
$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
File: fuca2Efp1WgQzUnid4XGOFzM-Ws.mft (raw, json)
Hash identifier: N6Inp1VHvx2u5jl6VF0C4fWAJjVh3H2HJgwWRdlEQVM=
Subject key identifier: 1C:26:23:D6:4E:37:D2:49:A9:FD:BB:F4:42:49:61:5F:B8:01:07:05
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Certificate issuer: /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial: 0A71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
Manifest number: 0A44
Signing time: Sat 28 Feb 2026 19:57:41 +0000
Manifest this update: Sat 28 Feb 2026 19:57:40 +0000
Manifest next update: Sat 07 Mar 2026 19:57:40 +0000
Files and hashes: 1: fuca2Efp1WgQzUnid4XGOFzM-Ws.crl (hash: uZ7ibumsa6OTgJkQMCiSukS5jWjBSCDVuLnNneaLkLE=)
2: D1E5207E623E11EEB730FC4FC4F9AE02.roa (hash: EBBq2dvPN2qrFHWA2gvLMgygNt7qGWmAEAlos1BkdKA=)
3: 3489F9BE7A5411EB9AC2283DC4F9AE02.roa (hash: C+K+zxCiX20oBW/hjSSug6Cn1uDBfdQvOfw8jaVnwF0=)
4: 96CBB6F021DD11EBBEEF997DC4F9AE02.roa (hash: XNLc2hzwG2rPDS1PYT/O9+b6/Uq/y3qUxEgGA8r+TxU=)
5: DA6E4B50845A11EA928C8E1EC4F9AE02.roa (hash: w9A7MEjRbH6044RpHTj7Heq3MuVPTameCqh713ASFGQ=)
6: 9746A47821DD11EBBEEF997DC4F9AE02.roa (hash: wOQr7xnjiQVfFCSLPIrs8Uv4moHBDQqUGZyVEWvxUiA=)
7: 458D9132027011EB98FEC44BC4F9AE02.roa (hash: J45Hm44TMBsCYw7t+Sll4bQhYtwd5hVNJa6WsKBj1nE=)
8: D9C66AFC845A11EA928C8E1EC4F9AE02.roa (hash: 210YkBAqXCkpmFmUR0uAPvXxyZxvWBWyuv+hpZ9QyUM=)
9: 009A70D0232311EB8E8FB50AC4F9AE02.roa (hash: Rwzg8Z0sDBhGWmys5Ye1O1m7MbiGBRWWaDIIaIT0/W0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2673 (0xa71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Validity
Not Before: Feb 28 19:57:40 2026 GMT
Not After : Mar 7 19:57:40 2026 GMT
Subject: CN=69a348b5-da53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:0d:ce:26:9a:7f:06:d1:94:fb:19:d4:45:
75:b6:86:c2:41:c4:20:99:f6:a1:2c:a0:28:de:45:
5b:b7:4d:ce:1b:a7:3b:2b:c1:e9:e4:1d:7b:d3:b2:
e6:c8:cb:04:1d:d8:a0:01:04:ac:78:64:d1:e5:71:
ba:6b:d2:7c:51:0f:56:98:02:a7:74:b7:9a:09:2f:
29:e0:c4:03:d0:2c:8e:d7:94:bc:93:3b:c7:e1:7a:
85:46:fc:81:eb:d7:e1:cd:ff:59:78:40:7b:42:29:
8e:d7:f4:81:ab:00:f2:18:b4:cc:e7:d2:8c:16:e4:
9e:a1:1b:3c:a3:a5:90:f0:fc:be:97:b3:7b:cf:e9:
ed:44:24:4d:97:0b:aa:b5:72:c1:02:1a:50:a5:d1:
1f:e2:42:3a:59:11:89:32:45:da:86:23:f3:41:90:
06:a4:87:5e:3a:1b:ff:ce:c4:6d:17:fc:a2:f7:22:
e2:8e:ae:c8:15:8a:df:fa:70:d3:08:f1:8a:bf:0c:
4b:f2:ce:97:ac:9d:08:3b:2b:b4:0f:b6:12:5a:e8:
29:cc:12:d2:4d:00:53:8b:7a:0d:d4:20:0f:bb:aa:
9d:74:be:6c:d3:46:97:f1:93:c6:b2:d0:4e:64:fa:
a7:a2:02:8b:15:b4:68:f2:bf:ec:9e:b3:07:b5:d2:
