$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft File: ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft (raw, json) Hash identifier: FD688Z8wB17SgqyXckIG5h2KefZR9qWpwjgXQrhI4Jg= Subject key identifier: A3:1D:96:5F:AA:E8:96:65:04:74:C0:12:92:F6:4E:5A:31:27:FC:6A Authority key identifier: CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8 Certificate issuer: /CN=A912BD8E/serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft Manifest number: 9A Signing time: Wed 05 Nov 2025 06:34:38 +0000 Manifest this update: Wed 05 Nov 2025 06:34:37 +0000 Manifest next update: Wed 12 Nov 2025 06:34:37 +0000 Files and hashes: 1: ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl (hash: CN8AbH65F5WvRd0rp5AC4b4nW1dckInWrbvCXmDmMnk=) 2: 095AF45ECE8911EFBEC5D618C4F9AE02.roa (hash: iL/PBiyd9MkCdvYQaI6UeCRqtACDsGFoCR1Zc+51I4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BD8E, serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8 Validity Not Before: Nov 5 06:34:37 2025 GMT Not After : Nov 12 06:34:37 2025 GMT Subject: CN=690aeffd-9887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6d:c4:09:3b:a8:48:9f:fb:ff:73:40:f5:30: 6e:8c:1d:8f:73:7f:b9:f5:34:1e:3f:13:5b:cd:57: c5:c1:a4:75:5f:4d:a3:63:a9:76:5c:83:af:ca:03: 2d:8a:a5:4f:9a:ae:68:8c:a7:97:59:c4:dc:93:a1: 60:cf:01:11:a3:50:01:12:17:54:f2:1a:9e:99:39: f0:f4:6a:c3:4c:ab:1a:8c:21:8b:9c:3d:27:2c:55: 54:74:eb:8f:52:57:44:b7:e3:51:64:06:48:37:8f: 71:ee:3e:3b:fe:d9:ef:76:a8:3d:76:09:55:88:56: 75:05:95:4d:49:1f:63:4c:26:1e:af:be:e3:5b:af: 25:f8:e3:1a:ad:71:d3:5d:57:f7:7e:81:7a:50:9d: e9:fb:59:57:49:6e:40:6c:0e:58:b9:9f:bb:8f:76: 7d:bd:91:4a:7d:d7:d2:73:c9:b6:da:e4:6e:21:84: 42:9c:85:ee:b3:35:f5:01:4d:34:46:61:63:5e:2f: 94:09:b8:f0:07:72:c2:06:0f:7c:5f:62:a3:2b:35: d0:c7:e1:8a:ef:1a:80:2f:65:a1:14:4d:2c:77:e0: 70:4e:80:ff:d8:e7:d6:cf:d9:b3:64:9a:f0:57:30: 3d:4c:4c:b7:83:6e:0d:4f:6b:6a:06:40:5b:f7:ae: a7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1D:96:5F:AA:E8:96:65:04:74:C0:12:92:F6:4E:5A:31:27:FC:6A X509v3 Authority Key Identifier: keyid:CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:90:fc:4a:ae:9c:39:bc:a8:ac:3a:5a:d5:69:5d:37:40:0e: b3:4e:7b:e1:da:1e:d6:9f:77:9f:24:ac:5d:1d:4c:19:bd:1e: 28:14:df:b0:f1:5e:df:5f:6a:9f:37:79:ad:f7:68:3e:7a:b8: 7e:d3:a7:ff:51:53:8b:7e:ab:d2:83:2f:e9:ef:4a:e2:7f:ef: 60:c4:0c:ee:b0:e4:c5:38:ac:2b:bc:89:ec:1b:cc:50:58:fe: 41:45:2a:bb:49:c8:ab:96:21:85:e6:11:39:b4:37:45:51:7a: 86:be:0d:07:e9:87:8b:f5:08:7d:dc:62:67:31:63:2c:ac:ab: 6f:97:b1:f7:31:fd:ae:f1:c2:02:f7:48:b2:e3:0c:85:4e:5d: 92:a1:6d:f6:59:a3:c8:57:92:55:81:5e:4a:a1:e8:e5:ca:0c: 0f:43:71:86:14:da:9b:f8:12:b0:10:a0:18:42:01:11:63:6f: 9d:54:ce:36:cf:68:4c:e8:24:5b:ce:d0:f5:d3:6c:83:01:8a: 24:a2:10:a2:21:4c:1c:28:68:23:09:05:4e:4f:bb:51:d6:a7: 8d:24:33:53:d0:31:10:2f:78:7c:1b:cf:e9:ee:df:90:05:0f: 5d:6d:00:09:9f:bb:57:b3:c5:c2:d6:b6:4e:7b:7b:b9:ec:4a: 67:d8:81:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJEOEUxMTAvBgNVBAUTKENBNTczRjA5MDBCRjY0MkNCMUUwM0EzQjZDNDVDNjk2 OUU3NzIzRDgwHhcNMjUxMTA1MDYzNDM3WhcNMjUxMTEyMDYzNDM3WjAYMRYwFAYD VQQDEw02OTBhZWZmZC05ODg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs23ECTuoSJ/7/3NA9TBujB2Pc3+59TQePxNbzVfFwaR1X02jY6l2XIOvygMt iqVPmq5ojKeXWcTck6FgzwERo1ABEhdU8hqemTnw9GrDTKsajCGLnD0nLFVUdOuP UldEt+NRZAZIN49x7j47/tnvdqg9dglViFZ1BZVNSR9jTCYer77jW68l+OMarXHT XVf3foF6UJ3p+1lXSW5AbA5YuZ+7j3Z9vZFKfdfSc8m22uRuIYRCnIXuszX1AU00 RmFjXi+UCbjwB3LCBg98X2KjKzXQx+GK7xqAL2WhFE0sd+BwToD/2OfWz9mzZJrw VzA9TEy3g24NT2tqBkBb966nAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMdll+q 6JZlBHTAEpL2TloxJ/xqMB8GA1UdIwQYMBaAFMpXPwkAv2QsseA6O2xFxpaedyPY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkQ4RS80M0Q5MTk3Q0NF ODgxMUVGODdDMDcxMTdDNEY5QUUwMi95bGNfQ1FDX1pDeXg0RG83YkVYR2xwNTNJ OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lsY19DUUNfWkN5eDREbzdiRVhHbHA1M0k5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkQ4RS80M0Q5MTk3Q0NFODgxMUVGODdDMDcxMTdDNEY5QUUwMi95bGNfQ1FDX1pD eXg0RG83YkVYR2xwNTNJOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwkPxKrpw5vKisOlrVaV03QA6zTnvh2h7Wn3efJKxdHUwZvR4oFN+w 8V7fX2qfN3mt92g+erh+06f/UVOLfqvSgy/p70rif+9gxAzusOTFOKwrvInsG8xQ WP5BRSq7ScirliGF5hE5tDdFUXqGvg0H6YeL9Qh93GJnMWMsrKtvl7H3Mf2u8cIC 90iy4wyFTl2SoW32WaPIV5JVgV5KoejlygwPQ3GGFNqb+BKwEKAYQgERY2+dVM42 z2hM6CRbztD102yDAYokohCiIUwcKGgjCQVOT7tR1qeNJDNT0DEQL3h8G8/p7t+Q BQ9dbQAJn7tXs8XC1rZOe3u57Epn2IFu -----END CERTIFICATE-----Generated at Wed Nov 5 13:34:01 2025 by rpki-client