$ rpki-client -vvf rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft File: ymnk-Ceb-DMZDLciXOn922bT-VE.mft (raw, json) Hash identifier: 6s9R5oV+Rvld5y1wfRKwBTA0nF45gEJqNirBo4PRdQ8= Subject key identifier: 92:B0:FE:FE:D4:B5:D3:BD:F9:CB:D0:2D:26:08:E9:83:DD:A2:39:F0 Authority key identifier: CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 Certificate issuer: /CN=A911C14C/serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Certificate serial: 08A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft Manifest number: 08A2 Signing time: Sat 04 May 2024 21:41:46 +0000 Manifest this update: Sat 04 May 2024 21:41:45 +0000 Manifest next update: Sat 11 May 2024 21:41:45 +0000 Files and hashes: 1: ymnk-Ceb-DMZDLciXOn922bT-VE.crl (hash: 1GQ3ss5oJ+Vwh2ct6h2v7S2ew+f8NnAim2aNVC/+0DE=) 2: 16E91232932D11EABE8CE524C4F9AE02.roa (hash: QwiCtLOGc39rcsKBJpLs7uJ14+2epM+zhyDLSz46Eug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 21:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2216 (0x8a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C14C/serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Validity Not Before: May 4 21:41:45 2024 GMT Not After : May 11 21:41:45 2024 GMT Subject: CN=6636ab9a-5355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:26:d6:50:18:6d:f1:6f:00:2a:f9:f0:e1: ad:c7:3c:d1:fc:88:aa:1b:89:89:ec:6c:5f:15:69: 10:8f:76:36:d0:2d:95:90:6c:5e:89:3f:68:2a:3d: e0:e0:18:3e:07:d0:af:4e:e9:01:3c:6a:1c:f0:fe: 01:0e:ff:62:0c:2d:93:de:43:2e:9a:7b:14:44:6c: 79:ff:29:64:ae:36:d2:0d:55:f8:77:d6:65:37:a7: 03:30:0c:c0:09:86:ad:b4:95:40:1a:dd:99:b7:55: 63:67:bf:41:3c:fd:5e:a9:7f:53:f2:ed:f8:6a:c0: 3b:41:cb:1e:0b:28:8f:9e:b4:8a:c4:68:66:3b:67: 6d:0f:56:a2:66:c9:42:35:4b:9c:ae:5f:e0:82:69: b9:ec:7e:22:d8:1f:ed:3b:1f:78:08:31:aa:d1:aa: c3:d6:e5:06:c3:ff:8f:d3:de:21:0c:a6:e8:0c:41: 0d:bc:38:d2:d6:a0:25:5e:c2:4f:2a:59:81:28:8e: c0:a7:82:04:bd:d6:a6:e8:64:3c:ec:96:ee:5a:b6: 81:8f:41:04:e4:f0:54:f6:00:87:d3:8d:f7:dc:6b: a7:03:15:9a:7a:85:f9:f8:91:a2:08:c9:a2:1b:ac: a1:f2:5f:d4:d1:01:10:3e:e5:c8:80:74:64:98:84: a3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B0:FE:FE:D4:B5:D3:BD:F9:CB:D0:2D:26:08:E9:83:DD:A2:39:F0 X509v3 Authority Key Identifier: keyid:CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:e4:24:05:a9:c9:70:5c:d4:d9:65:d9:94:5e:e5:c4:89:16: 88:d1:9b:b5:1d:4f:2e:b7:d5:8b:35:0a:68:52:f4:8b:11:34: a7:24:f4:d9:1d:5a:87:6e:da:09:47:2c:5c:cb:2f:63:9b:26: e9:dc:16:0c:c1:e2:50:ad:29:2c:20:79:7d:58:8f:19:e3:26: 58:ea:97:55:83:f8:2b:71:53:7e:00:ed:47:b8:05:9b:c1:35: e7:d1:b9:48:65:c5:35:3b:1e:b5:30:10:d3:ad:cb:50:17:3a: 5e:9c:a0:4d:e6:b5:23:f4:84:79:b1:4d:d3:aa:e4:d7:67:0c: 20:85:77:6f:05:30:5a:e9:9d:ad:3e:49:9b:15:0b:ac:43:30: c2:d7:b4:8f:7e:c4:1f:89:96:a0:71:db:9c:b5:e2:c6:78:93: 52:08:ea:f5:83:4f:52:31:91:a2:ca:6c:25:39:51:da:84:e6: be:f1:78:30:9e:14:62:4a:50:9e:6d:61:3c:31:79:3f:61:5f: 70:f2:31:d9:00:10:65:82:f4:4c:73:e4:8e:cb:bc:6d:10:22: 62:55:76:f0:25:8f:d5:bb:ba:2f:93:84:e2:f9:f0:35:90:1a: 76:87:3c:7e:95:ba:9b:8f:fd:64:02:70:de:b9:0c:ff:59:a0: 6e:45:46:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxNEMxMTAvBgNVBAUTKENBNjlFNEY4Mjc5QkY4MzMxOTBDQjcyMjVDRTlGRERC NjZEM0Y5NTEwHhcNMjQwNTA0MjE0MTQ1WhcNMjQwNTExMjE0MTQ1WjAYMRYwFAYD VQQDEw02NjM2YWI5YS01MzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNIm1lAYbfFvACr58OGtxzzR/IiqG4mJ7GxfFWkQj3Y20C2VkGxeiT9oKj3g 4Bg+B9CvTukBPGoc8P4BDv9iDC2T3kMumnsURGx5/ylkrjbSDVX4d9ZlN6cDMAzA CYattJVAGt2Zt1VjZ79BPP1eqX9T8u34asA7QcseCyiPnrSKxGhmO2dtD1aiZslC NUucrl/ggmm57H4i2B/tOx94CDGq0arD1uUGw/+P094hDKboDEENvDjS1qAlXsJP KlmBKI7Ap4IEvdam6GQ87JbuWraBj0EE5PBU9gCH04333GunAxWaeoX5+JGiCMmi G6yh8l/U0QEQPuXIgHRkmISjEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKw/v7U tdO9+cvQLSYI6YPdojnwMB8GA1UdIwQYMBaAFMpp5Pgnm/gzGQy3Ilzp/dtm0/lR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE0Qy8yQTM2MTEwQzkz MkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1ETVpETGNpWE9uOTIyYlQt VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltbmstQ2ViLURNWkRMY2lYT245MjJiVC1WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE0Qy8yQTM2MTEwQzkzMkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1E TVpETGNpWE9uOTIyYlQtVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC5CQFqclwXNTZZdmUXuXEiRaI0Zu1HU8ut9WLNQpoUvSLETSnJPTZ HVqHbtoJRyxcyy9jmybp3BYMweJQrSksIHl9WI8Z4yZY6pdVg/grcVN+AO1HuAWb wTXn0blIZcU1Ox61MBDTrctQFzpenKBN5rUj9IR5sU3TquTXZwwghXdvBTBa6Z2t PkmbFQusQzDC17SPfsQfiZagcducteLGeJNSCOr1g09SMZGiymwlOVHahOa+8Xgw nhRiSlCebWE8MXk/YV9w8jHZABBlgvRMc+SOy7xtECJiVXbwJY/Vu7ovk4Ti+fA1 kBp2hzx+lbqbj/1kAnDeuQz/WaBuRUaR -----END CERTIFICATE-----Generated at Sun May 5 00:14:40 2024 by rpki-client on console-ams.rpki-client.org