$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft File: CygSqDkChy-62yLLBA3ssw_v9Ww.mft (raw, json) Hash identifier: ZcSLS3luMtrPKvn4vWYipZqyh641pcGBJAuvzZxYDpg= Subject key identifier: 3A:9D:DC:12:0F:E0:17:1E:2D:20:90:61:E1:F0:CF:C5:79:88:32:98 Authority key identifier: 0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C Certificate issuer: /CN=A91EAE0A/serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft Manifest number: 61 Signing time: Sun 15 Jun 2025 06:11:40 +0000 Manifest this update: Sun 15 Jun 2025 06:11:40 +0000 Manifest next update: Sun 22 Jun 2025 06:11:40 +0000 Files and hashes: 1: CygSqDkChy-62yLLBA3ssw_v9Ww.crl (hash: XOsfY0ThkqLQQ5ByTOzRP+Rtzo1bn6+XnI+PwuT8sck=) 2: 54D1F77EB84611EFB170E471C4F9AE02.roa (hash: +biwJF0qQl4PAaHILuta0LOfQdS1SMB1VEPi0AmtR6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE0A, serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C Validity Not Before: Jun 15 06:11:40 2025 GMT Not After : Jun 22 06:11:40 2025 GMT Subject: CN=684e641c-723a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fd:1f:ae:71:fb:e1:52:0e:c3:9c:71:5f:a5: a7:93:f7:fb:8e:3c:d0:a6:3c:8f:00:9e:b6:bf:ef: 88:0c:83:8f:e4:b0:df:2a:9c:88:72:d0:1a:79:50: ee:85:65:74:7e:76:12:c6:03:42:94:19:bb:01:d6: ce:3a:00:e9:4f:ef:e8:fd:c5:77:1c:33:a5:d5:b5: 4e:4a:14:d2:12:24:d4:67:f4:b9:a1:0a:ff:8b:c3: 96:53:1a:7e:09:d3:55:43:e3:13:9a:ec:18:d0:a5: a9:ac:f2:5d:a5:69:66:ed:f2:f2:44:1d:02:bd:80: e7:24:1f:93:16:cd:1b:95:15:f0:ab:a0:d9:2d:08: b7:ce:38:27:bb:44:98:5c:00:d7:38:64:f5:f6:21: f1:d8:b0:c2:50:a9:c0:53:68:80:51:c9:03:05:48: e2:94:1f:c6:cb:c0:49:1b:c2:06:c0:c3:f5:b8:3c: 50:d8:69:8b:79:3f:65:45:aa:0d:3b:3b:88:b8:2d: bb:16:49:b5:ab:82:9f:8f:3d:95:37:e1:49:bf:0b: 0c:d0:19:7d:4d:d5:c9:0c:06:07:85:34:d8:c9:bb: d7:6b:95:3d:8d:f4:46:49:a8:48:91:0b:a8:c3:b3: af:63:02:bd:b9:c1:ad:fa:3d:9a:00:fb:37:bb:a1: cc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9D:DC:12:0F:E0:17:1E:2D:20:90:61:E1:F0:CF:C5:79:88:32:98 X509v3 Authority Key Identifier: keyid:0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b3:dc:64:97:12:a7:ab:00:ae:ce:bc:cc:93:fa:08:2d:06: e5:01:f8:76:d5:c2:b5:69:2b:7c:52:03:3f:bd:7a:31:d0:07: d9:cf:2c:d1:55:ed:d9:fb:73:91:f3:3f:76:53:2c:66:79:cb: a5:dd:03:5e:15:77:cd:59:d7:b5:dd:2e:94:5e:61:40:c5:5a: 9c:92:c5:44:7c:7f:63:cf:b8:32:08:58:a0:76:2c:b8:6a:7a: c7:f8:37:f7:29:71:50:45:00:77:ee:c8:f8:37:20:fa:db:6c: 3d:17:ca:ee:0e:f2:fd:89:15:79:e1:e4:4e:a8:f4:f2:63:1e: 2d:91:a8:55:06:c2:4f:27:f9:74:c4:b4:02:ac:9e:ba:e6:72: bc:1a:7b:b0:cc:bf:68:43:2c:6d:56:1e:f0:fe:80:08:1c:98: af:90:f0:a6:ee:75:64:ab:de:68:36:6a:92:44:e7:a4:33:8d: 12:e4:41:31:da:6a:1c:8c:e1:44:06:ef:7e:4f:6f:a2:d9:5c: e3:33:19:c7:20:6f:33:ec:c4:22:2f:00:a3:6a:92:11:d6:01: 70:06:d9:11:bb:4d:66:7c:a7:21:70:ce:f5:4d:f1:45:0b:9c: 85:d6:b5:53:b9:7e:b6:0e:d1:db:28:d1:98:ad:1b:1e:f4:64: 7e:c8:b3:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QUUwQTExMC8GA1UEBRMoMEIyODEyQTgzOTAyODcyRkJBREIyMkNCMDQwREVDQjMw RkVGRjU2QzAeFw0yNTA2MTUwNjExNDBaFw0yNTA2MjIwNjExNDBaMBgxFjAUBgNV BAMTDTY4NGU2NDFjLTcyM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa/R+ucfvhUg7DnHFfpaeT9/uOPNCmPI8Anra/74gMg4/ksN8qnIhy0Bp5UO6F ZXR+dhLGA0KUGbsB1s46AOlP7+j9xXccM6XVtU5KFNISJNRn9LmhCv+Lw5ZTGn4J 01VD4xOa7BjQpams8l2laWbt8vJEHQK9gOckH5MWzRuVFfCroNktCLfOOCe7RJhc ANc4ZPX2IfHYsMJQqcBTaIBRyQMFSOKUH8bLwEkbwgbAw/W4PFDYaYt5P2VFqg07 O4i4LbsWSbWrgp+PPZU34Um/CwzQGX1N1ckMBgeFNNjJu9drlT2N9EZJqEiRC6jD s69jAr25wa36PZoA+ze7ocxLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOp3cEg/g Fx4tIJBh4fDPxXmIMpgwHwYDVR0jBBgwFoAUCygSqDkChy+62yLLBA3ssw/v9Www DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBRTBBL0UzODM2NkQwQjcy MjExRUZCQzM2QTc0OEM0RjlBRTAyL0N5Z1NxRGtDaHktNjJ5TExCQTNzc3dfdjlX dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3lnU3FEa0NoeS02MnlMTEJBM3Nzd192OVd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB RTBBL0UzODM2NkQwQjcyMjExRUZCQzM2QTc0OEM0RjlBRTAyL0N5Z1NxRGtDaHkt NjJ5TExCQTNzc3dfdjlXdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGqz3GSXEqerAK7OvMyT+ggtBuUB+HbVwrVpK3xSAz+9ejHQB9nPLNFV 7dn7c5HzP3ZTLGZ5y6XdA14Vd81Z17XdLpReYUDFWpySxUR8f2PPuDIIWKB2LLhq esf4N/cpcVBFAHfuyPg3IPrbbD0Xyu4O8v2JFXnh5E6o9PJjHi2RqFUGwk8n+XTE tAKsnrrmcrwae7DMv2hDLG1WHvD+gAgcmK+Q8KbudWSr3mg2apJE56QzjRLkQTHa ahyM4UQG735Pb6LZXOMzGccgbzPsxCIvAKNqkhHWAXAG2RG7TWZ8pyFwzvVN8UUL nIXWtVO5frYO0dso0ZitGx70ZH7Is0Y= -----END CERTIFICATE-----Generated at Sun Jun 15 09:29:18 2025 by rpki-client