$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft File: CygSqDkChy-62yLLBA3ssw_v9Ww.mft (raw, json) Hash identifier: KJVXMIrl94x0gYzvlgkT8YVWBaqS3l7UO3rg64R4Ip4= Subject key identifier: 0B:74:3A:C8:3D:E9:8B:2B:20:6C:83:FB:89:74:69:25:F5:AE:8D:6A Authority key identifier: 0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C Certificate issuer: /CN=A91EAE0A/serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft Manifest number: A9 Signing time: Wed 05 Nov 2025 06:25:33 +0000 Manifest this update: Wed 05 Nov 2025 06:25:32 +0000 Manifest next update: Wed 12 Nov 2025 06:25:32 +0000 Files and hashes: 1: CygSqDkChy-62yLLBA3ssw_v9Ww.crl (hash: +DrOlGyTYwVRhC2gYNrFJcytWbVmRxEnjLSePtP1el8=) 2: 54D1F77EB84611EFB170E471C4F9AE02.roa (hash: +biwJF0qQl4PAaHILuta0LOfQdS1SMB1VEPi0AmtR6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE0A, serialNumber=0B2812A83902872FBADB22CB040DECB30FEFF56C Validity Not Before: Nov 5 06:25:32 2025 GMT Not After : Nov 12 06:25:32 2025 GMT Subject: CN=690aeddd-e448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ca:7d:83:7c:6d:40:aa:c1:24:50:be:b3:ec: 4e:4d:90:cd:e7:87:49:f2:dd:ff:fd:d5:95:a7:ae: ba:2e:3f:4d:27:89:6d:8e:45:9e:48:9e:f7:ac:88: cb:1c:89:f2:58:40:4e:9c:e6:22:50:f6:aa:5b:56: 49:0e:2b:88:7a:c4:53:53:fd:e2:03:6b:fc:f4:64: 34:cf:7e:5d:26:6a:5d:83:a5:a5:a5:c2:d0:4c:12: f1:da:53:b1:37:bb:f1:33:64:dd:d0:1a:d8:34:77: 6f:bf:e7:04:d8:ca:25:57:44:65:17:36:d6:1a:6f: cf:27:04:27:27:2b:ef:28:b9:bf:95:62:f8:74:49: ac:56:c6:6e:2c:35:24:6a:2a:9a:3b:4f:15:5a:52: be:ef:9b:8b:f7:8e:bc:c6:f1:08:92:06:e4:cf:7b: 4f:9e:9c:67:a9:ad:2b:e6:b7:c6:bf:44:71:ac:05: 42:57:58:8d:b8:b0:37:6b:1a:3a:e3:8b:3e:fe:de: 02:05:dd:0d:36:2f:0a:81:ff:91:3d:c4:ed:ee:3c: 4d:a0:bb:6a:ff:be:0c:33:61:60:e5:86:54:59:cb: b6:2f:0b:ae:bb:f7:3e:6d:15:df:07:ac:bf:8e:45: 94:41:6c:8c:9d:81:ec:52:f3:47:00:ba:2b:7d:6f: 10:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:74:3A:C8:3D:E9:8B:2B:20:6C:83:FB:89:74:69:25:F5:AE:8D:6A X509v3 Authority Key Identifier: keyid:0B:28:12:A8:39:02:87:2F:BA:DB:22:CB:04:0D:EC:B3:0F:EF:F5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CygSqDkChy-62yLLBA3ssw_v9Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/E38366D0B72211EFBC36A748C4F9AE02/CygSqDkChy-62yLLBA3ssw_v9Ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:43:ec:54:fb:aa:1a:d3:10:18:6d:59:7c:08:a0:67:29:fc: 