$ rpki-client -vvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft File: XUKGguien-2WK-nEQys0xF4uCck.mft (raw, json) Hash identifier: tl/3GiyaApJK24Wud2T2qLV2tti27cdE2fzqGhAz+CQ= Subject key identifier: BA:41:64:21:6C:32:17:0D:C5:0F:12:E4:5E:2E:0C:C8:8B:9C:A6:00 Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9 Certificate issuer: /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9 Certificate serial: 0C47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft Manifest number: 0C29 Signing time: Mon 08 Sep 2025 18:47:15 +0000 Manifest this update: Mon 08 Sep 2025 18:47:15 +0000 Manifest next update: Mon 15 Sep 2025 18:47:15 +0000 Files and hashes: 1: XUKGguien-2WK-nEQys0xF4uCck.crl (hash: O7uuF5q5iQN5xUSKCnWPzRLvon96Vgsqac7tya2rZbM=) 2: 8C1F014E911411EF84279055C4F9AE02.roa (hash: s6vSkxLA2BmYKE9MQCxEAZSPb/w8Cy/hDqrNsJ/5JFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 18:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3143 (0xc47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F6DE, serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9 Validity Not Before: Sep 8 18:47:15 2025 GMT Not After : Sep 15 18:47:15 2025 GMT Subject: CN=68bf24b3-8b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:7b:6c:96:89:d8:bd:27:33:5b:a3:7a:8b: 37:bf:00:ab:2a:a3:8c:6f:ff:9b:08:32:23:69:2c: 7f:5e:68:69:f3:b2:cb:af:4f:44:2f:7c:ad:36:aa: 1a:b0:a4:7e:d3:57:d6:bc:22:0e:ca:13:56:23:ae: 29:8d:ec:37:3c:cf:9f:b9:23:23:48:4d:06:b0:9e: ac:5c:6c:37:e9:d6:10:fe:24:5f:37:15:c3:cf:05: a7:f0:09:6a:fa:d1:e0:80:be:a3:24:12:50:77:12: 6c:d4:d5:65:cc:82:60:5f:20:87:a0:b6:98:3a:f2: 80:40:06:75:bc:b5:69:d7:5e:58:2f:e5:56:c9:05: 7f:17:fd:fd:dd:2c:19:09:c9:db:43:81:1a:c5:ec: 1c:81:85:17:3e:ee:14:7b:0c:6d:b1:bf:de:44:fd: f6:19:37:e5:22:59:47:57:29:8a:c8:a2:64:74:94: 8d:77:d1:8c:5a:70:8d:d9:84:04:d2:2e:0a:76:fe: 13:f0:64:3a:a8:27:8e:0e:41:d4:95:75:11:4e:69: ab:b1:d4:9b:63:81:f6:37:17:ff:cf:7a:30:8a:b4: 28:a7:f1:93:7d:65:b6:ce:5a:70:3f:c0:fc:84:8e: ae:4f:b1:75:ef:55:4c:ac:6c:f2:cc:6e:c4:13:54: 53:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:41:64:21:6C:32:17:0D:C5:0F:12:E4:5E:2E:0C:C8:8B:9C:A6:00 X509v3 Authority Key Identifier: keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:88:76:b2:e5:e5:aa:6d:d3:c6:d3:70:4a:7e:38:a4:f7:b4: d6:74:2a:0d:b9:e4:52:3f:18:c5:22:c9:3e:b3:5e:8e:50:b4: 9b:c2:12:52:30:25:af:24:b7:86:ae:01:7c:f8:08:f3:9d:8b: 9b:02:8e:30:03:03:ea:46:89:55:8e:71:2d:bc:61:83:9c:40: 43:24:20:87:6a:ad:2b:7d:c0:0d:cb:52:ca:00:2f:3d:e3:0c: 11:7c:f9:9c:1d:9c:3e:c9:8e:6e:03:52:9d:bf:70:f0:a0:1f: 18:20:ab:4c:cf:a7:75:2b:e9:ab:05:52:60:69:30:51:1c:04: 3b:83:f8:41:bc:0f:f3:f4:7e:0a:04:bf:bc:95:22:5e:68:cb: c0:22:ab:b4:c7:ae:94:ac:e6:e1:f5:57:83:f8:f2:c8:10:4d: 61:2a:1d:5d:aa:9c:78:fd:18:1a:51:26:e2:e7:e8:05:c6:98: 26:45:38:92:d0:18:61:91:2a:b4:98:12:73:e7:5d:c0:ba:0f: 4c:b6:69:37:d0:86:84:8d:4e:45:a2:e4:a0:67:85:12:0f:42: 2e:87:3f:9d:7b:34:3a:13:67:79:6f:12:89:41:85:7a:c6:bd: a8:b6:38:e5:92:75:04:02:7b:ba:ed:6a:96:f6:f2:13:87:46: 03:af:ff:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y2REUxMTAvBgNVBAUTKDVENDI4NjgyRTg5RTlGRUQ5NjJCRTlDNDQzMkIzNEM0 NUUyRTA5QzkwHhcNMjUwOTA4MTg0NzE1WhcNMjUwOTE1MTg0NzE1WjAYMRYwFAYD VQQDEw02OGJmMjRiMy04YjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3x7bJaJ2L0nM1ujeos3vwCrKqOMb/+bCDIjaSx/Xmhp87LLr09EL3ytNqoa sKR+01fWvCIOyhNWI64pjew3PM+fuSMjSE0GsJ6sXGw36dYQ/iRfNxXDzwWn8Alq +tHggL6jJBJQdxJs1NVlzIJgXyCHoLaYOvKAQAZ1vLVp115YL+VWyQV/F/393SwZ CcnbQ4EaxewcgYUXPu4Uewxtsb/eRP32GTflIllHVymKyKJkdJSNd9GMWnCN2YQE 0i4Kdv4T8GQ6qCeODkHUlXURTmmrsdSbY4H2Nxf/z3owirQop/GTfWW2zlpwP8D8 hI6uT7F171VMrGzyzG7EE1RTVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpBZCFs MhcNxQ8S5F4uDMiLnKYAMB8GA1UdIwQYMBaAFF1ChoLonp/tlivpxEMrNMReLgnJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjZERS84N0FBRTc0QTFC M0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4tMldLLW5FUXlzMHhGNHVD Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hVS0dndWllbi0yV0stbkVReXMweEY0dUNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjZERS84N0FBRTc0QTFCM0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4t MldLLW5FUXlzMHhGNHVDY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAriHay5eWqbdPG03BKfjik97TWdCoNueRSPxjFIsk+s16OULSbwhJS MCWvJLeGrgF8+AjznYubAo4wAwPqRolVjnEtvGGDnEBDJCCHaq0rfcANy1LKAC89 4wwRfPmcHZw+yY5uA1Kdv3DwoB8YIKtMz6d1K+mrBVJgaTBRHAQ7g/hBvA/z9H4K BL+8lSJeaMvAIqu0x66UrObh9VeD+PLIEE1hKh1dqpx4/RgaUSbi5+gFxpgmRTiS 0BhhkSq0mBJz513Aug9Mtmk30IaEjU5FouSgZ4USD0Iuhz+dezQ6E2d5bxKJQYV6 xr2otjjlknUEAnu67WqW9vITh0YDr/9X -----END CERTIFICATE-----Generated at Tue Sep 9 13:25:26 2025 by rpki-client