$ rpki-client -vvf rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft File: ymnk-Ceb-DMZDLciXOn922bT-VE.mft (raw, json) Hash identifier: F1eEVjDo1y1ew8yQ4i6q7lMo0NVyZIkP8qpfh4tXcaA= Subject key identifier: C8:18:BC:36:C2:59:DC:D8:68:09:01:3B:BB:7D:70:53:D9:68:81:76 Authority key identifier: CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 Certificate issuer: /CN=A911C14C/serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Certificate serial: 097B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft Manifest number: 0974 Signing time: Mon 16 Jun 2025 19:58:54 +0000 Manifest this update: Mon 16 Jun 2025 19:58:52 +0000 Manifest next update: Mon 23 Jun 2025 19:58:52 +0000 Files and hashes: 1: ymnk-Ceb-DMZDLciXOn922bT-VE.crl (hash: /qHG5Sj946ZbnBLK7FlpiOa8gjTqRnPpNc3TxLDDTKs=) 2: 16E91232932D11EABE8CE524C4F9AE02.roa (hash: EqH7WmDV1P3xtcmJeaOld+bFagaXu060kUoogC5tHYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 19:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2427 (0x97b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C14C, serialNumber=CA69E4F8279BF833190CB7225CE9FDDB66D3F951 Validity Not Before: Jun 16 19:58:52 2025 GMT Not After : Jun 23 19:58:52 2025 GMT Subject: CN=6850777c-0289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:dd:3c:26:6b:45:30:0a:ef:ce:7a:f2:dd:c2: 65:08:1b:a7:69:df:77:2b:b9:4c:89:6b:79:2d:fe: f1:91:27:83:48:49:78:16:af:9b:ab:06:75:b9:7b: c6:19:2e:ba:c2:7d:98:de:27:d4:e8:8b:33:fc:af: 16:78:3d:91:ba:dc:1a:3f:04:39:e7:39:69:e6:d9: 6c:e8:9b:d4:3b:ed:5f:c9:23:fc:a8:32:01:ea:f5: df:ab:64:0b:70:45:ae:ff:a3:fa:bf:b1:24:ce:78: e4:22:57:63:0a:56:a8:c1:c1:de:ed:cd:c2:45:0a: 12:30:01:40:af:fb:1b:95:4b:b8:79:1e:50:ea:a6: 06:85:64:6b:22:fe:74:7e:df:9d:6f:32:50:2a:88: a4:70:5b:d0:df:51:85:dd:ca:f6:85:0a:8f:88:0e: 02:d6:d4:1a:3b:9e:10:19:c5:d3:f9:92:75:a2:fb: a4:15:69:4f:f4:88:2c:c9:9f:3f:3f:10:16:13:90: ef:cb:1a:59:52:18:07:75:4d:af:6d:55:19:33:1c: 4d:4f:d2:d0:a9:3e:8b:51:48:3d:b8:52:79:e4:ac: ce:6a:f0:80:b3:c1:d9:f4:c4:43:d4:fd:d5:0a:5e: 93:6a:e8:5f:59:cd:c5:c9:c6:77:62:11:62:27:08: 52:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:18:BC:36:C2:59:DC:D8:68:09:01:3B:BB:7D:70:53:D9:68:81:76 X509v3 Authority Key Identifier: keyid:CA:69:E4:F8:27:9B:F8:33:19:0C:B7:22:5C:E9:FD:DB:66:D3:F9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymnk-Ceb-DMZDLciXOn922bT-VE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C14C/2A36110C932B11EABA568B1EC4F9AE02/ymnk-Ceb-DMZDLciXOn922bT-VE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:91:a8:99:d7:07:ac:d4:8b:b1:ff:32:78:2b:4b:77:88:15: