$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft File: CygSqDkChy-62yLLBA3ssw_v9Ww.mft (raw, json) Hash identifier: dcpgmTmrcrUytd5sh9KJbsty71vvubzKk24pBYgycBg= Subject key identifier: D2:E8:B3:30:F9:FF:F6:88:8D:49:20:2A:11:43:25:3C:AF:41:82:A3 Authority key identifier: 0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C Certificate issuer: /CN=A91EAE0A/serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft Manifest number: 59 Signing time: Sat 31 May 2025 06:45:40 +0000 Manifest this update: Sat 31 May 2025 06:45:40 +0000 Manifest next update: Sat 07 Jun 2025 06:45:40 +0000 Files and hashes: 1: CygSqDkChy-62yLLBA3ssw_v9Ww.crl (hash: qm4I9AJo3UsvcVzIlNbDWV2LspXzZ5lQSrDX32RsTEk=) 2: 54D1F77EB84611EFB170E471C4F9AE02.roa (hash: +biwJF0qQl4PAaHILuta0LOfQdS1SMB1VEPi0AmtR6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:45:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE0A, serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C Validity Not Before: May 31 06:45:40 2025 GMT Not After : Jun 7 06:45:40 2025 GMT Subject: CN=683aa594-ddbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:52:97:7d:a7:67:82:6d:d2:d0:31:35:77:f8: 73:d0:df:a6:3e:05:f7:00:43:04:7e:13:6f:00:9d: 7b:1e:4c:e1:9d:83:26:6f:97:67:00:94:37:09:c3: aa:72:36:08:0f:35:4d:63:76:33:11:7c:c9:ae:d0: 3b:e3:5c:29:29:9a:fe:54:21:e9:c9:7a:25:47:50: 61:02:8c:c2:b1:83:85:58:98:6a:da:8f:6b:d3:50: 44:cc:1c:1f:14:65:17:e7:41:a3:40:1c:53:ef:2c: dc:de:cb:b7:d1:44:e6:b8:98:ab:1f:1b:2d:46:bf: 49:6e:74:16:49:dc:98:79:2a:67:6e:72:b0:e0:79: 38:9e:7f:5e:64:8c:52:49:cb:8a:38:b7:2e:5e:7b: 77:bb:d1:83:e7:cb:24:2c:80:b3:00:7c:a7:1a:0f: df:0f:0e:5b:3a:3f:8a:63:88:73:8c:45:d9:7c:27: 11:47:e8:c1:71:9c:44:0c:5a:50:69:c8:5d:bd:5b: 35:4b:67:06:30:31:22:4d:71:61:28:b1:db:40:ea: 9e:0d:37:e4:7f:8c:68:2a:96:76:aa:16:17:90:86: 67:16:ee:99:4b:ef:8f:0c:68:bd:4a:9b:f3:ad:10: 4e:10:8f:1a:dd:d6:0f:2b:16:4b:3e:ea:07:35:bd: 79:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E8:B3:30:F9:FF:F6:88:8D:49:20:2A:11:43:25:3C:AF:41:82:A3 X509v3 Authority Key Identifier: keyid:0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:8b:98:56:26:4c:2e:ce:9d:dd:63:1f:04:cf:08:c6:ca:cb: b9:5c:8c:f9:39:60:f6:18:f3:72:f9:31:6a:ea:02:1c:60:19: 17:c9:b3:19:77:50:1d:b7:29:95:be:53:c1:79:d6:7b:d4:b5: b5:a0:f4:92:99:a9:2a:33:35:03:35:7d:12:1e:19:a8:81:d4: b1:83:b3:02:42:e1:84:2b:8a:f3:58:a5:d7:3a:64:87:52:83: f4:2f:23:03:bd:5c:75:43:28:63:9e:a2:5e:ce:be:09:a3:e0: d8:7a:64:c6:42:07:66:0a:71:b1:63:e4:5c:07:50:69:6d:a9: 65:1b:a3:7b:42:7e:c2:ef:25:bb:4a:9e:70:89:18:93:61:4c: 5b:eb:33:ec:14:68:5f:db:a0:04:a7:5d:62:f1:7d:97:5d:fa: 1e:cf:32:bb:4e:f3:4d:3f:fe:7c:6b:54:84:d4:eb:aa:60:b8: 44:89:04:b6:85:21:73:02:df:47:05:15:0c:0c:74:fd:ca:05: 5a:5a:41:05:c3:8e:7f:2a:97:fa:46:c6:20:d1:7d:69:09:20: 4e:52:dd:fa:62:b7:02:02:2d:cc:bc:1f:88:da:bc:16:c8:c8: aa:cb:ba:86:17:30:8d:96:fa:e5:0d:61:a9:57:a1:f4:fa:ac: 13:dc:0b:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QUUwQTExMC8GA1UEBRMoMEIyODEyQTgzOTAyODcyRkJBREIyMkNCMDQwREVDQjMw RkVGRjU2QzAeFw0yNTA1MzEwNjQ1NDBaFw0yNTA2MDcwNjQ1NDBaMBgxFjAUBgNV BAMTDTY4M2FhNTk0LWRkYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4Upd9p2eCbdLQMTV3+HPQ36Y+BfcAQwR+E28AnXseTOGdgyZvl2cAlDcJw6py NggPNU1jdjMRfMmu0DvjXCkpmv5UIenJeiVHUGECjMKxg4VYmGraj2vTUETMHB8U ZRfnQaNAHFPvLNzey7fRROa4mKsfGy1Gv0ludBZJ3Jh5KmducrDgeTief15kjFJJ y4o4ty5ee3e70YPnyyQsgLMAfKcaD98PDls6P4pjiHOMRdl8JxFH6MFxnEQMWlBp yF29WzVLZwYwMSJNcWEosdtA6p4NN+R/jGgqlnaqFheQhmcW7plL748MaL1Km/Ot EE4Qjxrd1g8rFks+6gc1vXnZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0uizMPn/ 9oiNSSAqEUMlPK9BgqMwHwYDVR0jBBgwFoAUCygSqDkChy+62yLLBA3ssw/v9Www DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBRTBBL0UzODM2NkQwQjcy MjExRUZCQzM2QTc0OEM0RjlBRTAyL0N5Z1NxRGtDaHktNjJ5TExCQTNzc3dfdjlX dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3lnU3FEa0NoeS02MnlMTEJBM3Nzd192OVd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB RTBBL0UzODM2NkQwQjcyMjExRUZCQzM2QTc0OEM0RjlBRTAyL0N5Z1NxRGtDaHkt NjJ5TExCQTNzc3dfdjlXdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK2LmFYmTC7Ond1jHwTPCMbKy7lcjPk5YPYY83L5MWrqAhxgGRfJsxl3 UB23KZW+U8F51nvUtbWg9JKZqSozNQM1fRIeGaiB1LGDswJC4YQrivNYpdc6ZIdS g/QvIwO9XHVDKGOeol7Ovgmj4Nh6ZMZCB2YKcbFj5FwHUGltqWUbo3tCfsLvJbtK nnCJGJNhTFvrM+wUaF/boASnXWLxfZdd+h7PMrtO800//nxrVITU66pguESJBLaF IXMC30cFFQwMdP3KBVpaQQXDjn8ql/pGxiDRfWkJIE5S3fpitwICLcy8H4javBbI yKrLuoYXMI2W+uUNYalXofT6rBPcC8Q= -----END CERTIFICATE-----Generated at Sat May 31 17:12:55 2025 by rpki-client