
$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
File: fuca2Efp1WgQzUnid4XGOFzM-Ws.mft (raw, json)
Hash identifier: bZLqiddyinhGl+X+KzQjex04GVjzKqlBDnoAm36doKw=
Subject key identifier: E7:92:CC:10:70:D7:C3:13:97:F3:70:E4:4F:E6:4C:2B:FD:D4:DD:3C
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Certificate issuer: /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial: 0AD1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
Manifest number: 0A94
Signing time: Tue 28 Jul 2026 19:52:01 +0000
Manifest this update: Tue 28 Jul 2026 19:52:01 +0000
Manifest next update: Tue 04 Aug 2026 19:52:01 +0000
Files and hashes: 1: fuca2Efp1WgQzUnid4XGOFzM-Ws.crl (hash: nmS0SNB4+bkalNA0ecgZTTUAWe+sQQ63v80m7he4CxU=)
2: 458D9132027011EB98FEC44BC4F9AE02.roa (hash: pkAfBicS1xoE+XvgOEnkzo1bk8OIaDY2M85wJQOULGw=)
3: DA6E4B50845A11EA928C8E1EC4F9AE02.roa (hash: DezM2t0ex2ivS9gcJ+2Q8DrPxU26a0peSNDJOM8KwQ4=)
4: D1E5207E623E11EEB730FC4FC4F9AE02.roa (hash: YKB5eXYXJ+b4d9GmkKE4qqb7+srssCNwDwAdrBix020=)
5: 3489F9BE7A5411EB9AC2283DC4F9AE02.roa (hash: fwxKJmrDtHzrccVSlKE8KANRlhroTy3TIj65FcZuDLY=)
6: 96CBB6F021DD11EBBEEF997DC4F9AE02.roa (hash: /ZZ7Pe5945UIWeSF8m8GaepiTXqFI4hqaPmrO33/zQQ=)
7: D9C66AFC845A11EA928C8E1EC4F9AE02.roa (hash: bQOcse5lzSlY8bMOZjQBpyhKLx9EaPheTtDg2oHqHp8=)
8: 009A70D0232311EB8E8FB50AC4F9AE02.roa (hash: /hZI+ULL53DSV8wAWDri/JwEvOKCY0Zm6CdyU6LE3cQ=)
9: 9746A47821DD11EBBEEF997DC4F9AE02.roa (hash: men7X/DqEw3JTb53TCBtI6CiH6LH5rwCaun8ONR3b98=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2769 (0xad1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Validity
Not Before: Jul 28 19:52:01 2026 GMT
Not After : Aug 4 19:52:01 2026 GMT
Subject: CN=6a690861-ed01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:aa:26:1f:b2:bf:c4:91:cb:ec:fe:3c:1f:da:
f7:66:c9:92:98:e9:0f:fd:47:ce:50:0d:dc:ea:5f:
8b:b8:42:7a:57:90:74:87:42:c2:7a:9b:32:0d:4b:
13:c2:06:ae:18:41:9b:39:4f:35:09:b1:d5:0e:6a:
d6:1d:a7:ba:b9:17:0c:a8:ec:81:c4:1e:fd:bb:36:
87:dc:65:dc:2b:3b:a0:51:3e:2f:19:91:1b:38:36:
17:db:e9:b1:e6:d1:52:84:21:8a:a7:6b:35:67:84:
07:32:c9:cc:82:ab:d7:d2:d2:b6:bb:1d:f4:f9:d1:
97:d3:f6:75:3d:f5:a6:a4:55:8f:c4:5f:bc:97:b7:
98:e7:81:5e:5f:3d:fd:a0:6a:a6:b0:7e:fe:5b:0b:
0e:f9:1e:0a:a5:d4:85:27:ce:52:dc:c5:dc:5e:d1:
2c:21:15:10:b5:97:15:7b:5b:c8:48:ba:5d:fa:f6:
bd:eb:6e:cc:24:f2:c5:de:e9:25:5a:58:fc:59:a6:
fd:b9:99:ee:06:c8:03:2c:35:db:63:ea:b8:b0:84:
f0:c0:e3:3f:50:4b:67:1a:4c:2d:8c:c9:8f:92:70:
0f:71:50:56:c2:43:a0:13:3c:20:a2:62:ed:b5:45:
2a:42:ee:2c:b1:99:48:ab:35:93:46:07:60:f5:62:
96:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:92:CC:10:70:D7:C3:13:97:F3:70:E4:4F:E6:4C:2B:FD:D4:DD:3C
X509v3 Authority Key Identifier:
keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:a2:b0:b4:ed:6b:d2:f4:b4:d2:c6:8b:72:8f:4d:1a:7b:51:
e7:93:1d:4d:89:bd:44:f9:20:1b:be:93:f4:36:17:1b:92:e2:
a6:68:f7:73:e5:44:29:44:c9:52:6e:f4:16:39:30:35:a6:5a:
2c:7e:36:74:4d:c9:f4:7f:46:af:1e:54:5a:64:e7:c8:be:bd:
59:f4:33:3f:b8:8f:f6:3d:b6:75:08:fe:1e:9b:9f:ba:71:2d:
6c:74:2a:1c:8c:fc:a7:4b:c3:b5:8b:4a:3e:a5:66:1f:86:36:
3c:5e:44:f4:89:5c:ab:93:70:d7:e5:e7:da:ca:9f:e7:18:7c:
4e:a9:56:5c:c8:30:34:eb:38:01:2c:d5:5e:8b:04:af:84:c6:
cb:db:83:c9:1d:46:56:9b:6f:29:0e:74:8d:8a:10:91:81:4f:
2b:02:84:ee:b6:31:76:58:dc:3e:76:be:aa:fc:bb:35:14:f1:
f9:7c:98:69:be:00:9d:6d:9d:32:45:39:dc:42:79:04:35:19:
96:ef:7b:9a:c9:e2:e2:6c:fa:48:31:6b:3c:18:ff:33:b5:6f:
6e:43:71:cd:cc:ea:6d:bd:7f:e9:7a:66:2d:48:fd:e1:06:02:
51:2a:db:c2:07:ab:c5:35:cc:4d:ea:47:78:6a:d4:cf:08:63:
a5:63:8d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:20:50 2026 by rpki-client