$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft File: ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft (raw, json) Hash identifier: nn+NXV4CJu0VYbwV+ltmT1sVZX/4UWWQQv00+GJfLp4= Subject key identifier: 86:AF:B0:D9:42:1A:99:02:3E:4A:A1:71:CD:6D:E5:2A:A0:BB:8F:30 Authority key identifier: CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8 Certificate issuer: /CN=A912BD8E/serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft Manifest number: 7D Signing time: Tue 09 Sep 2025 06:50:16 +0000 Manifest this update: Tue 09 Sep 2025 06:50:16 +0000 Manifest next update: Tue 16 Sep 2025 06:50:16 +0000 Files and hashes: 1: ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl (hash: AnA7froBuOiU86Et/VxjzxOYBN/2QJaQCNOB2fYdhy8=) 2: 095AF45ECE8911EFBEC5D618C4F9AE02.roa (hash: iL/PBiyd9MkCdvYQaI6UeCRqtACDsGFoCR1Zc+51I4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 06:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BD8E, serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8 Validity Not Before: Sep 9 06:50:16 2025 GMT Not After : Sep 16 06:50:16 2025 GMT Subject: CN=68bfce28-3ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:16:78:97:28:81:1e:01:3c:1a:35:90:a1:07: 93:ac:be:9d:f1:c8:3c:3c:17:4d:91:78:35:5f:59: 78:31:a0:de:a5:42:5d:8d:61:15:2d:bd:44:5f:7a: 5f:b0:d9:33:b5:92:ac:20:e9:92:2c:56:06:4f:8b: 41:86:a8:d8:82:45:54:96:20:22:48:0c:fa:ae:55: 49:fe:38:eb:ad:12:2e:be:54:ac:5d:5a:ec:83:c1: f7:ac:ea:8a:7c:ae:50:7d:ee:63:60:d7:cb:81:4e: ab:da:f5:57:86:ba:24:69:64:50:d6:1f:93:8a:6b: 9f:cb:60:a4:58:0a:37:fd:02:02:80:3c:47:da:1e: 66:9d:c4:37:8c:9a:85:79:75:e8:f6:c3:91:35:43: 51:05:b0:82:84:45:71:4f:b3:30:42:5c:36:2a:c8: bb:2c:4d:f1:25:60:c9:f1:b8:71:07:d4:0e:2d:a9: 48:93:aa:fd:6e:91:51:3f:f2:d5:0e:3b:e9:59:ce: 74:a7:6f:04:49:f1:7d:4e:57:7e:73:44:5d:06:0a: bf:bb:4b:90:b4:56:5d:46:c2:82:a0:6e:ff:64:56: b2:53:77:b2:a7:48:5a:1e:fd:7c:8f:d7:40:60:19: 06:c6:b3:b1:c4:04:4a:bb:3f:e2:bb:f7:5f:3d:2e: e9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AF:B0:D9:42:1A:99:02:3E:4A:A1:71:CD:6D:E5:2A:A0:BB:8F:30 X509v3 Authority Key Identifier: keyid:CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:c7:ad:78:1a:1e:66:d2:2a:cb:77:28:cd:d7:f7:0e:ce:a3: f1:bd:1c:9d:3a:d2:02:8e:2c:b9:9c:4d:14:ce:ac:14:f7:45: c3:c8:53:8b:96:f1:f8:cb:9a:0a:ee:9d:42:a3:eb:02:9c:66: d0:78:bb:c3:06:c4:81:f7:ae:90:57:e9:2c:33:44:46:16:03: 4a:53:6b:28:79:f2:9b:20:ea:28:20:66:af:63:b3:62:d8:c1: 29:8b:26:43:bf:a8:39:d6:b2:3d:55:03:9d:b8:8c:a8:84:25: 56:bd:34:2d:fa:9c:63:c9:97:d9:4e:b5:83:5b:8b:47:cf:70: a2:a1:e2:2f:73:80:f2:40:64:10:24:e6:57:7e:51:44:72:b9: 27:f7:d7:a7:8c:9e:22:b5:91:22:d5:0d:a7:0c:70:85:44:56: b5:86:a6:db:11:ee:3b:cb:80:0d:66:df:f8:d8:c0:90:f3:a4: ca:51:fd:06:aa:a7:48:3a:8b:a6:9f:0a:4c:78:6d:15:71:17: cf:02:c9:b0:24:ff:82:3a:d2:c4:a3:f2:36:16:8e:e7:0b:72: 0a:c8:18:cd:be:ed:f6:4e:a1:9e:5d:31:ad:a1:de:81:06:a3: 81:d0:90:65:a4:dc:42:b2:96:a9:2d:98:90:78:ff:4c:89:84: 45:3f:d2:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QkQ4RTExMC8GA1UEBRMoQ0E1NzNGMDkwMEJGNjQyQ0IxRTAzQTNCNkM0NUM2OTY5 RTc3MjNEODAeFw0yNTA5MDkwNjUwMTZaFw0yNTA5MTYwNjUwMTZaMBgxFjAUBgNV BAMTDTY4YmZjZTI4LTNjYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrFniXKIEeATwaNZChB5Osvp3xyDw8F02ReDVfWXgxoN6lQl2NYRUtvURfel+w 2TO1kqwg6ZIsVgZPi0GGqNiCRVSWICJIDPquVUn+OOutEi6+VKxdWuyDwfes6op8 rlB97mNg18uBTqva9VeGuiRpZFDWH5OKa5/LYKRYCjf9AgKAPEfaHmadxDeMmoV5 dej2w5E1Q1EFsIKERXFPszBCXDYqyLssTfElYMnxuHEH1A4tqUiTqv1ukVE/8tUO O+lZznSnbwRJ8X1OV35zRF0GCr+7S5C0Vl1GwoKgbv9kVrJTd7KnSFoe/XyP10Bg GQbGs7HEBEq7P+K79189Luk5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhq+w2UIa mQI+SqFxzW3lKqC7jzAwHwYDVR0jBBgwFoAUylc/CQC/ZCyx4Do7bEXGlp53I9gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCRDhFLzQzRDkxOTdDQ0U4 ODExRUY4N0MwNzExN0M0RjlBRTAyL3lsY19DUUNfWkN5eDREbzdiRVhHbHA1M0k5 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveWxjX0NRQ19aQ3l4NERvN2JFWEdscDUzSTlnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC RDhFLzQzRDkxOTdDQ0U4ODExRUY4N0MwNzExN0M0RjlBRTAyL3lsY19DUUNfWkN5 eDREbzdiRVhHbHA1M0k5Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGnHrXgaHmbSKst3KM3X9w7Oo/G9HJ060gKOLLmcTRTOrBT3RcPIU4uW 8fjLmgrunUKj6wKcZtB4u8MGxIH3rpBX6SwzREYWA0pTayh58psg6iggZq9js2LY wSmLJkO/qDnWsj1VA524jKiEJVa9NC36nGPJl9lOtYNbi0fPcKKh4i9zgPJAZBAk 5ld+UURyuSf316eMniK1kSLVDacMcIVEVrWGptsR7jvLgA1m3/jYwJDzpMpR/Qaq p0g6i6afCkx4bRVxF88CybAk/4I60sSj8jYWjucLcgrIGM2+7fZOoZ5dMa2h3oEG o4HQkGWk3EKylqktmJB4/0yJhEU/0nU= -----END CERTIFICATE-----Generated at Tue Sep 9 09:20:31 2025 by rpki-client