$ rpki-client -vvf rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft File: ymnk-Ceb-DMZDLciXOn922bT-VE.mft (raw, json) Hash identifier: 13zkzuxtB9zujAOM14iZMwiVckE+YVJGb3F1UEGNtks= Subject key identifier: DD:6D:E8:19:40:FA:C5:70:B1:47:DC:5E:DF:45:3F:2C:BA:F7:F3:D7 Authority key identifier: CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 Certificate issuer: /CN=A911C14C/serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Certificate serial: 09BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft Manifest number: 09B3 Signing time: Sat 18 Oct 2025 21:03:19 +0000 Manifest this update: Sat 18 Oct 2025 21:03:18 +0000 Manifest next update: Sat 25 Oct 2025 21:03:18 +0000 Files and hashes: 1: ymnk-Ceb-DMZDLciXOn922bT-VE.crl (hash: IOZz0wQVnv5vlfxM4fZz+8Z0TOH1ors0dKyq71uBRCs=) 2: 16E91232932D11EABE8CE524C4F9AE02.roa (hash: EqH7WmDV1P3xtcmJeaOld+bFagaXu060kUoogC5tHYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2490 (0x9ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C14C, serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Validity Not Before: Oct 18 21:03:18 2025 GMT Not After : Oct 25 21:03:18 2025 GMT Subject: CN=68f40097-d890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c1:e1:9d:c3:e4:ac:9a:64:f7:08:57:b2:4e: 6f:3c:4d:79:85:b3:44:69:46:c1:bc:13:87:a8:3d: 6b:b5:07:38:d5:f8:d6:87:fb:2b:a0:d4:d5:de:33: 8e:9d:ab:97:cd:00:cb:d3:0d:15:8e:d6:71:95:8b: fa:86:67:01:11:cd:55:29:fb:d2:4a:8b:85:9a:2b: 08:a2:9e:65:07:eb:56:30:e0:f6:9d:8f:9a:51:cf: 76:e6:00:15:2f:6a:4b:40:94:b6:14:0e:28:dd:f6: 3a:de:aa:33:79:14:f9:63:a2:48:e4:24:fd:8b:71: 99:c7:1b:91:dd:b4:18:fe:65:e0:3b:60:51:11:46: 9b:99:d6:b1:bb:63:81:5c:d7:a4:76:5e:8b:07:e7: 4c:fa:9e:60:b6:b2:16:51:1c:3e:2c:57:af:f1:09: b6:37:b6:63:8c:25:ee:0c:89:2d:84:04:76:95:99: e7:dc:ee:28:18:93:4c:c7:5c:ab:ff:bd:e5:68:26: 5e:92:08:e6:70:a3:43:6a:5e:d3:c4:73:f6:18:8d: f4:7b:e1:56:2c:e1:b9:1b:10:9e:af:9d:42:7a:51: 43:52:9b:09:2a:74:9b:c8:ae:04:97:aa:74:5c:c3: 31:71:a7:0e:98:53:2d:1b:c8:62:72:de:c2:03:ab: 4a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6D:E8:19:40:FA:C5:70:B1:47:DC:5E:DF:45:3F:2C:BA:F7:F3:D7 X509v3 Authority Key Identifier: keyid:CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:9b:24:c6:47:8c:f1:5d:75:3b:99:3e:46:5f:ca:51:be:d8: 22:3b:e6:98:39:3f:96:c6:02:93:cd:fe:db:ab:d9:34:9b:1b: 83:d9:fb:b0:ad:ff:65:fe:c6:23:7c:1e:45:fa:5e:5c:16:76: d2:4b:32:5c:82:94:54:9a:c6:62:01:85:59:2a:ac:78:2a:ac: 50:25:2f:d4:bd:7b:74:85:d8:e9:31:7b:e4:3a:2a:39:db:75: e8:28:c1:37:fb:bd:a5:20:be:e2:e9:ea:b4:20:63:9c:53:49: 43:61:dd:78:b1:72:d0:70:55:cf:34:b8:b3:74:38:11:53:fd: f9:bf:38:f8:d5:44:1a:39:f1:0a:b9:4a:5d:92:4d:2a:e6:b9: a5:8d:41:9b:52:97:2d:44:1b:cd:16:e2:29:40:86:00:a4:32: 0b:e2:ff:fd:de:16:96:3f:a4:02:95:0a:5c:17:e1:27:6a:49: ea:2d:48:94:94:4e:37:c6:cb:80:32:f5:9f:5c:d2:d7:30:b1: 05:65:4a:a0:e9:75:fa:c3:d2:7f:13:fc:8f:10:1d:42:4a:d7: 39:0b:3d:2c:28:8b:a8:9c:ca:eb:74:93:43:18:32:d8:74:53: 70:ba:ce:ea:ce:26:1b:fd:ba:15:15:34:3c:ba:dc:e4:51:90: 21:9e:e7:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxNEMxMTAvBgNVBAUTKENBNjlFNEY4Mjc5QkY4MzMxOTBDQjcyMjVDRTlGRERC NjZEM0Y5NTEwHhcNMjUxMDE4MjEwMzE4WhcNMjUxMDI1MjEwMzE4WjAYMRYwFAYD VQQDEw02OGY0MDA5Ny1kODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscHhncPkrJpk9whXsk5vPE15hbNEaUbBvBOHqD1rtQc41fjWh/sroNTV3jOO nauXzQDL0w0VjtZxlYv6hmcBEc1VKfvSSouFmisIop5lB+tWMOD2nY+aUc925gAV L2pLQJS2FA4o3fY63qozeRT5Y6JI5CT9i3GZxxuR3bQY/mXgO2BREUabmdaxu2OB XNekdl6LB+dM+p5gtrIWURw+LFev8Qm2N7ZjjCXuDIkthAR2lZnn3O4oGJNMx1yr /73laCZekgjmcKNDal7TxHP2GI30e+FWLOG5GxCer51CelFDUpsJKnSbyK4El6p0 XMMxcacOmFMtG8hict7CA6tKNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1t6BlA +sVwsUfcXt9FPyy69/PXMB8GA1UdIwQYMBaAFMpp5Pgnm/gzGQy3Ilzp/dtm0/lR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE0Qy8yQTM2MTEwQzkz MkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1ETVpETGNpWE9uOTIyYlQt VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltbmstQ2ViLURNWkRMY2lYT245MjJiVC1WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE0Qy8yQTM2MTEwQzkzMkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1E TVpETGNpWE9uOTIyYlQtVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCemyTGR4zxXXU7mT5GX8pRvtgiO+aYOT+WxgKTzf7bq9k0mxuD2fuw rf9l/sYjfB5F+l5cFnbSSzJcgpRUmsZiAYVZKqx4KqxQJS/UvXt0hdjpMXvkOio5 23XoKME3+72lIL7i6eq0IGOcU0lDYd14sXLQcFXPNLizdDgRU/35vzj41UQaOfEK uUpdkk0q5rmljUGbUpctRBvNFuIpQIYApDIL4v/93haWP6QClQpcF+EnaknqLUiU lE43xsuAMvWfXNLXMLEFZUqg6XX6w9J/E/yPEB1CStc5Cz0sKIuonMrrdJNDGDLY dFNwus7qziYb/boVFTQ8utzkUZAhnudH -----END CERTIFICATE-----Generated at Mon Oct 20 08:22:30 2025 by rpki-client