
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
File: XUKGguien-2WK-nEQys0xF4uCck.mft (raw, json)
Hash identifier: sVvk8rL/WiRtfSc2LIlnqwwshJpw9kcKOFotZmkfjgY=
Subject key identifier: A5:CE:E9:93:3D:6B:18:59:59:AA:D1:F6:57:81:86:E1:F4:34:00:70
Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
Certificate issuer: /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Certificate serial: 0D22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
Manifest number: 0CFD
Signing time: Sat 10 Oct 2026 18:32:08 +0000
Manifest this update: Sat 10 Oct 2026 18:32:07 +0000
Manifest next update: Sat 17 Oct 2026 18:32:07 +0000
Files and hashes: 1: XUKGguien-2WK-nEQys0xF4uCck.crl (hash: UzrAF8aBRMxVnKHG1LyhopxJx0JVY/7k/fYBc6Qy+bQ=)
2: 8C1F014E911411EF84279055C4F9AE02.roa (hash: 5rD/ZyHPwyrwKgq/EY4U/FQ5iVZEokvnRjlqMpd4Ots=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 18:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3362 (0xd22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F6DE, serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Validity
Not Before: Oct 10 18:32:07 2026 GMT
Not After : Oct 17 18:32:07 2026 GMT
Subject: CN=6aca84a7-aaad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:24:54:f0:d4:6e:fc:7d:7d:54:83:29:18:
39:3e:15:40:45:04:14:9d:64:d6:d0:a3:eb:e2:42:
51:96:6d:87:3d:86:63:9f:df:a3:86:08:11:73:fd:
b4:9c:c9:a2:24:f5:b0:ac:9b:d4:03:92:b9:23:d4:
9d:dc:2e:93:95:76:d0:60:35:fc:af:3e:c0:4a:e9:
c1:58:d6:a6:13:71:cd:ce:ca:19:2d:5f:0a:90:01:
86:aa:09:3d:53:95:d1:30:a2:bd:48:9d:0a:aa:48:
53:83:b2:69:f9:b1:13:98:3b:16:69:fe:b6:6e:f6:
09:0b:06:69:65:e9:6b:d2:a6:ab:79:e4:fc:2d:ac:
24:bb:f3:40:59:14:40:5e:1c:6c:6d:e8:b4:62:b8:
90:f6:9e:c2:06:d3:f8:a2:e1:fb:f4:a0:20:50:49:
b7:5f:97:a8:5c:ca:0b:6c:95:5f:2a:1b:a6:80:70:
de:04:34:a5:a4:f7:a1:b9:c1:52:d7:da:da:64:e6:
9a:5d:ec:2d:37:22:58:5a:17:32:9f:b5:23:95:7a:
7f:ce:0f:a5:43:55:a7:65:56:1e:d4:fa:28:3b:3c:
74:95:2d:d6:ce:c3:d0:2a:c9:d1:dc:20:67:fc:55:
2b:c6:36:c7:10:0d:7f:d1:6d:78:28:a0:4f:18:25:
54:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CE:E9:93:3D:6B:18:59:59:AA:D1:F6:57:81:86:E1:F4:34:00:70
X509v3 Authority Key Identifier:
keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:0e:c7:49:f0:03:69:59:c1:fe:80:a1:e4:98:dc:3c:c0:11:
c0:18:59:2b:fd:82:39:ec:7e:b3:b7:be:6d:a0:91:89:84:05:
3c:92:88:90:bf:9d:e8:5d:7a:7a:71:69:c8:67:e7:04:2f:8b:
03:1f:91:fc:15:87:7e:e7:2e:a5:11:21:45:7f:06:a8:a5:05:
53:8c:87:0a:8d:a0:c7:9f:8f:d7:04:c7:59:16:42:bb:a9:9c:
98:a7:55:76:f4:e9:b2:c8:0c:cb:15:f0:e7:2b:8c:16:a8:02:
16:34:f7:87:6e:ea:a3:09:35:79:f3:5d:a5:c2:c9:a5:ba:99:
56:ad:87:13:6a:73:dc:de:b3:91:63:56:40:3a:28:00:fd:ab:
fc:95:1a:67:70:57:e9:5e:a3:7b:4d:6b:1f:5a:88:9a:3a:bb:
14:1e:86:a5:1d:80:b3:53:2e:3a:f2:5e:0b:e8:6e:86:15:c9:
1f:32:8f:96:3c:46:0e:70:fd:d1:ca:19:2f:00:d7:46:8d:86:
a9:f8:4b:97:72:9d:98:db:10:91:9d:43:fb:1b:d7:38:78:b5:
6c:e8:34:ba:d2:4f:60:5d:30:a8:06:70:72:3a:9b:a0:37:dc:
4e:89:a5:e1:ba:82:7b:7e:2f:48:dc:18:f9:a7:83:d8:bc:13:
5b:fb:11:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:14:12 2026 by rpki-client