$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft File: ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft (raw, json) Hash identifier: BVPzm/uBMUBOsoyMRHs/aZLYhyu3WT+W1SZPBaTYQ4M= Subject key identifier: 46:57:E7:8F:C0:ED:C7:02:87:D0:D2:B0:A6:80:2F:C8:B2:85:36:29 Authority key identifier: CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8 Certificate issuer: /CN=A912BD8E/serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft Manifest number: 53 Signing time: Thu 19 Jun 2025 06:35:38 +0000 Manifest this update: Thu 19 Jun 2025 06:35:38 +0000 Manifest next update: Thu 26 Jun 2025 06:35:38 +0000 Files and hashes: 1: ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl (hash: Y+nNyDLoF3UKwctqQCU+kqVOCeWGniYlwuik6taaslA=) 2: 095AF45ECE8911EFBEC5D618C4F9AE02.roa (hash: iL/PBiyd9MkCdvYQaI6UeCRqtACDsGFoCR1Zc+51I4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BD8E, serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8 Validity Not Before: Jun 19 06:35:38 2025 GMT Not After : Jun 26 06:35:38 2025 GMT Subject: CN=6853afba-5b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c0:3c:fb:0a:1f:5c:65:55:fb:8c:f4:f3:cc: 89:e7:e7:37:af:a9:14:1e:11:fc:93:98:5f:f9:c7: 99:02:b3:ce:e5:ca:7a:72:50:6e:7c:41:13:35:13: da:cc:6c:82:0e:03:a5:86:d9:16:dd:d1:ae:98:3b: 26:11:47:b5:f8:ae:3e:63:2f:b7:6a:14:df:ab:31: e7:a5:16:4b:53:f4:e8:38:1f:eb:2a:ff:e5:70:24: 2c:4e:1a:02:9f:f3:fb:32:d4:f7:df:01:35:d0:79: f7:d7:14:13:5f:8e:32:fc:f1:72:3f:98:b4:d2:6a: c6:5d:cc:f8:81:11:fa:a1:8d:2d:e0:9f:6b:44:92: 29:02:5d:ff:a9:0c:66:94:d4:1c:e5:9c:bc:51:67: e2:c5:d2:a6:f3:a3:19:e9:1b:64:98:fb:4d:20:91: 6a:8b:61:2b:c0:a1:7f:69:64:34:3f:30:aa:1b:c2: 24:24:b8:c9:b3:04:f8:38:9c:13:70:36:1d:02:ea: 7f:b8:ee:06:27:54:0f:19:96:9f:df:dc:b9:72:ac: 81:9a:ee:6c:56:0c:a4:b7:d7:fc:b6:44:ea:35:d9: 8a:e3:c1:05:cc:93:e0:79:57:12:8e:29:46:53:18: f0:10:3a:50:a3:43:47:02:30:a3:69:00:3c:d9:64: 16:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:57:E7:8F:C0:ED:C7:02:87:D0:D2:B0:A6:80:2F:C8:B2:85:36:29 X509v3 Authority Key Identifier: keyid:CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:7c:bd:97:3c:e0:f3:fd:e9:e6:bf:17:3e:f8:e3:c8:ef:5a: df:2e:c5:6c:f7:e7:c3:e6:a8:72:4c:b9:72:ef:1e:85:64:89: 3a:20:89:63:ab:47:5a:c0:1d:e7:42:e5:a9:0b:b0:de:52:13: e3:b5:81:3f:43:76:6d:0e:ac:14:9a:8d:6e:35:a6:50:4b:a3: ca:d9:23:68:33:37:e5:24:06:37:92:e6:64:43:ea:69:5b:9a: 3a:57:e5:2c:d2:9b:42:47:e0:af:4d:23:69:f6:8e:27:83:26: 21:78:2f:06:c4:82:41:ed:b0:0c:53:f9:13:e2:7e:36:fa:0f: 62:2a:58:98:8c:90:83:01:e2:39:6c:f2:1e:3b:00:d1:db:a0: 04:f8:c7:88:60:cc:44:38:d0:57:b2:cc:06:d1:54:e8:df:87: 39:64:26:ea:fb:15:5c:90:27:f8:d5:f8:fe:c2:27:e5:cb:a9: cf:1f:90:2b:8a:a0:dd:d9:5e:c4:b6:49:a1:cb:2e:28:a0:b6: 90:59:24:da:fd:30:5e:cd:2d:06:44:f1:68:99:e1:0a:78:35: 18:7f:57:87:ce:75:65:89:91:03:00:e9:57:d9:6b:b0:dc:a4: b0:91:c0:38:d7:45:f6:24:92:be:0d:bd:88:3b:88:0c:60:64: a1:b8:f5:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QkQ4RTExMC8GA1UEBRMoQ0E1NzNGMDkwMEJGNjQyQ0IxRTAzQTNCNkM0NUM2OTY5 RTc3MjNEODAeFw0yNTA2MTkwNjM1MzhaFw0yNTA2MjYwNjM1MzhaMBgxFjAUBgNV BAMTDTY4NTNhZmJhLTViMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDywDz7Ch9cZVX7jPTzzInn5zevqRQeEfyTmF/5x5kCs87lynpyUG58QRM1E9rM bIIOA6WG2Rbd0a6YOyYRR7X4rj5jL7dqFN+rMeelFktT9Og4H+sq/+VwJCxOGgKf 8/sy1PffATXQeffXFBNfjjL88XI/mLTSasZdzPiBEfqhjS3gn2tEkikCXf+pDGaU 1BzlnLxRZ+LF0qbzoxnpG2SY+00gkWqLYSvAoX9pZDQ/MKobwiQkuMmzBPg4nBNw Nh0C6n+47gYnVA8Zlp/f3LlyrIGa7mxWDKS31/y2ROo12YrjwQXMk+B5VxKOKUZT GPAQOlCjQ0cCMKNpADzZZBZRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURlfnj8Dt xwKH0NKwpoAvyLKFNikwHwYDVR0jBBgwFoAUylc/CQC/ZCyx4Do7bEXGlp53I9gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCRDhFLzQzRDkxOTdDQ0U4 ODExRUY4N0MwNzExN0M0RjlBRTAyL3lsY19DUUNfWkN5eDREbzdiRVhHbHA1M0k5 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveWxjX0NRQ19aQ3l4NERvN2JFWEdscDUzSTlnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC RDhFLzQzRDkxOTdDQ0U4ODExRUY4N0MwNzExN0M0RjlBRTAyL3lsY19DUUNfWkN5 eDREbzdiRVhHbHA1M0k5Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD18vZc84PP96ea/Fz7448jvWt8uxWz358PmqHJMuXLvHoVkiTogiWOr R1rAHedC5akLsN5SE+O1gT9Ddm0OrBSajW41plBLo8rZI2gzN+UkBjeS5mRD6mlb mjpX5SzSm0JH4K9NI2n2jieDJiF4LwbEgkHtsAxT+RPifjb6D2IqWJiMkIMB4jls 8h47ANHboAT4x4hgzEQ40FeyzAbRVOjfhzlkJur7FVyQJ/jV+P7CJ+XLqc8fkCuK oN3ZXsS2SaHLLiigtpBZJNr9MF7NLQZE8WiZ4Qp4NRh/V4fOdWWJkQMA6VfZa7Dc pLCRwDjXRfYkkr4NvYg7iAxgZKG49U8= -----END CERTIFICATE-----Generated at Fri Jun 20 22:24:02 2025 by rpki-client