$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft File: ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft (raw, json) Hash identifier: ewyeA32UZ++PKVXyqC1yR3YXeULi1JQyBD1pH6ohBs8= Subject key identifier: D9:7D:2B:D5:35:F4:AB:F4:EE:26:CD:13:0C:C6:C3:B2:7F:B3:74:8B Authority key identifier: CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8 Certificate issuer: /CN=A912BD8E/serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft Manifest number: 59 Signing time: Tue 01 Jul 2025 07:54:35 +0000 Manifest this update: Tue 01 Jul 2025 07:54:34 +0000 Manifest next update: Tue 08 Jul 2025 07:54:34 +0000 Files and hashes: 1: ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl (hash: ZsDf2b+G+OT34JAy9q6lImxTdCb2LxLnkgSGIlTiBDU=) 2: 095AF45ECE8911EFBEC5D618C4F9AE02.roa (hash: iL/PBiyd9MkCdvYQaI6UeCRqtACDsGFoCR1Zc+51I4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BD8E, serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8 Validity Not Before: Jul 1 07:54:34 2025 GMT Not After : Jul 8 07:54:34 2025 GMT Subject: CN=6863943a-2b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6a:45:37:49:2f:a2:f8:e0:85:3c:f4:65:72: fb:73:ba:16:c6:8b:ab:bd:bd:ce:f0:7a:76:7f:dc: b9:f7:7b:30:6d:61:4d:3d:21:0c:48:2f:38:a1:83: cd:3d:a4:34:44:3b:b7:a2:71:ff:4f:b4:68:37:e1: d2:82:52:65:a3:80:f3:63:2e:62:7e:50:47:93:e6: 96:61:f0:2b:9e:a1:ff:d6:5f:25:3c:95:39:4d:b0: ec:97:9e:0c:ab:d4:d2:b9:50:d4:4c:37:15:d5:7f: 8b:5e:5f:74:f7:42:66:f4:0a:97:e9:44:88:26:2e: 10:84:11:5e:dd:c6:e1:e5:af:29:1e:ab:1f:45:1a: 16:09:06:da:f2:80:db:07:e1:f6:bc:99:8b:75:24: 04:4e:d4:f6:7f:e9:54:1c:a9:3b:c2:a1:75:3d:d4: 9f:4e:75:7b:8c:f7:4d:0f:93:c0:d5:20:a4:49:4f: 18:c9:09:73:0c:d6:ef:bc:d4:e9:6e:77:c4:a2:88: 23:0f:8b:c5:c5:e8:33:20:40:14:71:ed:42:9b:6b: 02:85:20:67:b0:3b:b6:ec:a1:0d:01:25:0f:12:19: 6a:34:c7:0e:69:bc:53:94:0a:aa:39:06:9e:19:b7: a1:94:5c:5a:11:79:e1:58:45:e0:aa:28:f9:4e:c0: af:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7D:2B:D5:35:F4:AB:F4:EE:26:CD:13:0C:C6:C3:B2:7F:B3:74:8B X509v3 Authority Key Identifier: keyid:CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:6c:8e:ec:d3:c6:b5:59:56:57:e9:94:40:e9:6c:de:a2:d9: 97:6b:3f:dd:43:60:fe:af:59:82:e6:fa:59:35:f1:8b:18:8f: 54:34:92:ef:d1:50:45:b7:3e:8f:14:66:5f:8d:9b:be:e1:6f: b9:b1:1e:84:b7:f1:f9:1e:4c:ee:f6:f2:7a:cb:13:a3:1c:d6: a5:2b:64:f7:2f:fa:07:b7:5c:31:2b:6d:c3:c9:b0:50:fe:83: 73:f5:31:cc:10:de:04:4c:de:3d:88:75:56:97:57:9b:b8:a1: 27:c6:e4:f8:81:44:46:6e:a8:5b:ed:8b:30:29:1f:6e:15:76: fb:c1:29:0e:13:4d:f7:07:71:6e:2d:85:2b:d5:13:40:f2:9c: 0d:c0:cf:b2:0c:fe:1c:ef:c7:78:bd:20:79:53:96:fb:f2:d7: 2e:09:39:e1:94:87:ef:88:0b:68:63:91:a6:ef:91:7c:44:50: 7d:3b:0a:75:b7:46:40:63:95:ec:81:65:2e:1a:3a:f5:1f:b2: 73:eb:c5:8e:90:b0:cb:7b:2b:73:da:11:d2:09:3b:c6:6e:70: ff:ac:92:d7:97:a4:9d:4b:42:e3:51:50:bd:4b:57:98:80:6f: 14:41:be:86:d5:2c:0d:49:a2:10:37:d6:6e:e5:5f:ea:7f:dc: d3:ad:d6:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QkQ4RTExMC8GA1UEBRMoQ0E1NzNGMDkwMEJGNjQyQ0IxRTAzQTNCNkM0NUM2OTY5 RTc3MjNEODAeFw0yNTA3MDEwNzU0MzRaFw0yNTA3MDgwNzU0MzRaMBgxFjAUBgNV BAMTDTY4NjM5NDNhLTJiODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNakU3SS+i+OCFPPRlcvtzuhbGi6u9vc7wenZ/3Ln3ezBtYU09IQxILzihg809 pDREO7eicf9PtGg34dKCUmWjgPNjLmJ+UEeT5pZh8Cueof/WXyU8lTlNsOyXngyr 1NK5UNRMNxXVf4teX3T3Qmb0CpfpRIgmLhCEEV7dxuHlrykeqx9FGhYJBtrygNsH 4fa8mYt1JARO1PZ/6VQcqTvCoXU91J9OdXuM900Pk8DVIKRJTxjJCXMM1u+81Olu d8SiiCMPi8XF6DMgQBRx7UKbawKFIGewO7bsoQ0BJQ8SGWo0xw5pvFOUCqo5Bp4Z t6GUXFoReeFYReCqKPlOwK9zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2X0r1TX0 q/TuJs0TDMbDsn+zdIswHwYDVR0jBBgwFoAUylc/CQC/ZCyx4Do7bEXGlp53I9gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCRDhFLzQzRDkxOTdDQ0U4 ODExRUY4N0MwNzExN0M0RjlBRTAyL3lsY19DUUNfWkN5eDREbzdiRVhHbHA1M0k5 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveWxjX0NRQ19aQ3l4NERvN2JFWEdscDUzSTlnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC RDhFLzQzRDkxOTdDQ0U4ODExRUY4N0MwNzExN0M0RjlBRTAyL3lsY19DUUNfWkN5 eDREbzdiRVhHbHA1M0k5Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADJsjuzTxrVZVlfplEDpbN6i2ZdrP91DYP6vWYLm+lk18YsYj1Q0ku/R UEW3Po8UZl+Nm77hb7mxHoS38fkeTO728nrLE6Mc1qUrZPcv+ge3XDErbcPJsFD+ g3P1McwQ3gRM3j2IdVaXV5u4oSfG5PiBREZuqFvtizApH24VdvvBKQ4TTfcHcW4t hSvVE0DynA3Az7IM/hzvx3i9IHlTlvvy1y4JOeGUh++IC2hjkabvkXxEUH07CnW3 RkBjleyBZS4aOvUfsnPrxY6QsMt7K3PaEdIJO8ZucP+skteXpJ1LQuNRUL1LV5iA bxRBvobVLA1JohA31m7lX+p/3NOt1gM= -----END CERTIFICATE-----Generated at Thu Jul 3 06:31:19 2025 by rpki-client