$ rpki-client -vvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft File: XUKGguien-2WK-nEQys0xF4uCck.mft (raw, json) Hash identifier: RdiyWirpSeYyHxIVYZPLlI4/JgAWfb1WlNPymegJIJE= Subject key identifier: 6B:95:15:BB:B2:8C:09:89:07:C1:34:8B:98:FA:71:D7:FD:09:AE:5E Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9 Certificate issuer: /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9 Certificate serial: 0BAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft Manifest number: 0B8F Signing time: Wed 20 Nov 2024 18:47:19 +0000 Manifest this update: Wed 20 Nov 2024 18:47:19 +0000 Manifest next update: Wed 27 Nov 2024 18:47:19 +0000 Files and hashes: 1: XUKGguien-2WK-nEQys0xF4uCck.crl (hash: irYFTGFG1ecLD/VO6ZY8Mdt3SCaZ7akBtnm3UUJSAJo=) 2: 8C1F014E911411EF84279055C4F9AE02.roa (hash: TMxfkcL9ayQa9n8D6d2gJxA8lVX/wJpwW1/0Wnd0x6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 18:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2986 (0xbaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9 Validity Not Before: Nov 20 18:47:19 2024 GMT Not After : Nov 27 18:47:19 2024 GMT Subject: CN=673e2eb7-974d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dc:e9:4a:0c:07:6c:b0:0e:65:ab:11:34:4f: 91:5b:24:f5:51:8d:12:66:c7:16:a0:59:50:c5:f8: d4:9b:46:8b:b9:f4:f8:7b:99:e4:48:80:62:26:80: f4:e7:57:f4:4d:25:1a:47:46:fa:85:16:e7:35:95: 87:c9:22:76:93:9e:0b:8a:e8:c7:74:c8:23:60:c0: 51:00:68:15:17:cc:a7:6a:77:5b:7b:65:3f:d8:a8: a5:94:1e:44:6e:31:0b:6a:3d:20:3b:38:8f:83:73: fe:db:45:18:63:a8:98:ac:3b:d8:ff:ce:74:09:32: 8e:80:37:4c:e7:c4:06:ab:74:31:89:8e:8e:f3:92: d5:f7:cd:28:d5:ee:87:d4:8c:f1:bf:92:60:fd:50: 09:95:a2:87:d4:54:c9:b1:30:b1:de:95:11:a5:c4: f3:94:c5:ca:78:23:1f:4a:f1:ea:9a:64:43:bd:43: fe:7b:5d:b8:6c:aa:40:da:00:d7:4d:54:6e:88:ce: 00:a2:e4:fc:67:d1:a3:98:05:bc:03:39:60:97:20: 44:a9:e6:61:87:75:a7:92:02:9d:62:38:25:b2:67: 33:e4:49:7d:fc:f2:44:e5:01:9c:ab:7c:da:00:0f: c4:06:45:9d:54:95:43:80:1a:2b:46:ec:0b:5e:0e: bb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:95:15:BB:B2:8C:09:89:07:C1:34:8B:98:FA:71:D7:FD:09:AE:5E X509v3 Authority Key Identifier: keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b8:25:4d:8a:c7:54:8c:2c:02:f8:5b:e0:ea:15:83:32:8f: 02:2a:54:d8:19:71:a8:d4:33:3f:b4:14:8d:e6:fb:b1:83:d1: fe:7c:98:a9:ef:6a:b2:0a:3c:e0:15:6f:1a:d9:87:b9:24:10: d9:5e:c8:29:4f:8b:ec:27:07:79:ff:40:17:1f:a4:92:f8:a3: b7:8e:da:0b:41:64:6f:f6:55:0e:bb:ea:d2:19:0e:25:63:c8: 63:fc:ef:4e:fb:4c:77:b2:b9:89:ed:66:4f:1d:1b:04:c3:76: fc:e7:97:34:9b:c9:e5:1f:7e:3c:f3:63:cd:1f:30:7c:3c:a7: 07:c6:b1:3e:6a:47:c4:92:07:a3:43:88:3c:14:7b:27:4f:c6: 54:3f:05:29:bf:52:94:15:9b:cf:69:96:ba:88:11:ba:36:cd: d3:8b:c2:96:5e:d3:71:0b:db:0f:12:43:02:60:5b:c3:d7:2d: f3:6c:83:21:a4:4b:c6:eb:c6:45:eb:c6:b6:c7:7d:df:36:f8: bc:00:d0:df:02:c5:e0:80:f9:de:21:7c:d4:ed:9c:c4:bb:6e: 89:59:44:46:f9:d6:ec:32:79:ec:7b:1a:a4:2d:30:fb:98:e7: ea:7e:d2:c3:e7:a6:19:bb:82:2c:21:06:5c:97:86:5f:e7:e5: b2:a0:44:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y2REUxMTAvBgNVBAUTKDVENDI4NjgyRTg5RTlGRUQ5NjJCRTlDNDQzMkIzNEM0 NUUyRTA5QzkwHhcNMjQxMTIwMTg0NzE5WhcNMjQxMTI3MTg0NzE5WjAYMRYwFAYD VQQDEw02NzNlMmViNy05NzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9zpSgwHbLAOZasRNE+RWyT1UY0SZscWoFlQxfjUm0aLufT4e5nkSIBiJoD0 51f0TSUaR0b6hRbnNZWHySJ2k54LiujHdMgjYMBRAGgVF8ynandbe2U/2KillB5E bjELaj0gOziPg3P+20UYY6iYrDvY/850CTKOgDdM58QGq3QxiY6O85LV980o1e6H 1Izxv5Jg/VAJlaKH1FTJsTCx3pURpcTzlMXKeCMfSvHqmmRDvUP+e124bKpA2gDX TVRuiM4AouT8Z9GjmAW8AzlglyBEqeZhh3WnkgKdYjglsmcz5El9/PJE5QGcq3za AA/EBkWdVJVDgBorRuwLXg67WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuVFbuy jAmJB8E0i5j6cdf9Ca5eMB8GA1UdIwQYMBaAFF1ChoLonp/tlivpxEMrNMReLgnJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjZERS84N0FBRTc0QTFC M0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4tMldLLW5FUXlzMHhGNHVD Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hVS0dndWllbi0yV0stbkVReXMweEY0dUNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjZERS84N0FBRTc0QTFCM0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4t MldLLW5FUXlzMHhGNHVDY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNuCVNisdUjCwC+Fvg6hWDMo8CKlTYGXGo1DM/tBSN5vuxg9H+fJip 72qyCjzgFW8a2Ye5JBDZXsgpT4vsJwd5/0AXH6SS+KO3jtoLQWRv9lUOu+rSGQ4l Y8hj/O9O+0x3srmJ7WZPHRsEw3b855c0m8nlH34882PNHzB8PKcHxrE+akfEkgej Q4g8FHsnT8ZUPwUpv1KUFZvPaZa6iBG6Ns3Ti8KWXtNxC9sPEkMCYFvD1y3zbIMh pEvG68ZF68a2x33fNvi8ANDfAsXggPneIXzU7ZzEu26JWURG+dbsMnnsexqkLTD7 mOfqftLD56YZu4IsIQZcl4Zf5+WyoEQp -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:47 2024 by rpki-client on console-ams.rpki-client.org