$ rpki-client -vvf rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft File: ymnk-Ceb-DMZDLciXOn922bT-VE.mft (raw, json) Hash identifier: 0Gmm0whKTyfK+GsrQR+EjtslZ4wyrK0k4ZGiNks6gac= Subject key identifier: F2:FF:8B:61:76:A4:52:41:51:3E:24:9A:80:29:88:4D:44:13:D8:86 Authority key identifier: CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 Certificate issuer: /CN=A911C14C/serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Certificate serial: 0982 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft Manifest number: 097B Signing time: Mon 30 Jun 2025 20:17:59 +0000 Manifest this update: Mon 30 Jun 2025 20:17:58 +0000 Manifest next update: Mon 07 Jul 2025 20:17:58 +0000 Files and hashes: 1: ymnk-Ceb-DMZDLciXOn922bT-VE.crl (hash: S7f3CicmZSIO0NSvZD7LAyHYZIoBw8e+CAmxm9W13AM=) 2: 16E91232932D11EABE8CE524C4F9AE02.roa (hash: EqH7WmDV1P3xtcmJeaOld+bFagaXu060kUoogC5tHYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2434 (0x982) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C14C, serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Validity Not Before: Jun 30 20:17:58 2025 GMT Not After : Jul 7 20:17:58 2025 GMT Subject: CN=6862f0f6-3637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:28:9d:b2:54:93:fc:cc:95:ae:38:97:f6:ec: 73:4e:a9:c1:19:9e:6e:09:5f:7e:c6:b4:8d:8c:44: f6:7c:05:dc:d7:e5:3e:76:0f:2c:87:de:6b:6e:96: c5:4c:95:f4:c6:e4:c2:bd:ea:11:5f:5c:49:dd:c8: f1:bd:26:42:16:78:72:e1:9e:b3:16:a2:51:57:02: bf:75:80:05:cb:92:67:54:66:be:28:1d:7c:c6:ea: 4d:fd:43:21:9d:aa:4d:b7:cd:ed:46:f5:19:e9:18: 88:e4:37:7f:53:8b:c2:91:9f:e7:90:b3:ad:6d:13: 12:b9:5c:30:8d:e8:b7:da:af:c2:5c:5b:f8:a3:98: df:5e:12:b1:47:9f:b5:3d:ef:e1:fb:80:83:5e:df: 3f:c5:23:2a:da:4c:62:e0:c1:54:78:85:78:9b:2e: fd:b3:70:00:2f:9a:88:5b:e2:53:15:7d:f4:1a:84: 41:6a:f1:07:a9:62:bd:5d:b4:b7:a7:9e:48:b7:8d: 60:7d:8f:96:4e:22:38:d6:14:7a:cd:0a:13:f6:51: c5:2a:90:2c:ac:ad:f2:c5:27:50:f7:e5:d1:6e:66: 3b:fe:4e:f8:e0:10:d8:2b:56:66:f8:00:46:e9:04: bd:81:86:79:3d:d8:2b:0d:b0:87:bf:5b:bb:3c:16: a9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FF:8B:61:76:A4:52:41:51:3E:24:9A:80:29:88:4D:44:13:D8:86 X509v3 Authority Key Identifier: keyid:CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b7:38:d7:86:49:4f:ad:97:e0:b5:3e:66:5b:88:64:51:e0: 4f:c0:7a:f1:6b:9e:58:12:56:23:dd:ec:85:52:66:9a:bd:43: d0:0f:21:07:f8:f1:f8:c6:9d:4d:63:8b:38:54:51:0e:15:53: 33:aa:dd:af:83:45:b4:73:13:c7:98:55:7d:45:4a:b4:e3:71: 35:a2:45:a6:3b:12:24:bd:c7:94:c9:fa:5c:16:ec:0f:12:cc: 79:d8:a6:20:3c:01:6e:19:d7:64:22:8f:3e:c4:33:90:d3:32: 04:14:29:18:f1:d3:39:1b:4d:48:06:eb:36:79:d0:eb:a1:65: f4:ba:6d:16:35:63:20:7a:00:a8:74:52:d4:84:c6:14:55:7a: 5b:3b:44:1f:de:7b:67:57:c4:2f:e8:dc:6c:c6:f0:d3:c5:8f: c0:ed:54:b2:bd:27:44:90:63:e8:f7:9c:e2:4f:d7:c0:d2:78: 29:d2:3c:ae:67:8d:c3:5b:e3:31:08:e9:06:e0:1f:7e:37:29: 27:a4:1d:8e:5d:f2:72:f6:27:32:f8:d9:55:15:7e:35:a7:ba: 07:aa:e1:77:cd:9e:b6:ca:cd:ca:f7:a2:5c:82:9a:40:33:18: 3c:1f:ff:48:f6:b5:6d:83:b2:01:50:2d:6a:d1:72:7e:1d:24: 8b:4d:82:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxNEMxMTAvBgNVBAUTKENBNjlFNEY4Mjc5QkY4MzMxOTBDQjcyMjVDRTlGRERC NjZEM0Y5NTEwHhcNMjUwNjMwMjAxNzU4WhcNMjUwNzA3MjAxNzU4WjAYMRYwFAYD VQQDEw02ODYyZjBmNi0zNjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiidslST/MyVrjiX9uxzTqnBGZ5uCV9+xrSNjET2fAXc1+U+dg8sh95rbpbF TJX0xuTCveoRX1xJ3cjxvSZCFnhy4Z6zFqJRVwK/dYAFy5JnVGa+KB18xupN/UMh napNt83tRvUZ6RiI5Dd/U4vCkZ/nkLOtbRMSuVwwjei32q/CXFv4o5jfXhKxR5+1 Pe/h+4CDXt8/xSMq2kxi4MFUeIV4my79s3AAL5qIW+JTFX30GoRBavEHqWK9XbS3 p55It41gfY+WTiI41hR6zQoT9lHFKpAsrK3yxSdQ9+XRbmY7/k744BDYK1Zm+ABG 6QS9gYZ5PdgrDbCHv1u7PBapOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPL/i2F2 pFJBUT4kmoApiE1EE9iGMB8GA1UdIwQYMBaAFMpp5Pgnm/gzGQy3Ilzp/dtm0/lR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE0Qy8yQTM2MTEwQzkz MkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1ETVpETGNpWE9uOTIyYlQt VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltbmstQ2ViLURNWkRMY2lYT245MjJiVC1WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE0Qy8yQTM2MTEwQzkzMkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1E TVpETGNpWE9uOTIyYlQtVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+tzjXhklPrZfgtT5mW4hkUeBPwHrxa55YElYj3eyFUmaavUPQDyEH +PH4xp1NY4s4VFEOFVMzqt2vg0W0cxPHmFV9RUq043E1okWmOxIkvceUyfpcFuwP Esx52KYgPAFuGddkIo8+xDOQ0zIEFCkY8dM5G01IBus2edDroWX0um0WNWMgegCo dFLUhMYUVXpbO0Qf3ntnV8Qv6NxsxvDTxY/A7VSyvSdEkGPo95ziT9fA0ngp0jyu Z43DW+MxCOkG4B9+NyknpB2OXfJy9icy+NlVFX41p7oHquF3zZ62ys3K96JcgppA Mxg8H/9I9rVtg7IBUC1q0XJ+HSSLTYJE -----END CERTIFICATE-----Generated at Wed Jul 2 15:43:55 2025 by rpki-client