e0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:26:23:D6:4E:37:D2:49:A9:FD:BB:F4:42:49:61:5F:B8:01:07:05
X509v3 Authority Key Identifier:
keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:a9:4a:08:f4:c6:b8:0e:ec:e2:5b:7f:77:df:c6:df:82:6d:
a7:4f:6d:95:cc:9b:71:63:ff:3c:41:33:80:39:a6:13:25:56:
23:63:7f:96:bd:ef:97:06:73:d1:c7:60:48:c6:6d:34:0b:bf:
a8:36:f5:73:11:08:0f:22:73:77:63:d8:ae:8b:1a:7c:06:91:
26:ee:85:4a:f5:96:f4:8d:6c:12:b2:73:be:8d:ff:a9:57:4c:
64:d9:ac:9c:06:80:3e:92:22:86:5a:64:4b:54:f1:65:44:48:
9b:2a:21:5b:f0:40:37:8c:05:a2:aa:8e:f4:48:45:af:d0:db:
e9:6e:1c:46:ce:82:1f:fb:e9:81:49:0a:62:df:a7:47:94:0e:
61:c3:85:32:8a:04:a7:53:2e:82:61:d5:b4:5c:80:d4:e0:a1:
f8:a9:d3:c8:5e:ad:01:28:56:65:b0:9c:25:c1:b0:85:95:03:
da:86:7b:66:a1:97:00:d3:6c:9e:d6:1e:d0:f0:52:07:35:fc:
4a:58:44:79:51:98:e8:25:77:67:d1:3b:22:f7:41:36:f7:1d:
33:3c:3b:32:a4:80:35:75:8e:21:df:3c:81:7e:aa:f5:6c:10:
e4:b1:cf:cc:58:4e:db:cf:d4:52:62:11:8f:0b:12:d8:1e:6b:
41:e9:32:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQxRDIxMTAvBgNVBAUTKDdFRTcxQUQ4NDdFOUQ1NjgxMENENDlFMjc3ODVDNjM4
NUNDQ0Y5NkIwHhcNMjYwMjI4MTk1NzQwWhcNMjYwMzA3MTk1NzQwWjAYMRYwFAYD
VQQDDA02OWEzNDhiNS1kYTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp1kNziaafwbRlPsZ1EV1tobCQcQgmfahLKAo3kVbt03OG6c7K8Hp5B1707Lm
yMsEHdigAQSseGTR5XG6a9J8UQ9WmAKndLeaCS8p4MQD0CyO15S8kzvH4XqFRvyB
69fhzf9ZeEB7QimO1/SBqwDyGLTM59KMFuSeoRs8o6WQ8Py+l7N7z+ntRCRNlwuq
tXLBAhpQpdEf4kI6WRGJMkXahiPzQZAGpIdeOhv/zsRtF/yi9yLijq7IFYrf+nDT
CPGKvwxL8s6XrJ0IOyu0D7YSWugpzBLSTQBTi3oN1CAPu6qddL5s00aX8ZPGstBO
ZPqnogKLFbRo8r/snrMHtdLgxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBwmI9ZO
N9JJqf279EJJYV+4AQcFMB8GA1UdIwQYMBaAFH7nGthH6dVoEM1J4neFxjhczPlr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDFEMi9GNzIyM0ZCNDg0
NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFXZ1F6VW5pZDRYR09Gek0t
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z1Y2EyRWZwMVdnUXpVbmlkNFhHT0Z6TS1Xcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDFEMi9GNzIyM0ZCNDg0NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFX
Z1F6VW5pZDRYR09Gek0tV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABqlKCPTGuA7s4lt/d9/G34Jtp09tlcybcWP/PEEzgDmmEyVWI2N/lr3vlwZz
0cdgSMZtNAu/qDb1cxEIDyJzd2PYrosafAaRJu6FSvWW9I1sErJzvo3/qVdMZNms
nAaAPpIihlpkS1TxZURImyohW/BAN4wFoqqO9EhFr9Db6W4cRs6CH/vpgUkKYt+n
R5QOYcOFMooEp1MugmHVtFyA1OCh+KnTyF6tAShWZbCcJcGwhZUD2oZ7ZqGXANNs
ntYe0PBSBzX8SlhEeVGY6CV3Z9E7IvdBNvcdMzw7MqSANXWOId88gX6q9WwQ5LHP
zFhO28/UUmIRjwsS2B5rQekydA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:47 2026 by rpki-client