$ rpki-client -vvf rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft File: ymnk-Ceb-DMZDLciXOn922bT-VE.mft (raw, json) Hash identifier: 4Vyh9Y1FPn0mretHd3aJqddq+9YusIn3vi/YSnPPdAs= Subject key identifier: F8:C7:75:DB:06:40:1E:CA:E7:7A:BC:8D:C0:39:A6:E9:3C:9C:E1:5E Authority key identifier: CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 Certificate issuer: /CN=A911C14C/serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Certificate serial: 099D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft Manifest number: 0996 Signing time: Fri 22 Aug 2025 20:12:53 +0000 Manifest this update: Fri 22 Aug 2025 20:12:53 +0000 Manifest next update: Fri 29 Aug 2025 20:12:53 +0000 Files and hashes: 1: ymnk-Ceb-DMZDLciXOn922bT-VE.crl (hash: 50nkdu/gufIeigtOEmU1BKcE1iw7aUNd6FBbkEu1+hg=) 2: 16E91232932D11EABE8CE524C4F9AE02.roa (hash: EqH7WmDV1P3xtcmJeaOld+bFagaXu060kUoogC5tHYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2461 (0x99d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C14C, serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Validity Not Before: Aug 22 20:12:53 2025 GMT Not After : Aug 29 20:12:53 2025 GMT Subject: CN=68a8cf45-6ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8d:b9:e2:83:f4:71:65:87:81:24:9e:b4:50: 83:2c:aa:cf:ea:8b:93:20:30:78:e6:fc:64:b6:e8: c0:b6:9a:32:a6:cc:2d:4a:5e:95:79:e1:bc:fe:fb: dd:da:08:c7:20:99:31:e5:ee:75:f0:9b:00:c4:1e: b3:c3:d6:ab:e9:3f:3f:c8:70:e6:93:7d:df:65:6c: 58:a9:38:5f:a1:3f:a9:8c:49:2f:4f:e9:09:e0:93: 52:6b:bd:3d:40:a9:78:c2:88:ad:b0:29:31:bc:b9: 26:23:73:ac:94:4f:9e:bf:51:8b:e3:38:34:aa:20: d9:78:db:f0:1c:ff:34:6a:59:9f:1e:45:82:c2:3e: 85:f5:a8:3b:44:a0:3d:7b:b3:9a:14:fd:81:22:24: 32:44:da:8a:3e:73:47:50:b2:31:db:dc:dc:15:ac: 17:1b:64:35:d1:25:e0:5a:7d:5e:83:d1:77:99:cb: 09:15:26:f1:04:89:ee:82:cc:6c:58:fd:2f:f5:d9: 5e:88:31:27:a7:e4:ff:56:a8:5a:85:5e:6e:00:80: d1:b8:c9:f8:f4:8c:ab:82:21:10:da:5a:c6:25:e1: 7c:33:09:f3:4f:31:31:26:fd:d3:b2:ef:88:44:a5: f1:cd:3d:f8:56:2c:d2:a1:0b:99:64:14:1a:20:20: fc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C7:75:DB:06:40:1E:CA:E7:7A:BC:8D:C0:39:A6:E9:3C:9C:E1:5E X509v3 Authority Key Identifier: keyid:CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:0d:dc:6f:46:80:aa:4d:fb:4d:d3:c4:b8:48:9d:c0:f1:30: 02:07:a1:f2:aa:93:8a:1c:e4:82:a2:a5:15:1a:37:31:14:07: 7d:01:c2:4a:0e:20:5d:90:8f:05:15:fd:37:09:a1:af:2a:e3: 0d:5f:b3:9b:19:e9:82:72:f8:ee:11:a1:6a:ed:11:4e:51:2c: 1b:9f:b4:8e:60:96:cb:6a:b7:32:54:55:a2:54:56:c3:15:14: b3:89:69:a8:01:96:77:39:93:8e:73:ab:8e:9e:e9:d9:76:f5: 7b:8c:6a:76:81:09:55:e5:31:93:da:4a:2a:7c:57:11:25:d1: de:4d:39:d6:9c:b5:a0:50:8c:28:ef:36:bd:05:8f:12:ca:4a: 4d:d0:86:3a:01:eb:08:7e:9d:61:9d:c1:ae:ca:c5:a7:2f:f9: 46:18:cc:d6:46:fb:2b:45:73:91:00:65:1f:c6:63:8b:22:e9: 95:14:d5:e9:48:a1:99:74:b9:9e:55:4b:48:51:d9:e0:ec:04: 9f:44:db:ae:82:90:98:b7:2a:67:40:d4:83:50:86:0f:25:86: 75:ae:dc:bf:3f:05:82:ff:bc:2c:9f:f1:df:f6:68:e5:02:b0: ef:ae:58:b2:e2:19:c8:ae:0d:57:05:64:82:ea:92:92:64:bc: 35:8a:08:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxNEMxMTAvBgNVBAUTKENBNjlFNEY4Mjc5QkY4MzMxOTBDQjcyMjVDRTlGRERC NjZEM0Y5NTEwHhcNMjUwODIyMjAxMjUzWhcNMjUwODI5MjAxMjUzWjAYMRYwFAYD VQQDEw02OGE4Y2Y0NS02Y2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA44254oP0cWWHgSSetFCDLKrP6ouTIDB45vxktujAtpoypswtSl6VeeG8/vvd 2gjHIJkx5e518JsAxB6zw9ar6T8/yHDmk33fZWxYqThfoT+pjEkvT+kJ4JNSa709 QKl4woitsCkxvLkmI3OslE+ev1GL4zg0qiDZeNvwHP80almfHkWCwj6F9ag7RKA9 e7OaFP2BIiQyRNqKPnNHULIx29zcFawXG2Q10SXgWn1eg9F3mcsJFSbxBInugsxs WP0v9dleiDEnp+T/VqhahV5uAIDRuMn49IyrgiEQ2lrGJeF8MwnzTzExJv3Tsu+I RKXxzT34VizSoQuZZBQaICD8vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjHddsG QB7K53q8jcA5puk8nOFeMB8GA1UdIwQYMBaAFMpp5Pgnm/gzGQy3Ilzp/dtm0/lR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE0Qy8yQTM2MTEwQzkz MkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1ETVpETGNpWE9uOTIyYlQt VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltbmstQ2ViLURNWkRMY2lYT245MjJiVC1WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE0Qy8yQTM2MTEwQzkzMkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1E TVpETGNpWE9uOTIyYlQtVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaDdxvRoCqTftN08S4SJ3A8TACB6HyqpOKHOSCoqUVGjcxFAd9AcJK DiBdkI8FFf03CaGvKuMNX7ObGemCcvjuEaFq7RFOUSwbn7SOYJbLarcyVFWiVFbD FRSziWmoAZZ3OZOOc6uOnunZdvV7jGp2gQlV5TGT2koqfFcRJdHeTTnWnLWgUIwo 7za9BY8SykpN0IY6AesIfp1hncGuysWnL/lGGMzWRvsrRXORAGUfxmOLIumVFNXp SKGZdLmeVUtIUdng7ASfRNuugpCYtypnQNSDUIYPJYZ1rty/PwWC/7wsn/Hf9mjl ArDvrliy4hnIrg1XBWSC6pKSZLw1ighl -----END CERTIFICATE-----Generated at Sat Aug 23 19:25:54 2025 by rpki-client