
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
File: XUKGguien-2WK-nEQys0xF4uCck.mft (raw, json)
Hash identifier: 40nbcH0bqg3gbUmdsxmLqm3ulSQkS7Wz0bxlBGvTaDU=
Subject key identifier: B2:96:EA:EF:0B:2E:4B:DC:1C:60:4D:AA:49:E5:7F:BF:5B:BB:8A:B4
Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
Certificate issuer: /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Certificate serial: 0CB6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
Manifest number: 0C95
Signing time: Mon 30 Mar 2026 18:35:39 +0000
Manifest this update: Mon 30 Mar 2026 18:35:38 +0000
Manifest next update: Mon 06 Apr 2026 18:35:38 +0000
Files and hashes: 1: XUKGguien-2WK-nEQys0xF4uCck.crl (hash: MCT21575ilF4o3A2Wb/By9MplI8S7def4aLaxyGxa1Y=)
2: 8C1F014E911411EF84279055C4F9AE02.roa (hash: ASP0s1dpJzxVuLP1cpiiY7Opvm/0WE0WvTsAQN/soC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3254 (0xcb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F6DE, serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Validity
Not Before: Mar 30 18:35:38 2026 GMT
Not After : Apr 6 18:35:38 2026 GMT
Subject: CN=69cac27b-3156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fd:50:83:e4:10:bd:3d:c5:cd:ed:c6:ec:a3:
aa:3b:36:1f:4d:37:6f:db:4f:b8:22:a5:6a:8e:fc:
71:c3:70:9c:01:1e:e8:fa:9c:05:2f:b0:65:58:66:
bc:35:b2:89:2c:9d:26:ad:51:87:ad:bd:da:62:45:
8e:e4:86:83:ec:47:22:87:7d:63:43:51:31:f6:7a:
f4:97:2e:4f:27:08:91:5a:37:8f:8a:54:b9:93:3e:
87:58:fb:48:da:63:f3:d3:09:5f:3b:7e:66:ff:e8:
a0:7b:eb:98:97:5e:a8:16:ff:e8:4a:d1:da:c9:d2:
99:cf:94:97:52:71:e3:78:63:4f:f6:2f:0d:20:c9:
a8:dc:3c:90:e2:24:e9:04:5f:9a:73:2d:8d:07:f7:
ac:e6:bc:27:a6:87:17:b7:f6:97:72:1a:e9:30:0d:
1a:37:6d:97:73:42:3f:0b:0f:7d:e3:c1:67:91:85:
3f:6d:18:8b:10:a7:d9:b5:94:34:6b:fc:16:0f:28:
41:ca:c0:4d:c4:bb:50:e1:25:96:94:bc:47:f0:d9:
0e:f3:97:1a:35:10:6a:cd:0c:a1:1a:82:29:11:69:
4e:ec:1c:f0:9b:bc:ec:ab:fe:ac:14:12:48:95:d3:
1e:a9:7a:ec:fe:ea:a6:cf:4b:42:8c:fc:c0:ff:00:
e0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:96:EA:EF:0B:2E:4B:DC:1C:60:4D:AA:49:E5:7F:BF:5B:BB:8A:B4
X509v3 Authority Key Identifier:
keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:02:1a:47:0d:1c:f8:c7:2e:e0:1c:45:11:0a:19:6c:ee:c4:
ee:d9:54:bc:ef:ec:71:a9:2b:f4:5a:5a:7b:b0:bf:84:4a:e2:
cf:c8:1a:d5:fe:1d:3c:bc:28:42:96:be:54:86:58:1d:5b:51:
53:f9:d6:08:20:b9:07:39:ea:90:ad:2f:74:39:87:bb:58:d1:
2e:03:f7:2d:57:c6:c2:e4:41:93:f8:01:b9:df:4d:2f:bb:12:
45:38:22:14:c4:e2:dd:49:9c:df:10:66:ca:d8:60:23:aa:6f:
b3:b5:d0:d9:22:35:39:dc:b8:1d:da:d5:30:53:5c:07:5b:e2:
a8:0c:cc:59:d0:81:e0:52:47:94:57:b3:ca:d6:15:9e:5d:a5:
f4:fa:cf:43:81:0d:1f:6e:76:65:95:9c:25:6d:43:d4:db:b6:
a9:8a:f5:c5:c8:d0:b6:38:9e:ae:c7:b7:f0:08:a2:c0:79:a8:
dd:31:b5:7c:e5:12:aa:dd:3c:12:d7:22:08:76:32:5b:48:33:
bb:cc:2b:e5:2a:a8:57:15:12:9d:a5:a2:72:fb:2b:66:ee:cc:
13:0e:e1:01:45:79:41:60:3b:d9:82:16:60:e2:1f:bc:cc:cf:
0c:76:bb:a0:06:cf:ac:6b:6f:80:84:66:bb:85:aa:ea:85:ec:
ee:e2:91:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0Y2REUxMTAvBgNVBAUTKDVENDI4NjgyRTg5RTlGRUQ5NjJCRTlDNDQzMkIzNEM0
NUUyRTA5QzkwHhcNMjYwMzMwMTgzNTM4WhcNMjYwNDA2MTgzNTM4WjAYMRYwFAYD
VQQDEw02OWNhYzI3Yi0zMTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyv1Qg+QQvT3Fze3G7KOqOzYfTTdv20+4IqVqjvxxw3CcAR7o+pwFL7BlWGa8
NbKJLJ0mrVGHrb3aYkWO5IaD7Ecih31jQ1Ex9nr0ly5PJwiRWjePilS5kz6HWPtI
2mPz0wlfO35m/+ige+uYl16oFv/oStHaydKZz5SXUnHjeGNP9i8NIMmo3DyQ4iTp
BF+acy2NB/es5rwnpocXt/aXchrpMA0aN22Xc0I/Cw9948FnkYU/bRiLEKfZtZQ0
a/wWDyhBysBNxLtQ4SWWlLxH8NkO85caNRBqzQyhGoIpEWlO7Bzwm7zsq/6sFBJI
ldMeqXrs/uqmz0tCjPzA/wDghwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLKW6u8L
LkvcHGBNqknlf79bu4q0MB8GA1UdIwQYMBaAFF1ChoLonp/tlivpxEMrNMReLgnJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjZERS84N0FBRTc0QTFC
M0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4tMldLLW5FUXlzMHhGNHVD
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hVS0dndWllbi0yV0stbkVReXMweEY0dUNjay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjZERS84N0FBRTc0QTFCM0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4t
MldLLW5FUXlzMHhGNHVDY2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZAIaRw0c+Mcu4BxFEQoZbO7E7tlUvO/scakr9Fpae7C/hEriz8ga1f4dPLwo
Qpa+VIZYHVtRU/nWCCC5BznqkK0vdDmHu1jRLgP3LVfGwuRBk/gBud9NL7sSRTgi
FMTi3Umc3xBmythgI6pvs7XQ2SI1Ody4HdrVMFNcB1viqAzMWdCB4FJHlFezytYV
nl2l9PrPQ4ENH252ZZWcJW1D1Nu2qYr1xcjQtjierse38AiiwHmo3TG1fOUSqt08
EtciCHYyW0gzu8wr5SqoVxUSnaWicvsrZu7MEw7hAUV5QWA72YIWYOIfvMzPDHa7
oAbPrGtvgIRmu4Wq6oXs7uKRvQ==
-----END CERTIFICATE-----
Generated at Tue Mar 31 15:28:00 2026 by rpki-client