$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft File: ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft (raw, json) Hash identifier: P7e7e7CCxz4CjlxD8iKhJ52znMQRqlp/BW2ptGhE5co= Subject key identifier: 2F:E1:BC:7C:0B:4C:B7:E1:75:A3:0F:15:B3:C8:7A:9C:E5:A9:1D:41 Authority key identifier: CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8 Certificate issuer: /CN=A912BD8E/serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft Manifest number: 91 Signing time: Sun 19 Oct 2025 09:42:46 +0000 Manifest this update: Sun 19 Oct 2025 09:42:45 +0000 Manifest next update: Sun 26 Oct 2025 09:42:45 +0000 Files and hashes: 1: ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl (hash: Tza9LZVKXbgPxltQdISHURjtML71J22u8nQsS1nga28=) 2: 095AF45ECE8911EFBEC5D618C4F9AE02.roa (hash: iL/PBiyd9MkCdvYQaI6UeCRqtACDsGFoCR1Zc+51I4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BD8E, serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8 Validity Not Before: Oct 19 09:42:45 2025 GMT Not After : Oct 26 09:42:45 2025 GMT Subject: CN=68f4b296-6a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:86:17:6b:2c:8b:d7:73:98:e1:9c:c0:f4:f4: f2:db:94:3c:d2:62:28:51:72:10:e4:39:d6:30:8d: b6:bd:a8:2f:df:23:0b:f2:1d:21:d0:d4:77:64:14: d9:e5:11:c7:26:c0:27:25:1c:01:7f:fc:54:b6:59: 25:b1:e6:b0:2d:92:29:c3:9b:0c:30:a8:10:d7:9e: d8:4b:ef:2c:17:3f:43:1b:b9:2a:35:f8:d9:a4:09: 81:f5:01:4b:a0:5a:68:b1:1a:fb:68:18:0c:fa:08: 6a:ea:0a:c9:a8:84:42:9f:30:5b:07:5b:fb:21:f0: 60:fd:b6:3e:c9:03:69:fb:f7:f4:3d:bc:9c:2b:7b: 2b:a7:5e:30:ac:5c:7c:2b:c5:8c:42:a3:93:ce:2c: 57:be:9f:08:a1:dc:37:4f:3f:36:21:d2:88:7a:7f: 8d:c4:63:73:6d:ea:15:21:5c:51:a0:d5:e2:bb:a2: d9:4e:3d:6d:b4:df:78:9b:4d:61:f2:99:2c:2c:40: 4c:53:f2:b0:6a:b7:fd:68:aa:f2:aa:0d:4e:f5:f8: 44:e2:aa:8b:db:c4:d6:90:23:da:cb:19:b2:69:da: 59:95:a8:78:44:60:94:de:1f:fd:e1:27:95:40:9c: ec:6b:ac:f3:f3:a6:ed:10:9e:25:df:5a:83:9c:73: c3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E1:BC:7C:0B:4C:B7:E1:75:A3:0F:15:B3:C8:7A:9C:E5:A9:1D:41 X509v3 Authority Key Identifier: keyid:CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:4b:8f:51:7d:7c:c2:1c:30:e5:d8:57:c1:e9:b5:fc:73:31: 7b:8f:f7:6a:89:4c:aa:dc:e7:1b:5b:ce:d5:da:d6:85:d4:8c: 39:16:e5:fc:8a:69:40:04:32:fb:c9:f3:c6:58:4f:2b:5d:4f: 6d:71:d9:46:5f:c7:8a:5b:36:69:a8:00:80:87:0f:c8:db:e2: 5d:c9:5c:87:7b:9d:3e:e0:b8:cd:ad:dd:6d:00:2a:02:5f:62: 7a:b3:6e:17:65:c8:ba:a3:73:a0:ec:ec:d3:61:6e:68:98:58: ff:ad:61:c1:5f:db:f0:62:21:d6:96:3f:04:04:ea:56:19:fd: fb:64:b5:05:3b:26:3b:96:a9:fa:2f:2d:b6:5b:f7:47:49:f2: 14:47:b5:7c:c2:89:56:74:de:b8:83:93:56:80:5f:9d:18:84: 32:cf:1d:9d:cf:89:18:57:01:6e:0a:8a:17:48:93:9c:b1:20: b8:f6:96:e8:c3:b3:99:e1:d8:a1:21:b5:84:8e:0f:07:2c:3b: be:55:c6:42:9f:4d:48:95:5e:dc:2a:93:3e:b7:92:88:8a:17: 9f:c6:ee:c3:3f:95:06:a0:39:c4:6f:4b:46:28:24:93:9a:41: 4c:f1:1f:89:42:b9:34:53:f4:61:b1:37:26:73:b3:9c:ae:47: 3f:c2:76:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJEOEUxMTAvBgNVBAUTKENBNTczRjA5MDBCRjY0MkNCMUUwM0EzQjZDNDVDNjk2 OUU3NzIzRDgwHhcNMjUxMDE5MDk0MjQ1WhcNMjUxMDI2MDk0MjQ1WjAYMRYwFAYD VQQDEw02OGY0YjI5Ni02YTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6IYXayyL13OY4ZzA9PTy25Q80mIoUXIQ5DnWMI22vagv3yML8h0h0NR3ZBTZ 5RHHJsAnJRwBf/xUtlklseawLZIpw5sMMKgQ157YS+8sFz9DG7kqNfjZpAmB9QFL oFposRr7aBgM+ghq6grJqIRCnzBbB1v7IfBg/bY+yQNp+/f0PbycK3srp14wrFx8 K8WMQqOTzixXvp8Iodw3Tz82IdKIen+NxGNzbeoVIVxRoNXiu6LZTj1ttN94m01h 8pksLEBMU/Kwarf9aKryqg1O9fhE4qqL28TWkCPayxmyadpZlah4RGCU3h/94SeV QJzsa6zz86btEJ4l31qDnHPDvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/hvHwL TLfhdaMPFbPIepzlqR1BMB8GA1UdIwQYMBaAFMpXPwkAv2QsseA6O2xFxpaedyPY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkQ4RS80M0Q5MTk3Q0NF ODgxMUVGODdDMDcxMTdDNEY5QUUwMi95bGNfQ1FDX1pDeXg0RG83YkVYR2xwNTNJ OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lsY19DUUNfWkN5eDREbzdiRVhHbHA1M0k5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkQ4RS80M0Q5MTk3Q0NFODgxMUVGODdDMDcxMTdDNEY5QUUwMi95bGNfQ1FDX1pD eXg0RG83YkVYR2xwNTNJOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqS49RfXzCHDDl2FfB6bX8czF7j/dqiUyq3OcbW87V2taF1Iw5FuX8 imlABDL7yfPGWE8rXU9tcdlGX8eKWzZpqACAhw/I2+JdyVyHe50+4LjNrd1tACoC X2J6s24XZci6o3Og7OzTYW5omFj/rWHBX9vwYiHWlj8EBOpWGf37ZLUFOyY7lqn6 Ly22W/dHSfIUR7V8wolWdN64g5NWgF+dGIQyzx2dz4kYVwFuCooXSJOcsSC49pbo w7OZ4dihIbWEjg8HLDu+VcZCn01IlV7cKpM+t5KIihefxu7DP5UGoDnEb0tGKCST mkFM8R+JQrk0U/RhsTcmc7Ocrkc/wnaC -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:43 2025 by rpki-client