$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft File: CygSqDkChy-62yLLBA3ssw_v9Ww.mft (raw, json) Hash identifier: SFw+Fx32dLI7b/VFZ20AWa4ARNW0MfjU/BFzD6VfNzo= Subject key identifier: 58:A6:56:87:33:48:96:7C:49:92:47:84:07:50:6B:E7:E5:2C:A2:E0 Authority key identifier: 0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C Certificate issuer: /CN=A91EAE0A/serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft Manifest number: 3A Signing time: Sat 29 Mar 2025 06:53:45 +0000 Manifest this update: Sat 29 Mar 2025 06:53:44 +0000 Manifest next update: Sat 05 Apr 2025 06:53:44 +0000 Files and hashes: 1: CygSqDkChy-62yLLBA3ssw_v9Ww.crl (hash: jAOTIMxn34GKgF55Igjtp0kRb3argrQJPxfUgTRMyMo=) 2: 54D1F77EB84611EFB170E471C4F9AE02.roa (hash: +biwJF0qQl4PAaHILuta0LOfQdS1SMB1VEPi0AmtR6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE0A Validity Not Before: Mar 29 06:53:44 2025 GMT Not After : Apr 5 06:53:44 2025 GMT Subject: CN=67e798f8-4cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ef:08:b0:66:00:d0:31:27:33:7c:49:1e:f2: c2:13:f4:7f:c0:56:24:8b:19:e5:15:e6:34:22:e9: 5f:1d:fd:a3:57:e5:5a:b6:6f:9a:f3:bb:0d:da:e4: a2:71:26:c6:3d:bc:e0:ea:54:00:81:5e:d9:3a:23: 76:ee:1a:6e:18:cb:a0:01:ed:7e:8f:0d:33:d6:3b: 18:7d:03:4c:a2:6a:b3:0b:18:e3:13:3a:41:4a:83: 3c:a1:dd:0c:b7:0f:a6:2e:f3:f7:00:ae:a1:5b:16: 9e:47:96:75:4e:0f:1c:97:88:da:26:39:5e:8b:b0: be:93:3c:f9:2d:77:da:6f:28:a8:b3:91:ae:56:0b: d7:56:59:d4:a1:5a:0e:3e:5d:e9:8f:27:2a:6d:0b: f1:d4:e8:a7:de:7e:0b:8c:e7:ff:06:11:3f:be:48: 30:48:ce:40:ef:40:87:e8:15:68:81:c0:98:8d:7a: ac:9a:35:0e:bb:22:c9:bd:62:81:8e:4f:76:d4:81: 4a:17:d6:c1:41:3f:87:f1:cb:e4:83:71:14:cb:fa: 58:f9:38:56:5f:39:c1:4b:7b:aa:be:34:60:d7:33: dd:16:a2:e5:dc:a4:51:85:6e:6e:3f:02:58:7a:ff: 76:17:ea:a0:a8:2f:32:19:33:f6:45:55:13:9a:c1: 72:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A6:56:87:33:48:96:7C:49:92:47:84:07:50:6B:E7:E5:2C:A2:E0 X509v3 Authority Key Identifier: keyid:0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:52:60:52:83:1c:1f:2b:a7:d3:04:b3:2f:04:6b:22:60:c1: 2f:f8:68:48:fd:a7:90:41:82:3a:e0:9e:ba:d3:df:d4:83:62: e9:42:09:f8:75:8f:f4:0d:12:63:0b:6a:dc:f8:a0:60:b3:13: a6:06:a1:6e:a4:75:8d:09:a6:bd:46:d1:ea:0f:12:e2:7b:d3: 34:ab:be:f8:ca:36:62:76:de:00:a0:10:61:05:00:c7:99:c0: c0:51:f8:15:0a:11:fb:ce:da:44:4c:22:6a:75:3f:ca:08:fd: 19:1c:1c:f8:3d:46:cb:6d:b3:a4:cf:eb:75:bf:4e:e4:b1:e0: f6:3c:80:de:6f:34:ba:e8:c4:c6:44:22:a0:7b:36:20:2a:dc: 8f:93:87:0e:b0:e0:f1:6c:51:8f:37:d3:7b:e0:46:73:b9:7e: 05:c1:cf:8d:a0:73:a5:7b:94:66:d3:d0:02:41:55:3e:46:7e: 75:26:f0:68:9d:38:df:a7:65:ec:f8:e8:a2:c5:d1:87:5c:0e: 2e:61:23:83:99:9d:aa:68:74:23:93:5e:2b:43:30:d8:99:21: e3:59:81:78:5c:37:37:83:6a:fd:ed:92:34:23:f3:0d:13:1a: 62:3f:41:c3:b5:00:d8:34:b0:1e:9e:11:26:d8:94:30:b3:6e: 65:f1:d5:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QUUwQTExMC8GA1UEBRMoMEIyODEyQTgzOTAyODcyRkJBREIyMkNCMDQwREVDQjMw RkVGRjU2QzAeFw0yNTAzMjkwNjUzNDRaFw0yNTA0MDUwNjUzNDRaMBgxFjAUBgNV BAMTDTY3ZTc5OGY4LTRjYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA7wiwZgDQMSczfEke8sIT9H/AViSLGeUV5jQi6V8d/aNX5Vq2b5rzuw3a5KJx JsY9vODqVACBXtk6I3buGm4Yy6AB7X6PDTPWOxh9A0yiarMLGOMTOkFKgzyh3Qy3 D6Yu8/cArqFbFp5HlnVODxyXiNomOV6LsL6TPPktd9pvKKizka5WC9dWWdShWg4+ XemPJyptC/HU6KfefguM5/8GET++SDBIzkDvQIfoFWiBwJiNeqyaNQ67Ism9YoGO T3bUgUoX1sFBP4fxy+SDcRTL+lj5OFZfOcFLe6q+NGDXM90WouXcpFGFbm4/Alh6 /3YX6qCoLzIZM/ZFVROawXLHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWKZWhzNI lnxJkkeEB1Br5+UsouAwHwYDVR0jBBgwFoAUCygSqDkChy+62yLLBA3ssw/v9Www DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBRTBBL0UzODM2NkQwQjcy MjExRUZCQzM2QTc0OEM0RjlBRTAyL0N5Z1NxRGtDaHktNjJ5TExCQTNzc3dfdjlX dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3lnU3FEa0NoeS02MnlMTEJBM3Nzd192OVd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB RTBBL0UzODM2NkQwQjcyMjExRUZCQzM2QTc0OEM0RjlBRTAyL0N5Z1NxRGtDaHkt NjJ5TExCQTNzc3dfdjlXdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADtSYFKDHB8rp9MEsy8EayJgwS/4aEj9p5BBgjrgnrrT39SDYulCCfh1 j/QNEmMLatz4oGCzE6YGoW6kdY0Jpr1G0eoPEuJ70zSrvvjKNmJ23gCgEGEFAMeZ wMBR+BUKEfvO2kRMImp1P8oI/RkcHPg9Rstts6TP63W/TuSx4PY8gN5vNLroxMZE IqB7NiAq3I+Thw6w4PFsUY8303vgRnO5fgXBz42gc6V7lGbT0AJBVT5GfnUm8Gid ON+nZez46KLF0YdcDi5hI4OZnapodCOTXitDMNiZIeNZgXhcNzeDav3tkjQj8w0T GmI/QcO1ANg0sB6eESbYlDCzbmXx1TQ= -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:20 2025 by rpki-client