$ rpki-client -vvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft File: XUKGguien-2WK-nEQys0xF4uCck.mft (raw, json) Hash identifier: gXYnsVbrLWmFoVhJYdkeRVlzScrKR28gozPHPy3YbkA= Subject key identifier: F8:6D:C4:1F:9C:59:83:B8:AD:4E:0A:58:35:36:86:B6:9D:82:E0:01 Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9 Certificate issuer: /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9 Certificate serial: 0C1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft Manifest number: 0BFE Signing time: Fri 20 Jun 2025 18:46:38 +0000 Manifest this update: Fri 20 Jun 2025 18:46:37 +0000 Manifest next update: Fri 27 Jun 2025 18:46:37 +0000 Files and hashes: 1: XUKGguien-2WK-nEQys0xF4uCck.crl (hash: 4uvNhu4oAIR5DjVIIhSX6Upl8nK+OGAalTJltIdjz98=) 2: 8C1F014E911411EF84279055C4F9AE02.roa (hash: Q+6aUW+UHrnvzDp5Nyyu2JirqscmSVz5OWmEsK97YDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 18:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3099 (0xc1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F6DE, serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9 Validity Not Before: Jun 20 18:46:37 2025 GMT Not After : Jun 27 18:46:37 2025 GMT Subject: CN=6855ac8e-a702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:94:73:0a:2b:c0:36:5f:d5:f1:72:ea:25:75: f4:4e:b1:80:9c:b9:3e:7a:f9:2e:7a:ce:33:8f:dc: e5:ea:89:0d:89:33:f6:1b:50:56:35:46:fc:8c:20: f6:ab:b9:c3:3a:60:0c:7d:37:da:ba:a5:c2:92:2d: 2c:69:e3:1f:b2:0e:8b:5e:6d:ea:95:30:6a:72:e9: 2f:66:40:b0:53:45:b2:78:e4:66:1d:b7:0d:43:53: e4:28:cd:ec:21:cc:5d:6b:c7:10:02:72:db:0b:d9: 7a:14:79:85:a1:9a:28:2a:41:c9:5c:25:08:1e:cf: 7c:99:8f:56:3c:e2:8e:b4:e6:2b:4b:58:9f:22:5f: f8:6e:fa:7d:d4:ea:1f:5e:88:fe:83:46:70:2c:20: 4f:45:0a:90:77:48:3e:45:19:2f:7e:6e:8d:b2:00: b1:c8:6b:a2:cf:ce:4f:a8:6e:7a:5b:51:98:6d:53: 5b:64:b0:d3:4e:cf:a2:9c:0a:3b:c3:23:21:2f:6c: 9f:16:54:70:32:b7:cd:35:a0:7a:ef:d4:29:94:10: c1:b6:a4:48:96:77:e5:94:58:e4:6b:8a:ca:6e:47: c5:90:67:d2:b4:ae:4b:a3:3d:55:f4:67:2b:09:96: 5b:bb:f6:ce:0a:e7:6b:ab:ac:e5:1b:be:32:75:29: c0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6D:C4:1F:9C:59:83:B8:AD:4E:0A:58:35:36:86:B6:9D:82:E0:01 X509v3 Authority Key Identifier: keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:5d:9e:c2:4a:7d:a8:2f:e7:a1:12:80:32:73:44:41:1b:cc: c8:16:d1:4c:91:d4:4d:a2:c0:43:36:1a:31:c1:62:b6:17:e3: 52:b2:ee:39:67:17:e8:2f:6d:4c:59:f9:41:c8:1d:8c:2f:e5: b7:d1:0e:ad:5f:0f:1c:02:45:2d:a5:d6:3b:5a:f1:29:c1:33: a2:5e:64:ab:e7:5e:91:85:b3:e6:0a:15:0b:bf:fd:b1:42:4a: 8b:e6:e3:85:7a:a1:16:8c:f1:f4:5b:7a:1b:ab:7a:90:ea:eb: f0:49:56:5f:21:a6:f3:07:e1:63:4b:5d:07:67:0f:38:a2:9a: 28:f5:7f:ca:01:96:0a:39:89:ad:22:ea:01:7c:14:41:e1:3b: b5:26:9f:ea:13:b2:8f:e0:6a:a6:b4:23:48:22:36:95:e8:cd: df:64:2f:09:e5:fc:52:61:e2:82:97:ee:9d:b5:3a:8b:bc:99: 9d:4b:c2:8d:f5:25:d9:2b:0a:09:96:06:86:a1:37:81:a1:f3: 5d:e1:62:89:34:51:8c:9a:3d:90:4d:cb:a1:cd:97:9f:09:e7: 5c:6c:75:32:37:f5:67:d3:30:12:50:0f:dd:1c:75:8d:7d:ec: 23:52:4c:02:bd:54:ac:c4:de:9b:f6:c6:6c:10:0f:ce:71:55: 35:b9:84:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y2REUxMTAvBgNVBAUTKDVENDI4NjgyRTg5RTlGRUQ5NjJCRTlDNDQzMkIzNEM0 NUUyRTA5QzkwHhcNMjUwNjIwMTg0NjM3WhcNMjUwNjI3MTg0NjM3WjAYMRYwFAYD VQQDEw02ODU1YWM4ZS1hNzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6pRzCivANl/V8XLqJXX0TrGAnLk+evkues4zj9zl6okNiTP2G1BWNUb8jCD2 q7nDOmAMfTfauqXCki0saeMfsg6LXm3qlTBqcukvZkCwU0WyeORmHbcNQ1PkKM3s Icxda8cQAnLbC9l6FHmFoZooKkHJXCUIHs98mY9WPOKOtOYrS1ifIl/4bvp91Oof Xoj+g0ZwLCBPRQqQd0g+RRkvfm6NsgCxyGuiz85PqG56W1GYbVNbZLDTTs+inAo7 wyMhL2yfFlRwMrfNNaB679QplBDBtqRIlnfllFjka4rKbkfFkGfStK5Loz1V9Gcr CZZbu/bOCudrq6zlG74ydSnASQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhtxB+c WYO4rU4KWDU2hradguABMB8GA1UdIwQYMBaAFF1ChoLonp/tlivpxEMrNMReLgnJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjZERS84N0FBRTc0QTFC M0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4tMldLLW5FUXlzMHhGNHVD Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hVS0dndWllbi0yV0stbkVReXMweEY0dUNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjZERS84N0FBRTc0QTFCM0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4t MldLLW5FUXlzMHhGNHVDY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGXZ7CSn2oL+ehEoAyc0RBG8zIFtFMkdRNosBDNhoxwWK2F+NSsu45 ZxfoL21MWflByB2ML+W30Q6tXw8cAkUtpdY7WvEpwTOiXmSr516RhbPmChULv/2x QkqL5uOFeqEWjPH0W3obq3qQ6uvwSVZfIabzB+FjS10HZw84opoo9X/KAZYKOYmt IuoBfBRB4Tu1Jp/qE7KP4GqmtCNIIjaV6M3fZC8J5fxSYeKCl+6dtTqLvJmdS8KN 9SXZKwoJlgaGoTeBofNd4WKJNFGMmj2QTcuhzZefCedcbHUyN/Vn0zASUA/dHHWN fewjUkwCvVSsxN6b9sZsEA/OcVU1uYSq -----END CERTIFICATE-----Generated at Sat Jun 21 16:20:05 2025 by rpki-client