$ rpki-client -vvf rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft File: ymnk-Ceb-DMZDLciXOn922bT-VE.mft (raw, json) Hash identifier: 33fB1HXrn3jNNaoR7/zi7MAkUl5F7b2+5oKUqYWq9HM= Subject key identifier: DA:7E:8A:4F:88:7C:1B:70:85:AE:36:08:B0:94:1E:17:13:AF:38:0A Authority key identifier: CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 Certificate issuer: /CN=A911C14C/serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Certificate serial: 095F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft Manifest number: 0958 Signing time: Thu 24 Apr 2025 20:05:30 +0000 Manifest this update: Thu 24 Apr 2025 20:05:29 +0000 Manifest next update: Thu 01 May 2025 20:05:29 +0000 Files and hashes: 1: ymnk-Ceb-DMZDLciXOn922bT-VE.crl (hash: HAn2qjnmtWz1p5jbj794Ro1ehGdPxhTtg/NzOnc/i2o=) 2: 16E91232932D11EABE8CE524C4F9AE02.roa (hash: EqH7WmDV1P3xtcmJeaOld+bFagaXu060kUoogC5tHYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2399 (0x95f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C14C, serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Validity Not Before: Apr 24 20:05:29 2025 GMT Not After : May 1 20:05:29 2025 GMT Subject: CN=680a998a-3dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f6:69:a2:71:cf:b1:4e:f0:a0:62:b4:82:65: 74:d9:37:0a:8c:9d:49:cb:c8:4d:6a:3c:1f:54:ee: 23:e5:5a:8d:ea:f7:f5:9d:3a:5a:23:55:78:e5:3d: 66:f0:5c:81:e2:79:d3:ad:37:7e:67:57:c4:7e:0a: 9e:a9:d8:33:08:95:9f:a5:60:d7:e1:37:32:b5:76: fa:29:9a:22:47:7c:cd:67:36:4b:1d:f4:6a:2c:3e: 0e:e3:34:28:1d:16:5d:f0:2e:7a:94:09:fa:d7:76: 1f:3c:b3:85:07:08:11:f3:ac:c2:78:b1:67:71:19: 9a:6b:54:87:f8:ca:bd:d1:52:46:4d:a3:ff:df:fa: 3d:6b:1a:0a:7e:ba:1b:9b:7e:0b:56:ec:2a:35:4f: c7:0b:78:ae:eb:fd:55:d6:27:11:97:c5:42:d0:6a: 75:c2:cf:3a:00:5f:fe:fd:49:98:78:28:bc:56:d0: e8:5a:17:10:32:53:8d:19:62:d1:5a:b9:0c:5f:3f: bf:d5:e1:df:ac:f5:b2:19:3e:c9:04:15:d9:29:ce: 98:60:0f:4a:aa:a5:78:b8:10:ab:83:b1:f4:34:47: 78:2f:a9:9f:4d:df:bb:62:0f:20:50:94:44:b3:69: 41:6d:2a:02:d3:b9:8a:3d:ce:db:61:e9:aa:03:3d: e9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7E:8A:4F:88:7C:1B:70:85:AE:36:08:B0:94:1E:17:13:AF:38:0A X509v3 Authority Key Identifier: keyid:CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a8:cd:c8:b1:10:87:6e:28:c3:54:82:9a:84:71:d9:1c:db: 6a:0e:d4:86:56:be:41:86:58:a5:43:16:10:41:e8:5b:12:b1: 6c:d2:92:36:ff:9f:8b:b9:a4:1f:75:ed:f5:ff:72:1d:a8:f8: 80:58:69:e3:96:70:a1:12:cc:ca:dc:2c:7c:8e:6e:03:b0:cd: 1c:e6:43:92:26:73:5b:0c:3f:c7:52:71:1c:8f:7e:fb:03:e1: 0f:ce:3d:8a:0e:d2:d5:3b:da:6e:81:26:52:22:33:3a:b9:86: 37:ac:75:3f:69:71:39:86:b9:ee:8f:5c:cf:83:aa:f7:01:48: 6f:88:f1:b2:cb:83:83:30:5a:55:75:b0:b3:e7:94:1a:db:71: 1e:14:81:94:e3:53:07:2c:0f:96:a4:e0:fa:2f:92:96:2c:fd: 5a:56:4c:60:47:55:4c:54:32:17:e1:df:62:e0:00:2c:7a:b1: 22:89:f5:d9:c4:0f:51:76:bb:82:47:7d:aa:9c:fa:7d:e8:9f: ab:01:f9:05:cd:36:f6:96:4b:3d:bd:09:68:df:2b:4d:9c:93: 04:5f:e1:12:9c:76:e3:c9:e2:2f:5e:a7:9f:91:67:3d:b8:1d: 2c:99:02:c2:ea:67:3c:24:a6:00:9b:9d:eb:6b:e0:42:5e:74: da:81:62:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxNEMxMTAvBgNVBAUTKENBNjlFNEY4Mjc5QkY4MzMxOTBDQjcyMjVDRTlGRERC NjZEM0Y5NTEwHhcNMjUwNDI0MjAwNTI5WhcNMjUwNTAxMjAwNTI5WjAYMRYwFAYD VQQDEw02ODBhOTk4YS0zZGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fZponHPsU7woGK0gmV02TcKjJ1Jy8hNajwfVO4j5VqN6vf1nTpaI1V45T1m 8FyB4nnTrTd+Z1fEfgqeqdgzCJWfpWDX4TcytXb6KZoiR3zNZzZLHfRqLD4O4zQo HRZd8C56lAn613YfPLOFBwgR86zCeLFncRmaa1SH+Mq90VJGTaP/3/o9axoKfrob m34LVuwqNU/HC3iu6/1V1icRl8VC0Gp1ws86AF/+/UmYeCi8VtDoWhcQMlONGWLR WrkMXz+/1eHfrPWyGT7JBBXZKc6YYA9KqqV4uBCrg7H0NEd4L6mfTd+7Yg8gUJRE s2lBbSoC07mKPc7bYemqAz3p2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNp+ik+I fBtwha42CLCUHhcTrzgKMB8GA1UdIwQYMBaAFMpp5Pgnm/gzGQy3Ilzp/dtm0/lR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE0Qy8yQTM2MTEwQzkz MkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1ETVpETGNpWE9uOTIyYlQt VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltbmstQ2ViLURNWkRMY2lYT245MjJiVC1WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE0Qy8yQTM2MTEwQzkzMkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1E TVpETGNpWE9uOTIyYlQtVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/qM3IsRCHbijDVIKahHHZHNtqDtSGVr5BhlilQxYQQehbErFs0pI2 /5+LuaQfde31/3IdqPiAWGnjlnChEszK3Cx8jm4DsM0c5kOSJnNbDD/HUnEcj377 A+EPzj2KDtLVO9pugSZSIjM6uYY3rHU/aXE5hrnuj1zPg6r3AUhviPGyy4ODMFpV dbCz55Qa23EeFIGU41MHLA+WpOD6L5KWLP1aVkxgR1VMVDIX4d9i4AAserEiifXZ xA9RdruCR32qnPp96J+rAfkFzTb2lks9vQlo3ytNnJMEX+ESnHbjyeIvXqefkWc9 uB0smQLC6mc8JKYAm53ra+BCXnTagWIQ -----END CERTIFICATE-----Generated at Sat Apr 26 05:15:13 2025 by rpki-client