
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
File: fuca2Efp1WgQzUnid4XGOFzM-Ws.mft (raw, json)
Hash identifier: B1yZ+cCaRxKlIlu+sGBhje/BBhszqUnqKJpXBn2+ijw=
Subject key identifier: 6F:C6:56:67:5F:08:C5:75:FA:26:0F:40:80:01:59:5C:1B:21:BE:70
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Certificate issuer: /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial: 0ADD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
Manifest number: 0AA0
Signing time: Thu 20 Aug 2026 19:28:43 +0000
Manifest this update: Thu 20 Aug 2026 19:28:42 +0000
Manifest next update: Thu 27 Aug 2026 19:28:42 +0000
Files and hashes: 1: fuca2Efp1WgQzUnid4XGOFzM-Ws.crl (hash: mngn6NsDd0gYKSW7kLqo94QOzIRAeaL66q5cs/i1FHc=)
2: 96CBB6F021DD11EBBEEF997DC4F9AE02.roa (hash: /ZZ7Pe5945UIWeSF8m8GaepiTXqFI4hqaPmrO33/zQQ=)
3: DA6E4B50845A11EA928C8E1EC4F9AE02.roa (hash: DezM2t0ex2ivS9gcJ+2Q8DrPxU26a0peSNDJOM8KwQ4=)
4: 9746A47821DD11EBBEEF997DC4F9AE02.roa (hash: men7X/DqEw3JTb53TCBtI6CiH6LH5rwCaun8ONR3b98=)
5: D9C66AFC845A11EA928C8E1EC4F9AE02.roa (hash: bQOcse5lzSlY8bMOZjQBpyhKLx9EaPheTtDg2oHqHp8=)
6: 458D9132027011EB98FEC44BC4F9AE02.roa (hash: pkAfBicS1xoE+XvgOEnkzo1bk8OIaDY2M85wJQOULGw=)
7: 009A70D0232311EB8E8FB50AC4F9AE02.roa (hash: /hZI+ULL53DSV8wAWDri/JwEvOKCY0Zm6CdyU6LE3cQ=)
8: 3489F9BE7A5411EB9AC2283DC4F9AE02.roa (hash: fwxKJmrDtHzrccVSlKE8KANRlhroTy3TIj65FcZuDLY=)
9: D1E5207E623E11EEB730FC4FC4F9AE02.roa (hash: YKB5eXYXJ+b4d9GmkKE4qqb7+srssCNwDwAdrBix020=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2781 (0xadd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Validity
Not Before: Aug 20 19:28:42 2026 GMT
Not After : Aug 27 19:28:42 2026 GMT
Subject: CN=6a87556a-5703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:c4:c2:ed:12:24:0a:af:e5:0e:a3:dd:9a:
29:4b:44:70:46:f8:75:03:13:ab:a7:d5:7c:d6:1b:
13:e3:ef:1b:84:30:a0:03:fa:9f:93:63:bf:47:1f:
b1:6d:5c:ad:e9:4d:c5:e5:82:ba:ec:4a:41:bd:01:
cd:ff:94:b3:e2:39:ba:0c:9d:ed:c7:5e:97:ea:29:
fd:8d:0f:7b:74:c0:ab:34:ad:d6:02:b1:7b:9c:bd:
5c:ef:7b:a9:f4:01:5f:e6:72:e6:84:61:41:81:bc:
18:d6:58:80:75:62:e9:5d:ba:21:18:31:a6:52:8f:
cc:3c:1d:56:73:aa:1f:a7:5b:f2:c2:53:b3:8f:da:
ff:91:2d:96:87:24:ed:05:7b:ee:09:ae:2c:84:ee:
7d:d0:e8:87:fb:a4:38:af:57:da:2b:8c:db:b4:9a:
e6:db:28:ee:9c:54:41:5a:a3:84:53:ca:51:40:29:
7c:99:f3:96:95:cb:63:f2:f2:f5:86:b0:e5:e1:0f:
ac:78:df:61:33:07:37:68:00:6f:36:d9:26:8a:f6:
68:71:d5:7f:2b:91:35:3c:72:46:63:51:87:d3:fa:
9f:f9:47:7c:14:ad:b4:79:d7:c7:31:c9:5f:f1:98:
11:8d:d7:f0:55:7c:16:d0:7c:a9:d3:16:4e:61:41:
81:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C6:56:67:5F:08:C5:75:FA:26:0F:40:80:01:59:5C:1B:21:BE:70
X509v3 Authority Key Identifier:
keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7a:2e:29:82:32:69:94:bc:cf:d2:b5:a3:91:15:4e:37:61:
4d:d5:43:70:d3:6c:08:c8:3f:97:4c:e2:3f:5e:d8:e9:d2:32:
76:f4:f3:f7:d1:c9:27:00:2f:5b:27:87:64:e9:f4:d4:53:31:
14:3d:c4:94:cd:22:f4:80:fa:4d:de:ef:b0:78:89:55:65:c7:
79:64:7f:00:cc:1a:16:bc:d5:bb:7e:85:11:39:55:96:50:49:
c1:24:fa:fb:3a:b0:b0:cd:e1:1b:42:56:8d:45:11:e4:6f:c4:
a8:49:f3:07:28:21:4b:77:a5:d0:f1:bf:a1:84:b5:75:55:4e:
d2:76:6e:7c:67:e1:33:cf:5c:00:cc:4f:3b:f5:5c:7c:3e:a3:
38:3f:98:28:12:fb:16:17:06:7c:42:b3:04:2f:2b:c2:0c:d9:
d9:45:de:df:ba:4a:a8:d6:91:71:85:d4:c0:ac:4a:f6:83:d8:
8b:bc:e8:dd:40:50:ee:a6:2e:05:2b:3d:fd:36:a2:68:8e:8a:
39:86:ec:e4:92:98:7a:5f:d1:01:fc:fc:6c:0f:bc:d1:50:94:
36:7d:3f:f6:d4:3e:d1:d4:ad:59:f4:ee:e4:56:8a:f4:6b:dd:
e5:1e:fd:fe:a3:a5:3d:1e:27:61:2e:4e:70:49:3e:72:b1:0b:
3e:63:4a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 06:53:54 2026 by rpki-client