
$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
File: fuca2Efp1WgQzUnid4XGOFzM-Ws.mft (raw, json)
Hash identifier: Ell0eScPTz1dYR9Sr0C5pmUyDw43UndUVkTqjnLsEck=
Subject key identifier: 1C:41:C3:98:E6:92:5A:AC:A8:05:9F:1C:2A:3A:8B:8B:BA:75:3D:4D
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Certificate issuer: /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial: 0A6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
Manifest number: 0A3F
Signing time: Wed 18 Feb 2026 19:16:35 +0000
Manifest this update: Wed 18 Feb 2026 19:16:35 +0000
Manifest next update: Wed 25 Feb 2026 19:16:35 +0000
Files and hashes: 1: fuca2Efp1WgQzUnid4XGOFzM-Ws.crl (hash: 95ktFxBllPFUatD8HyO9nSYtVS5xt4hoCH/P4Z1rrbY=)
2: D1E5207E623E11EEB730FC4FC4F9AE02.roa (hash: EBBq2dvPN2qrFHWA2gvLMgygNt7qGWmAEAlos1BkdKA=)
3: 009A70D0232311EB8E8FB50AC4F9AE02.roa (hash: Rwzg8Z0sDBhGWmys5Ye1O1m7MbiGBRWWaDIIaIT0/W0=)
4: 3489F9BE7A5411EB9AC2283DC4F9AE02.roa (hash: C+K+zxCiX20oBW/hjSSug6Cn1uDBfdQvOfw8jaVnwF0=)
5: 96CBB6F021DD11EBBEEF997DC4F9AE02.roa (hash: XNLc2hzwG2rPDS1PYT/O9+b6/Uq/y3qUxEgGA8r+TxU=)
6: D9C66AFC845A11EA928C8E1EC4F9AE02.roa (hash: 210YkBAqXCkpmFmUR0uAPvXxyZxvWBWyuv+hpZ9QyUM=)
7: 9746A47821DD11EBBEEF997DC4F9AE02.roa (hash: wOQr7xnjiQVfFCSLPIrs8Uv4moHBDQqUGZyVEWvxUiA=)
8: DA6E4B50845A11EA928C8E1EC4F9AE02.roa (hash: w9A7MEjRbH6044RpHTj7Heq3MuVPTameCqh713ASFGQ=)
9: 458D9132027011EB98FEC44BC4F9AE02.roa (hash: J45Hm44TMBsCYw7t+Sll4bQhYtwd5hVNJa6WsKBj1nE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2668 (0xa6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Validity
Not Before: Feb 18 19:16:35 2026 GMT
Not After : Feb 25 19:16:35 2026 GMT
Subject: CN=69961013-4c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:65:fb:60:ff:49:c2:6c:a2:0e:cd:5a:8e:
d3:77:e5:3c:85:d7:98:12:89:f5:3c:f0:fe:65:7e:
35:90:e2:36:9b:ae:72:57:74:10:6b:1e:87:73:1f:
54:94:77:86:8b:bd:b0:81:be:71:f1:fa:ac:83:8d:
01:34:ac:64:d5:8c:3d:de:6c:6e:1d:8a:8c:70:68:
c4:4f:c2:1b:54:68:6b:e7:b6:82:35:e2:30:d8:71:
ed:8d:8f:89:c8:31:d5:0a:71:3c:9a:1b:d7:5b:1f:
a4:22:52:80:1f:8d:06:3e:db:e7:bd:e4:60:3f:5d:
ac:1e:c1:a1:af:12:d9:67:c4:a1:70:32:05:06:fa:
67:e0:54:e0:60:01:84:66:13:24:ee:2b:f1:e2:fe:
52:d5:21:52:a8:bb:e4:0d:1e:a8:c1:e3:52:38:86:
a7:8d:e2:00:66:ab:b6:bd:0b:fd:9d:06:b6:1b:2b:
6e:61:af:13:de:a1:27:f5:ea:f1:e8:2e:ba:63:43:
80:cb:09:5c:27:7f:31:60:bb:c1:c4:05:81:fd:89:
66:d5:ad:ec:44:a2:91:66:7a:bd:f6:82:be:23:be:
d9:a1:91:e4:43:2f:3e:86:15:77:5a:58:84:ca:20:
a9:15:b5:1f:a7:1a:e8:81:84:9d:51:c2:07:5f:d0:
01:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:41:C3:98:E6:92:5A:AC:A8:05:9F:1C:2A:3A:8B:8B:BA:75:3D:4D
X509v3 Authority Key Identifier:
keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:b9:e6:2b:89:2e:e8:9a:8b:c6:d6:85:e2:b0:6c:cd:2e:8f:
f1:68:b6:3b:1c:27:e4:d8:a6:cb:59:e7:db:d4:8a:fe:e9:28:
d0:46:8c:2a:32:7a:a3:e6:ac:80:d1:c4:3d:37:36:79:44:59:
8d:ef:c7:5c:f2:99:f9:65:55:4e:63:2b:15:96:0c:3f:1d:5b:
d5:eb:3a:36:6d:4c:e5:10:65:c3:ef:24:9b:b9:d4:ea:2a:84:
86:7b:a1:e6:8e:38:b8:b2:3e:84:88:1c:cb:e2:63:db:61:88:
d2:ee:fd:61:33:28:3f:73:52:18:d8:9d:46:2c:7a:b9:6f:26:
d6:a5:a7:e4:c3:14:3b:7b:ba:22:bd:01:1a:6b:a8:53:55:1b:
d4:09:07:79:a1:52:43:09:9c:0f:bd:55:99:c5:09:5f:7b:58:
ad:a4:37:e0:34:de:84:b8:63:84:2a:0f:a8:fe:f9:c2:ca:3b:
e0:30:fe:9a:ba:d3:ba:a2:78:07:af:cb:9e:8e:4e:ff:8d:0d:
4c:bc:cd:63:fe:3f:0f:e9:a3:fc:81:b1:cd:49:37:68:bc:c8:
99:e4:cb:69:e3:03:6c:d5:43:11:c4:03:ec:a9:d9:20:6d:18:
1b:55:d8:4d:b4:74:4b:d5:25:b0:7b:74:f7:37:b2:e5:9a:49:
81:72:e5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:51:31 2026 by rpki-client