$ rpki-client -vvf rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft File: ymnk-Ceb-DMZDLciXOn922bT-VE.mft (raw, json) Hash identifier: qjEBP0HnME0woZ0KieRys5dNLz1Kdx0cq+kdSN7sk74= Subject key identifier: DB:7B:48:E5:9C:D5:8B:1F:CE:6D:4F:44:12:17:3A:6B:5D:2B:C4:34 Authority key identifier: CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 Certificate issuer: /CN=A911C14C/serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Certificate serial: 098C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft Manifest number: 0985 Signing time: Sun 20 Jul 2025 20:13:40 +0000 Manifest this update: Sun 20 Jul 2025 20:13:40 +0000 Manifest next update: Sun 27 Jul 2025 20:13:40 +0000 Files and hashes: 1: ymnk-Ceb-DMZDLciXOn922bT-VE.crl (hash: mUUyJQG22MYUQNIbKXJsZ1gCntfR7SaW0k6lQAVsSC0=) 2: 16E91232932D11EABE8CE524C4F9AE02.roa (hash: EqH7WmDV1P3xtcmJeaOld+bFagaXu060kUoogC5tHYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2444 (0x98c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C14C, serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Validity Not Before: Jul 20 20:13:40 2025 GMT Not After : Jul 27 20:13:40 2025 GMT Subject: CN=687d4df4-ddc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:02:b6:5f:4d:bd:99:33:d4:79:3c:6c:18:4a: 7b:ed:4c:6f:91:49:d5:b5:4c:24:66:22:95:77:4c: d9:fc:45:13:83:a6:1f:9d:6f:0b:8a:5a:d9:99:03: b3:38:4a:32:e9:e0:58:02:2a:30:ac:4e:d0:69:08: bf:ab:2a:0f:9a:9e:d2:02:a6:49:37:41:e0:24:e2: 5f:bd:8e:1c:e6:3f:db:9c:7d:f0:fc:b0:01:bb:ac: 6a:ea:31:ad:c0:a0:c9:6b:b5:78:9b:94:77:be:87: 09:55:61:10:2c:9e:6b:d0:36:9f:ee:87:ef:ad:8b: e7:3e:bd:d7:54:21:31:b4:bd:fd:af:05:22:69:45: ff:6d:d9:97:f3:cc:5a:e1:fe:c9:5b:b9:9d:b3:72: 1b:43:e5:8b:09:b1:35:98:43:c4:de:d1:b2:e7:e9: 5d:65:40:57:dc:89:70:ef:9a:98:fa:7d:0b:ec:83: 01:4a:56:9e:22:92:52:6b:d6:76:06:7d:c4:72:0f: c2:4e:db:ae:d8:80:68:34:e1:e3:14:72:da:15:bc: 97:b2:0f:0d:96:1b:a0:e4:de:9f:7a:6e:f9:8f:87: b8:b9:1c:91:92:e8:ff:40:e3:69:b8:6e:23:79:21: 09:39:84:2d:b2:fa:f7:d0:fe:43:52:95:f5:05:56: 5a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7B:48:E5:9C:D5:8B:1F:CE:6D:4F:44:12:17:3A:6B:5D:2B:C4:34 X509v3 Authority Key Identifier: keyid:CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:83:6f:c3:0c:e0:56:ec:38:b4:31:cf:e0:11:ad:3a:12:26: ac:f1:71:4a:6e:85:1f:39:0c:c3:8b:7b:a5:e0:89:1d:6c:71: dd:b5:e1:f3:f4:b0:bb:15:d1:34:cc:62:b1:e0:ab:d6:b0:d5: 88:ad:32:9b:5b:2c:8c:91:de:f1:a8:f0:56:9d:2e:6f:32:cb: 48:b5:22:e0:7c:00:69:3e:b6:5b:b8:d8:51:67:14:2f:38:b5: c5:51:8c:ee:b2:10:ca:9a:60:6f:de:2b:57:f0:ff:45:cb:34: 82:99:09:a2:57:67:fd:9d:4a:77:ff:26:2c:b9:5b:7d:e8:31: c5:51:e9:72:3d:b0:52:85:e6:7b:e4:13:bb:d4:0d:3a:4d:1e: 2c:ce:a1:7f:d6:82:d3:fc:1a:eb:ad:6e:26:f2:37:48:cc:2e: ca:29:56:7d:07:65:f2:56:4d:f2:28:08:d9:5c:0a:ae:66:6e: 89:9f:b9:8b:d6:9f:b7:1c:91:89:e6:15:6f:0e:a5:a9:a1:4d: 54:76:bb:6b:8d:28:f8:48:61:6e:73:d7:78:eb:0c:1a:e6:c6: 09:74:33:8f:97:d0:3e:7e:d1:47:11:3b:4f:be:3b:5c:83:aa: 31:0f:4c:6d:a5:b4:8f:0a:7f:3c:15:ef:ee:f1:f5:3d:8d:18: d6:20:17:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxNEMxMTAvBgNVBAUTKENBNjlFNEY4Mjc5QkY4MzMxOTBDQjcyMjVDRTlGRERC NjZEM0Y5NTEwHhcNMjUwNzIwMjAxMzQwWhcNMjUwNzI3MjAxMzQwWjAYMRYwFAYD VQQDEw02ODdkNGRmNC1kZGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QK2X029mTPUeTxsGEp77UxvkUnVtUwkZiKVd0zZ/EUTg6YfnW8LilrZmQOz OEoy6eBYAiowrE7QaQi/qyoPmp7SAqZJN0HgJOJfvY4c5j/bnH3w/LABu6xq6jGt wKDJa7V4m5R3vocJVWEQLJ5r0Daf7ofvrYvnPr3XVCExtL39rwUiaUX/bdmX88xa 4f7JW7mds3IbQ+WLCbE1mEPE3tGy5+ldZUBX3Ilw75qY+n0L7IMBSlaeIpJSa9Z2 Bn3Ecg/CTtuu2IBoNOHjFHLaFbyXsg8Nlhug5N6fem75j4e4uRyRkuj/QONpuG4j eSEJOYQtsvr30P5DUpX1BVZaCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNt7SOWc 1Ysfzm1PRBIXOmtdK8Q0MB8GA1UdIwQYMBaAFMpp5Pgnm/gzGQy3Ilzp/dtm0/lR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE0Qy8yQTM2MTEwQzkz MkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1ETVpETGNpWE9uOTIyYlQt VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltbmstQ2ViLURNWkRMY2lYT245MjJiVC1WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE0Qy8yQTM2MTEwQzkzMkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1E TVpETGNpWE9uOTIyYlQtVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPg2/DDOBW7Di0Mc/gEa06Eias8XFKboUfOQzDi3ul4IkdbHHdteHz 9LC7FdE0zGKx4KvWsNWIrTKbWyyMkd7xqPBWnS5vMstItSLgfABpPrZbuNhRZxQv OLXFUYzushDKmmBv3itX8P9FyzSCmQmiV2f9nUp3/yYsuVt96DHFUelyPbBSheZ7 5BO71A06TR4szqF/1oLT/BrrrW4m8jdIzC7KKVZ9B2XyVk3yKAjZXAquZm6Jn7mL 1p+3HJGJ5hVvDqWpoU1UdrtrjSj4SGFuc9d46wwa5sYJdDOPl9A+ftFHETtPvjtc g6oxD0xtpbSPCn88Fe/u8fU9jRjWIBdR -----END CERTIFICATE-----Generated at Mon Jul 21 12:36:32 2025 by rpki-client