$ rpki-client -vvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft File: XUKGguien-2WK-nEQys0xF4uCck.mft (raw, json) Hash identifier: he2Wszs3rqaGHdWu0MjoOKdG+feVhKJXy6jTUaGzSU0= Subject key identifier: 24:B5:B5:F3:0C:1E:44:CB:18:E3:2C:23:97:E6:98:3C:9F:F0:50:11 Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9 Certificate issuer: /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9 Certificate serial: 0C38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft Manifest number: 0C1A Signing time: Sun 10 Aug 2025 18:47:14 +0000 Manifest this update: Sun 10 Aug 2025 18:47:14 +0000 Manifest next update: Sun 17 Aug 2025 18:47:14 +0000 Files and hashes: 1: XUKGguien-2WK-nEQys0xF4uCck.crl (hash: su5o82WTIBYMq26hNs9NlykEaatpdpMCiSjj2yCCarY=) 2: 8C1F014E911411EF84279055C4F9AE02.roa (hash: s6vSkxLA2BmYKE9MQCxEAZSPb/w8Cy/hDqrNsJ/5JFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3128 (0xc38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F6DE, serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9 Validity Not Before: Aug 10 18:47:14 2025 GMT Not After : Aug 17 18:47:14 2025 GMT Subject: CN=6898e932-ffd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6d:74:8f:9e:2c:d0:82:2a:16:5c:89:b4:35: 50:2e:69:d5:0d:79:55:a3:51:16:94:8c:cb:87:60: 92:89:33:1f:6f:f4:7f:59:97:78:d5:6f:2b:b7:c0: 6a:83:92:e8:06:7f:58:27:15:22:87:c8:0f:a3:90: 23:6f:6e:13:e4:87:55:aa:9b:5d:95:f6:e5:a8:b7: b6:75:ed:4e:6b:a2:b6:fa:22:bb:39:79:26:87:09: fe:37:af:84:fc:22:8d:6d:45:79:47:dc:db:ed:73: 63:b4:58:7e:29:2c:84:1c:f1:49:b9:a0:16:a5:b1: da:90:16:29:c8:74:20:36:a7:35:c4:e1:13:59:bd: 49:77:8e:ca:ec:97:19:7b:91:00:09:b4:8a:e9:c7: 33:c9:5f:98:b8:8d:cc:79:32:2d:b5:c7:76:f6:f9: d0:2d:68:e9:3b:f4:b2:42:d8:05:38:68:64:6c:87: 49:3a:88:12:47:c4:91:5c:7d:43:22:8d:38:5d:4e: b1:d1:65:c6:22:f6:27:a1:56:b3:5d:35:6f:18:6f: 4f:49:33:da:34:4a:3d:44:16:13:85:41:5b:23:19: cb:3f:df:c4:f4:89:79:f7:f5:e4:dd:a6:53:cd:d1: dd:8c:74:cf:35:ec:1d:8f:1a:ab:5b:a9:13:0c:9e: 3e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B5:B5:F3:0C:1E:44:CB:18:E3:2C:23:97:E6:98:3C:9F:F0:50:11 X509v3 Authority Key Identifier: keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:27:18:ad:3b:c0:d2:6d:cf:2f:04:75:e8:9a:8c:bf:7c:52: 8e:5c:af:1b:b7:9e:1f:87:6a:f4:39:df:5e:3f:37:e5:05:1a: 29:a4:72:24:9b:96:3b:05:7a:03:4e:95:4a:15:6a:c8:ef:c4: ec:86:7d:6a:e2:e1:58:53:ed:27:b0:8b:22:c0:8f:35:6e:2f: c0:0d:f9:cc:8f:68:ee:17:74:6c:c9:16:be:08:e6:81:9f:3c: 3c:7a:e6:27:28:0f:67:24:94:5e:41:37:97:0f:16:f0:8a:c8: d9:73:fd:93:8d:3c:fd:c5:a2:98:c1:a0:1c:3e:9d:86:da:17: 9f:b6:64:a7:25:1c:44:e9:9c:a5:1b:02:ad:8c:ac:a9:13:84: cd:d3:ac:d1:54:79:81:ff:dd:29:fc:88:ca:21:c8:89:ce:15: 14:27:53:02:d7:c2:a5:a8:70:e2:9c:36:6f:b3:c4:37:02:a1: fe:c8:e6:9d:48:a6:e2:20:f4:15:3f:af:e9:83:0d:44:b1:44: 04:24:6f:ce:5b:96:86:ca:48:af:9d:7f:7a:ab:78:50:ba:8e: 5a:40:c6:00:f2:61:1c:2b:8a:64:50:54:4f:69:19:dc:ee:26: 93:23:eb:8d:94:1b:05:a3:8b:c6:02:cc:21:8d:64:b5:ea:46: 91:80:2e:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y2REUxMTAvBgNVBAUTKDVENDI4NjgyRTg5RTlGRUQ5NjJCRTlDNDQzMkIzNEM0 NUUyRTA5QzkwHhcNMjUwODEwMTg0NzE0WhcNMjUwODE3MTg0NzE0WjAYMRYwFAYD VQQDEw02ODk4ZTkzMi1mZmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzG10j54s0IIqFlyJtDVQLmnVDXlVo1EWlIzLh2CSiTMfb/R/WZd41W8rt8Bq g5LoBn9YJxUih8gPo5Ajb24T5IdVqptdlfblqLe2de1Oa6K2+iK7OXkmhwn+N6+E /CKNbUV5R9zb7XNjtFh+KSyEHPFJuaAWpbHakBYpyHQgNqc1xOETWb1Jd47K7JcZ e5EACbSK6cczyV+YuI3MeTIttcd29vnQLWjpO/SyQtgFOGhkbIdJOogSR8SRXH1D Io04XU6x0WXGIvYnoVazXTVvGG9PSTPaNEo9RBYThUFbIxnLP9/E9Il59/Xk3aZT zdHdjHTPNewdjxqrW6kTDJ4+nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCS1tfMM HkTLGOMsI5fmmDyf8FARMB8GA1UdIwQYMBaAFF1ChoLonp/tlivpxEMrNMReLgnJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjZERS84N0FBRTc0QTFC M0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4tMldLLW5FUXlzMHhGNHVD Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hVS0dndWllbi0yV0stbkVReXMweEY0dUNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjZERS84N0FBRTc0QTFCM0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4t MldLLW5FUXlzMHhGNHVDY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATJxitO8DSbc8vBHXomoy/fFKOXK8bt54fh2r0Od9ePzflBRoppHIk m5Y7BXoDTpVKFWrI78Tshn1q4uFYU+0nsIsiwI81bi/ADfnMj2juF3RsyRa+COaB nzw8euYnKA9nJJReQTeXDxbwisjZc/2TjTz9xaKYwaAcPp2G2heftmSnJRxE6Zyl GwKtjKypE4TN06zRVHmB/90p/IjKIciJzhUUJ1MC18KlqHDinDZvs8Q3AqH+yOad SKbiIPQVP6/pgw1EsUQEJG/OW5aGykivnX96q3hQuo5aQMYA8mEcK4pkUFRPaRnc 7iaTI+uNlBsFo4vGAswhjWS16kaRgC6r -----END CERTIFICATE-----Generated at Sun Aug 10 20:03:32 2025 by rpki-client