$ rpki-client -vvf rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft File: CY_SGGFwSV_ovLN9lbkmPxn8zok.mft (raw, json) Hash identifier: 4CYrp90EjS+kblk2WEb/SFPb1ELh+URZL5cfpo12WME= Subject key identifier: 41:C9:50:16:78:97:46:4D:F9:49:93:87:6D:DA:1F:3B:F3:BB:BE:57 Authority key identifier: 09:8F:D2:18:61:70:49:5F:E8:BC:B3:7D:95:B9:26:3F:19:FC:CE:89 Certificate issuer: /CN=A9165EA3/serialNumber=098FD2186170495FE8BCB37D95B9263F19FCCE89 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft Manifest number: 70 Signing time: Wed 17 Sep 2025 07:34:45 +0000 Manifest this update: Wed 17 Sep 2025 07:34:44 +0000 Manifest next update: Wed 24 Sep 2025 07:34:44 +0000 Files and hashes: 1: CY_SGGFwSV_ovLN9lbkmPxn8zok.crl (hash: N41geDHN3jNRoMqfNKXHSEZQoZ9sZw5x0mxGbe3MBNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.crl rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:34:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165EA3, serialNumber=098FD2186170495FE8BCB37D95B9263F19FCCE89 Validity Not Before: Sep 17 07:34:44 2025 GMT Not After : Sep 24 07:34:44 2025 GMT Subject: CN=68ca6495-a89b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:18:2a:3a:2c:93:60:e8:35:3a:8e:ca:fa:a5: 7c:4a:66:a7:73:a5:52:d5:d8:bc:c8:47:e3:66:f8: 64:31:b9:b7:f4:02:b8:54:81:af:6c:fc:9b:a5:24: 65:c5:e5:b0:6d:be:ef:2f:c2:d4:b4:28:a8:d6:f0: 09:e3:0e:e4:33:29:97:c4:2f:6a:27:0b:ba:ac:36: 33:67:d0:cb:26:1c:26:ed:d6:82:12:04:08:92:33: e3:c2:f4:0d:5d:c3:e1:eb:d2:dc:dc:dd:ce:1e:96: 49:ee:29:f5:18:79:4a:49:ee:94:c7:fc:b8:60:49: ef:01:e9:95:f2:35:37:35:8b:1d:fb:14:a3:1d:d0: ff:20:ac:5b:c3:0a:21:c9:ee:30:5d:5a:5d:fa:bd: de:84:7f:82:28:61:04:b7:0b:e7:82:81:4b:28:cb: 6a:a0:f3:e7:4a:88:9e:ae:02:10:d0:cd:a3:0c:5e: 32:f0:11:ee:3d:67:c8:58:8e:a4:5a:7e:f6:d9:ea: 83:17:46:c5:b3:1d:52:f0:d2:ad:0a:7f:09:9e:9d: cd:c3:dd:91:97:8c:2e:ae:0a:7d:c1:de:fe:2d:fc: d7:cd:d2:18:39:1b:12:4d:3a:54:d0:22:6a:1b:98: 7e:e7:1f:af:87:b3:1b:52:99:a4:a8:6d:1f:b3:68: 64:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C9:50:16:78:97:46:4D:F9:49:93:87:6D:DA:1F:3B:F3:BB:BE:57 X509v3 Authority Key Identifier: keyid:09:8F:D2:18:61:70:49:5F:E8:BC:B3:7D:95:B9:26:3F:19:FC:CE:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CY_SGGFwSV_ovLN9lbkmPxn8zok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165EA3/923024DEE81F11EF9EFCBF50C4F9AE02/CY_SGGFwSV_ovLN9lbkmPxn8zok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:54:e5:a8:95:77:08:ce:81:34:14:ed:80:05:cb:82:e4:48: 