$ rpki-client -vvf rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft File: ymnk-Ceb-DMZDLciXOn922bT-VE.mft (raw, json) Hash identifier: X7KCp0Tze/D81nOH1uHs0R0Tx2+NgTrDzTsPOmm3O+Q= Subject key identifier: C7:9A:D3:C2:4D:30:00:6E:0B:7E:3C:EC:5F:9E:A1:9B:D9:67:FE:65 Authority key identifier: CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 Certificate issuer: /CN=A911C14C/serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Certificate serial: 08B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft Manifest number: 08AF Signing time: Fri 31 May 2024 22:16:31 +0000 Manifest this update: Fri 31 May 2024 22:16:31 +0000 Manifest next update: Fri 07 Jun 2024 22:16:31 +0000 Files and hashes: 1: ymnk-Ceb-DMZDLciXOn922bT-VE.crl (hash: I/GkNZi2ZuBEgDVlDW0ToXn72a3vPGoMkTpf0zBbIAU=) 2: 16E91232932D11EABE8CE524C4F9AE02.roa (hash: QwiCtLOGc39rcsKBJpLs7uJ14+2epM+zhyDLSz46Eug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2229 (0x8b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C14C/serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Validity Not Before: May 31 22:16:31 2024 GMT Not After : Jun 7 22:16:31 2024 GMT Subject: CN=665a4c3f-9ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:79:8b:e8:51:8f:6a:cf:c8:02:e2:5f:6c:54: 5a:33:36:0d:29:67:f4:e1:cf:ae:ab:0b:78:5c:e9: 69:63:c5:ca:b9:76:5d:35:3f:91:7f:ee:6a:85:34: 37:51:27:d0:59:22:3a:37:6f:37:96:d9:cf:80:ee: b7:d7:a2:d3:07:f5:bf:09:8c:e5:a0:be:3c:a7:9d: 91:cc:8a:48:79:cf:91:f9:e6:e4:72:2b:34:93:5e: 94:2c:19:d1:5f:ec:d5:99:c0:9e:62:2b:e3:39:c1: f7:fe:57:e9:2b:d3:8d:db:76:01:20:2a:0a:a3:53: 1d:4c:d6:71:35:a6:91:45:a0:ec:aa:74:74:6c:2a: d6:aa:2b:d7:5c:18:5b:73:d5:4c:c4:d7:d8:f4:70: 42:42:af:e7:c5:d0:e1:8b:0b:09:ee:3d:e8:1b:eb: 6d:c2:1e:cd:53:3b:1e:70:2f:9c:6e:0e:10:2b:c1: 4e:01:5e:da:d7:78:76:13:62:8a:37:66:ad:97:6b: 50:99:c4:bd:3e:da:40:f6:02:9b:f9:0e:29:aa:5d: 1f:e5:67:51:e7:4c:56:26:3a:e7:9f:75:a6:06:87: 98:a4:57:31:7b:4c:6e:98:fd:48:ae:46:68:78:65: 22:79:ce:ce:bc:0b:7b:99:3b:5d:97:19:b6:0d:22: e2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9A:D3:C2:4D:30:00:6E:0B:7E:3C:EC:5F:9E:A1:9B:D9:67:FE:65 X509v3 Authority Key Identifier: keyid:CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ee:36:4d:23:8f:ee:ec:dd:ef:84:a7:35:28:8c:5b:ec:ab: 66:d6:d4:63:03:53:fe:39:7d:07:e1:1e:79:69:4f:0d:a4:e4: 83:9d:61:c0:ba:de:a4:44:f2:ff:47:eb:2e:17:63:11:4b:71: 38:98:f4:63:b3:55:3f:7d:62:0b:e3:03:2a:2b:c7:5b:12:f9: ea:df:cc:bf:bf:38:31:b1:0a:cf:40:bd:12:0f:ae:95:f5:47: 8c:fc:e0:29:93:f0:9e:ab:ac:f6:ed:b2:f3:a4:7c:1a:f7:ae: 88:0e:c8:32:64:c1:98:a8:3d:5c:8a:85:49:fc:da:2d:32:28: 39:32:9e:47:32:fa:e5:4d:7f:6a:41:97:0b:53:03:4f:ef:13: 99:f8:53:50:c3:55:fc:17:08:e0:09:10:1b:1c:fb:c3:24:8d: 20:63:6e:5c:a5:5b:5d:03:e4:68:92:f1:8f:9c:7e:e8:c8:6d: 90:39:87:2d:cb:ca:bc:6b:25:fd:82:ca:6a:3c:de:40:9f:a4: 16:87:a4:31:82:a3:91:d2:ac:e3:92:f4:96:a0:02:70:5d:6b: 09:6a:ab:da:40:98:17:ec:92:c8:3f:e4:44:a9:a5:68:30:7d: 2a:a5:31:b7:4f:f9:a1:2e:77:f7:00:07:9b:4e:ba:02:d9:ea: b7:a9:da:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxNEMxMTAvBgNVBAUTKENBNjlFNEY4Mjc5QkY4MzMxOTBDQjcyMjVDRTlGRERC NjZEM0Y5NTEwHhcNMjQwNTMxMjIxNjMxWhcNMjQwNjA3MjIxNjMxWjAYMRYwFAYD VQQDEw02NjVhNGMzZi05YWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nmL6FGPas/IAuJfbFRaMzYNKWf04c+uqwt4XOlpY8XKuXZdNT+Rf+5qhTQ3 USfQWSI6N283ltnPgO6316LTB/W/CYzloL48p52RzIpIec+R+ebkcis0k16ULBnR X+zVmcCeYivjOcH3/lfpK9ON23YBICoKo1MdTNZxNaaRRaDsqnR0bCrWqivXXBhb c9VMxNfY9HBCQq/nxdDhiwsJ7j3oG+ttwh7NUzsecC+cbg4QK8FOAV7a13h2E2KK N2atl2tQmcS9PtpA9gKb+Q4pql0f5WdR50xWJjrnn3WmBoeYpFcxe0xumP1IrkZo eGUiec7OvAt7mTtdlxm2DSLiuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMea08JN MABuC3487F+eoZvZZ/5lMB8GA1UdIwQYMBaAFMpp5Pgnm/gzGQy3Ilzp/dtm0/lR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE0Qy8yQTM2MTEwQzkz MkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1ETVpETGNpWE9uOTIyYlQt VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltbmstQ2ViLURNWkRMY2lYT245MjJiVC1WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE0Qy8yQTM2MTEwQzkzMkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1E TVpETGNpWE9uOTIyYlQtVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu7jZNI4/u7N3vhKc1KIxb7Ktm1tRjA1P+OX0H4R55aU8NpOSDnWHA ut6kRPL/R+suF2MRS3E4mPRjs1U/fWIL4wMqK8dbEvnq38y/vzgxsQrPQL0SD66V 9UeM/OApk/Ceq6z27bLzpHwa966IDsgyZMGYqD1cioVJ/NotMig5Mp5HMvrlTX9q QZcLUwNP7xOZ+FNQw1X8FwjgCRAbHPvDJI0gY25cpVtdA+RokvGPnH7oyG2QOYct y8q8ayX9gspqPN5An6QWh6QxgqOR0qzjkvSWoAJwXWsJaqvaQJgX7JLIP+REqaVo MH0qpTG3T/mhLnf3AAebTroC2eq3qdq1 -----END CERTIFICATE-----Generated at Fri May 31 22:56:56 2024 by rpki-client on console-fra.rpki-client.org