$ rpki-client -vvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft File: XUKGguien-2WK-nEQys0xF4uCck.mft (raw, json) Hash identifier: hIOwant8G2W7r+3Z7bt3FE6zXBzXFQw2MxVyR7z3FG8= Subject key identifier: 7C:EA:C7:A1:C7:21:BF:FD:E5:E7:17:CC:44:B1:3F:5B:54:0E:91:F1 Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9 Certificate issuer: /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9 Certificate serial: 0C2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft Manifest number: 0C0F Signing time: Sun 20 Jul 2025 18:53:00 +0000 Manifest this update: Sun 20 Jul 2025 18:53:00 +0000 Manifest next update: Sun 27 Jul 2025 18:53:00 +0000 Files and hashes: 1: XUKGguien-2WK-nEQys0xF4uCck.crl (hash: /eMSA/r8sWpJfXlYC53pllFuj9DpaCZ878GkFOdRuvQ=) 2: 8C1F014E911411EF84279055C4F9AE02.roa (hash: s6vSkxLA2BmYKE9MQCxEAZSPb/w8Cy/hDqrNsJ/5JFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:52:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3117 (0xc2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F6DE, serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9 Validity Not Before: Jul 20 18:53:00 2025 GMT Not After : Jul 27 18:53:00 2025 GMT Subject: CN=687d3b0c-4363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c3:bb:0c:61:98:12:a1:9c:98:b9:b5:c4:62: 62:40:b4:c0:79:66:63:b0:c7:bc:ec:eb:4d:73:ed: b7:3f:b2:a6:8e:d5:06:5f:dd:ca:6d:52:8f:17:be: 65:7a:98:55:35:a2:0c:c1:5d:93:e6:ec:4f:9b:43: 26:bd:b2:17:39:00:42:0c:11:30:2d:9d:fe:92:23: e3:29:e2:f2:10:2d:f5:3e:5e:26:44:95:94:5e:dd: 4e:37:cc:a5:c9:3c:42:e1:4b:83:14:ea:84:b4:16: 8e:0f:bc:4e:f9:39:00:78:57:7f:ca:76:12:4e:2d: 54:e3:8b:50:e5:78:20:e5:ee:f3:c7:27:55:9d:0c: bf:9f:2f:db:fe:57:23:d8:ca:52:fc:2d:df:bb:c0: 0d:e8:3b:ca:55:0f:3a:7b:e2:7a:fd:58:fe:66:89: 34:28:2c:2b:56:78:72:f6:ab:a0:b2:08:48:6b:cc: 47:13:74:68:87:2e:3c:d7:5d:9f:d5:72:98:d2:cf: 93:70:cc:de:6d:10:44:d5:aa:af:27:72:0e:35:38: fe:d5:87:41:94:13:ac:c3:6b:c0:48:64:fb:73:2f: ad:dc:88:42:6c:0c:ec:25:37:1b:ea:b7:23:be:9f: 60:6a:a7:8d:99:19:c3:b3:be:4f:bb:55:18:f2:9d: cb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EA:C7:A1:C7:21:BF:FD:E5:E7:17:CC:44:B1:3F:5B:54:0E:91:F1 X509v3 Authority Key Identifier: keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:b4:92:04:88:19:fe:73:e9:13:28:4c:21:32:75:7c:7e:82: 11:9a:22:ac:4a:46:13:26:9e:44:af:a3:5a:10:41:1c:ce:47: 97:1d:79:01:c1:03:fc:af:7e:72:fe:eb:82:e5:77:97:fc:f6: b1:8a:d2:9a:0c:55:0f:94:ba:60:b5:4a:cb:77:2d:3a:88:df: 5a:e5:c0:44:38:73:e9:45:df:9c:84:6a:a9:d4:12:c9:b5:20: d3:60:53:1c:4a:3f:3c:fd:2f:7d:ee:7b:b9:86:f9:ca:75:fe: 3a:e0:fa:c9:9c:f5:24:61:75:b5:4e:a0:51:49:1c:58:43:63: 00:6d:a6:9b:13:92:72:21:66:9a:c9:cf:14:2b:0d:e6:81:3d: 23:60:14:d5:4d:58:5c:11:ad:0c:ba:fc:04:75:62:80:70:2c: a9:b4:5d:0e:8f:04:06:45:b3:1b:91:49:53:25:76:e0:c0:04: 12:2d:8e:dc:0e:10:1a:9d:2a:62:04:b7:c3:9a:e6:d5:cd:fb: e6:e5:ae:85:49:a0:91:10:09:91:23:c2:57:95:35:be:e1:79: 86:03:a3:5f:c0:cf:dc:3a:10:5a:7b:a5:55:53:f1:d7:68:ca: 80:ab:85:9a:a0:f7:83:b7:4f:b5:55:41:2f:64:2d:75:79:cf: 6d:11:ff:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y2REUxMTAvBgNVBAUTKDVENDI4NjgyRTg5RTlGRUQ5NjJCRTlDNDQzMkIzNEM0 NUUyRTA5QzkwHhcNMjUwNzIwMTg1MzAwWhcNMjUwNzI3MTg1MzAwWjAYMRYwFAYD VQQDEw02ODdkM2IwYy00MzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28O7DGGYEqGcmLm1xGJiQLTAeWZjsMe87OtNc+23P7KmjtUGX93KbVKPF75l ephVNaIMwV2T5uxPm0MmvbIXOQBCDBEwLZ3+kiPjKeLyEC31Pl4mRJWUXt1ON8yl yTxC4UuDFOqEtBaOD7xO+TkAeFd/ynYSTi1U44tQ5Xgg5e7zxydVnQy/ny/b/lcj 2MpS/C3fu8AN6DvKVQ86e+J6/Vj+Zok0KCwrVnhy9qugsghIa8xHE3Rohy48112f 1XKY0s+TcMzebRBE1aqvJ3IONTj+1YdBlBOsw2vASGT7cy+t3IhCbAzsJTcb6rcj vp9gaqeNmRnDs75Pu1UY8p3LUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzqx6HH Ib/95ecXzESxP1tUDpHxMB8GA1UdIwQYMBaAFF1ChoLonp/tlivpxEMrNMReLgnJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjZERS84N0FBRTc0QTFC M0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4tMldLLW5FUXlzMHhGNHVD Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hVS0dndWllbi0yV0stbkVReXMweEY0dUNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjZERS84N0FBRTc0QTFCM0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4t MldLLW5FUXlzMHhGNHVDY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvtJIEiBn+c+kTKEwhMnV8foIRmiKsSkYTJp5Er6NaEEEczkeXHXkB wQP8r35y/uuC5XeX/PaxitKaDFUPlLpgtUrLdy06iN9a5cBEOHPpRd+chGqp1BLJ tSDTYFMcSj88/S997nu5hvnKdf464PrJnPUkYXW1TqBRSRxYQ2MAbaabE5JyIWaa yc8UKw3mgT0jYBTVTVhcEa0MuvwEdWKAcCyptF0OjwQGRbMbkUlTJXbgwAQSLY7c DhAanSpiBLfDmubVzfvm5a6FSaCREAmRI8JXlTW+4XmGA6NfwM/cOhBae6VVU/HX aMqAq4WaoPeDt0+1VUEvZC11ec9tEf/B -----END CERTIFICATE-----Generated at Mon Jul 21 08:06:37 2025 by rpki-client