
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
File: XUKGguien-2WK-nEQys0xF4uCck.mft (raw, json)
Hash identifier: fFGFpHavmk+Yoo7CR0p9d3XTa9pwJmT9l+kcqInnJww=
Subject key identifier: 2B:35:B4:BC:6F:8C:E1:39:D1:DF:68:DD:92:47:91:03:14:71:78:DD
Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
Certificate issuer: /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Certificate serial: 0CF0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
Manifest number: 0CCF
Signing time: Wed 22 Jul 2026 18:49:16 +0000
Manifest this update: Wed 22 Jul 2026 18:49:16 +0000
Manifest next update: Wed 29 Jul 2026 18:49:16 +0000
Files and hashes: 1: XUKGguien-2WK-nEQys0xF4uCck.crl (hash: UkL9GW4EzqZo1zV1FlEslHF4iigRjLZa6jYoS9qfelE=)
2: 8C1F014E911411EF84279055C4F9AE02.roa (hash: ASP0s1dpJzxVuLP1cpiiY7Opvm/0WE0WvTsAQN/soC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3312 (0xcf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F6DE, serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Validity
Not Before: Jul 22 18:49:16 2026 GMT
Not After : Jul 29 18:49:16 2026 GMT
Subject: CN=6a6110ac-cbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:a7:2e:65:6d:7a:69:2c:87:0e:28:82:26:
09:dd:4f:4f:6f:ae:a5:9b:8b:90:dd:c2:22:ac:b6:
40:e8:20:ae:8b:51:03:16:77:c2:25:91:0b:50:b5:
44:60:f0:25:63:e2:fe:ad:a4:f7:38:29:3d:1c:33:
59:4e:4b:f4:98:eb:d7:69:54:4b:d7:0c:c2:11:12:
7b:40:06:a4:45:6c:43:0f:74:38:d9:5d:b0:68:4a:
8c:bc:27:1b:a1:5c:b2:b1:6e:da:cb:bf:68:3a:02:
e8:04:ce:0a:e0:d8:8c:d3:79:8f:39:83:fe:5c:7b:
e6:ce:38:1f:ce:89:a3:ae:72:78:9e:d6:60:a6:43:
32:09:3d:5e:51:65:8d:9e:2e:83:e9:f1:cd:62:d8:
a5:88:7e:8c:3b:98:05:eb:fb:fc:85:cf:18:6c:f1:
fe:41:b2:74:b5:af:2a:cb:da:e0:a7:3a:f3:aa:8c:
2f:3c:2c:de:e3:4a:50:23:70:4b:ab:ca:8a:23:34:
68:67:64:d2:37:82:01:c6:06:51:ad:21:9c:56:3b:
05:59:5d:bc:cc:bb:29:2a:e6:fc:7a:8b:f0:ff:c8:
e1:34:09:74:1f:cb:d1:57:d4:76:ce:36:cd:ef:4d:
81:00:cb:4c:8c:7f:22:73:25:11:eb:af:b5:b3:8e:
ec:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:35:B4:BC:6F:8C:E1:39:D1:DF:68:DD:92:47:91:03:14:71:78:DD
X509v3 Authority Key Identifier:
keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:92:32:53:57:6d:72:77:85:e5:77:de:0f:d6:1a:d2:c7:c5:
43:7a:d6:3c:b9:f0:38:72:9a:fb:ee:1d:a9:ad:c7:f9:99:af:
41:30:b1:77:2d:69:9b:aa:6b:de:6b:93:ba:de:07:43:33:da:
ff:f3:70:39:1c:f4:38:db:f7:11:ea:e4:7c:07:45:b1:d2:a6:
27:4b:be:13:fd:ce:14:71:e8:1d:45:97:ce:c7:3a:f3:6b:5e:
6f:63:4b:1c:c5:3e:85:14:6b:48:53:61:d5:6d:11:60:81:fc:
6c:c6:8e:88:1d:11:f2:3b:ea:59:ae:a7:14:67:55:5f:2e:61:
ca:f1:ff:8a:e7:07:c9:18:db:f5:f0:ad:cb:d3:fc:64:fb:78:
35:a7:c5:e5:e6:61:ca:6a:8d:8a:5a:65:39:19:04:d2:ee:f3:
c8:de:66:75:eb:f7:0c:40:1b:32:2d:14:d5:27:fb:40:ea:2b:
72:9c:41:df:59:98:ea:ff:a2:14:de:b8:a1:9a:be:a3:7b:d9:
5c:7e:15:d9:8d:a1:5f:3f:06:93:d7:7d:a3:0a:ba:3f:e3:97:
83:45:db:df:f2:d5:d5:e6:89:ef:e9:e5:a9:2b:25:48:55:88:
01:a7:7d:a5:d1:b6:d7:75:e2:68:3b:bb:c6:ad:4e:aa:63:15:
d2:8e:4b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:01:44 2026 by rpki-client