6a:c1:cf:79:49:b8:c0:60:c3:21:6b:3d:aa:01:e5:ff:0f:bc: 56:6b:d5:ff:63:de:72:00:5a:91:c6:34:af:89:c0:a5:cf:33: e2:04:2b:c4:d6:ed:16:39:58:36:20:9e:13:e2:1b:1e:2c:1f: 35:b6:f4:00:68:1f:e4:59:0f:ec:dd:33:ae:cf:ff:ea:2a:1a: af:ba:6a:6a:43:67:11:20:8a:fc:34:86:2e:a3:70:1f:e4:f9: 9a:c1:4e:7c:55:b6:b0:21:f9:65:12:df:32:a6:19:e9:ef:49: 37:0b:73:c0:d5:73:d5:ca:9b:10:cf:5e:b5:e5:3d:cb:f4:12: 42:7c:cb:30:c7:6d:97:1c:cf:d6:b2:1a:10:a5:48:34:76:57: 7e:2d:f6:54:06:86:62:bb:a0:cb:b2:be:5f:de:28:3f:f4:7a: 7e:d9:a9:df:d5:28:23:cb:ce:b9:6c:68:d5:4f:de:1c:7a:36: 81:1b:a9:c3:c4:68:0e:c2:6b:a9:47:16:49:83:01:5a:fe:bd: 4a:62:e2:ef:6c:89:76:15:46:ee:c3:b2:84:24:a7:ce:fe:5c: cc:92:88:17:36:7f:33:09:2c:65:ed:5e:00:55:6a:e3:37:e0: 54:25:c1:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NUVBMzExMC8GA1UEBRMoMDk4RkQyMTg2MTcwNDk1RkU4QkNCMzdEOTVCOTI2M0Yx OUZDQ0U4OTAeFw0yNTA5MTcwNzM0NDRaFw0yNTA5MjQwNzM0NDRaMBgxFjAUBgNV BAMTDTY4Y2E2NDk1LWE4OWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLGCo6LJNg6DU6jsr6pXxKZqdzpVLV2LzIR+Nm+GQxubf0ArhUga9s/JulJGXF 5bBtvu8vwtS0KKjW8AnjDuQzKZfEL2onC7qsNjNn0MsmHCbt1oISBAiSM+PC9A1d w+Hr0tzc3c4elknuKfUYeUpJ7pTH/LhgSe8B6ZXyNTc1ix37FKMd0P8grFvDCiHJ 7jBdWl36vd6Ef4IoYQS3C+eCgUsoy2qg8+dKiJ6uAhDQzaMMXjLwEe49Z8hYjqRa fvbZ6oMXRsWzHVLw0q0Kfwmenc3D3ZGXjC6uCn3B3v4t/NfN0hg5GxJNOlTQImob mH7nH6+HsxtSmaSobR+zaGTlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQclQFniX Rk35SZOHbdofO/O7vlcwHwYDVR0jBBgwFoAUCY/SGGFwSV/ovLN9lbkmPxn8zokw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1RUEzLzkyMzAyNERFRTgx RjExRUY5RUZDQkY1MEM0RjlBRTAyL0NZX1NHR0Z3U1Zfb3ZMTjlsYmttUHhuOHpv ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1lfU0dHRndTVl9vdkxOOWxia21QeG44em9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 RUEzLzkyMzAyNERFRTgxRjExRUY5RUZDQkY1MEM0RjlBRTAyL0NZX1NHR0Z3U1Zf b3ZMTjlsYmttUHhuOHpvay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC1U5aiVdwjOgTQU7YAFy4LkSGrBz3lJuMBgwyFrPaoB5f8PvFZr1f9j 3nIAWpHGNK+JwKXPM+IEK8TW7RY5WDYgnhPiGx4sHzW29ABoH+RZD+zdM67P/+oq Gq+6ampDZxEgivw0hi6jcB/k+ZrBTnxVtrAh+WUS3zKmGenvSTcLc8DVc9XKmxDP XrXlPcv0EkJ8yzDHbZccz9ayGhClSDR2V34t9lQGhmK7oMuyvl/eKD/0en7Zqd/V KCPLzrlsaNVP3hx6NoEbqcPEaA7Ca6lHFkmDAVr+vUpi4u9siXYVRu7DsoQkp87+ XMySiBc2fzMJLGXtXgBVauM34FQlwbg= -----END CERTIFICATE-----Generated at Fri Sep 19 00:59:46 2025 by rpki-client