$ rpki-client -vvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft File: XUKGguien-2WK-nEQys0xF4uCck.mft (raw, json) Hash identifier: yLbSHZlz5J534liD91OYhC/ugHcaE8gjmJEe5AVqJ8c= Subject key identifier: 30:C1:C0:54:63:C0:A7:92:94:11:C0:71:0B:A5:13:65:C8:6F:B2:60 Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9 Certificate issuer: /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9 Certificate serial: 0C3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft Manifest number: 0C20 Signing time: Fri 22 Aug 2025 18:54:01 +0000 Manifest this update: Fri 22 Aug 2025 18:54:00 +0000 Manifest next update: Fri 29 Aug 2025 18:54:00 +0000 Files and hashes: 1: XUKGguien-2WK-nEQys0xF4uCck.crl (hash: iqlLnA5vZ1wtoGXZ0gwBLd3uLK+Fkm/z/lVaLJc8fwY=) 2: 8C1F014E911411EF84279055C4F9AE02.roa (hash: s6vSkxLA2BmYKE9MQCxEAZSPb/w8Cy/hDqrNsJ/5JFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3134 (0xc3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F6DE, serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9 Validity Not Before: Aug 22 18:54:00 2025 GMT Not After : Aug 29 18:54:00 2025 GMT Subject: CN=68a8bcc8-5380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ab:11:27:6e:0c:16:0e:13:64:5e:5d:e6:45: 56:07:85:09:62:15:3c:98:77:2d:08:f1:02:d2:e6: e4:de:b8:44:d0:12:2d:f4:7a:3f:df:d5:f3:3d:80: fa:88:58:52:2f:19:d8:54:87:9d:15:f8:7b:17:a3: d3:50:8f:f3:48:d6:44:25:a4:05:1b:7a:d7:c6:39: c0:a2:cf:2a:22:f4:b7:80:13:44:6a:eb:16:6b:e5: 48:e1:ff:ef:b9:ac:50:2e:99:50:d8:48:f1:d7:1d: 39:5b:1f:5c:97:35:fb:fc:61:30:ea:ff:ca:d8:d7: 7e:ee:5b:8a:94:3f:21:55:e6:bb:b6:11:cd:7f:87: 78:da:ac:68:8e:59:7b:d3:05:cf:4e:95:ed:d9:2e: 37:6c:70:c4:94:d0:fc:f4:1b:7d:f8:76:23:88:80: 16:61:4d:bc:c4:3d:af:5d:c2:fe:89:b1:74:85:89: 31:cb:66:0b:47:3c:56:a6:52:7c:36:05:ea:f5:5a: eb:be:d7:51:b7:f7:36:7e:fb:5b:31:00:ad:d1:e4: cf:4c:75:8f:50:44:a5:57:bb:47:58:04:52:81:6e: 73:7c:65:7e:d7:1f:51:f0:5e:5e:8f:60:c2:a3:d2: 90:9a:61:3d:34:ed:e4:46:6a:38:cb:15:77:40:d4: 85:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C1:C0:54:63:C0:A7:92:94:11:C0:71:0B:A5:13:65:C8:6F:B2:60 X509v3 Authority Key Identifier: keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:77:fc:97:de:83:51:65:41:2a:49:b0:e7:88:da:4f:b8:d1: 53:cc:36:45:7f:1d:bb:15:95:90:c6:43:16:6c:22:28:01:a8: 23:11:d1:2c:80:45:b7:49:77:c0:38:7f:da:f2:04:ea:a7:e4: 14:e7:34:ec:f1:4a:84:e7:21:0a:3c:6e:cc:0d:35:06:aa:98: 56:73:81:a8:2b:26:86:22:ad:67:99:e0:d1:39:62:5b:20:d4: f9:7b:4b:25:3d:c1:6c:51:40:59:a3:7f:68:6b:22:cb:0d:6b: e5:b8:49:4d:fa:4c:91:72:54:3c:4d:34:81:0e:28:af:02:43: 96:40:19:e4:79:cf:b0:5b:66:6e:0d:6e:76:b8:f0:3e:eb:e5: 4a:d5:5e:01:9b:41:62:c9:42:b4:db:78:51:4f:a4:33:bb:01: 2a:76:fa:c6:cf:08:ea:1b:94:51:bd:1c:a3:c7:a9:38:6e:84: d5:d9:ea:95:05:b4:e7:bb:60:d2:6f:3c:78:42:cd:63:c3:ca: 7b:75:bd:a4:ab:15:51:3a:e1:ec:9f:78:57:20:48:1b:04:09: eb:cc:20:55:03:49:da:0e:e7:4c:cd:8e:26:ab:a0:e9:1e:5f: 39:80:cf:36:45:13:14:20:be:93:9a:88:1c:b6:35:b9:ba:5b: 67:42:ba:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y2REUxMTAvBgNVBAUTKDVENDI4NjgyRTg5RTlGRUQ5NjJCRTlDNDQzMkIzNEM0 NUUyRTA5QzkwHhcNMjUwODIyMTg1NDAwWhcNMjUwODI5MTg1NDAwWjAYMRYwFAYD VQQDEw02OGE4YmNjOC01MzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6sRJ24MFg4TZF5d5kVWB4UJYhU8mHctCPEC0ubk3rhE0BIt9Ho/39XzPYD6 iFhSLxnYVIedFfh7F6PTUI/zSNZEJaQFG3rXxjnAos8qIvS3gBNEausWa+VI4f/v uaxQLplQ2Ejx1x05Wx9clzX7/GEw6v/K2Nd+7luKlD8hVea7thHNf4d42qxojll7 0wXPTpXt2S43bHDElND89Bt9+HYjiIAWYU28xD2vXcL+ibF0hYkxy2YLRzxWplJ8 NgXq9VrrvtdRt/c2fvtbMQCt0eTPTHWPUESlV7tHWARSgW5zfGV+1x9R8F5ej2DC o9KQmmE9NO3kRmo4yxV3QNSFdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDBwFRj wKeSlBHAcQulE2XIb7JgMB8GA1UdIwQYMBaAFF1ChoLonp/tlivpxEMrNMReLgnJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjZERS84N0FBRTc0QTFC M0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4tMldLLW5FUXlzMHhGNHVD Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hVS0dndWllbi0yV0stbkVReXMweEY0dUNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjZERS84N0FBRTc0QTFCM0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4t MldLLW5FUXlzMHhGNHVDY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNd/yX3oNRZUEqSbDniNpPuNFTzDZFfx27FZWQxkMWbCIoAagjEdEs gEW3SXfAOH/a8gTqp+QU5zTs8UqE5yEKPG7MDTUGqphWc4GoKyaGIq1nmeDROWJb INT5e0slPcFsUUBZo39oayLLDWvluElN+kyRclQ8TTSBDiivAkOWQBnkec+wW2Zu DW52uPA+6+VK1V4Bm0FiyUK023hRT6QzuwEqdvrGzwjqG5RRvRyjx6k4boTV2eqV BbTnu2DSbzx4Qs1jw8p7db2kqxVROuHsn3hXIEgbBAnrzCBVA0naDudMzY4mq6Dp Hl85gM82RRMUIL6TmogctjW5ultnQrp3 -----END CERTIFICATE-----Generated at Sat Aug 23 20:43:20 2025 by rpki-client