$ rpki-client -vvf rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft File: ymnk-Ceb-DMZDLciXOn922bT-VE.mft (raw, json) Hash identifier: JO/Rfr/eafvK2gTcZPJqOgjrwtlmzRZrNMBUcykyKno= Subject key identifier: 6A:E1:60:EE:9B:A9:73:10:F0:0C:7E:4E:A7:F6:F4:E1:71:6F:44:D5 Authority key identifier: CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 Certificate issuer: /CN=A911C14C/serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Certificate serial: 0967 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft Manifest number: 0960 Signing time: Sat 10 May 2025 19:55:07 +0000 Manifest this update: Sat 10 May 2025 19:55:07 +0000 Manifest next update: Sat 17 May 2025 19:55:07 +0000 Files and hashes: 1: ymnk-Ceb-DMZDLciXOn922bT-VE.crl (hash: bHB/62nJAaWvgBJQPqZJhyYCjahkPrArfiOaIrrASyU=) 2: 16E91232932D11EABE8CE524C4F9AE02.roa (hash: EqH7WmDV1P3xtcmJeaOld+bFagaXu060kUoogC5tHYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2407 (0x967) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C14C, serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Validity Not Before: May 10 19:55:07 2025 GMT Not After : May 17 19:55:07 2025 GMT Subject: CN=681faf1b-d736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0b:4a:a8:c3:cb:77:22:77:57:ec:ae:fa:31: 0a:f7:42:c4:60:03:a7:70:13:ac:6d:6d:1a:15:8c: 68:a5:4d:86:c0:0a:38:1e:0a:47:bb:8e:a5:2c:5f: 8f:a6:be:83:d0:e5:8e:8d:a6:45:f5:37:4c:24:44: ac:42:48:2c:4e:f2:26:52:f8:e3:ab:0b:e2:1a:66: b3:f4:1e:87:a5:0e:f2:4a:ca:e6:ff:8a:a5:b7:a7: 62:37:0f:86:d4:73:6c:f8:51:d1:37:78:64:27:5a: 73:51:b0:2b:da:d0:4c:68:a3:8d:98:85:38:2c:aa: cc:71:25:eb:6a:f5:d8:72:36:90:25:6c:6b:5d:a7: fa:0c:85:01:ac:a7:10:0c:33:b5:e4:50:ae:45:4e: 65:38:8c:34:6e:52:a3:47:59:79:a4:fc:50:83:d4: e9:cf:0e:87:48:60:cb:a8:ff:fc:53:a2:60:8f:b6: 89:8f:83:47:f6:cb:48:4f:49:f9:8e:84:7c:cf:41: 42:3b:aa:4b:9c:e6:f3:0b:a0:49:7e:83:3d:d4:0d: 2e:67:5d:3e:af:79:eb:2b:ed:e2:da:43:80:dc:8e: b2:d4:f6:67:91:30:c5:da:50:b4:29:0e:0c:4e:8b: f1:61:65:8a:18:5c:f3:8d:07:14:3b:ba:f4:85:29: 77:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E1:60:EE:9B:A9:73:10:F0:0C:7E:4E:A7:F6:F4:E1:71:6F:44:D5 X509v3 Authority Key Identifier: keyid:CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:20:de:64:c8:3a:f3:61:79:c5:ef:ce:7b:bc:df:c0:2f:23: 3b:58:4d:2a:2a:12:fd:36:5e:28:de:85:d4:55:9d:07:98:f8: 3d:bc:ea:ab:54:9b:da:d3:5d:10:bf:3c:63:8d:2a:d8:8c:27: f0:d0:96:0b:77:c8:c0:5a:78:26:d7:c1:6f:59:3a:61:da:14: 7c:14:43:d3:bc:2f:cf:ec:5c:3e:d9:ca:9d:17:48:bb:b9:fc: 25:ee:85:05:07:67:ed:09:60:fa:fe:45:3e:9f:cf:02:4a:de: eb:7c:48:47:dc:c4:d2:50:e0:2f:ef:da:33:45:39:a4:f2:65: f6:cd:34:02:2b:6f:c7:8c:27:c1:cc:f8:fb:b0:66:d0:27:e5: c1:e4:2f:01:ba:fc:87:c8:e8:06:b4:3d:e6:31:8b:81:83:c0: 82:e4:61:02:b6:3d:05:59:71:45:55:99:89:4e:44:2c:06:cb: 1d:9c:79:e9:7e:c2:b5:3a:22:59:3f:09:a2:7d:54:69:b6:47: fe:ae:e0:17:bc:21:34:c3:5e:b5:80:cf:a1:db:aa:b2:97:2f: 29:c3:f3:76:02:4d:04:cd:91:ea:1c:7d:40:b7:c4:b5:53:52: 0f:15:78:fe:76:50:19:0d:81:35:d1:39:4a:6b:61:b6:bd:72: a0:25:c1:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxNEMxMTAvBgNVBAUTKENBNjlFNEY4Mjc5QkY4MzMxOTBDQjcyMjVDRTlGRERC NjZEM0Y5NTEwHhcNMjUwNTEwMTk1NTA3WhcNMjUwNTE3MTk1NTA3WjAYMRYwFAYD VQQDEw02ODFmYWYxYi1kNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4QtKqMPLdyJ3V+yu+jEK90LEYAOncBOsbW0aFYxopU2GwAo4HgpHu46lLF+P pr6D0OWOjaZF9TdMJESsQkgsTvImUvjjqwviGmaz9B6HpQ7ySsrm/4qlt6diNw+G 1HNs+FHRN3hkJ1pzUbAr2tBMaKONmIU4LKrMcSXravXYcjaQJWxrXaf6DIUBrKcQ DDO15FCuRU5lOIw0blKjR1l5pPxQg9Tpzw6HSGDLqP/8U6Jgj7aJj4NH9stIT0n5 joR8z0FCO6pLnObzC6BJfoM91A0uZ10+r3nrK+3i2kOA3I6y1PZnkTDF2lC0KQ4M TovxYWWKGFzzjQcUO7r0hSl30wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrhYO6b qXMQ8Ax+Tqf29OFxb0TVMB8GA1UdIwQYMBaAFMpp5Pgnm/gzGQy3Ilzp/dtm0/lR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE0Qy8yQTM2MTEwQzkz MkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1ETVpETGNpWE9uOTIyYlQt VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltbmstQ2ViLURNWkRMY2lYT245MjJiVC1WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE0Qy8yQTM2MTEwQzkzMkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1E TVpETGNpWE9uOTIyYlQtVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsIN5kyDrzYXnF7857vN/ALyM7WE0qKhL9Nl4o3oXUVZ0HmPg9vOqr VJva010QvzxjjSrYjCfw0JYLd8jAWngm18FvWTph2hR8FEPTvC/P7Fw+2cqdF0i7 ufwl7oUFB2ftCWD6/kU+n88CSt7rfEhH3MTSUOAv79ozRTmk8mX2zTQCK2/HjCfB zPj7sGbQJ+XB5C8BuvyHyOgGtD3mMYuBg8CC5GECtj0FWXFFVZmJTkQsBssdnHnp fsK1OiJZPwmifVRptkf+ruAXvCE0w161gM+h26qyly8pw/N2Ak0EzZHqHH1At8S1 U1IPFXj+dlAZDYE10TlKa2G2vXKgJcGe -----END CERTIFICATE-----Generated at Sun May 11 19:58:36 2025 by rpki-client