$ rpki-client -vvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft File: XUKGguien-2WK-nEQys0xF4uCck.mft (raw, json) Hash identifier: KMS6vRBibqvd4jDrWV7XyAT0cafYqnzuCrFJ3ggmwYw= Subject key identifier: B4:35:F2:7F:57:D9:28:66:88:2C:C6:FC:DB:EC:18:C6:3F:B2:F8:95 Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9 Certificate issuer: /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9 Certificate serial: 0C10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft Manifest number: 0BF3 Signing time: Fri 30 May 2025 19:02:38 +0000 Manifest this update: Fri 30 May 2025 19:02:37 +0000 Manifest next update: Fri 06 Jun 2025 19:02:37 +0000 Files and hashes: 1: XUKGguien-2WK-nEQys0xF4uCck.crl (hash: ZsXuOJYznD99tRI8fxZ69vXMjQqMQA2MssukYIfL8Dw=) 2: 8C1F014E911411EF84279055C4F9AE02.roa (hash: Q+6aUW+UHrnvzDp5Nyyu2JirqscmSVz5OWmEsK97YDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3088 (0xc10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F6DE, serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9 Validity Not Before: May 30 19:02:37 2025 GMT Not After : Jun 6 19:02:37 2025 GMT Subject: CN=683a00ce-daa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c2:7f:24:1e:a5:37:02:50:a9:ff:01:68:c8: 95:bc:fc:bf:50:91:82:19:47:f1:14:55:dc:ec:f3: f6:7a:cb:db:8b:6d:ee:39:ea:2c:af:2a:d3:8d:fa: d2:b8:f8:1f:36:de:8d:8b:4b:df:d6:f9:37:c2:6a: 1b:d0:7b:27:5f:f0:1e:23:93:d5:94:0b:e6:79:63: 09:a6:d2:36:ae:bf:96:5c:2f:b4:36:23:d7:eb:9f: 1d:66:73:07:e8:10:0d:f0:1d:2b:2c:89:3b:d3:c1: d0:cd:c1:b8:ef:98:03:57:a8:52:31:f6:54:1e:61: 19:a7:6f:10:09:a3:44:52:0b:28:27:09:63:12:da: 23:60:de:ab:59:1b:b2:51:a1:d8:b9:5e:06:e2:20: 3e:6e:78:80:be:f6:90:0a:28:b0:b7:5a:55:a2:6f: 85:27:b8:c4:ae:df:4e:c8:8e:f9:8b:85:82:eb:40: fa:64:25:b2:71:44:9f:ed:24:6c:68:4f:78:53:09: 62:00:be:d8:f6:73:33:72:30:66:62:27:74:a0:c0: 82:83:17:23:86:5f:6c:37:1b:22:af:52:0e:18:54: 40:87:05:34:47:44:3c:39:03:38:cf:29:90:f0:a0: a2:ca:0b:9e:78:ca:e4:b3:e1:af:85:2e:4f:ec:2b: 07:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:35:F2:7F:57:D9:28:66:88:2C:C6:FC:DB:EC:18:C6:3F:B2:F8:95 X509v3 Authority Key Identifier: keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:9f:f2:c2:2f:9e:3d:80:30:c6:7b:b8:ba:3c:55:51:fd:fc: 67:7d:71:c1:0c:8c:99:dd:0f:bf:bb:fd:7a:27:d4:12:e1:90: 32:b5:06:b9:0d:2d:0a:de:81:f7:40:c5:ba:e5:e1:89:2a:56: fa:57:e3:7a:1e:81:d8:2a:f8:81:53:c9:5c:96:d1:3f:92:bd: e0:ce:ab:57:fb:46:a9:72:42:f1:fe:76:0d:fe:42:b5:44:2e: a7:da:ca:24:6d:0d:f2:22:5a:eb:54:63:18:c0:32:b1:03:6b: 4b:b5:1a:05:4c:62:8d:de:e9:45:f9:b5:40:c8:da:f1:83:8d: bc:5a:d0:d4:fb:f5:cf:0f:38:59:ad:45:32:0c:ed:01:84:e9: 83:65:5d:5f:1b:7d:a2:d3:5d:c6:ff:60:14:8c:53:d2:6a:90: 97:b1:b4:33:f8:b8:a5:8b:3e:6e:44:d5:89:2b:d3:cd:30:46: 00:ee:75:d8:6c:fc:94:51:2e:f1:69:28:58:a9:90:07:a6:8d: a3:ee:e7:47:97:e7:dd:5c:ec:7b:b0:19:70:f6:f2:84:23:cd: 3d:64:a0:ed:e5:7f:4d:01:29:5c:b5:94:f4:9b:04:e8:05:92: e2:85:45:31:ae:dd:c1:46:f0:48:c5:c5:ff:d9:3c:93:51:a7: 82:f2:29:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y2REUxMTAvBgNVBAUTKDVENDI4NjgyRTg5RTlGRUQ5NjJCRTlDNDQzMkIzNEM0 NUUyRTA5QzkwHhcNMjUwNTMwMTkwMjM3WhcNMjUwNjA2MTkwMjM3WjAYMRYwFAYD VQQDEw02ODNhMDBjZS1kYWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8J/JB6lNwJQqf8BaMiVvPy/UJGCGUfxFFXc7PP2esvbi23uOeosryrTjfrS uPgfNt6Ni0vf1vk3wmob0HsnX/AeI5PVlAvmeWMJptI2rr+WXC+0NiPX658dZnMH 6BAN8B0rLIk708HQzcG475gDV6hSMfZUHmEZp28QCaNEUgsoJwljEtojYN6rWRuy UaHYuV4G4iA+bniAvvaQCiiwt1pVom+FJ7jErt9OyI75i4WC60D6ZCWycUSf7SRs aE94UwliAL7Y9nMzcjBmYid0oMCCgxcjhl9sNxsir1IOGFRAhwU0R0Q8OQM4zymQ 8KCiygueeMrks+GvhS5P7CsHZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQ18n9X 2ShmiCzG/NvsGMY/sviVMB8GA1UdIwQYMBaAFF1ChoLonp/tlivpxEMrNMReLgnJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjZERS84N0FBRTc0QTFC M0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4tMldLLW5FUXlzMHhGNHVD Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hVS0dndWllbi0yV0stbkVReXMweEY0dUNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjZERS84N0FBRTc0QTFCM0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4t MldLLW5FUXlzMHhGNHVDY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1n/LCL549gDDGe7i6PFVR/fxnfXHBDIyZ3Q+/u/16J9QS4ZAytQa5 DS0K3oH3QMW65eGJKlb6V+N6HoHYKviBU8lcltE/kr3gzqtX+0apckLx/nYN/kK1 RC6n2sokbQ3yIlrrVGMYwDKxA2tLtRoFTGKN3ulF+bVAyNrxg428WtDU+/XPDzhZ rUUyDO0BhOmDZV1fG32i013G/2AUjFPSapCXsbQz+Liliz5uRNWJK9PNMEYA7nXY bPyUUS7xaShYqZAHpo2j7udHl+fdXOx7sBlw9vKEI809ZKDt5X9NASlctZT0mwTo BZLihUUxrt3BRvBIxcX/2TyTUaeC8inN -----END CERTIFICATE-----Generated at Sat May 31 17:53:15 2025 by rpki-client