
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
File: fuca2Efp1WgQzUnid4XGOFzM-Ws.mft (raw, json)
Hash identifier: 11G9u1WCHPKg7m1CIHaNxtXOAFM+MJYK1CB7v4oElKs=
Subject key identifier: 43:83:8B:EC:C1:F0:62:F9:92:79:BA:36:60:C2:17:16:F3:9B:22:9A
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Certificate issuer: /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial: 0AED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
Manifest number: 0AB0
Signing time: Sun 20 Sep 2026 19:26:39 +0000
Manifest this update: Sun 20 Sep 2026 19:26:39 +0000
Manifest next update: Sun 27 Sep 2026 19:26:39 +0000
Files and hashes: 1: fuca2Efp1WgQzUnid4XGOFzM-Ws.crl (hash: ijAWPsGzhIu/OdnqWfFrJpkBH4JR2vFRxQrjW1iD+CI=)
2: 9746A47821DD11EBBEEF997DC4F9AE02.roa (hash: men7X/DqEw3JTb53TCBtI6CiH6LH5rwCaun8ONR3b98=)
3: 3489F9BE7A5411EB9AC2283DC4F9AE02.roa (hash: fwxKJmrDtHzrccVSlKE8KANRlhroTy3TIj65FcZuDLY=)
4: D9C66AFC845A11EA928C8E1EC4F9AE02.roa (hash: bQOcse5lzSlY8bMOZjQBpyhKLx9EaPheTtDg2oHqHp8=)
5: 96CBB6F021DD11EBBEEF997DC4F9AE02.roa (hash: /ZZ7Pe5945UIWeSF8m8GaepiTXqFI4hqaPmrO33/zQQ=)
6: D1E5207E623E11EEB730FC4FC4F9AE02.roa (hash: YKB5eXYXJ+b4d9GmkKE4qqb7+srssCNwDwAdrBix020=)
7: DA6E4B50845A11EA928C8E1EC4F9AE02.roa (hash: DezM2t0ex2ivS9gcJ+2Q8DrPxU26a0peSNDJOM8KwQ4=)
8: 009A70D0232311EB8E8FB50AC4F9AE02.roa (hash: /hZI+ULL53DSV8wAWDri/JwEvOKCY0Zm6CdyU6LE3cQ=)
9: 458D9132027011EB98FEC44BC4F9AE02.roa (hash: pkAfBicS1xoE+XvgOEnkzo1bk8OIaDY2M85wJQOULGw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2797 (0xaed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Validity
Not Before: Sep 20 19:26:39 2026 GMT
Not After : Sep 27 19:26:39 2026 GMT
Subject: CN=6ab0336f-3537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:05:3e:1b:34:f3:79:af:10:8c:e9:76:8f:
92:fb:c7:a9:85:c8:a9:40:14:1e:5a:12:11:95:a9:
af:0e:67:84:a7:74:c2:00:6a:bd:38:15:f9:93:86:
1c:c7:d1:e4:73:e6:cd:59:e7:90:ce:62:be:71:63:
01:4d:d3:40:75:8c:a1:c9:6f:a7:72:1c:df:32:05:
df:d7:46:c0:92:8d:40:73:e2:07:f3:ea:50:7c:12:
c3:ab:e4:73:52:a7:da:26:a6:5e:65:c2:ee:92:20:
96:35:94:80:31:5f:98:99:14:95:7f:16:c3:87:59:
b3:01:63:f7:45:34:86:0a:1a:1a:f3:bf:6f:36:a2:
66:a4:e4:48:6a:64:61:6f:e7:7f:23:21:67:ff:df:
f0:4c:23:99:24:bd:f0:41:a8:c2:66:02:3c:2d:cc:
92:23:9a:a8:4a:8b:9b:6b:b8:15:0c:5a:e3:60:87:
4b:1f:50:59:80:fa:3d:11:6b:53:d7:bc:fd:5e:b0:
f0:2f:b3:29:49:e8:46:10:b3:99:2e:e6:45:2b:1a:
92:f9:3f:8f:a8:24:1b:65:5f:7f:d4:ba:35:33:bf:
2f:92:a5:29:ac:95:71:2d:94:da:ee:88:d9:e6:9a:
94:ea:55:ab:ee:a3:fd:47:4a:67:f8:6a:34:93:02:
3a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:83:8B:EC:C1:F0:62:F9:92:79:BA:36:60:C2:17:16:F3:9B:22:9A
X509v3 Authority Key Identifier:
keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a3:6a:ae:79:11:58:da:4f:6d:0c:bd:3d:ca:f6:4a:dd:f4:
09:0a:0d:e6:b9:44:42:c0:ca:e2:ce:a3:ff:7d:b7:51:92:e6:
96:c5:a0:8b:39:e8:46:49:ac:30:6c:bd:15:b6:a5:b3:e3:36:
3c:f7:4d:84:b1:23:f9:27:6f:6b:1e:16:9e:d0:18:d3:3f:bb:
f8:c5:73:6e:fa:0c:af:7f:ae:41:6d:31:d6:02:b9:2f:6c:4a:
ea:bf:17:cc:a6:99:aa:b2:19:37:87:df:7c:6c:13:0d:f7:f0:
bf:0b:28:72:1f:ce:eb:d4:d8:45:03:56:fc:97:e3:08:d6:c3:
85:f5:73:0d:20:08:97:37:2e:b2:3f:ba:17:12:ac:78:5c:9f:
7d:fb:48:bb:12:56:2d:9b:c6:8c:7b:91:cc:3e:a5:d6:06:2f:
07:14:89:f9:02:0c:3d:86:8e:08:12:ea:10:42:d6:18:13:5c:
76:bf:ae:ba:9a:49:02:0a:27:2d:74:e9:17:a3:4f:9f:a9:d0:
dd:26:99:d1:ef:84:b8:c9:d6:a4:57:b8:b9:67:fb:22:de:9c:
29:5c:89:59:97:34:40:77:ea:00:e6:32:ae:af:83:d3:d3:df:
c3:7d:3b:66:e2:de:9e:40:87:e3:52:4f:e3:60:5b:ce:81:cb:
94:13:80:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:36:40 2026 by rpki-client