$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft File: LYC7UpVYC-No2mj7jQPqtI16xss.mft (raw, json) Hash identifier: uEb2pDpwItpa20390Kaj1b8PC9WDXC6bMVpsIiYBY5M= Subject key identifier: E5:73:47:1D:CD:EB:6E:D1:0B:AD:05:96:2D:D9:C3:C7:9F:5D:33:01 Authority key identifier: 2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB Certificate issuer: /CN=A91B7948/serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft Manifest number: D7 Signing time: Sat 23 Aug 2025 05:43:10 +0000 Manifest this update: Sat 23 Aug 2025 05:43:09 +0000 Manifest next update: Sat 30 Aug 2025 05:43:09 +0000 Files and hashes: 1: LYC7UpVYC-No2mj7jQPqtI16xss.crl (hash: lNR4dy0mQPkKuipdurYhxpftuugiLj4nLiWPqouOr9E=) 2: 70ED9D2837D111EF99A8011CC4F9AE02.roa (hash: ON0MiwZBInBHM7jc0lp0894BhHXsr6LrKE7baf75anU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7948, serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB Validity Not Before: Aug 23 05:43:09 2025 GMT Not After : Aug 30 05:43:09 2025 GMT Subject: CN=68a954ee-992d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4a:ff:d0:52:96:87:3a:c8:8f:f0:0d:16:a1: a5:5d:f8:99:75:ba:58:06:ee:2f:d3:4e:cb:ef:ad: f5:a2:b6:b8:53:c9:79:fc:f1:b5:b5:46:16:89:39: e9:55:b1:fe:24:14:fd:bd:20:3c:dd:a8:69:ca:71: 17:2c:b7:5d:b1:23:9f:bf:b8:bd:ad:09:93:f4:60: 7c:a5:25:df:39:98:9a:ef:53:ed:45:6a:7c:87:4a: 64:b4:35:f4:10:15:21:de:20:86:77:19:ed:d5:8d: c0:9c:79:5d:13:79:4d:b0:6e:b5:01:f6:8a:d5:8d: 7e:6a:18:0d:55:ff:68:56:5c:4a:f5:2d:b0:eb:91: 56:9c:42:d4:d2:01:2f:64:38:82:38:b5:3a:22:94: a4:47:97:e2:4f:1c:ca:e3:91:9a:29:8c:ca:99:59: a1:dd:1d:2b:b7:08:14:35:68:bb:b0:86:a2:2c:ef: a9:6b:9d:84:14:99:37:52:f7:37:6c:3d:f1:1b:98: 93:a0:9d:b6:77:e5:19:ff:fb:70:4b:8b:f9:10:8e: a2:5f:a5:53:47:fe:8c:03:4b:ed:93:89:d6:5f:d1: c4:d4:76:ee:a6:e1:89:81:95:40:2f:69:af:15:ee: 65:af:18:86:71:29:ec:13:42:a7:cf:c0:a5:29:6b: 67:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:73:47:1D:CD:EB:6E:D1:0B:AD:05:96:2D:D9:C3:C7:9F:5D:33:01 X509v3 Authority Key Identifier: keyid:2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:0d:aa:ad:d0:76:13:ae:32:ee:98:7c:dd:ac:b4:91:af:4a: c7:6e:b0:89:b2:0b:dc:11:75:84:67:62:01:0d:c4:a8:52:c9: 15:cd:e7:1f:5b:1f:06:ac:2e:b9:7d:7c:61:56:35:30:51:5f: bd:71:9c:4c:f6:6a:91:bd:9b:ab:bd:35:a1:cd:2f:e8:15:e7: 0c:d0:77:0c:b7:5e:a7:49:e9:f2:11:87:70:a8:9d:6e:ad:f1: 22:a0:0e:88:4b:12:d7:c4:2b:ad:9e:21:e0:ac:49:a8:b8:ac: f4:14:fd:fc:23:e2:f2:69:2a:3f:8f:be:6d:09:33:fe:56:f7: 2c:3b:51:10:2d:9c:9d:a8:c2:0d:92:0c:03:3a:b7:d4:60:ff: ae:f5:b8:08:ab:10:5d:5a:ea:e7:1b:ec:1a:c9:7b:a8:fa:bf: 42:a1:36:48:5e:5f:86:1a:9b:0f:d8:9b:f3:fc:7d:ae:d9:13: 2a:04:a5:6e:f0:a6:b7:02:bd:23:f1:3f:84:6c:f2:c4:f4:e6: 1f:fd:66:e1:75:b9:10:e9:db:2e:0b:1a:f8:16:bc:cb:4c:92: 21:cd:80:b8:04:11:9a:1c:7e:4b:56:19:30:b8:68:1f:06:fd: d6:13:93:a0:26:2f:6c:81:41:c8:b1:ed:69:4a:c5:bf:8b:86: b1:bb:b1:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc5NDgxMTAvBgNVBAUTKDJEODBCQjUyOTU1ODBCRTM2OERBNjhGQjhEMDNFQUI0 OEQ3QUM2Q0IwHhcNMjUwODIzMDU0MzA5WhcNMjUwODMwMDU0MzA5WjAYMRYwFAYD VQQDEw02OGE5NTRlZS05OTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkr/0FKWhzrIj/ANFqGlXfiZdbpYBu4v007L7631ora4U8l5/PG1tUYWiTnp VbH+JBT9vSA83ahpynEXLLddsSOfv7i9rQmT9GB8pSXfOZia71PtRWp8h0pktDX0 EBUh3iCGdxnt1Y3AnHldE3lNsG61AfaK1Y1+ahgNVf9oVlxK9S2w65FWnELU0gEv ZDiCOLU6IpSkR5fiTxzK45GaKYzKmVmh3R0rtwgUNWi7sIaiLO+pa52EFJk3Uvc3 bD3xG5iToJ22d+UZ//twS4v5EI6iX6VTR/6MA0vtk4nWX9HE1HbupuGJgZVAL2mv Fe5lrxiGcSnsE0Knz8ClKWtnUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVzRx3N 627RC60Fli3Zw8efXTMBMB8GA1UdIwQYMBaAFC2Au1KVWAvjaNpo+40D6rSNesbL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzk0OC80NkRDNkIwQTM3 RDAxMUVGODk0NTQ3MUFDNEY5QUUwMi9MWUM3VXBWWUMtTm8ybWo3alFQcXRJMTZ4 c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xZQzdVcFZZQy1ObzJtajdqUVBxdEkxNnhzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzk0OC80NkRDNkIwQTM3RDAxMUVGODk0NTQ3MUFDNEY5QUUwMi9MWUM3VXBWWUMt Tm8ybWo3alFQcXRJMTZ4c3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSDaqt0HYTrjLumHzdrLSRr0rHbrCJsgvcEXWEZ2IBDcSoUskVzecf Wx8GrC65fXxhVjUwUV+9cZxM9mqRvZurvTWhzS/oFecM0HcMt16nSenyEYdwqJ1u rfEioA6ISxLXxCutniHgrEmouKz0FP38I+LyaSo/j75tCTP+VvcsO1EQLZydqMIN kgwDOrfUYP+u9bgIqxBdWurnG+wayXuo+r9CoTZIXl+GGpsP2Jvz/H2u2RMqBKVu 8Ka3Ar0j8T+EbPLE9OYf/WbhdbkQ6dsuCxr4FrzLTJIhzYC4BBGaHH5LVhkwuGgf Bv3WE5OgJi9sgUHIse1pSsW/i4axu7F7 -----END CERTIFICATE-----Generated at Sun Aug 24 03:07:05 2025 by rpki-client