$ rpki-client -vvf rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft File: ymnk-Ceb-DMZDLciXOn922bT-VE.mft (raw, json) Hash identifier: TQhEKSsMMwwqnqHZQe6ty7QzVbbXyErw/NhX12IKjNs= Subject key identifier: 13:E7:30:F3:76:CF:74:19:EB:74:50:B2:7C:D8:6D:59:67:07:4F:4A Authority key identifier: CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 Certificate issuer: /CN=A911C14C/serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Certificate serial: 09AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft Manifest number: 09A4 Signing time: Thu 18 Sep 2025 20:17:16 +0000 Manifest this update: Thu 18 Sep 2025 20:17:15 +0000 Manifest next update: Thu 25 Sep 2025 20:17:15 +0000 Files and hashes: 1: ymnk-Ceb-DMZDLciXOn922bT-VE.crl (hash: //wOOdOOMjej6IbEfl5dadCrowTkpqVVsO98W35jnzE=) 2: 16E91232932D11EABE8CE524C4F9AE02.roa (hash: EqH7WmDV1P3xtcmJeaOld+bFagaXu060kUoogC5tHYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2475 (0x9ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C14C, serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Validity Not Before: Sep 18 20:17:15 2025 GMT Not After : Sep 25 20:17:15 2025 GMT Subject: CN=68cc68cb-d511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:33:47:aa:7c:55:09:e5:d3:a6:1d:23:ad:6f: 52:2b:38:9c:18:13:e7:ee:ed:bd:f0:2d:ec:0b:3b: 3e:7f:76:20:98:9e:75:bd:f5:50:0e:e6:26:ed:44: 6d:22:d0:1f:7b:1d:40:e3:dc:23:ea:6b:61:c4:9b: a0:ef:bb:fb:dd:25:2e:49:19:61:c0:cd:17:4a:1e: 53:0c:0e:74:61:6f:3b:91:93:0a:13:86:b6:04:70: 9e:10:7f:4f:39:0a:dd:26:69:a4:6b:01:10:0c:d4: a5:47:ce:4b:97:58:d9:62:06:94:fe:f7:09:9c:d0: 84:c7:93:2e:6a:5b:1e:96:d5:f4:11:82:b2:43:38: b5:73:91:bb:22:71:48:6c:5c:93:10:d8:9a:32:17: b5:84:27:fc:54:58:d6:31:e5:5c:47:5c:a8:66:b6: 54:94:95:6f:c8:42:a7:64:53:d5:06:91:c9:86:1f: 85:73:1d:2d:18:ad:0a:7f:02:dd:7c:a3:28:a3:8d: 50:f7:d4:1d:fc:e7:cf:22:70:b4:4f:a4:25:e4:51: 4b:6e:c8:1f:11:ee:6a:34:82:56:c8:a4:8d:4a:f3: ec:39:ae:d2:5e:59:c7:87:49:ca:07:6a:4b:70:e7: fd:9d:13:73:c8:6c:69:f5:62:2c:b7:29:fb:8a:05: 34:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E7:30:F3:76:CF:74:19:EB:74:50:B2:7C:D8:6D:59:67:07:4F:4A X509v3 Authority Key Identifier: keyid:CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:ec:4f:bc:25:ce:fc:81:74:2a:3d:24:f8:a6:ee:29:9b:52: f1:93:8e:62:89:33:bc:27:51:6b:cb:14:ae:63:46:22:29:6c: 06:38:32:b3:a0:4b:98:ed:8c:41:10:a9:7c:3f:44:15:22:84: 1a:f8:e6:12:74:7d:31:5b:c5:57:43:28:cd:37:31:f6:6a:de: d7:4a:8c:d6:d9:3c:46:82:65:01:0d:fd:e3:89:36:c2:0f:db: b6:fa:9a:2b:82:a0:39:bb:d2:3e:dc:ef:89:f7:31:67:a3:11: 55:ca:1b:1b:db:88:7f:ca:47:c5:f1:ff:d5:c4:33:ec:f9:50: e5:30:f6:60:27:7e:9b:d9:ef:83:31:b4:af:a0:5a:d3:40:f6: 6b:a6:65:96:2c:32:7d:80:9d:e0:b0:47:75:e6:57:00:fd:84: e1:c8:fb:ae:26:b4:33:14:31:d1:dd:ec:00:29:08:e6:b7:cf: 55:17:62:4e:bc:ec:d4:d2:2f:6c:76:8a:f6:ec:6f:6e:0b:1e: 8d:70:8e:82:55:97:69:62:99:d8:45:96:58:bc:81:4b:8b:66: 5c:84:b8:db:6f:bf:d7:a9:f9:4c:b7:89:3a:62:bb:08:d7:a3: 18:67:fb:b5:8d:15:e7:86:df:7a:92:3f:b8:3a:7f:70:dc:91: 92:8a:7d:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxNEMxMTAvBgNVBAUTKENBNjlFNEY4Mjc5QkY4MzMxOTBDQjcyMjVDRTlGRERC NjZEM0Y5NTEwHhcNMjUwOTE4MjAxNzE1WhcNMjUwOTI1MjAxNzE1WjAYMRYwFAYD VQQDEw02OGNjNjhjYi1kNTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DNHqnxVCeXTph0jrW9SKzicGBPn7u298C3sCzs+f3YgmJ51vfVQDuYm7URt ItAfex1A49wj6mthxJug77v73SUuSRlhwM0XSh5TDA50YW87kZMKE4a2BHCeEH9P OQrdJmmkawEQDNSlR85Ll1jZYgaU/vcJnNCEx5MualseltX0EYKyQzi1c5G7InFI bFyTENiaMhe1hCf8VFjWMeVcR1yoZrZUlJVvyEKnZFPVBpHJhh+Fcx0tGK0KfwLd fKMoo41Q99Qd/OfPInC0T6Ql5FFLbsgfEe5qNIJWyKSNSvPsOa7SXlnHh0nKB2pL cOf9nRNzyGxp9WIstyn7igU06QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPnMPN2 z3QZ63RQsnzYbVlnB09KMB8GA1UdIwQYMBaAFMpp5Pgnm/gzGQy3Ilzp/dtm0/lR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE0Qy8yQTM2MTEwQzkz MkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1ETVpETGNpWE9uOTIyYlQt VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltbmstQ2ViLURNWkRMY2lYT245MjJiVC1WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE0Qy8yQTM2MTEwQzkzMkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1E TVpETGNpWE9uOTIyYlQtVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH7E+8Jc78gXQqPST4pu4pm1Lxk45iiTO8J1FryxSuY0YiKWwGODKz oEuY7YxBEKl8P0QVIoQa+OYSdH0xW8VXQyjNNzH2at7XSozW2TxGgmUBDf3jiTbC D9u2+porgqA5u9I+3O+J9zFnoxFVyhsb24h/ykfF8f/VxDPs+VDlMPZgJ36b2e+D MbSvoFrTQPZrpmWWLDJ9gJ3gsEd15lcA/YThyPuuJrQzFDHR3ewAKQjmt89VF2JO vOzU0i9sdor27G9uCx6NcI6CVZdpYpnYRZZYvIFLi2ZchLjbb7/XqflMt4k6YrsI 16MYZ/u1jRXnht96kj+4On9w3JGSin0n -----END CERTIFICATE-----Generated at Fri Sep 19 02:28:45 2025 by rpki-client