
$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
File: fuca2Efp1WgQzUnid4XGOFzM-Ws.mft (raw, json)
Hash identifier: okRiAgcJB+nl2izxcG06DOmTwRm1gfT5q0XEyNnsPeA=
Subject key identifier: DA:A0:0C:3E:A8:92:5E:69:79:BC:11:DD:B6:3F:02:75:38:19:37:D5
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Certificate issuer: /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial: 0A93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
Manifest number: 0A5E
Signing time: Thu 16 Apr 2026 19:34:08 +0000
Manifest this update: Thu 16 Apr 2026 19:34:07 +0000
Manifest next update: Thu 23 Apr 2026 19:34:07 +0000
Files and hashes: 1: fuca2Efp1WgQzUnid4XGOFzM-Ws.crl (hash: q0v0uWseRh15/C9UTpL2pcHkb4QBOYfOXpUtFU5eyBw=)
2: D9C66AFC845A11EA928C8E1EC4F9AE02.roa (hash: tH7vWSizbUieFXg8GvcIHBSKExfTT2D05Rr/A8e8WEA=)
3: 9746A47821DD11EBBEEF997DC4F9AE02.roa (hash: 8BXU7nHvXE41jK2FCyo1pdczrBG2miz5FBL5ikw+rJo=)
4: 3489F9BE7A5411EB9AC2283DC4F9AE02.roa (hash: MuevOQNfj8TCHns61sO9/2Pjb6kAnYxyKNVhH0SJFvI=)
5: 009A70D0232311EB8E8FB50AC4F9AE02.roa (hash: 39GRWN0/pxbqcMEo3rbBBVOJmoh6eQm3Ilz6EnRyK3w=)
6: DA6E4B50845A11EA928C8E1EC4F9AE02.roa (hash: ntTGPcrWFFq0QF6RSGOZyO/TRpeLJVLe5JK3qhj3xeI=)
7: 96CBB6F021DD11EBBEEF997DC4F9AE02.roa (hash: 7u63teUVhQnGMkT3EdJmsHFiMrWxK7NjbI1OL50+Y8g=)
8: 458D9132027011EB98FEC44BC4F9AE02.roa (hash: cIfIojm/KCtgcxep7wspCxTl5Z7B47Zzi2uWTB94yiM=)
9: D1E5207E623E11EEB730FC4FC4F9AE02.roa (hash: n9HRSAHbz5siru36bPaHDAVFsYty1ze8jGoJoOEYL/o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2707 (0xa93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Validity
Not Before: Apr 16 19:34:07 2026 GMT
Not After : Apr 23 19:34:07 2026 GMT
Subject: CN=69e139af-813f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:27:a0:16:60:b4:59:5e:c3:8b:39:f5:da:4f:
17:f6:b4:8d:07:6b:53:63:49:e5:53:33:37:17:49:
32:21:e5:60:27:1f:3a:ff:5f:25:5d:81:a4:80:7d:
d4:f7:23:44:9a:a6:5d:98:df:bb:a0:dc:cd:e4:fe:
f0:9a:b5:2d:3f:f8:57:10:f7:72:3b:17:9d:51:7f:
d7:e7:5e:c2:f3:b5:e8:b0:12:1b:31:03:58:b7:4c:
ff:28:02:66:a3:2f:19:03:ec:dc:32:a7:fc:af:b8:
d6:31:26:d3:ef:7c:56:33:30:11:05:f0:dd:9c:e4:
86:e6:35:e9:ee:d5:66:a3:77:49:7f:7e:ef:f5:d3:
42:8d:ab:01:36:57:6d:f6:62:91:f5:36:18:3c:c9:
37:a0:d7:c5:91:66:12:fd:4f:75:31:c9:dd:69:ad:
60:77:87:78:17:a1:09:c6:c0:82:47:c9:8f:00:1c:
19:1e:da:4a:73:01:bd:8e:15:1a:81:f4:86:b8:7a:
26:6e:03:55:12:e5:48:1f:51:a4:0a:92:65:3b:5a:
48:b2:df:ee:f0:f0:ed:a2:88:1f:27:b6:c3:3d:85:
72:7a:76:87:cd:a2:00:68:ff:eb:9f:79:c8:2c:9c:
0d:b5:a8:08:d2:38:6b:46:02:ff:b0:fc:51:1e:64:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A0:0C:3E:A8:92:5E:69:79:BC:11:DD:B6:3F:02:75:38:19:37:D5
X509v3 Authority Key Identifier:
keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:13:5e:a1:2c:5a:24:b0:4f:dd:43:c9:18:48:c7:43:51:42:
79:76:fe:a9:88:fb:10:10:3c:95:b4:63:14:6e:be:b6:fe:85:
bb:00:d6:5b:15:d5:c7:1a:b7:6d:2b:23:ba:50:a1:de:43:b3:
a7:f9:b4:bc:94:2f:f3:3f:65:40:fe:f4:4b:be:a7:76:94:91:
2d:7d:d5:22:d5:ab:4e:76:11:8b:35:1d:34:e4:8a:40:61:48:
5c:33:cc:65:64:74:42:60:77:c1:25:1b:99:65:d7:09:95:dc:
48:ec:eb:83:4a:2d:55:fa:f9:2d:c6:5c:ec:9e:1a:a3:71:81:
c7:47:9a:02:a5:f6:bb:84:3b:f8:f7:aa:55:b6:ba:b0:48:59:
97:aa:e4:69:d1:32:7a:dc:06:d1:86:26:41:90:e3:3c:5d:1f:
f3:02:6a:67:b6:71:10:11:e3:a2:dc:cb:0c:9f:29:8d:67:a9:
db:b1:33:32:4d:89:a3:58:a0:66:41:f5:e8:d8:db:59:c2:c7:
b3:88:87:a6:8c:73:92:29:0d:b2:42:b0:78:fd:0c:80:a9:58:
b8:60:02:59:e7:64:38:e1:a8:79:c8:e8:67:05:4a:d0:d2:35:
0b:71:b6:19:a7:ab:24:f1:7c:ca:a4:1c:2b:54:67:d4:ea:af:
87:05:2c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:48:33 2026 by rpki-client