
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
File: XUKGguien-2WK-nEQys0xF4uCck.mft (raw, json)
Hash identifier: zVJ2pMJTKs4sjbv1mXqEa//2wOuh50gzlWCt2MM6wcQ=
Subject key identifier: D9:33:4C:7A:2E:E8:AF:5F:A5:DC:3A:52:9A:49:16:2D:70:65:D5:E7
Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
Certificate issuer: /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Certificate serial: 0CCD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
Manifest number: 0CAC
Signing time: Thu 14 May 2026 18:37:08 +0000
Manifest this update: Thu 14 May 2026 18:37:07 +0000
Manifest next update: Thu 21 May 2026 18:37:07 +0000
Files and hashes: 1: XUKGguien-2WK-nEQys0xF4uCck.crl (hash: bXB3FhFEkbFow4lpUogTcXWrofLcjKQErD/5bBZHJnI=)
2: 8C1F014E911411EF84279055C4F9AE02.roa (hash: ASP0s1dpJzxVuLP1cpiiY7Opvm/0WE0WvTsAQN/soC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 21 May 2026 18:37:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3277 (0xccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F6DE, serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Validity
Not Before: May 14 18:37:07 2026 GMT
Not After : May 21 18:37:07 2026 GMT
Subject: CN=6a061654-d1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f4:7e:1d:2c:37:29:24:e7:f1:68:9f:fa:f5:
b8:ca:03:8a:c4:9b:05:3e:2b:5d:40:70:6b:7d:e4:
30:b5:c2:83:dc:7b:9a:61:c5:af:13:e4:6a:c6:96:
85:18:22:a5:6f:0c:7f:e5:1b:59:ce:2e:32:d6:5b:
6d:76:66:cb:a8:d6:15:95:0f:75:e8:51:cc:8a:9f:
1f:12:22:9d:93:fb:23:b1:6a:e3:fe:13:e5:e9:30:
0e:cb:1f:1f:52:89:43:8a:4c:fb:25:d7:26:3f:de:
5d:6b:e6:79:a6:25:4c:02:89:4f:0d:1b:81:11:6d:
11:23:aa:57:46:9f:f0:47:82:8e:60:34:f5:fc:1c:
eb:7a:2c:c4:ac:7f:9a:9d:eb:b6:b7:7f:db:42:26:
e1:84:1c:7e:39:3f:a3:cf:a5:c2:9c:a6:6b:e4:77:
5f:d8:32:f7:97:a0:b0:3e:7f:d8:cc:0a:dd:23:bb:
51:01:0e:41:90:8d:79:42:47:bc:50:54:bb:2c:13:
50:b7:10:2a:db:49:ad:2a:52:70:14:bc:5e:69:dd:
e5:57:4f:cd:b8:e6:87:7e:5f:81:c0:75:bc:26:b9:
03:86:be:05:1b:d2:c9:a7:6f:24:5e:38:2b:ac:27:
be:0e:b7:e1:26:6f:46:61:80:38:ae:59:49:99:25:
7d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:33:4C:7A:2E:E8:AF:5F:A5:DC:3A:52:9A:49:16:2D:70:65:D5:E7
X509v3 Authority Key Identifier:
keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:52:26:3b:96:78:4d:7f:d8:1a:b9:fe:ce:a7:50:53:bf:35:
2f:44:b9:32:eb:cc:c5:5d:6e:11:64:b9:cc:40:8a:06:da:0f:
9f:ad:93:26:28:59:9c:53:97:01:96:60:04:4c:c9:3f:f2:19:
bc:05:98:6d:37:67:3c:e2:6b:27:48:4e:2f:08:6d:eb:41:4e:
ec:ce:c8:45:71:06:4c:98:f8:58:00:31:2d:d0:24:62:97:33:
81:31:55:87:1a:a1:23:57:3e:70:76:87:97:91:cf:df:09:c6:
7e:c4:dd:33:e6:d7:ea:85:13:a7:44:75:68:87:cb:47:3f:e9:
86:ad:25:d5:41:b0:e2:b7:a0:12:cb:a2:95:16:cc:0b:67:bc:
c7:c4:57:0c:3b:cb:2b:4c:18:68:20:6b:c6:d3:35:eb:27:1d:
9a:ba:0d:b7:17:43:83:31:94:8c:5f:f5:47:17:16:51:c6:bc:
38:3b:7d:1d:6c:39:01:2f:5f:6c:02:03:28:e1:85:2c:28:2b:
49:68:09:fd:59:37:55:0d:01:3b:53:00:17:cf:a2:a3:b7:b2:
0f:7b:c4:e5:25:89:42:69:99:21:41:d7:bd:24:2b:3d:74:38:
8a:fd:d2:a6:9c:b0:33:d7:cb:a9:86:d3:f0:61:ca:cd:02:66:
06:6a:60:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 21:28:34 2026 by rpki-client