
$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
File: fuca2Efp1WgQzUnid4XGOFzM-Ws.mft (raw, json)
Hash identifier: 3fA3JNKAy0+aRSQgrjZerHC4VRNvZZ4aF2W3l/5r9tQ=
Subject key identifier: D9:39:76:BE:80:AB:CD:21:A4:54:3C:25:6D:8A:6B:8D:78:C9:FE:35
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Certificate issuer: /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial: 0AA0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
Manifest number: 0A6B
Signing time: Tue 12 May 2026 19:41:09 +0000
Manifest this update: Tue 12 May 2026 19:41:08 +0000
Manifest next update: Tue 19 May 2026 19:41:08 +0000
Files and hashes: 1: fuca2Efp1WgQzUnid4XGOFzM-Ws.crl (hash: /UvMUPQgi0TV5x7KsltNN8nZidn2E0bWsqcXqP7+8CI=)
2: 9746A47821DD11EBBEEF997DC4F9AE02.roa (hash: 8BXU7nHvXE41jK2FCyo1pdczrBG2miz5FBL5ikw+rJo=)
3: DA6E4B50845A11EA928C8E1EC4F9AE02.roa (hash: ntTGPcrWFFq0QF6RSGOZyO/TRpeLJVLe5JK3qhj3xeI=)
4: 96CBB6F021DD11EBBEEF997DC4F9AE02.roa (hash: 7u63teUVhQnGMkT3EdJmsHFiMrWxK7NjbI1OL50+Y8g=)
5: D9C66AFC845A11EA928C8E1EC4F9AE02.roa (hash: tH7vWSizbUieFXg8GvcIHBSKExfTT2D05Rr/A8e8WEA=)
6: 3489F9BE7A5411EB9AC2283DC4F9AE02.roa (hash: MuevOQNfj8TCHns61sO9/2Pjb6kAnYxyKNVhH0SJFvI=)
7: 009A70D0232311EB8E8FB50AC4F9AE02.roa (hash: 39GRWN0/pxbqcMEo3rbBBVOJmoh6eQm3Ilz6EnRyK3w=)
8: D1E5207E623E11EEB730FC4FC4F9AE02.roa (hash: n9HRSAHbz5siru36bPaHDAVFsYty1ze8jGoJoOEYL/o=)
9: 458D9132027011EB98FEC44BC4F9AE02.roa (hash: cIfIojm/KCtgcxep7wspCxTl5Z7B47Zzi2uWTB94yiM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2720 (0xaa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Validity
Not Before: May 12 19:41:08 2026 GMT
Not After : May 19 19:41:08 2026 GMT
Subject: CN=6a038255-c372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2b:95:a1:9b:c2:53:ae:04:eb:e6:d3:3e:1b:
9c:dc:dc:b5:6f:96:f5:9f:21:78:9d:92:e6:eb:ed:
05:6b:80:13:b1:9f:7c:62:79:a1:cf:ed:f3:7b:67:
41:bf:70:cb:c6:d1:94:df:95:60:30:2e:98:00:21:
7e:62:f8:91:6f:b1:54:91:6b:7f:ab:00:3f:45:2d:
46:c9:d4:32:3e:96:b5:50:24:b5:ad:1e:59:1a:b2:
68:28:72:42:da:6a:52:00:88:11:9b:73:a2:2b:a2:
df:28:38:f0:73:c0:20:62:69:b8:29:49:c5:58:45:
d2:df:4a:fd:ab:5d:15:a9:a3:69:9b:b5:11:1c:1e:
72:a7:6b:ff:b0:67:69:ff:21:9d:c9:c6:cd:42:ae:
46:3b:f0:bf:54:24:1b:e3:2e:6c:0b:b1:63:68:86:
20:47:81:e8:25:75:28:52:88:a7:dd:90:09:c5:d2:
6f:df:9a:28:de:f9:af:df:05:93:3b:ea:a2:28:87:
58:11:81:b6:26:09:4d:e1:1d:3e:8b:27:b7:d3:4e:
4f:b4:75:99:f5:6e:cb:4a:09:e9:5e:85:f0:76:18:
d5:4f:bb:8c:f8:b3:3e:25:c2:f7:3e:de:e1:4b:13:
4e:80:08:fe:12:6d:a7:40:48:02:35:86:68:66:8d:
cd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:39:76:BE:80:AB:CD:21:A4:54:3C:25:6D:8A:6B:8D:78:C9:FE:35
X509v3 Authority Key Identifier:
keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:44:a3:0f:5c:3e:99:94:78:4e:e4:32:4a:a4:39:53:95:6d:
07:53:79:8c:cd:0a:d0:9c:d6:9c:e8:87:c0:70:1c:c3:30:54:
1f:c8:72:04:a0:0b:02:52:c6:d9:c7:0a:7e:92:55:fd:9f:4b:
9d:e9:0f:9e:e8:4e:c0:58:c8:49:c0:9a:4b:80:68:25:1c:23:
f7:4b:81:2c:a5:82:19:bb:57:73:1a:34:27:3c:06:0d:80:90:
3e:34:2f:00:47:a7:3d:8c:f3:60:04:e8:3e:21:7e:0e:e0:a6:
2c:1f:4f:e0:82:94:c6:95:ee:98:8f:20:34:29:b7:1f:af:50:
a1:50:7f:54:87:5b:80:80:97:31:0f:06:c2:11:f8:e7:bb:54:
6f:19:8f:b2:df:5c:0a:e0:e1:b8:e4:ae:3f:3f:e8:94:be:d4:
42:88:a8:4c:59:2f:ca:20:0e:90:21:c8:bb:f0:1c:50:cc:1f:
39:c1:ff:fa:32:8a:ed:d9:98:30:52:f7:8f:50:6d:14:f6:15:
55:b9:2b:e2:d0:75:b8:b8:d6:7f:95:cb:ba:3b:b2:7a:3a:04:
ee:a5:28:88:42:48:1b:3e:fa:a0:75:dc:29:67:9e:20:6d:cb:
d4:62:af:b0:44:66:e4:e5:e7:61:66:e7:b4:ac:b0:94:e9:98:
6e:43:df:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:08:29 2026 by rpki-client