$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft File: CygSqDkChy-62yLLBA3ssw_v9Ww.mft (raw, json) Hash identifier: imdW2j0i2zjjahiUEJajvz7WrE7knvnpBqw633C9YKg= Subject key identifier: 9C:C5:67:1A:27:F4:5D:32:87:83:20:B5:0E:3E:BA:F8:BE:6E:97:08 Authority key identifier: 0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C Certificate issuer: /CN=A91EAE0A/serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft Manifest number: 48 Signing time: Fri 25 Apr 2025 06:23:43 +0000 Manifest this update: Fri 25 Apr 2025 06:23:42 +0000 Manifest next update: Fri 02 May 2025 06:23:42 +0000 Files and hashes: 1: CygSqDkChy-62yLLBA3ssw_v9Ww.crl (hash: ykR6IGWEmQMWRNuYQABHgnNWvfpiX/GgemFeiA+yg5E=) 2: 54D1F77EB84611EFB170E471C4F9AE02.roa (hash: +biwJF0qQl4PAaHILuta0LOfQdS1SMB1VEPi0AmtR6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE0A, serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C Validity Not Before: Apr 25 06:23:42 2025 GMT Not After : May 2 06:23:42 2025 GMT Subject: CN=680b2a6f-d853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:56:de:2b:88:0b:b2:dd:66:90:ac:4b:00:00: a5:c1:09:33:62:36:37:d7:1e:0a:67:71:01:e3:34: 49:0a:fb:e5:ae:84:16:69:e7:d5:2c:2b:51:d0:cb: 2d:e0:f5:a6:54:16:5e:f2:a8:fd:13:03:a4:c8:e2: 45:f0:03:4a:48:08:42:84:3f:3f:c8:7f:41:e4:5e: aa:78:88:be:ad:6b:26:7e:ce:c5:2e:c7:75:bd:8d: ac:09:6f:81:73:ae:d3:89:20:dd:b9:2b:8b:dd:21: 74:f7:fd:a9:b6:8b:df:ff:d0:a0:c6:24:ab:ff:d4: 25:d7:c9:bf:27:9e:7e:1f:a7:31:85:34:e9:7e:34: 3b:31:d9:57:2e:12:32:59:e7:03:dd:b3:86:3b:96: 7e:31:8f:43:26:57:4b:f2:2a:08:82:e6:fb:15:50: 81:aa:b9:81:1e:25:51:e3:27:37:82:17:39:f4:e0: f5:2c:ee:46:a5:b1:de:18:73:da:3e:d7:d1:ca:07: 64:8f:22:16:1c:85:af:ea:34:2b:17:7f:9e:87:f6: 86:22:a0:b7:37:33:4c:78:08:97:22:7a:65:24:de: ff:9a:43:fb:ac:fc:37:9a:1e:3e:61:72:e1:39:9b: 64:6c:c3:8b:89:57:a2:2f:02:c2:aa:67:76:f7:dd: 2d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C5:67:1A:27:F4:5D:32:87:83:20:B5:0E:3E:BA:F8:BE:6E:97:08 X509v3 Authority Key Identifier: keyid:0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:48:d7:1e:64:88:4c:65:3e:35:cb:4c:72:c8:03:84:d9:5a: 78:90:44:d5:1f:6b:9f:03:b3:1d:1c:5f:ab:8c:07:d8:af:f7: d7:1d:07:ab:4c:c7:de:ac:a4:7f:c3:eb:94:d0:42:b2:95:eb: d8:5a:32:47:03:ac:2c:46:64:a5:b7:74:b7:20:81:36:62:1f: 78:d9:6d:83:46:f5:59:9b:a4:61:3d:c1:2b:cc:5c:6d:c0:32: 05:5a:4a:cf:29:08:c7:c1:7b:8f:b6:0d:ed:1a:e5:5a:f6:1b: 23:cc:3b:94:f6:76:3d:ac:36:24:bf:61:1a:b1:80:fe:42:ed: 8e:c3:0d:35:ac:d9:d7:be:10:bf:fe:21:fe:4b:d4:ab:d8:43: f6:4b:b9:08:12:63:51:b8:a1:22:ec:58:84:82:c5:e9:6b:5b: 7c:62:95:b7:17:5a:9f:63:1a:c2:0c:43:8d:de:9e:b7:03:2a: d2:4b:06:06:1b:d4:98:94:88:e2:04:5f:79:a6:5e:94:7c:98: 27:51:56:1b:aa:d4:94:83:bd:f4:e3:7c:39:93:8b:fd:51:dd: d0:a7:75:79:d9:e3:9c:69:40:4d:d4:da:51:1e:9f:e0:ad:f5: 3e:84:f3:2a:a1:44:76:e2:33:8f:e7:0b:d4:69:fb:c1:cb:ef: ad:f8:5e:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QUUwQTExMC8GA1UEBRMoMEIyODEyQTgzOTAyODcyRkJBREIyMkNCMDQwREVDQjMw RkVGRjU2QzAeFw0yNTA0MjUwNjIzNDJaFw0yNTA1MDIwNjIzNDJaMBgxFjAUBgNV BAMTDTY4MGIyYTZmLWQ4NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuVt4riAuy3WaQrEsAAKXBCTNiNjfXHgpncQHjNEkK++WuhBZp59UsK1HQyy3g 9aZUFl7yqP0TA6TI4kXwA0pICEKEPz/If0HkXqp4iL6tayZ+zsUux3W9jawJb4Fz rtOJIN25K4vdIXT3/am2i9//0KDGJKv/1CXXyb8nnn4fpzGFNOl+NDsx2VcuEjJZ 5wPds4Y7ln4xj0MmV0vyKgiC5vsVUIGquYEeJVHjJzeCFzn04PUs7kalsd4Yc9o+ 19HKB2SPIhYcha/qNCsXf56H9oYioLc3M0x4CJciemUk3v+aQ/us/DeaHj5hcuE5 m2Rsw4uJV6IvAsKqZ3b33S2DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnMVnGif0 XTKHgyC1Dj66+L5ulwgwHwYDVR0jBBgwFoAUCygSqDkChy+62yLLBA3ssw/v9Www DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBRTBBL0UzODM2NkQwQjcy MjExRUZCQzM2QTc0OEM0RjlBRTAyL0N5Z1NxRGtDaHktNjJ5TExCQTNzc3dfdjlX dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3lnU3FEa0NoeS02MnlMTEJBM3Nzd192OVd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB RTBBL0UzODM2NkQwQjcyMjExRUZCQzM2QTc0OEM0RjlBRTAyL0N5Z1NxRGtDaHkt NjJ5TExCQTNzc3dfdjlXdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFFI1x5kiExlPjXLTHLIA4TZWniQRNUfa58Dsx0cX6uMB9iv99cdB6tM x96spH/D65TQQrKV69haMkcDrCxGZKW3dLcggTZiH3jZbYNG9VmbpGE9wSvMXG3A MgVaSs8pCMfBe4+2De0a5Vr2GyPMO5T2dj2sNiS/YRqxgP5C7Y7DDTWs2de+EL/+ If5L1KvYQ/ZLuQgSY1G4oSLsWISCxelrW3xilbcXWp9jGsIMQ43enrcDKtJLBgYb 1JiUiOIEX3mmXpR8mCdRVhuq1JSDvfTjfDmTi/1R3dCndXnZ45xpQE3U2lEen+Ct 9T6E8yqhRHbiM4/nC9Rp+8HL7634Xsc= -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:58 2025 by rpki-client