$ rpki-client -vvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft File: XUKGguien-2WK-nEQys0xF4uCck.mft (raw, json) Hash identifier: Jt9t3/sLLW7sfMbJHHktmD1K+npIXOu8omhGoVjiyyI= Subject key identifier: 87:9B:96:55:25:EC:6D:89:F3:E5:C3:13:06:65:77:50:A4:AF:D1:CB Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9 Certificate issuer: /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9 Certificate serial: 0B30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft Manifest number: 0B1C Signing time: Thu 02 May 2024 19:59:54 +0000 Manifest this update: Thu 02 May 2024 19:59:54 +0000 Manifest next update: Thu 09 May 2024 19:59:54 +0000 Files and hashes: 1: XUKGguien-2WK-nEQys0xF4uCck.crl (hash: 5o7auaSNNqEJ9PZXDvVaF6S/nmxwt4fdaqeswmoUakI=) 2: 9A8EDB32864B11EBA888881DC4F9AE02.roa (hash: Redi/nnOwVItne3rgJ0kqU2o6rhRuL+4XnA8DEYcIv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 19:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2864 (0xb30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9 Validity Not Before: May 2 19:59:54 2024 GMT Not After : May 9 19:59:54 2024 GMT Subject: CN=6633f0ba-e27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:59:5a:f7:27:29:30:4e:98:22:3c:11:25:52: 7d:49:af:12:ce:b3:97:d7:60:de:80:ff:d2:19:a6: 4a:db:b7:02:3e:2f:e7:b6:62:98:7c:84:ef:48:3d: 6e:ba:28:88:17:29:96:a6:91:e9:cc:e4:6c:6d:7e: 1c:22:26:a1:38:77:2a:f9:b3:19:d3:d9:e7:0a:7c: 40:88:a9:79:a0:bb:07:84:35:43:7c:57:09:f2:f6: d7:a3:2b:12:ad:7e:f8:9a:ed:c9:ba:7e:d3:35:f9: 26:27:78:fa:ee:44:63:6c:76:f8:f9:6a:1e:15:42: 10:38:6c:3c:93:be:9a:d3:55:23:a0:c3:56:37:bb: 7b:63:f7:db:8b:a2:c1:a1:b5:ab:7f:4a:31:9a:4b: be:2d:03:37:8e:34:34:58:38:36:4f:1f:b2:ee:fb: 8b:78:9b:de:1a:c5:b5:7c:a1:13:ef:07:22:43:ca: 38:7b:72:6a:f2:22:f5:42:53:13:58:1d:d9:e1:c1: 70:ba:26:70:e2:25:ab:1e:7d:7f:1f:8f:cd:ef:ad: 4d:91:1f:ef:18:e8:29:72:44:c9:c5:df:ae:1f:e9: ee:f7:2d:4a:55:3f:35:3a:dd:0b:a6:b9:a8:90:82: 39:52:98:72:8f:a6:19:d7:59:cc:a5:99:7a:6d:25: a9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9B:96:55:25:EC:6D:89:F3:E5:C3:13:06:65:77:50:A4:AF:D1:CB X509v3 Authority Key Identifier: keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:b8:36:eb:67:93:7e:42:c6:d7:df:2a:dc:20:1a:71:19:3d: 09:97:19:dd:aa:cd:56:c0:b9:87:fe:c3:37:41:7e:55:89:2d: 6e:95:e7:72:c3:54:cc:20:66:a7:48:9e:4e:20:49:a3:e8:2c: 0e:55:bf:df:a3:b2:e5:fb:3d:33:60:92:93:99:36:9c:16:54: dd:40:86:5c:67:5d:6f:64:a5:ea:2f:f4:86:57:47:f4:cd:a7: 2c:7b:99:35:c8:05:f2:c0:31:40:ef:4b:6c:fd:6b:04:25:92: a0:15:b2:69:8b:59:d4:40:04:8a:09:73:f3:8c:1b:31:b2:78: 4e:8a:df:3b:59:ee:0a:26:3e:02:df:ce:b3:7d:4c:6e:8b:a0: a4:9a:f6:66:e4:63:c3:ce:07:0d:bf:cc:52:f9:97:26:4e:84: af:6e:f1:86:b4:de:aa:89:fa:31:2c:1b:79:f5:aa:f1:12:82: e8:8e:a8:22:36:59:6f:e2:4c:6a:92:2c:95:31:e5:0a:0f:82: a2:e6:50:77:96:e9:3a:2c:56:1f:28:b3:3e:22:7b:c5:e1:c9: dd:47:6e:28:c0:96:8e:1c:88:06:ab:f4:74:fa:82:a0:66:36: d9:5e:73:52:09:8f:1e:0b:b4:92:7b:c1:29:8c:20:06:09:06: 40:f7:fa:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y2REUxMTAvBgNVBAUTKDVENDI4NjgyRTg5RTlGRUQ5NjJCRTlDNDQzMkIzNEM0 NUUyRTA5QzkwHhcNMjQwNTAyMTk1OTU0WhcNMjQwNTA5MTk1OTU0WjAYMRYwFAYD VQQDEw02NjMzZjBiYS1lMjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVla9ycpME6YIjwRJVJ9Sa8SzrOX12DegP/SGaZK27cCPi/ntmKYfITvSD1u uiiIFymWppHpzORsbX4cIiahOHcq+bMZ09nnCnxAiKl5oLsHhDVDfFcJ8vbXoysS rX74mu3Jun7TNfkmJ3j67kRjbHb4+WoeFUIQOGw8k76a01UjoMNWN7t7Y/fbi6LB obWrf0oxmku+LQM3jjQ0WDg2Tx+y7vuLeJveGsW1fKET7wciQ8o4e3Jq8iL1QlMT WB3Z4cFwuiZw4iWrHn1/H4/N761NkR/vGOgpckTJxd+uH+nu9y1KVT81Ot0Lprmo kII5Uphyj6YZ11nMpZl6bSWpcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIebllUl 7G2J8+XDEwZld1Ckr9HLMB8GA1UdIwQYMBaAFF1ChoLonp/tlivpxEMrNMReLgnJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjZERS84N0FBRTc0QTFC M0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4tMldLLW5FUXlzMHhGNHVD Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hVS0dndWllbi0yV0stbkVReXMweEY0dUNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjZERS84N0FBRTc0QTFCM0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4t MldLLW5FUXlzMHhGNHVDY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDuDbrZ5N+QsbX3yrcIBpxGT0Jlxndqs1WwLmH/sM3QX5ViS1uledy w1TMIGanSJ5OIEmj6CwOVb/fo7Ll+z0zYJKTmTacFlTdQIZcZ11vZKXqL/SGV0f0 zacse5k1yAXywDFA70ts/WsEJZKgFbJpi1nUQASKCXPzjBsxsnhOit87We4KJj4C 386zfUxui6CkmvZm5GPDzgcNv8xS+ZcmToSvbvGGtN6qifoxLBt59arxEoLojqgi Nllv4kxqkiyVMeUKD4Ki5lB3luk6LFYfKLM+InvF4cndR24owJaOHIgGq/R0+oKg ZjbZXnNSCY8eC7SSe8EpjCAGCQZA9/pt -----END CERTIFICATE-----Generated at Thu May 2 22:28:49 2024 by rpki-client on console-ams.rpki-client.org