
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
File: XUKGguien-2WK-nEQys0xF4uCck.mft (raw, json)
Hash identifier: DdRyVvzYsLkp9MxLzp+p7X+ucBsxOu30FgsB1vG48/8=
Subject key identifier: B0:1E:17:E0:8E:5E:B9:EC:15:D9:53:C8:6C:C5:94:9A:6E:59:8D:92
Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
Certificate issuer: /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Certificate serial: 0D04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
Manifest number: 0CE0
Signing time: Sun 16 Aug 2026 18:43:40 +0000
Manifest this update: Sun 16 Aug 2026 18:43:40 +0000
Manifest next update: Sun 23 Aug 2026 18:43:40 +0000
Files and hashes: 1: XUKGguien-2WK-nEQys0xF4uCck.crl (hash: rL5cAYa8Ka3sviAn/jWY5zAd9/u3xW5a1edqrsHAI0o=)
2: 8C1F014E911411EF84279055C4F9AE02.roa (hash: nw6Fb6wlmYIv/W86zdAqO4vhX/JUjj9m9zB1O24meX8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 23 Aug 2026 18:43:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3332 (0xd04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F6DE, serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Validity
Not Before: Aug 16 18:43:40 2026 GMT
Not After : Aug 23 18:43:40 2026 GMT
Subject: CN=6a8204dc-2a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:40:d7:39:55:1b:7d:58:49:36:69:dc:9a:8c:
44:9a:7d:48:12:dc:90:6e:62:02:bb:05:fb:af:10:
7f:59:e9:4a:ff:0c:03:68:a9:b9:4f:59:a9:d3:fe:
b9:68:e7:e1:96:4c:e2:6e:08:fe:44:5c:6d:48:83:
aa:bb:a1:65:dc:bb:f2:76:b7:19:ef:4c:1b:e3:9c:
ea:da:5b:f6:b1:c5:55:38:eb:c2:1e:22:c1:76:4d:
bd:51:8d:42:6e:6e:9c:0c:55:08:2c:47:7b:10:9e:
ef:fd:65:97:f8:b9:2d:aa:d4:f5:99:ec:e4:8b:e1:
40:d1:88:4c:3a:f5:9f:7e:05:2c:d8:a0:07:bf:fe:
f4:a0:6c:76:9d:0e:57:db:99:16:fa:58:9a:95:59:
06:b8:46:24:7a:df:97:1c:5a:c2:d3:1c:7b:5b:4c:
c0:2c:2f:ed:75:bb:14:0b:a1:0c:2b:21:8d:c4:c9:
b4:fb:d2:26:bb:bd:65:cd:b9:28:4b:1e:07:05:e9:
61:93:33:45:73:1a:42:90:28:dd:9a:8f:b1:7c:6a:
71:e9:86:ff:d5:d0:38:f0:da:10:ca:d4:a5:2a:aa:
d8:9d:51:9a:f4:8a:a1:ec:81:54:7f:60:b8:24:64:
5f:c2:b9:4c:43:b7:d5:cf:ed:e6:a7:75:2a:8a:47:
ae:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1E:17:E0:8E:5E:B9:EC:15:D9:53:C8:6C:C5:94:9A:6E:59:8D:92
X509v3 Authority Key Identifier:
keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a8:c1:47:96:6d:7e:ee:95:68:d1:43:99:85:c9:ac:97:17:
c1:f8:6d:1d:f1:45:32:7a:7d:fd:16:60:a9:25:a5:c1:94:3c:
6c:39:cd:e5:9c:16:68:9e:19:1e:cc:6e:cb:2d:34:10:a2:c8:
43:51:c2:06:12:b1:b0:51:5c:6b:3f:0a:e6:69:82:3f:c3:d4:
66:8e:03:ab:cd:95:89:56:5f:fd:20:eb:48:90:a1:32:ee:4e:
38:b3:bf:9d:0f:1d:e7:bc:88:53:9b:f2:44:74:fa:e2:56:96:
eb:5e:69:8f:b7:46:e0:f1:8a:03:b6:f8:cb:6c:20:5c:6d:5a:
0d:b5:64:3d:da:2b:b2:ba:ac:8e:94:e2:61:ba:67:36:c7:7d:
93:1e:07:4a:88:5a:f7:38:3b:13:f6:03:48:83:71:b4:a2:dc:
d3:cb:e9:f1:6d:95:17:4d:c4:8b:d4:29:97:12:d2:a5:9d:cd:
3c:76:71:85:ad:e6:f0:6d:5e:82:76:11:da:ee:f0:4e:3a:e6:
68:f9:b7:f7:95:50:c7:ce:3a:e9:18:56:fd:81:81:a0:ee:8e:
07:ee:7e:7b:0b:1a:38:de:4f:d6:14:51:6d:88:4b:0a:13:af:
31:05:cb:96:49:2b:f3:43:8b:53:a2:f7:39:04:ac:5c:93:28:
f4:27:15:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 04:42:32 2026 by rpki-client