
$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
File: fuca2Efp1WgQzUnid4XGOFzM-Ws.mft (raw, json)
Hash identifier: 2gFr1yHfOXnLIoOATJOTE5oMq6OvnykoLj4Qyq3zdX0=
Subject key identifier: A2:3A:5F:D0:55:2F:B8:89:87:A7:98:A2:FA:C4:09:AD:00:1A:CE:9F
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Certificate issuer: /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial: 0AC6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
Manifest number: 0A89
Signing time: Mon 06 Jul 2026 20:00:30 +0000
Manifest this update: Mon 06 Jul 2026 20:00:30 +0000
Manifest next update: Mon 13 Jul 2026 20:00:30 +0000
Files and hashes: 1: fuca2Efp1WgQzUnid4XGOFzM-Ws.crl (hash: ErUj/lqNOfoH1kLCI7/IvIW9cyKupULG/otxlox/aJI=)
2: 96CBB6F021DD11EBBEEF997DC4F9AE02.roa (hash: /ZZ7Pe5945UIWeSF8m8GaepiTXqFI4hqaPmrO33/zQQ=)
3: 9746A47821DD11EBBEEF997DC4F9AE02.roa (hash: men7X/DqEw3JTb53TCBtI6CiH6LH5rwCaun8ONR3b98=)
4: D1E5207E623E11EEB730FC4FC4F9AE02.roa (hash: YKB5eXYXJ+b4d9GmkKE4qqb7+srssCNwDwAdrBix020=)
5: 009A70D0232311EB8E8FB50AC4F9AE02.roa (hash: /hZI+ULL53DSV8wAWDri/JwEvOKCY0Zm6CdyU6LE3cQ=)
6: DA6E4B50845A11EA928C8E1EC4F9AE02.roa (hash: DezM2t0ex2ivS9gcJ+2Q8DrPxU26a0peSNDJOM8KwQ4=)
7: 3489F9BE7A5411EB9AC2283DC4F9AE02.roa (hash: fwxKJmrDtHzrccVSlKE8KANRlhroTy3TIj65FcZuDLY=)
8: D9C66AFC845A11EA928C8E1EC4F9AE02.roa (hash: bQOcse5lzSlY8bMOZjQBpyhKLx9EaPheTtDg2oHqHp8=)
9: 458D9132027011EB98FEC44BC4F9AE02.roa (hash: pkAfBicS1xoE+XvgOEnkzo1bk8OIaDY2M85wJQOULGw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2758 (0xac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91841D2, serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Validity
Not Before: Jul 6 20:00:30 2026 GMT
Not After : Jul 13 20:00:30 2026 GMT
Subject: CN=6a4c095e-d01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:b5:4e:29:24:82:fc:28:f9:89:d4:93:6c:
54:de:24:2c:4c:41:09:2b:c3:bb:a1:d1:78:37:70:
bb:c6:d3:3d:00:24:4f:bb:b3:2a:92:fd:57:c8:0c:
80:11:91:4f:0c:ab:9b:30:1f:74:db:e8:6e:0a:22:
2d:23:cf:44:11:a0:99:93:92:69:d8:8a:e1:88:c8:
5c:f4:5d:56:85:c8:c0:c3:41:ee:43:8a:41:dc:31:
6d:8c:a9:58:cb:db:59:b4:c0:fb:9d:2e:1f:fc:55:
a3:a1:60:f5:33:d9:a7:e8:35:ce:8e:05:2a:04:b1:
d6:19:48:95:f3:9d:85:13:2a:d0:7a:07:aa:af:18:
36:51:79:2a:51:b2:e1:f3:28:57:ad:d2:3d:5a:19:
9e:de:5f:d1:7f:c7:75:7f:5f:4a:26:8a:7e:8a:a6:
5d:19:4e:80:50:75:6d:d8:85:f9:f1:bb:54:2a:56:
57:bb:14:ef:2f:34:60:a6:fd:9b:d3:dd:a0:9e:d7:
7c:6b:df:fe:bf:d7:db:b9:2b:af:78:48:c4:0d:45:
84:d3:d0:90:a6:75:f4:f9:09:d8:8f:87:d6:a1:be:
7f:33:a5:54:fc:77:8c:4e:6f:bf:bb:ee:1f:9c:47:
