$ rpki-client -vvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft File: XUKGguien-2WK-nEQys0xF4uCck.mft (raw, json) Hash identifier: LxnQf4v1w/AQx+HLUQSKe0hsf3jJBMwwQM1mjPS7cVw= Subject key identifier: 81:A4:11:CD:CB:C1:4D:41:1B:99:C9:44:C6:AD:54:AB:E2:23:FD:66 Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9 Certificate issuer: /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9 Certificate serial: 0BF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft Manifest number: 0BD5 Signing time: Wed 02 Apr 2025 18:54:56 +0000 Manifest this update: Wed 02 Apr 2025 18:54:56 +0000 Manifest next update: Wed 09 Apr 2025 18:54:56 +0000 Files and hashes: 1: XUKGguien-2WK-nEQys0xF4uCck.crl (hash: aA3r9MqOtjkFbCrpSNz/K0VOAm8PDmRyEY8zWAoeeT0=) 2: 8C1F014E911411EF84279055C4F9AE02.roa (hash: D2p6aApYT8eTskHJ6USNYC6PGfVKL5npiA4MObrf+M8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 18:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3057 (0xbf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F6DE Validity Not Before: Apr 2 18:54:56 2025 GMT Not After : Apr 9 18:54:56 2025 GMT Subject: CN=67ed8800-d9ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a8:cc:a6:ef:ab:f6:b2:d5:bc:fb:f7:da:80: 93:35:b3:23:80:20:7d:5d:c2:e6:c1:51:51:58:5b: be:54:dc:ca:4d:58:32:a0:f3:86:8b:44:f2:17:d6: 78:8f:41:57:fe:5d:a5:0b:67:51:57:55:47:b7:c3: 66:b1:da:a4:ff:09:6d:d1:c2:a2:e6:45:0e:c4:a5: 66:cf:73:9c:b4:ad:39:ef:75:aa:07:90:0e:2b:9b: df:c0:d3:1e:ed:79:27:3d:54:e8:2a:52:eb:b9:04: 30:99:98:43:0c:d3:36:a0:e1:d3:46:4d:ff:44:b7: 07:6c:87:79:c7:4c:fe:66:b7:0a:c0:00:3c:b4:4e: 9e:d1:9b:28:70:88:96:29:ee:d6:f7:e5:98:3d:32: 80:9b:68:a8:c0:54:e8:c5:4b:76:e5:c3:47:8d:f4: c6:ff:e7:63:ee:93:eb:ef:f6:3e:c1:fe:01:af:a5: 3b:dc:79:97:10:f4:7f:43:d7:17:d7:a5:7d:d3:fd: af:ce:68:99:80:84:e5:ca:4b:68:4c:69:ee:f3:4c: ed:79:66:07:3f:4e:c7:0b:5d:51:8c:72:7b:c8:98: 8c:ac:c6:e5:d1:dc:b6:f6:f1:d6:79:f7:12:2e:e3: 88:c3:df:de:3d:4c:9d:81:8e:01:a3:cf:76:a4:f1: f0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A4:11:CD:CB:C1:4D:41:1B:99:C9:44:C6:AD:54:AB:E2:23:FD:66 X509v3 Authority Key Identifier: keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e0:34:70:3e:0b:c8:2f:0e:15:d1:c8:b3:d1:e0:f5:9a:99: 4c:f1:63:74:c4:32:e7:bf:f5:0b:c0:76:fb:81:d5:0b:2a:c6: a0:00:dd:27:44:d8:dd:37:71:05:7e:0b:3b:4b:5e:55:35:a0: cd:c5:03:f8:ba:d2:0f:cb:d9:24:ba:75:3a:08:c5:9c:6a:24: c6:da:01:ea:59:c7:10:30:08:b0:54:23:ed:04:9e:ff:74:02: 0f:27:8a:e7:da:f2:e7:ba:09:16:40:dd:16:b3:69:72:dd:ba: eb:78:b4:10:c8:56:fd:31:af:a0:d0:cb:d6:43:08:4f:ca:fb: 74:5b:4e:99:45:79:af:c3:a3:7f:5a:47:24:fb:02:39:67:7d: 88:40:03:4b:d5:fd:a1:a0:6a:ac:af:a7:c8:82:45:37:4b:c1: 82:db:07:8e:c1:33:05:3f:38:28:f1:74:4f:12:10:cf:e9:17: d3:30:1f:b6:4f:10:28:66:c6:54:63:61:9b:51:e0:33:97:e5: 25:45:3d:3e:fe:fc:75:ad:6e:4d:44:d2:5f:80:e7:5a:2f:d0: fd:5c:8b:52:4e:78:d2:60:78:68:14:7f:f9:0f:d6:fc:7b:4c: 18:17:c1:b2:e7:47:82:41:d6:57:4b:c4:50:18:4f:b5:ca:2b: 4f:ec:0b:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y2REUxMTAvBgNVBAUTKDVENDI4NjgyRTg5RTlGRUQ5NjJCRTlDNDQzMkIzNEM0 NUUyRTA5QzkwHhcNMjUwNDAyMTg1NDU2WhcNMjUwNDA5MTg1NDU2WjAYMRYwFAYD VQQDEw02N2VkODgwMC1kOWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5KjMpu+r9rLVvPv32oCTNbMjgCB9XcLmwVFRWFu+VNzKTVgyoPOGi0TyF9Z4 j0FX/l2lC2dRV1VHt8Nmsdqk/wlt0cKi5kUOxKVmz3OctK0573WqB5AOK5vfwNMe 7XknPVToKlLruQQwmZhDDNM2oOHTRk3/RLcHbId5x0z+ZrcKwAA8tE6e0ZsocIiW Ke7W9+WYPTKAm2iowFToxUt25cNHjfTG/+dj7pPr7/Y+wf4Br6U73HmXEPR/Q9cX 16V90/2vzmiZgITlyktoTGnu80zteWYHP07HC11RjHJ7yJiMrMbl0dy29vHWefcS LuOIw9/ePUydgY4Bo892pPHw1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGkEc3L wU1BG5nJRMatVKviI/1mMB8GA1UdIwQYMBaAFF1ChoLonp/tlivpxEMrNMReLgnJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjZERS84N0FBRTc0QTFC M0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4tMldLLW5FUXlzMHhGNHVD Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hVS0dndWllbi0yV0stbkVReXMweEY0dUNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjZERS84N0FBRTc0QTFCM0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4t MldLLW5FUXlzMHhGNHVDY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb4DRwPgvILw4V0ciz0eD1mplM8WN0xDLnv/ULwHb7gdULKsagAN0n RNjdN3EFfgs7S15VNaDNxQP4utIPy9kkunU6CMWcaiTG2gHqWccQMAiwVCPtBJ7/ dAIPJ4rn2vLnugkWQN0Ws2ly3brreLQQyFb9Ma+g0MvWQwhPyvt0W06ZRXmvw6N/ Wkck+wI5Z32IQANL1f2hoGqsr6fIgkU3S8GC2weOwTMFPzgo8XRPEhDP6RfTMB+2 TxAoZsZUY2GbUeAzl+UlRT0+/vx1rW5NRNJfgOdaL9D9XItSTnjSYHhoFH/5D9b8 e0wYF8Gy50eCQdZXS8RQGE+1yitP7Avy -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:52 2025 by rpki-client