$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft File: LYC7UpVYC-No2mj7jQPqtI16xss.mft (raw, json) Hash identifier: ZnmaOa+mi1XPqHVDa/hN8bs4Yl1YyoLYKpbinodOeiA= Subject key identifier: 4D:A8:27:D9:AF:98:87:37:0C:2F:0D:C4:E4:C4:66:3C:10:02:01:3D Authority key identifier: 2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB Certificate issuer: /CN=A91B7948/serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft Manifest number: F4 Signing time: Sun 19 Oct 2025 08:10:23 +0000 Manifest this update: Sun 19 Oct 2025 08:10:23 +0000 Manifest next update: Sun 26 Oct 2025 08:10:23 +0000 Files and hashes: 1: LYC7UpVYC-No2mj7jQPqtI16xss.crl (hash: lK6UbCRcSIoNR8shYvVpMw8rRglZH3nkUNtaBFZ6FKw=) 2: 70ED9D2837D111EF99A8011CC4F9AE02.roa (hash: ON0MiwZBInBHM7jc0lp0894BhHXsr6LrKE7baf75anU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7948, serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB Validity Not Before: Oct 19 08:10:23 2025 GMT Not After : Oct 26 08:10:23 2025 GMT Subject: CN=68f49cef-ff44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2d:b2:30:53:77:32:7d:b0:ec:a7:1e:2d:a5: 20:ac:fa:83:5c:91:9c:a7:da:b2:97:f4:b1:36:f8: d9:f3:d7:5b:a9:3c:eb:ad:76:e4:54:20:f0:50:ea: 64:7b:73:16:99:4f:b2:fc:09:e9:e8:8a:ca:30:55: b1:c1:de:33:65:dc:76:f6:5c:61:9d:06:1c:ee:e4: 79:55:91:37:ce:3d:91:3b:40:0c:22:84:b4:62:2b: ca:2f:77:7c:0b:9c:0c:e9:de:46:82:db:7e:6f:7f: 84:b8:99:e6:9b:93:05:3f:0d:5b:a4:23:25:1f:3e: 51:19:1b:a5:61:8c:50:c1:87:fb:39:37:9d:d7:1b: aa:1b:0d:10:04:cb:c2:07:c5:d5:c5:15:d3:ac:00: c6:48:d7:33:e1:97:d6:d7:06:21:c3:9f:47:d2:7a: 74:b1:2a:f1:32:af:bf:44:20:a5:e9:58:7c:91:0c: 32:e0:b7:3b:37:e4:42:1e:b8:98:57:67:d0:a7:26: 41:23:69:e0:25:22:99:9c:e6:41:f3:8f:47:05:e1: b4:a6:13:95:a1:36:17:9a:e6:8d:00:53:f6:2a:3b: 9b:bc:a7:bf:0e:e7:c1:10:fd:89:8f:65:0d:b7:f2: d8:4c:7d:a9:3e:38:57:90:f3:da:2d:9d:d0:e2:08: 0a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A8:27:D9:AF:98:87:37:0C:2F:0D:C4:E4:C4:66:3C:10:02:01:3D X509v3 Authority Key Identifier: keyid:2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:f1:1b:dd:8f:75:7d:54:ec:e2:3b:ea:0d:77:06:68:cb:01: b9:0d:9d:6d:69:c1:bf:2c:a2:8c:89:b7:b3:9a:67:a8:89:6e: b5:b7:af:aa:ec:79:b9:27:c5:be:4a:27:d7:c4:26:f4:50:24: a8:87:50:67:fe:67:b7:72:cf:c8:ef:85:ba:3c:a8:b9:e6:05: 3d:9b:43:fc:bc:fd:ad:8d:1e:fb:54:f1:21:8e:78:37:f4:54: 08:04:30:de:50:bd:28:ce:45:62:35:e3:01:bc:f2:4c:33:a1: fd:0f:b9:c0:d2:80:c5:39:af:cf:be:de:93:7b:77:c4:c1:81: fc:36:57:ad:84:19:42:84:b7:21:b2:d9:13:94:be:5c:1f:09: ad:2f:1b:15:b3:11:f9:eb:7f:7a:76:8e:d1:ba:ca:0c:3b:12: fb:5c:79:63:f5:5f:5e:79:b7:89:8a:ec:d5:b2:1c:31:8a:e8: 4e:e5:47:ad:da:19:f8:c9:7b:fd:05:dc:bb:75:15:72:de:37: 8c:8d:d0:c6:81:3c:4b:e3:f2:39:49:60:40:59:dd:5f:f1:fa: db:fa:c1:94:be:7b:dd:5e:54:b6:07:50:d8:92:a4:23:b0:2a: 13:2b:5b:b0:40:37:c8:1c:f4:52:0d:5f:d8:8f:ed:f1:5d:23: 34:b1:82:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc5NDgxMTAvBgNVBAUTKDJEODBCQjUyOTU1ODBCRTM2OERBNjhGQjhEMDNFQUI0 OEQ3QUM2Q0IwHhcNMjUxMDE5MDgxMDIzWhcNMjUxMDI2MDgxMDIzWjAYMRYwFAYD VQQDEw02OGY0OWNlZi1mZjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6S2yMFN3Mn2w7KceLaUgrPqDXJGcp9qyl/SxNvjZ89dbqTzrrXbkVCDwUOpk e3MWmU+y/Anp6IrKMFWxwd4zZdx29lxhnQYc7uR5VZE3zj2RO0AMIoS0YivKL3d8 C5wM6d5Ggtt+b3+EuJnmm5MFPw1bpCMlHz5RGRulYYxQwYf7OTed1xuqGw0QBMvC B8XVxRXTrADGSNcz4ZfW1wYhw59H0np0sSrxMq+/RCCl6Vh8kQwy4Lc7N+RCHriY V2fQpyZBI2ngJSKZnOZB849HBeG0phOVoTYXmuaNAFP2KjubvKe/DufBEP2Jj2UN t/LYTH2pPjhXkPPaLZ3Q4ggKywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2oJ9mv mIc3DC8NxOTEZjwQAgE9MB8GA1UdIwQYMBaAFC2Au1KVWAvjaNpo+40D6rSNesbL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzk0OC80NkRDNkIwQTM3 RDAxMUVGODk0NTQ3MUFDNEY5QUUwMi9MWUM3VXBWWUMtTm8ybWo3alFQcXRJMTZ4 c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xZQzdVcFZZQy1ObzJtajdqUVBxdEkxNnhzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzk0OC80NkRDNkIwQTM3RDAxMUVGODk0NTQ3MUFDNEY5QUUwMi9MWUM3VXBWWUMt Tm8ybWo3alFQcXRJMTZ4c3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB8Rvdj3V9VOziO+oNdwZoywG5DZ1tacG/LKKMibezmmeoiW61t6+q 7Hm5J8W+SifXxCb0UCSoh1Bn/me3cs/I74W6PKi55gU9m0P8vP2tjR77VPEhjng3 9FQIBDDeUL0ozkViNeMBvPJMM6H9D7nA0oDFOa/Pvt6Te3fEwYH8NlethBlChLch stkTlL5cHwmtLxsVsxH56396do7RusoMOxL7XHlj9V9eebeJiuzVshwxiuhO5Uet 2hn4yXv9Bdy7dRVy3jeMjdDGgTxL4/I5SWBAWd1f8frb+sGUvnvdXlS2B1DYkqQj sCoTK1uwQDfIHPRSDV/Yj+3xXSM0sYJK -----END CERTIFICATE-----Generated at Mon Oct 20 21:23:52 2025 by rpki-client