f0:23:3e:72:7e:e6:2f:9a:d7:ed:6d:82:0f:6f:47:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3A:5F:D0:55:2F:B8:89:87:A7:98:A2:FA:C4:09:AD:00:1A:CE:9F
X509v3 Authority Key Identifier:
keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:7c:6c:9d:8f:59:ba:e1:10:a6:70:de:c6:7b:ad:5b:4e:34:
75:97:30:b7:fb:02:00:5b:e9:c2:a3:55:83:2f:6c:7f:3c:6f:
f3:be:0e:71:6b:a6:6c:f8:5d:e0:d6:02:3c:f4:3f:89:df:9e:
13:12:28:a4:9d:1e:ce:d0:91:91:fa:01:a3:0d:c2:4a:72:fa:
d5:1f:f1:ad:6d:0b:e3:cd:cc:23:09:c8:1b:6e:48:bd:be:83:
b6:12:95:45:d2:63:86:a7:33:b7:02:37:fd:47:93:c1:3a:6c:
72:29:0c:ed:71:eb:7c:86:0d:58:7c:0f:ce:25:8d:79:88:f3:
f9:7e:5f:17:1a:39:96:2b:1e:a8:8d:c1:c8:78:86:67:de:10:
d2:96:62:3e:87:0b:70:47:78:7e:e6:02:ec:3d:60:5e:b8:9d:
7d:ab:e3:64:d2:2f:ca:70:b1:a3:87:f8:cd:53:90:2d:dd:e0:
3d:f3:0a:9a:59:93:2b:c4:ae:4b:75:90:b1:78:1e:fd:a0:e2:
df:1a:6b:7f:20:a0:dd:64:24:ba:88:08:9a:e3:42:1f:67:09:
9f:0a:e4:30:1d:25:ef:71:a1:98:1d:3f:65:01:ac:ac:57:50:
ad:2f:62:bd:8e:92:b2:4f:60:d2:e2:db:af:47:84:0d:28:5c:
83:93:c2:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQxRDIxMTAvBgNVBAUTKDdFRTcxQUQ4NDdFOUQ1NjgxMENENDlFMjc3ODVDNjM4
NUNDQ0Y5NkIwHhcNMjYwNzA2MjAwMDMwWhcNMjYwNzEzMjAwMDMwWjAYMRYwFAYD
VQQDEw02YTRjMDk1ZS1kMDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt/W1Tikkgvwo+YnUk2xU3iQsTEEJK8O7odF4N3C7xtM9ACRPu7Mqkv1XyAyA
EZFPDKubMB902+huCiItI89EEaCZk5Jp2IrhiMhc9F1WhcjAw0HuQ4pB3DFtjKlY
y9tZtMD7nS4f/FWjoWD1M9mn6DXOjgUqBLHWGUiV852FEyrQegeqrxg2UXkqUbLh
8yhXrdI9Whme3l/Rf8d1f19KJop+iqZdGU6AUHVt2IX58btUKlZXuxTvLzRgpv2b
092gntd8a9/+v9fbuSuveEjEDUWE09CQpnX0+QnYj4fWob5/M6VU/HeMTm+/u+4f
nEfwIz5yfuYvmtftbYIPb0cMUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKI6X9BV
L7iJh6eYovrECa0AGs6fMB8GA1UdIwQYMBaAFH7nGthH6dVoEM1J4neFxjhczPlr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDFEMi9GNzIyM0ZCNDg0
NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFXZ1F6VW5pZDRYR09Gek0t
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z1Y2EyRWZwMVdnUXpVbmlkNFhHT0Z6TS1Xcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDFEMi9GNzIyM0ZCNDg0NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFX
Z1F6VW5pZDRYR09Gek0tV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAt3xsnY9ZuuEQpnDexnutW040dZcwt/sCAFvpwqNVgy9sfzxv874OcWumbPhd
4NYCPPQ/id+eExIopJ0eztCRkfoBow3CSnL61R/xrW0L483MIwnIG25Ivb6DthKV
RdJjhqcztwI3/UeTwTpscikM7XHrfIYNWHwPziWNeYjz+X5fFxo5liseqI3ByHiG
Z94Q0pZiPocLcEd4fuYC7D1gXridfavjZNIvynCxo4f4zVOQLd3gPfMKmlmTK8Su
S3WQsXge/aDi3xprfyCg3WQkuogImuNCH2cJnwrkMB0l73GhmB0/ZQGsrFdQrS9i
vY6Ssk9g0uLbr0eEDShcg5PC7w==
-----END CERTIFICATE-----
Generated at Tue Jul 7 16:52:08 2026 by rpki-client