
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
File: XUKGguien-2WK-nEQys0xF4uCck.mft (raw, json)
Hash identifier: I1RKHAqamo0H5tknjOQpRpwza+740nTAPRvMpW7XlVs=
Subject key identifier: 7E:46:CD:31:15:1B:9B:D0:C2:BA:76:B1:16:7A:E4:9F:DA:FE:1A:CF
Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
Certificate issuer: /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Certificate serial: 0CA7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
Manifest number: 0C86
Signing time: Mon 02 Mar 2026 01:26:01 +0000
Manifest this update: Mon 02 Mar 2026 01:26:00 +0000
Manifest next update: Mon 09 Mar 2026 01:26:00 +0000
Files and hashes: 1: XUKGguien-2WK-nEQys0xF4uCck.crl (hash: qAb1Ft7IZ4RAcQtsj/cL00ottY96uuYiIYlrihO24rA=)
2: 8C1F014E911411EF84279055C4F9AE02.roa (hash: ASP0s1dpJzxVuLP1cpiiY7Opvm/0WE0WvTsAQN/soC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3239 (0xca7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F6DE, serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Validity
Not Before: Mar 2 01:26:00 2026 GMT
Not After : Mar 9 01:26:00 2026 GMT
Subject: CN=69a4e729-c3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e6:ef:0d:da:b1:79:b9:c1:ca:12:5c:eb:ee:
39:7e:80:96:ea:64:f4:24:73:c1:9e:ea:ff:f7:96:
6d:7f:19:bf:5e:3e:d8:c8:74:48:4c:dd:5b:02:0c:
09:71:32:20:60:94:d2:81:af:c6:2a:dc:83:f8:12:
36:d1:cc:53:62:93:05:bd:40:d6:ec:fe:45:b0:c9:
28:9e:3d:92:ab:81:98:c0:cf:2e:2b:a4:c3:15:d0:
b3:54:25:86:f9:13:c4:95:98:e9:18:54:7c:e6:69:
99:fe:1c:f7:7b:0a:2d:95:e2:20:22:f4:bf:8f:37:
52:07:c2:de:f4:50:75:b6:f5:10:0e:ca:de:d9:48:
60:08:7e:3e:63:ce:0e:c3:d4:b0:d4:2b:be:d3:83:
2c:b6:a0:bf:09:ab:13:83:78:7a:da:aa:df:c3:46:
02:f3:41:ee:41:d4:4c:0b:f0:83:d9:a5:0e:5a:c1:
f4:06:2b:8b:47:15:b9:2e:6c:70:3a:9c:87:c0:cd:
11:68:a8:5a:06:f8:30:e7:74:67:da:6f:26:a9:fe:
52:a9:d4:50:b1:e6:7e:71:ea:66:ed:bc:e2:7a:b9:
b5:0e:3c:f0:4c:82:29:52:05:09:be:0f:48:be:b1:
c5:9c:0a:6b:5b:72:50:5b:37:3a:54:de:f7:b7:ad:
ce:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:46:CD:31:15:1B:9B:D0:C2:BA:76:B1:16:7A:E4:9F:DA:FE:1A:CF
X509v3 Authority Key Identifier:
keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:02:db:53:55:fe:c8:34:9c:11:22:12:9e:3a:cc:0e:6a:bd:
23:ee:d4:3a:c9:05:17:a3:09:cb:4c:7e:40:b2:4e:b5:f1:a6:
ff:42:a5:23:04:44:10:e7:ae:0c:17:65:3c:04:54:91:f3:90:
48:f5:84:7f:dc:0a:d9:fa:25:70:6a:ed:72:84:7f:bd:fd:9f:
41:53:54:a6:04:f5:2d:96:e6:4c:7e:8c:64:76:c4:30:21:6f:
91:14:5f:07:0e:70:cc:1a:ed:ba:23:a7:04:7e:fe:10:c6:69:
a1:35:e3:4a:83:bf:ea:02:82:48:64:ce:c1:c7:fd:e6:6c:b7:
3d:9f:fe:2d:29:40:6a:d1:5c:f1:05:8f:6f:55:a0:e6:a7:87:
25:77:60:81:a2:7c:bb:fc:a9:82:a2:01:24:94:5b:97:96:bd:
2e:45:94:53:e6:9d:d0:99:97:bd:2d:c2:6e:de:6a:cd:cf:d1:
e6:7d:41:7e:d0:e6:93:cc:1d:fc:ae:1f:9d:96:3e:15:55:f2:
9f:8f:d5:98:8f:2c:57:2f:22:9b:f5:5f:1d:1e:bb:69:52:5a:
cf:46:a7:95:02:ee:79:59:76:58:bb:af:f7:3f:f4:dc:e5:f0:
03:74:69:75:96:3b:68:a7:6f:bc:23:06:a3:52:3a:58:a8:b3:
8d:6c:dd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:44 2026 by rpki-client