$ rpki-client -vvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft File: XUKGguien-2WK-nEQys0xF4uCck.mft (raw, json) Hash identifier: nm462Cci7oihijzIGFHVCK3BaH4JpZJKQAl7e74fxnQ= Subject key identifier: 32:2B:34:23:43:AC:52:D8:87:84:43:64:C7:4C:EE:C3:D0:DE:36:90 Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9 Certificate issuer: /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9 Certificate serial: 0C62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft Manifest number: 0C44 Signing time: Fri 31 Oct 2025 18:53:53 +0000 Manifest this update: Fri 31 Oct 2025 18:53:52 +0000 Manifest next update: Fri 07 Nov 2025 18:53:52 +0000 Files and hashes: 1: XUKGguien-2WK-nEQys0xF4uCck.crl (hash: SbgrnssCFswH7CM5nppzo5OFCrBHEY21wJ7Xr+KQLlo=) 2: 8C1F014E911411EF84279055C4F9AE02.roa (hash: s6vSkxLA2BmYKE9MQCxEAZSPb/w8Cy/hDqrNsJ/5JFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 18:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3170 (0xc62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F6DE, serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9 Validity Not Before: Oct 31 18:53:52 2025 GMT Not After : Nov 7 18:53:52 2025 GMT Subject: CN=690505c0-b0e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:08:7d:b2:c2:72:bd:19:3e:b9:1b:3b:1b:d5: f0:5d:51:b8:f5:b1:ca:9b:c5:cc:6f:15:cb:a4:10: 69:56:c3:c0:e4:90:43:81:03:df:9a:bc:06:84:a0: 0e:16:27:24:0b:50:7a:36:f2:eb:22:48:d3:78:99: a0:81:b5:33:11:da:60:fa:e5:8c:fd:54:f4:66:7d: 30:93:12:e0:4f:a6:1c:ef:eb:cc:b2:16:29:53:45: ba:47:8c:4c:45:1a:10:09:fc:65:2c:49:52:77:ba: ec:56:53:c5:ea:15:b1:5c:bb:a7:15:0a:2e:7b:40: 70:31:95:a7:9e:d8:91:1d:b5:52:d1:5b:9e:bb:0b: 0b:69:0c:45:9d:ad:11:80:08:3f:ca:78:50:34:0a: 54:2a:db:23:7f:a6:6e:41:67:77:b0:eb:d5:9d:cb: 39:b1:98:fd:07:07:91:58:0c:27:34:c7:8a:c4:d3: bd:91:d3:15:0c:e0:fb:5c:a5:66:61:47:70:ad:cc: 3d:88:da:2f:5b:e1:ed:92:59:de:ff:66:1d:50:90: 85:ab:81:c5:35:65:1c:a7:e9:27:e4:36:d7:c1:25: 93:8f:4a:45:84:ad:71:c6:02:b2:63:df:ca:7e:b1: b6:22:f8:9d:83:8f:f3:69:42:a6:1f:e1:59:f7:bd: 9f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2B:34:23:43:AC:52:D8:87:84:43:64:C7:4C:EE:C3:D0:DE:36:90 X509v3 Authority Key Identifier: keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:f2:f4:f3:cb:77:0e:25:d1:ea:4a:43:59:12:4b:77:ab:69: 79:a9:04:60:09:3a:79:c5:4a:fc:48:06:8b:53:b3:dc:ff:2c: 10:e6:d0:7e:c6:6b:86:0c:f0:aa:0a:31:05:18:60:28:1a:00: ba:61:47:23:24:49:b1:08:47:98:d1:28:f1:99:e1:23:9b:ed: e7:f0:93:74:82:4a:9f:3f:d9:c8:dc:12:92:7d:5f:ef:13:6c: 1f:1b:63:66:28:a0:24:40:b5:94:79:53:ae:47:cc:14:44:13: 1a:9e:5d:e2:75:4d:4e:39:f6:a8:86:d0:69:69:e0:54:fa:17: 1f:43:59:97:33:38:16:0f:86:ad:36:2f:8c:92:dc:6a:84:82: 4d:7e:de:1f:a4:ad:3f:e7:16:4c:00:e2:54:96:2d:52:7e:6f: 3f:38:bb:e3:56:de:97:85:85:18:f5:ec:0a:93:92:86:9e:4d: ce:cf:cf:ca:a7:93:d0:a6:79:26:90:09:2b:62:ec:ab:9f:ac: b5:5a:ec:0c:4c:61:25:26:95:b9:2d:30:40:64:cf:8d:91:29: 08:ca:e6:1e:31:32:5c:3f:70:30:39:18:5d:80:08:38:53:d5: d1:ea:63:3f:76:bf:29:fc:84:54:7f:67:9f:63:a0:7b:7c:ee: 07:4f:5c:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y2REUxMTAvBgNVBAUTKDVENDI4NjgyRTg5RTlGRUQ5NjJCRTlDNDQzMkIzNEM0 NUUyRTA5QzkwHhcNMjUxMDMxMTg1MzUyWhcNMjUxMTA3MTg1MzUyWjAYMRYwFAYD VQQDEw02OTA1MDVjMC1iMGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAh9ssJyvRk+uRs7G9XwXVG49bHKm8XMbxXLpBBpVsPA5JBDgQPfmrwGhKAO FickC1B6NvLrIkjTeJmggbUzEdpg+uWM/VT0Zn0wkxLgT6Yc7+vMshYpU0W6R4xM RRoQCfxlLElSd7rsVlPF6hWxXLunFQoue0BwMZWnntiRHbVS0VueuwsLaQxFna0R gAg/ynhQNApUKtsjf6ZuQWd3sOvVncs5sZj9BweRWAwnNMeKxNO9kdMVDOD7XKVm YUdwrcw9iNovW+Htklne/2YdUJCFq4HFNWUcp+kn5DbXwSWTj0pFhK1xxgKyY9/K frG2Ividg4/zaUKmH+FZ972fbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIrNCND rFLYh4RDZMdM7sPQ3jaQMB8GA1UdIwQYMBaAFF1ChoLonp/tlivpxEMrNMReLgnJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjZERS84N0FBRTc0QTFC M0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4tMldLLW5FUXlzMHhGNHVD Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hVS0dndWllbi0yV0stbkVReXMweEY0dUNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjZERS84N0FBRTc0QTFCM0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4t MldLLW5FUXlzMHhGNHVDY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC48vTzy3cOJdHqSkNZEkt3q2l5qQRgCTp5xUr8SAaLU7Pc/ywQ5tB+ xmuGDPCqCjEFGGAoGgC6YUcjJEmxCEeY0SjxmeEjm+3n8JN0gkqfP9nI3BKSfV/v E2wfG2NmKKAkQLWUeVOuR8wURBManl3idU1OOfaohtBpaeBU+hcfQ1mXMzgWD4at Ni+MktxqhIJNft4fpK0/5xZMAOJUli1Sfm8/OLvjVt6XhYUY9ewKk5KGnk3Oz8/K p5PQpnkmkAkrYuyrn6y1WuwMTGElJpW5LTBAZM+NkSkIyuYeMTJcP3AwORhdgAg4 U9XR6mM/dr8p/IRUf2efY6B7fO4HT1yf -----END CERTIFICATE-----Generated at Sun Nov 2 06:21:59 2025 by rpki-client