
$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
File: fuca2Efp1WgQzUnid4XGOFzM-Ws.mft (raw, json)
Hash identifier: LGZdJioGONr/tIWFexto2Umm4ZceFzN/QFwf2smqLjk=
Subject key identifier: 89:F3:4D:FB:41:23:F0:BF:ED:08:5D:50:8C:D7:5F:F8:F1:A7:94:F0
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Certificate issuer: /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial: 0AA4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
Manifest number: 0A6F
Signing time: Wed 20 May 2026 19:38:51 +0000
Manifest this update: Wed 20 May 2026 19:38:50 +0000
Manifest next update: Wed 27 May 2026 19:38:50 +0000
Files and hashes: 1: fuca2Efp1WgQzUnid4XGOFzM-Ws.crl (hash: 0v1IYzcHBPCaIffpJ7dR77GIkz2SsrjKgHjLIZamNXg=)
2: D1E5207E623E11EEB730FC4FC4F9AE02.roa (hash: n9HRSAHbz5siru36bPaHDAVFsYty1ze8jGoJoOEYL/o=)
3: 9746A47821DD11EBBEEF997DC4F9AE02.roa (hash: 8BXU7nHvXE41jK2FCyo1pdczrBG2miz5FBL5ikw+rJo=)
4: 96CBB6F021DD11EBBEEF997DC4F9AE02.roa (hash: 7u63teUVhQnGMkT3EdJmsHFiMrWxK7NjbI1OL50+Y8g=)
5: 3489F9BE7A5411EB9AC2283DC4F9AE02.roa (hash: MuevOQNfj8TCHns61sO9/2Pjb6kAnYxyKNVhH0SJFvI=)
6: 458D9132027011EB98FEC44BC4F9AE02.roa (hash: cIfIojm/KCtgcxep7wspCxTl5Z7B47Zzi2uWTB94yiM=)
7: 009A70D0232311EB8E8FB50AC4F9AE02.roa (hash: 39GRWN0/pxbqcMEo3rbBBVOJmoh6eQm3Ilz6EnRyK3w=)
8: D9C66AFC845A11EA928C8E1EC4F9AE02.roa (hash: tH7vWSizbUieFXg8GvcIHBSKExfTT2D05Rr/A8e8WEA=)
9: DA6E4B50845A11EA928C8E1EC4F9AE02.roa (hash: ntTGPcrWFFq0QF6RSGOZyO/TRpeLJVLe5JK3qhj3xeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 19:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2724 (0xaa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Validity
Not Before: May 20 19:38:50 2026 GMT
Not After : May 27 19:38:50 2026 GMT
Subject: CN=6a0e0dcb-e835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:c3:7d:bd:a2:1a:20:d3:a4:a3:2c:6a:89:
d3:c5:0b:93:5c:1b:d0:b2:db:bd:fd:a5:33:85:c7:
e4:e2:3e:c8:01:57:34:58:f4:86:6e:57:12:43:5f:
c2:ce:bb:55:d4:66:c1:9c:fa:a1:77:9c:67:89:d1:
2a:db:25:7f:77:b9:71:21:3c:44:27:e4:89:1a:68:
ce:1f:c2:da:a5:fb:f9:f7:77:78:55:fc:af:5d:ba:
a5:f7:36:28:e6:4c:f5:e3:99:2f:1d:a6:e1:14:33:
ab:73:16:0e:90:9e:0c:32:75:a4:4d:be:bd:05:d2:
a0:25:77:93:70:f3:91:30:e9:53:59:91:39:bb:0a:
bb:59:c0:e7:5c:a2:d9:17:69:ac:12:a2:21:5d:84:
6c:51:02:a7:5f:dc:1c:ea:b3:55:87:d3:ab:0e:b5:
08:c6:55:14:be:60:2c:bc:31:d5:77:87:04:bd:9f:
0f:9d:4e:40:00:50:40:5f:63:2b:fa:9e:5c:9d:a1:
04:fe:7e:6b:45:6c:3c:4b:c3:c5:f2:03:e6:a9:8e:
20:cb:19:80:14:ff:03:25:d1:be:a8:46:f1:a7:44:
b2:60:19:33:ac:b7:d6:c1:7c:e7:d5:ff:b0:00:e5:
53:e0:10:54:d8:d6:e1:11:29:f2:a9:d0:01:c8:52:
f5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F3:4D:FB:41:23:F0:BF:ED:08:5D:50:8C:D7:5F:F8:F1:A7:94:F0
X509v3 Authority Key Identifier:
keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:91:8b:e8:a4:f1:22:9e:ac:39:f9:1a:e3:50:7a:1a:60:33:
47:7e:56:92:e7:f3:a2:5d:c6:ea:6c:3a:b9:5c:df:d9:0b:1f:
ab:f0:9c:73:70:46:bf:2f:35:fa:28:8f:0f:a5:74:5c:c1:f0:
de:a6:f6:02:af:cd:b3:63:26:df:04:9a:8b:94:04:bc:25:22:
10:b5:c0:da:d9:1d:de:9b:28:c1:9d:63:63:5f:cd:25:77:76:
74:75:09:17:db:6d:94:6e:48:f7:74:51:d5:bd:de:93:14:4e:
a4:a9:0d:c0:ea:f7:16:1c:51:bd:0a:1d:d5:43:1a:2c:63:0b:
84:10:23:51:73:32:20:74:ff:b9:a1:02:8b:c6:60:af:b5:4c:
fd:08:7b:6d:cb:06:b2:75:b7:1d:83:4f:ad:89:83:3c:66:a4:
62:40:eb:b1:c4:db:71:42:fe:8f:41:43:60:d9:bd:54:98:88:
c1:f7:4d:c7:28:27:88:aa:5f:6a:53:9d:e2:ef:a6:5c:83:d8:
4b:a3:be:34:6f:4d:94:d5:42:9e:b9:6a:f8:86:fa:7a:1e:cc:
b2:ce:9f:a2:c0:9c:db:f8:f2:be:c3:9c:d3:21:eb:33:f4:2c:
ac:e3:c8:d8:a1:ee:dc:fe:19:91:b6:dd:86:2e:a3:13:50:1b:
c6:c0:7e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:05 2026 by rpki-client