2025 06:45:43 +0000 Files and hashes: 1: CY_SGGFwSV_ovLN9lbkmPxn8zok.crl (hash: M4joNJKdKIegZHEh5xz4/3cpA7YQJlWBnyD3DSX8zDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.crl rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 06:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165EA3, serialNumber=098FD2186170495FE8BCB37D95B9263F19FCCE89 Validity Not Before: May 1 06:45:43 2025 GMT Not After : May 8 06:45:43 2025 GMT Subject: CN=68131897-58b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bc:ac:7f:80:74:f5:f5:9e:c2:43:58:e0:09: a5:2d:da:66:6f:8c:c1:72:b8:fa:ce:06:37:aa:b3: 15:f2:e7:1a:a6:07:c7:55:b8:11:d9:ee:80:57:f7: 29:6f:e8:65:8c:14:7c:e5:b1:37:10:be:c1:f2:36: eb:41:eb:a4:94:24:e6:ea:90:b2:2a:0f:a1:68:68: 98:fe:fe:ca:1d:03:37:24:a7:04:f4:b2:91:e7:9c: e3:bf:01:e9:e3:0e:db:38:dd:f3:54:6e:25:b3:16: 84:b0:ae:60:ea:47:5c:28:26:b5:a3:b3:b3:f9:4b: 09:b2:5e:56:40:f2:c7:a8:0d:cd:d8:81:38:c6:b6: a0:e4:de:d5:f0:5f:eb:f9:21:b3:c5:d7:c1:f8:90: 81:ed:73:87:05:8a:8a:d8:10:d2:b4:25:de:41:c1: 56:0d:05:58:11:53:f8:18:3a:7c:a1:59:31:7f:2b: 0e:89:a7:1a:54:9f:ec:af:5a:9b:c1:b4:ea:05:1c: 47:54:46:6c:df:c6:38:09:95:b0:dc:7d:c8:8f:48: a0:cf:b6:91:56:27:2e:df:e0:1f:36:fc:c8:bf:ca: dd:17:40:9f:bb:ad:e2:b0:21:4e:7d:81:bd:d4:d4: c0:12:ff:91:34:55:90:c2:22:01:b5:9a:3f:9e:87: f1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AD:EE:63:5F:8D:22:C0:E4:37:C9:4D:63:64:14:79:93:E2:2F:71 X509v3 Authority Key Identifier: keyid:09:8F:D2:18:61:70:49:5F:E8:BC:B3:7D:95:B9:26:3F:19:FC:CE:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:90:d5:12:f7:20:20:cf:b1:c5:0d:83:78:cd:10:ea:7c:7f: b0:6f:70:a0:5b:52:2b:a0:b6:95:de:3e:18:55:34:60:7c:b8: 86:a6:11:69:57:3d:24:79:52:fc:d5:5d:22:b8:1a:dd:5c:cc: 0e:40:6c:aa:99:71:87:54:8e:82:9d:62:42:13:87:67:ed:58: 35:85:a2:2d:25:99:e3:b3:3e:f6:7a:8a:90:f9:a7:48:b1:df: 76:f9:e5:d7:ac:01:4a:0e:99:5d:6b:0e:8d:27:47:3c:d6:b9: 95:bc:dd:5e:f5:70:32:c1:56:67:6f:8a:a4:50:23:c3:b6:22: ab:44:d8:83:7b:50:06:53:6c:1b:94:88:52:67:27:02:a4:a9: 3f:03:6f:98:45:0a:05:e0:3c:8f:5f:64:c0:7a:81:50:fe:90: 3d:8d:84:dc:f4:45:d2:94:6d:c4:5e:10:60:d3:42:7e:1c:be: ed:0e:6f:3c:ac:4d:91:77:03:86:4c:66:69:b9:10:e4:af:7e: d7:8c:12:42:d2:ac:81:29:30:61:29:3e:a4:7d:16:b9:b2:73: f8:b6:71:13:1d:f3:b5:c0:7f:68:a5:91:17:a3:37:e8:26:93: 6e:70:89:13:a6:4c:62:b2:28:2c:81:33:24:7f:73:84:73:c1: 05:2b:49:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NUVBMzExMC8GA1UEBRMoMDk4RkQyMTg2MTcwNDk1RkU4QkNCMzdEOTVCOTI2M0Yx OUZDQ0U4OTAeFw0yNTA1MDEwNjQ1NDNaFw0yNTA1MDgwNjQ1NDNaMBgxFjAUBgNV BAMTDTY4MTMxODk3LTU4YjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGvKx/gHT19Z7CQ1jgCaUt2mZvjMFyuPrOBjeqsxXy5xqmB8dVuBHZ7oBX9ylv 6GWMFHzlsTcQvsHyNutB66SUJObqkLIqD6FoaJj+/sodAzckpwT0spHnnOO/Aenj Dts43fNUbiWzFoSwrmDqR1woJrWjs7P5SwmyXlZA8seoDc3YgTjGtqDk3tXwX+v5 IbPF18H4kIHtc4cFiorYENK0Jd5BwVYNBVgRU/gYOnyhWTF/Kw6JpxpUn+yvWpvB tOoFHEdURmzfxjgJlbDcfciPSKDPtpFWJy7f4B82/Mi/yt0XQJ+7reKwIU59gb3U 1MAS/5E0VZDCIgG1mj+eh/FVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIq3uY1+N IsDkN8lNY2QUeZPiL3EwHwYDVR0jBBgwFoAUCY/SGGFwSV/ovLN9lbkmPxn8zokw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1RUEzLzkyMzAyNERFRTgx RjExRUY5RUZDQkY1MEM0RjlBRTAyL0NZX1NHR0Z3U1Zfb3ZMTjlsYmttUHhuOHpv ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1lfU0dHRndTVl9vdkxOOWxia21QeG44em9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 RUEzLzkyMzAyNERFRTgxRjExRUY5RUZDQkY1MEM0RjlBRTAyL0NZX1NHR0Z3U1Zf b3ZMTjlsYmttUHhuOHpvay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGaQ1RL3ICDPscUNg3jNEOp8f7BvcKBbUiugtpXePhhVNGB8uIamEWlX PSR5UvzVXSK4Gt1czA5AbKqZcYdUjoKdYkITh2ftWDWFoi0lmeOzPvZ6ipD5p0ix 33b55desAUoOmV1rDo0nRzzWuZW83V71cDLBVmdviqRQI8O2IqtE2IN7UAZTbBuU iFJnJwKkqT8Db5hFCgXgPI9fZMB6gVD+kD2NhNz0RdKUbcReEGDTQn4cvu0Obzys TZF3A4ZMZmm5EOSvfteMEkLSrIEpMGEpPqR9Frmyc/i2cRMd87XAf2ilkRejN+gm k25wiROmTGKyKCyBMyR/c4RzwQUrSds= -----END CERTIFICATE-----Generated at Thu May 1 08:54:18 2025 by rpki-client