41:1e:78:2e:30:76:2e:c7:09:3e:a2:28:2d:77:81:81:0e:1b: 60:d6:e5:7e:d9:74:9b:d4:27:b3:ed:65:7f:6d:c1:fa:66:d1: 21:16:c1:e1:2f:9e:2c:e7:a0:14:1e:fe:31:ca:5b:2d:70:24: 56:4d:38:b0:e9:3f:03:97:e3:33:51:87:29:c8:9f:6a:40:e5: ac:ce:43:ed:69:9b:db:c3:04:0d:0e:c6:51:79:d6:b5:6d:76: 75:75:33:e3:08:ca:98:26:5e:2f:fe:3f:07:de:88:d6:e5:ac: e9:f0:57:c7:32:b7:32:91:49:f7:02:f3:c3:ce:e3:09:b2:a8: 91:2f:39:1b:70:9f:56:d3:e5:47:28:0e:18:64:45:ac:27:4b: e2:4a:a2:66:ef:16:7d:fa:95:e5:3e:a2:81:5f:ca:f8:c7:81: b6:8d:4f:02:e2:a0:d8:8d:35:3e:9d:e9:dc:e0:b8:49:70:67: b7:41:84:d0:d8:89:ab:e2:19:db:e1:e5:48:93:98:0d:34:93: f3:e4:b0:ba:dd:66:a6:0f:2a:21:c6:17:8c:e3:cb:d0:d3:2c: 34:3d:47:00:bd:8c:af:a9:81:26:96:27:5a:17:65:ab:3c:bb: 4f:7a:30:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFMEExMTAvBgNVBAUTKDBCMjgxMkE4MzkwMjg3MkZCQURCMjJDQjA0MERFQ0Iz MEZFRkY1NkMwHhcNMjUxMTA1MDYyNTMyWhcNMjUxMTEyMDYyNTMyWjAYMRYwFAYD VQQDEw02OTBhZWRkZC1lNDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4cp9g3xtQKrBJFC+s+xOTZDN54dJ8t3//dWVp666Lj9NJ4ltjkWeSJ73rIjL HInyWEBOnOYiUPaqW1ZJDiuIesRTU/3iA2v89GQ0z35dJmpdg6WlpcLQTBLx2lOx N7vxM2Td0BrYNHdvv+cE2MolV0RlFzbWGm/PJwQnJyvvKLm/lWL4dEmsVsZuLDUk aiqaO08VWlK+75uL9468xvEIkgbkz3tPnpxnqa0r5rfGv0RxrAVCV1iNuLA3axo6 44s+/t4CBd0NNi8Kgf+RPcTt7jxNoLtq/74MM2Fg5YZUWcu2Lwuuu/c+bRXfB6y/ jkWUQWyMnYHsUvNHALorfW8QNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAt0Osg9 6YsrIGyD+4l0aSX1ro1qMB8GA1UdIwQYMBaAFAsoEqg5AocvutsiywQN7LMP7/Vs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUwQS9FMzgzNjZEMEI3 MjIxMUVGQkMzNkE3NDhDNEY5QUUwMi9DeWdTcURrQ2h5LTYyeUxMQkEzc3N3X3Y5 V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N5Z1NxRGtDaHktNjJ5TExCQTNzc3dfdjlXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUwQS9FMzgzNjZEMEI3MjIxMUVGQkMzNkE3NDhDNEY5QUUwMi9DeWdTcURrQ2h5 LTYyeUxMQkEzc3N3X3Y5V3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRQ+xU+6oa0xAYbVl8CKBnKfxBHnguMHYuxwk+oigtd4GBDhtg1uV+ 2XSb1Cez7WV/bcH6ZtEhFsHhL54s56AUHv4xylstcCRWTTiw6T8Dl+MzUYcpyJ9q QOWszkPtaZvbwwQNDsZReda1bXZ1dTPjCMqYJl4v/j8H3ojW5azp8FfHMrcykUn3 AvPDzuMJsqiRLzkbcJ9W0+VHKA4YZEWsJ0viSqJm7xZ9+pXlPqKBX8r4x4G2jU8C 4qDYjTU+nenc4LhJcGe3QYTQ2Imr4hnb4eVIk5gNNJPz5LC63WamDyohxheM48vQ 0yw0PUcAvYyvqYEmlidaF2WrPLtPejCL -----END CERTIFICATE-----Generated at Wed Nov 5 16:38:21 2025 by rpki-client