
$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
File: fuca2Efp1WgQzUnid4XGOFzM-Ws.mft (raw, json)
Hash identifier: WLDV92thgs3QpokVM1lLFcCxqc8paVzkcsXSi0H6twg=
Subject key identifier: D1:0A:29:A0:46:38:E1:CB:D8:80:B0:3C:47:6A:CF:9B:CD:30:B3:84
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Certificate issuer: /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial: 0A8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
Manifest number: 0A58
Signing time: Sat 04 Apr 2026 19:28:37 +0000
Manifest this update: Sat 04 Apr 2026 19:28:36 +0000
Manifest next update: Sat 11 Apr 2026 19:28:36 +0000
Files and hashes: 1: fuca2Efp1WgQzUnid4XGOFzM-Ws.crl (hash: g42NlcjcNUTat642T6ZL39mJoPGxDUAdlKr2/HqP0QA=)
2: 96CBB6F021DD11EBBEEF997DC4F9AE02.roa (hash: 7u63teUVhQnGMkT3EdJmsHFiMrWxK7NjbI1OL50+Y8g=)
3: 009A70D0232311EB8E8FB50AC4F9AE02.roa (hash: 39GRWN0/pxbqcMEo3rbBBVOJmoh6eQm3Ilz6EnRyK3w=)
4: 458D9132027011EB98FEC44BC4F9AE02.roa (hash: cIfIojm/KCtgcxep7wspCxTl5Z7B47Zzi2uWTB94yiM=)
5: D9C66AFC845A11EA928C8E1EC4F9AE02.roa (hash: tH7vWSizbUieFXg8GvcIHBSKExfTT2D05Rr/A8e8WEA=)
6: D1E5207E623E11EEB730FC4FC4F9AE02.roa (hash: n9HRSAHbz5siru36bPaHDAVFsYty1ze8jGoJoOEYL/o=)
7: DA6E4B50845A11EA928C8E1EC4F9AE02.roa (hash: ntTGPcrWFFq0QF6RSGOZyO/TRpeLJVLe5JK3qhj3xeI=)
8: 3489F9BE7A5411EB9AC2283DC4F9AE02.roa (hash: MuevOQNfj8TCHns61sO9/2Pjb6kAnYxyKNVhH0SJFvI=)
9: 9746A47821DD11EBBEEF997DC4F9AE02.roa (hash: 8BXU7nHvXE41jK2FCyo1pdczrBG2miz5FBL5ikw+rJo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2701 (0xa8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Validity
Not Before: Apr 4 19:28:36 2026 GMT
Not After : Apr 11 19:28:36 2026 GMT
Subject: CN=69d16665-1b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:27:5f:69:34:35:fa:52:94:fd:3e:2e:22:ae:
4b:b0:d3:99:63:e8:b6:55:57:d4:9a:59:4e:9c:e1:
1d:9b:75:1c:cd:6a:63:b2:45:c2:5c:fa:a3:3e:32:
9e:6f:b3:69:21:52:c0:6f:41:d8:49:34:58:7d:c0:
cc:2c:59:1d:8d:85:ec:53:da:b7:d9:0a:d5:d8:fa:
aa:ac:f0:15:17:37:ef:49:97:ed:66:11:01:82:54:
40:36:f6:f3:0c:3b:9c:ca:c1:ab:a5:e2:aa:f9:5b:
53:e1:98:42:19:17:21:bc:94:5f:38:6b:95:48:c2:
30:8f:54:3a:48:0c:d3:5f:44:2f:ee:24:dd:eb:55:
d1:1b:cd:96:25:e8:6e:d8:7e:bc:43:1f:9c:d5:7b:
4e:12:ac:22:e0:d3:67:00:fb:cd:d8:2d:e6:84:48:
3e:30:82:9f:a2:3e:51:92:59:06:0a:3d:6a:61:ec:
3b:0c:3a:3f:fd:be:cf:09:ff:e0:b8:f4:89:4b:77:
d0:f2:b2:c2:ea:d4:11:e1:95:09:e7:20:27:3c:1d:
6f:d6:38:e3:6c:d9:6f:0c:1c:43:d4:94:db:ec:d9:
55:fb:51:84:f3:e6:3a:a6:3d:ee:7f:83:9f:d5:b8:
a1:e7:17:a3:1a:ca:eb:34:b5:97:95:c3:ff:6b:bc:
dd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0A:29:A0:46:38:E1:CB:D8:80:B0:3C:47:6A:CF:9B:CD:30:B3:84
X509v3 Authority Key Identifier:
keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:ec:4b:5e:30:97:dd:58:fd:49:5a:d3:0d:5b:a5:1f:71:83:
d4:0d:be:0e:35:37:f8:20:13:12:54:1e:f0:a9:47:56:ac:58:
fe:e8:2b:11:e0:44:26:7c:68:dd:4a:4f:12:58:9c:d5:c4:dc:
f4:16:9f:d9:22:dd:50:c6:3b:55:0b:2b:fd:27:b9:37:2e:ea:
53:c6:db:9e:e7:39:7e:62:88:be:53:3e:bc:60:61:ba:ae:62:
32:7f:e7:f1:19:27:9c:04:44:e8:bd:44:51:32:96:34:8a:ba:
18:ba:80:81:0d:3d:6b:ae:11:46:f3:ba:f9:a8:31:fc:e6:93:
d2:69:37:c2:bc:69:af:aa:9f:16:92:37:5c:e0:d5:77:ba:e8:
9f:dd:6c:12:36:b7:5d:57:91:32:45:95:42:ee:4b:e8:5f:5e:
f9:e6:ed:62:14:69:c0:88:6f:70:42:ce:34:b4:68:9f:69:ea:
28:25:ac:98:60:2c:ee:61:45:be:9e:43:06:dc:af:9a:05:a3:
51:f4:10:5f:4b:bb:72:c2:21:41:8c:11:15:e6:49:ad:5e:01:
b7:6c:ed:7c:e6:77:01:d2:9b:be:4f:f9:f9:d0:29:9d:83:a5:
04:e6:5c:db:df:87:a2:b6:73:34:ed:16:63:47:6d:79:84:af:
f0:cf:62:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:02:04 2026 by rpki-client