fd:d7:64:56:35:56:30:97:18:d8:f9:d9:45:93:09:15:b7:d2: 94:d6:01:b4:2c:8f:a1:37:e8:3b:81:1f:da:d5:e9:11:52:45: d8:88:d6:1c:97:68:50:30:11:4d:1b:71:8e:cb:b2:60:44:95: c3:d9:e8:39:27:83:86:55:38:4d:15:d0:cb:f7:00:10:c5:38: 6a:04:08:db:17:88:14:18:69:77:0b:70:b5:01:c3:f4:26:51: c4:61:3d:7c:c8:d2:94:9e:79:a7:47:73:79:78:45:45:cf:de: ae:bb:f0:b5:a9:68:b6:ba:db:3f:f5:47:9b:4d:57:d3:8d:08: 89:82:78:26:d8:4e:4d:f3:05:a3:ff:77:d2:ca:0f:56:48:7c: 86:02:00:98:18:cb:4a:c7:4a:79:a4:7d:f4:8b:ea:0e:15:90: 5c:78:b5:4e:b9:73:78:84:52:23:2f:7c:57:ac:25:28:3b:97: 85:33:68:24:53:ac:c9:69:16:41:34:52:35:7c:c8:79:4c:a5: e8:9e:37:e0:df:52:53:c2:ba:e4:f4:2c:91:87:8f:d7:77:3e: e6:70:4b:ce:79:bf:48:ed:21:ff:2a:99:94:22:6f:e7:dd:37: c4:10:3e:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxNEMxMTAvBgNVBAUTKENBNjlFNEY4Mjc5QkY4MzMxOTBDQjcyMjVDRTlGRERC NjZEM0Y5NTEwHhcNMjUwNjE2MTk1ODUyWhcNMjUwNjIzMTk1ODUyWjAYMRYwFAYD VQQDEw02ODUwNzc3Yy0wMjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3d08JmtFMArvznry3cJlCBunad93K7lMiWt5Lf7xkSeDSEl4Fq+bqwZ1uXvG GS66wn2Y3ifU6Isz/K8WeD2RutwaPwQ55zlp5tls6JvUO+1fySP8qDIB6vXfq2QL cEWu/6P6v7EkznjkIldjClaowcHe7c3CRQoSMAFAr/sblUu4eR5Q6qYGhWRrIv50 ft+dbzJQKoikcFvQ31GF3cr2hQqPiA4C1tQaO54QGcXT+ZJ1ovukFWlP9IgsyZ8/ PxAWE5DvyxpZUhgHdU2vbVUZMxxNT9LQqT6LUUg9uFJ55KzOavCAs8HZ9MRD1P3V Cl6TauhfWc3FycZ3YhFiJwhSFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgYvDbC WdzYaAkBO7t9cFPZaIF2MB8GA1UdIwQYMBaAFMpp5Pgnm/gzGQy3Ilzp/dtm0/lR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE0Qy8yQTM2MTEwQzkz MkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1ETVpETGNpWE9uOTIyYlQt VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltbmstQ2ViLURNWkRMY2lYT245MjJiVC1WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE0Qy8yQTM2MTEwQzkzMkIxMUVBQkE1NjhCMUVDNEY5QUUwMi95bW5rLUNlYi1E TVpETGNpWE9uOTIyYlQtVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9kaiZ1wes1Iux/zJ4K0t3iBX912RWNVYwlxjY+dlFkwkVt9KU1gG0 LI+hN+g7gR/a1ekRUkXYiNYcl2hQMBFNG3GOy7JgRJXD2eg5J4OGVThNFdDL9wAQ xThqBAjbF4gUGGl3C3C1AcP0JlHEYT18yNKUnnmnR3N5eEVFz96uu/C1qWi2uts/ 9UebTVfTjQiJgngm2E5N8wWj/3fSyg9WSHyGAgCYGMtKx0p5pH30i+oOFZBceLVO uXN4hFIjL3xXrCUoO5eFM2gkU6zJaRZBNFI1fMh5TKXonjfg31JTwrrk9CyRh4/X dz7mcEvOeb9I7SH/KpmUIm/n3TfEED4P -----END CERTIFICATE-----Generated at Wed Jun 18 08:01:51 2025 by rpki-client