
$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
File: fuca2Efp1WgQzUnid4XGOFzM-Ws.mft (raw, json)
Hash identifier: RhY41saUD5BcJo8fp8yY5wAx7eXPUvKiBf6kRue8HOg=
Subject key identifier: 72:A1:34:76:C6:54:4F:81:B7:27:D8:54:D2:28:91:C8:1E:63:43:EE
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Certificate issuer: /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial: 0ACE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
Manifest number: 0A91
Signing time: Wed 22 Jul 2026 19:57:10 +0000
Manifest this update: Wed 22 Jul 2026 19:57:09 +0000
Manifest next update: Wed 29 Jul 2026 19:57:09 +0000
Files and hashes: 1: fuca2Efp1WgQzUnid4XGOFzM-Ws.crl (hash: LE90s/YwHZ9Fel1BRG8eMb912CL5Uu9uUKQPwF+8RKI=)
2: 96CBB6F021DD11EBBEEF997DC4F9AE02.roa (hash: /ZZ7Pe5945UIWeSF8m8GaepiTXqFI4hqaPmrO33/zQQ=)
3: D1E5207E623E11EEB730FC4FC4F9AE02.roa (hash: YKB5eXYXJ+b4d9GmkKE4qqb7+srssCNwDwAdrBix020=)
4: D9C66AFC845A11EA928C8E1EC4F9AE02.roa (hash: bQOcse5lzSlY8bMOZjQBpyhKLx9EaPheTtDg2oHqHp8=)
5: 458D9132027011EB98FEC44BC4F9AE02.roa (hash: pkAfBicS1xoE+XvgOEnkzo1bk8OIaDY2M85wJQOULGw=)
6: 9746A47821DD11EBBEEF997DC4F9AE02.roa (hash: men7X/DqEw3JTb53TCBtI6CiH6LH5rwCaun8ONR3b98=)
7: 009A70D0232311EB8E8FB50AC4F9AE02.roa (hash: /hZI+ULL53DSV8wAWDri/JwEvOKCY0Zm6CdyU6LE3cQ=)
8: 3489F9BE7A5411EB9AC2283DC4F9AE02.roa (hash: fwxKJmrDtHzrccVSlKE8KANRlhroTy3TIj65FcZuDLY=)
9: DA6E4B50845A11EA928C8E1EC4F9AE02.roa (hash: DezM2t0ex2ivS9gcJ+2Q8DrPxU26a0peSNDJOM8KwQ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2766 (0xace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Validity
Not Before: Jul 22 19:57:09 2026 GMT
Not After : Jul 29 19:57:09 2026 GMT
Subject: CN=6a612096-1f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:ed:0d:2c:9d:60:b0:8f:62:7c:94:00:fc:
dc:62:3e:4b:a2:5d:63:a1:d6:ce:ee:7a:6f:4c:37:
d3:a5:cf:ca:cb:dc:14:fb:28:04:0f:12:bd:bb:a7:
e7:56:6c:d6:c4:32:70:43:16:42:c4:56:2d:e6:41:
c7:ea:40:72:83:26:ed:9d:fc:7b:03:42:ac:b2:2b:
0d:6d:9f:56:5e:e2:19:d7:54:29:09:d0:96:9e:fd:
e8:15:32:12:fb:57:31:8e:bb:16:7e:e7:30:12:c4:
cf:d8:25:e4:f6:f8:3b:82:d2:ab:ac:18:ef:59:57:
04:51:63:0a:cd:19:cc:7d:92:23:2a:3c:8d:c8:47:
39:f2:b5:64:03:a3:4f:a2:cb:23:6f:53:80:d0:cf:
3a:ff:90:ef:fa:80:cb:cb:64:2e:77:eb:0a:a8:fb:
72:1d:22:f4:dc:4d:52:ba:b4:d6:67:55:ec:e5:7a:
f5:6c:03:f6:cc:92:21:ec:7a:7d:cd:54:6b:1f:d2:
bb:69:ea:16:74:47:a4:a5:95:25:fb:8a:35:40:11:
c1:c3:26:13:4d:d4:d3:dc:db:74:c0:40:de:7f:05:
4e:22:ad:dd:8c:d6:90:d8:2a:ce:7a:8c:a9:62:d4:
93:9b:96:fd:4f:39:17:2a:5b:af:dc:de:9e:c0:aa:
24:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A1:34:76:C6:54:4F:81:B7:27:D8:54:D2:28:91:C8:1E:63:43:EE
X509v3 Authority Key Identifier:
keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:dd:29:11:17:71:c5:52:7a:61:ed:24:a1:49:18:07:77:cc:
ca:43:c8:33:14:b4:81:da:c8:58:08:27:ae:00:3f:47:07:82:
1e:9a:c8:74:8b:dd:50:58:eb:16:92:3e:7a:15:78:54:a4:64:
b9:d8:bf:07:0e:82:56:86:8b:e1:f7:48:7b:cc:7d:c4:d7:19:
75:80:4d:0a:d3:9d:de:7e:b2:95:43:39:33:5d:b8:0b:ee:1d:
12:d7:84:3a:dd:19:b0:8e:b6:a5:23:60:48:5c:6b:f1:ec:1d:
8d:04:af:93:23:9b:ae:ce:23:03:4a:82:db:23:fe:3d:06:18:
e6:87:85:0e:5f:79:15:4a:f7:61:f0:31:b7:0e:9f:d1:11:89:
c5:6b:f8:ad:1f:7b:02:31:02:dc:c6:6d:e4:57:19:96:37:ad:
03:b9:8d:13:7a:85:ca:87:20:13:2f:83:00:fb:68:aa:bb:c0:
46:73:2e:68:43:32:be:79:e2:2b:c5:42:38:90:ff:8d:2d:53:
07:a5:46:66:f9:6a:36:fd:af:d2:75:cb:83:8b:70:de:86:f5:
60:88:8a:cc:d9:39:f1:f2:d2:cf:6b:c0:56:5a:16:41:48:fb:
c8:b3:7c:3d:9d:ce:13:1b:92:06:92:d1:46:42:94:4f:80:e5:
c6:95:c5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:31 2026 by rpki-client