$ rpki-client -vvf rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft File: ymnk-Ceb-DMZDLciXOn922bT-VE.mft (raw, json) Hash identifier: YwyEmWLEYR7u7ifYJDZTrsG3YS5XMdyNogP7JQam8hY= Subject key identifier: 85:B5:57:19:C5:7B:C8:62:4B:53:A0:D0:48:43:0B:04:00:5F:A8:FA Authority key identifier: CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 Certificate issuer: /CN=A911C14C/serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Certificate serial: 0955 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft Manifest number: 094E Signing time: Fri 04 Apr 2025 20:23:52 +0000 Manifest this update: Fri 04 Apr 2025 20:23:52 +0000 Manifest next update: Fri 11 Apr 2025 20:23:51 +0000 Files and hashes: 1: ymnk-Ceb-DMZDLciXOn922bT-VE.crl (hash: fm8l8atZS+HVXXZU8gAUAGS4EJk/pDNKK0/9wYnIG9g=) 2: 16E91232932D11EABE8CE524C4F9AE02.roa (hash: EqH7WmDV1P3xtcmJeaOld+bFagaXu060kUoogC5tHYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2389 (0x955) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C14C Validity Not Before: Apr 4 20:23:52 2025 GMT Not After : Apr 11 20:23:51 2025 GMT Subject: CN=67f03fd8-8364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bc:53:f0:e0:b4:67:c6:64:e7:bd:54:d4:a7: 5e:81:28:48:c9:30:20:ac:b5:10:54:34:41:26:0e: a9:fb:2c:e3:b2:ee:61:dc:d4:aa:d1:de:f1:1e:42: b1:0b:36:e0:33:44:3e:e4:f7:d8:23:7c:5f:de:2b: b1:2c:e7:14:7a:fa:ca:ee:07:83:13:94:97:7f:56: 7d:0c:16:1e:57:6f:48:00:28:61:a3:28:a8:1e:cf: e9:a7:71:0d:df:3b:92:13:fb:53:74:38:41:25:8b: da:46:85:22:95:61:00:9b:df:69:58:c6:09:5c:b8: 75:5d:af:8c:83:47:66:bd:81:77:be:80:73:83:5c: 54:db:a0:fa:df:1b:f8:02:2e:80:e7:44:39:47:f1: 8d:65:fd:74:96:0e:89:37:f0:d2:a6:11:59:78:8f: 9d:0c:e4:c1:11:a0:98:0c:4c:a6:ee:d9:b9:73:5a: 1f:62:09:83:0b:c9:75:9a:ad:4b:a9:35:ab:39:a1: fd:87:b7:83:b9:eb:8f:e7:4a:72:da:63:ba:d1:7e: 12:8d:66:36:86:69:e1:28:73:d6:46:fa:f6:c3:70: 6f:96:9f:07:4f:2f:57:5e:ea:f2:5c:82:11:fd:84: 06:c3:3b:11:40:f7:88:75:c7:f6:93:d8:fa:07:92: f5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B5:57:19:C5:7B:C8:62:4B:53:A0:D0:48:43:0B:04:00:5F:A8:FA X509v3 Authority Key Identifier: keyid:CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:8f:2c:73:8f:e6:fa:c7:db:00:16:70:c0:c5:e3:5b:51:0e: 22:f9:07:24:fb:a2:88:e2:ad:6f:0b:8b:8a:a5:c5:f7:06:7a: a3:b5:5d:15:81:84:18:ba:a7:82:60:42:03:26:7e:59:50:45: f9:9f:7d:ed:0b:f5:5a:cf:81:eb:30:c8:d3:99:6b:f7:d7:c3: 02:a0:dc:9e:37:dc:55:03:c4:de:94:bd:85:66:bc:e9:c9:95: 70:33:26:9f:48:ae:7a:0a:47:93:79:a7:72:29:b8:26:b6:b7: 4a:8f:a4:fa:60:46:63:8a:d4:69:3e:e5:31:9b:f3:80:c1:10: 3e:72:ba:40:03:c4:63:98:fe:03:57:0d:eb:1a:09:50:c8:91: 2c:9e:67:c8:5f:0e:36:9a:22:0f:9c:0c:cb:6f:a1:5f:aa:2a: 66:80:a6:8f:2d:86:6a:20:04:d0:ec:9b:14:29:81:35:83:ca: a7:22:fd:a0:9f:21:1d:b7:79:f1:23:50:d0:a3:d2:03:e4:f7: 6f:5c:dd:dc:fa:40:d1:67:88:59:4e:83:eb:48:78:fb:05:6d: 79:23:29:7b:c7:79:24:15:59:39:ce:a4:2b:59:8f:1b:09:21: fe:c5:c6:b7:d0:7d:4d:20:54:51:f0:5d:63:77:c6:5d:70:4c: 12:24:83:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxNEMxMTAvBgNVBAUTKENBNjlFNEY4Mjc5QkY4MzMxOTBDQjcyMjVDRTlGRERC NjZEM0Y5NTEwHhcNMjUwNDA0MjAyMzUyWhcNMjUwNDExMjAyMzUxWjAYMRYwFAYD VQQDEw02N2YwM2ZkOC04MzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bxT8OC0Z8Zk571U1KdegShIyTAgrLUQVDRBJg6p+yzjsu5h3NSq0d7xHkKx CzbgM0Q+5PfYI3xf3iuxLOcUevrK7geDE5SXf1Z9DBYeV29IAChhoyioHs/pp3EN 3zuSE/tTdDhBJYvaRoUilWEAm99pWMYJXLh1Xa+Mg0dmvYF3voBzg1xU26D63xv4 Ai6A50Q5R/GNZf10lg6JN/DSphFZeI+dDOTBEaCYDEym7tm5c1ofYgmDC8l1mq1L qTWrOaH9h7eDueuP50py2mO60X4SjWY2hmnhKHPWRvr2w3Bvlp8HTy9XXuryXIIR /YQGwzsRQPeIdcf2k9j6B5L1YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIW1VxnF e8hiS1Og0EhDCwQAX6j6MB8GA1UdIwQYMBaAFMpp5Pgnm/gzGQy3Ilzp/dtm0/lR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE0Qy8yQTM2MTEwQzkz MkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1ETVpETGNpWE9uOTIyYlQt VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltbmstQ2ViLURNWkRMY2lYT245MjJiVC1WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE0Qy8yQTM2MTEwQzkzMkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1E TVpETGNpWE9uOTIyYlQtVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjjyxzj+b6x9sAFnDAxeNbUQ4i+Qck+6KI4q1vC4uKpcX3BnqjtV0V gYQYuqeCYEIDJn5ZUEX5n33tC/Vaz4HrMMjTmWv318MCoNyeN9xVA8TelL2FZrzp yZVwMyafSK56CkeTeadyKbgmtrdKj6T6YEZjitRpPuUxm/OAwRA+crpAA8RjmP4D Vw3rGglQyJEsnmfIXw42miIPnAzLb6FfqipmgKaPLYZqIATQ7JsUKYE1g8qnIv2g nyEdt3nxI1DQo9ID5PdvXN3c+kDRZ4hZToPrSHj7BW15Iyl7x3kkFVk5zqQrWY8b CSH+xca30H1NIFRR8F1jd8ZdcEwSJIPM -----END CERTIFICATE-----Generated at Sat Apr 5 11:42:28 2025 by rpki-client