$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft File: ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft (raw, json) Hash identifier: PvmpVJYDUQoYebWjE01VmjrC/LSxX3HQmvsG12V3oc8= Subject key identifier: A7:A7:0E:21:E9:93:0C:E4:04:F1:43:4C:12:1C:C9:79:AD:36:ED:50 Authority key identifier: CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8 Certificate issuer: /CN=A912BD8E/serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft Manifest number: 74 Signing time: Sat 23 Aug 2025 07:03:01 +0000 Manifest this update: Sat 23 Aug 2025 07:03:01 +0000 Manifest next update: Sat 30 Aug 2025 07:03:01 +0000 Files and hashes: 1: ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl (hash: TV2KcUJaOlnFfn/XfDDXSklohntaPO+yEsTuUaFYsmk=) 2: 095AF45ECE8911EFBEC5D618C4F9AE02.roa (hash: iL/PBiyd9MkCdvYQaI6UeCRqtACDsGFoCR1Zc+51I4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BD8E, serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8 Validity Not Before: Aug 23 07:03:01 2025 GMT Not After : Aug 30 07:03:01 2025 GMT Subject: CN=68a967a5-7474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ea:db:e4:3a:06:c4:00:59:fd:2f:49:b9:43: bc:74:db:4c:03:b5:7c:73:a6:79:e4:65:76:7a:ef: e5:9b:64:7c:d0:1a:07:5a:5d:36:46:cc:7c:8a:81: 81:24:91:84:cb:d1:da:5d:f6:02:77:9f:0b:af:54: 31:9a:71:a3:54:27:74:a3:91:02:cb:e6:88:49:23: 10:ea:f5:86:3f:f0:87:a3:4c:0a:77:dc:81:e9:bc: 5f:03:1f:dc:36:a0:93:01:b8:ab:5b:94:a5:85:ae: 05:df:a3:dd:2a:4f:29:d6:15:3c:09:4a:ec:29:ef: 49:09:e7:72:e2:2d:a9:13:e2:f8:e8:b9:2e:aa:b5: a9:42:51:7b:f9:ee:b1:dd:7b:bc:14:2f:0f:63:f6: 8d:5f:af:f5:db:d1:08:9a:fa:e9:ce:c1:88:ed:bf: cf:d1:e9:01:f9:ff:aa:68:4b:e8:a9:32:d2:10:9b: 04:9e:8d:07:67:63:b7:1f:ec:28:e0:b8:3e:3c:c7: 7b:c7:9f:00:0f:ce:80:a7:32:6b:3a:90:c8:db:2b: 48:8d:8a:d8:1b:18:74:f4:33:6d:72:49:a7:4b:6f: 23:82:b9:6b:29:77:d2:10:1b:7c:f3:86:aa:a8:ed: 9e:6c:88:63:ed:3b:93:2e:0c:a1:9b:32:f9:33:9f: 90:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A7:0E:21:E9:93:0C:E4:04:F1:43:4C:12:1C:C9:79:AD:36:ED:50 X509v3 Authority Key Identifier: keyid:CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:9f:6c:71:48:a0:e4:15:dc:b4:80:1f:8d:ae:0b:5c:6d:55: e6:b1:be:40:27:a0:fb:41:fc:e6:30:d0:96:59:b0:71:98:ca: 32:65:58:52:e8:3f:1b:18:89:62:20:bb:86:20:60:22:dc:16: 83:55:58:2b:72:0a:f5:cf:82:61:d9:8e:55:83:d5:bd:c1:e8: d8:cc:3f:20:fb:75:99:3d:94:17:e5:91:71:30:d6:c0:48:07: eb:26:c9:c2:04:02:5b:2f:a8:c5:7a:43:f9:a6:c1:74:b3:75: 54:73:2b:eb:5c:84:cc:59:08:9f:6a:92:5d:f5:dc:90:48:00: 81:e5:ec:57:cc:d9:01:61:dd:61:c8:6a:19:d5:74:04:dc:5d: 0b:c6:6b:91:83:8e:e1:94:8d:f1:b0:1d:0a:97:1e:3c:fa:3e: 57:ad:36:eb:e1:01:5d:93:89:12:ab:db:bf:de:45:6a:69:6d: 3a:bc:7d:2c:4e:3d:d5:05:c5:e2:8f:34:2a:bc:da:87:24:81: 44:57:85:ed:87:24:99:c2:9d:b7:32:73:06:a1:a7:f0:42:7b: 98:d2:c3:0a:1b:36:d9:9a:8d:33:23:16:20:6d:69:9f:49:1c: 1e:9b:13:a1:37:14:87:b4:51:ff:32:01:19:ea:1c:e0:84:fd: 30:83:1e:7e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QkQ4RTExMC8GA1UEBRMoQ0E1NzNGMDkwMEJGNjQyQ0IxRTAzQTNCNkM0NUM2OTY5 RTc3MjNEODAeFw0yNTA4MjMwNzAzMDFaFw0yNTA4MzAwNzAzMDFaMBgxFjAUBgNV BAMTDTY4YTk2N2E1LTc0NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCV6tvkOgbEAFn9L0m5Q7x020wDtXxzpnnkZXZ67+WbZHzQGgdaXTZGzHyKgYEk kYTL0dpd9gJ3nwuvVDGacaNUJ3SjkQLL5ohJIxDq9YY/8IejTAp33IHpvF8DH9w2 oJMBuKtblKWFrgXfo90qTynWFTwJSuwp70kJ53LiLakT4vjouS6qtalCUXv57rHd e7wULw9j9o1fr/Xb0Qia+unOwYjtv8/R6QH5/6poS+ipMtIQmwSejQdnY7cf7Cjg uD48x3vHnwAPzoCnMms6kMjbK0iNitgbGHT0M21ySadLbyOCuWspd9IQG3zzhqqo 7Z5siGPtO5MuDKGbMvkzn5DRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp6cOIemT DOQE8UNMEhzJea027VAwHwYDVR0jBBgwFoAUylc/CQC/ZCyx4Do7bEXGlp53I9gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCRDhFLzQzRDkxOTdDQ0U4 ODExRUY4N0MwNzExN0M0RjlBRTAyL3lsY19DUUNfWkN5eDREbzdiRVhHbHA1M0k5 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveWxjX0NRQ19aQ3l4NERvN2JFWEdscDUzSTlnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC RDhFLzQzRDkxOTdDQ0U4ODExRUY4N0MwNzExN0M0RjlBRTAyL3lsY19DUUNfWkN5 eDREbzdiRVhHbHA1M0k5Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGefbHFIoOQV3LSAH42uC1xtVeaxvkAnoPtB/OYw0JZZsHGYyjJlWFLo PxsYiWIgu4YgYCLcFoNVWCtyCvXPgmHZjlWD1b3B6NjMPyD7dZk9lBflkXEw1sBI B+smycIEAlsvqMV6Q/mmwXSzdVRzK+tchMxZCJ9qkl313JBIAIHl7FfM2QFh3WHI ahnVdATcXQvGa5GDjuGUjfGwHQqXHjz6PletNuvhAV2TiRKr27/eRWppbTq8fSxO PdUFxeKPNCq82ockgURXhe2HJJnCnbcycwahp/BCe5jSwwobNtmajTMjFiBtaZ9J HB6bE6E3FIe0Uf8yARnqHOCE/TCDHn4= -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:16 2025 by rpki-client