
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
File: B82dMe1hhir1A-UglCjHyyfqiB8.mft (raw, json)
Hash identifier: ljv6Hw3KDrnwfZiTVZ6ilodnMUTEE91btF9jxStAu5U=
Subject key identifier: FE:F0:9E:D6:0C:DA:58:4D:5D:BF:C8:55:6B:2F:10:2C:E8:97:E0:66
Authority key identifier: 07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F
Certificate issuer: /CN=A91FD609/serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F
Certificate serial: 08F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
Manifest number: 08DF
Signing time: Tue 22 Sep 2026 20:12:00 +0000
Manifest this update: Tue 22 Sep 2026 20:12:00 +0000
Manifest next update: Tue 29 Sep 2026 20:12:00 +0000
Files and hashes: 1: B82dMe1hhir1A-UglCjHyyfqiB8.crl (hash: 40Q0gvouHSwXbrx7yxIDn/bTgPACbLRzIRtZiIn408c=)
2: 765DBCFEEC1A11EAA8520072C4F9AE02.roa (hash: E1osJa1V0JVtjqosfDLpGdKQTMEb5lq5v8Acf9g4j/A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl
rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 20:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2288 (0x8f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD609, serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F
Validity
Not Before: Sep 22 20:12:00 2026 GMT
Not After : Sep 29 20:12:00 2026 GMT
Subject: CN=6ab2e110-7e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:cb:79:9e:db:45:ca:c1:1a:2c:c1:3f:3f:
2e:00:8c:84:5b:32:2a:44:f3:ad:91:c3:fb:13:ff:
80:f2:4d:6b:21:f1:c7:93:d9:b2:33:03:1c:08:6b:
33:5e:bb:ba:eb:ba:76:44:7f:fb:2b:78:e2:2c:e4:
a8:4c:1c:50:c1:a2:82:e0:4b:ba:16:0a:d0:25:c1:
8e:27:4c:0b:02:57:13:5c:5d:7d:37:99:bf:56:81:
40:74:07:3d:94:6e:14:a4:26:53:0c:90:b5:2a:07:
5f:31:c7:0a:fe:ec:6b:7d:1f:ff:e1:6f:8f:10:2b:
03:78:c5:64:ad:9d:b2:6b:65:a8:50:d1:53:96:c2:
9f:6b:30:be:0c:2b:fd:1a:64:68:92:dc:7a:b2:fa:
2e:fe:f3:ad:65:c3:c5:3d:d6:3a:d1:f1:94:6e:13:
d9:e5:c3:21:cd:af:08:68:8f:56:3e:bb:43:3e:cf:
65:96:56:33:16:b2:98:88:e2:d4:6c:5a:e7:df:a6:
a6:76:5a:c6:dc:83:ce:46:5e:ee:03:3d:06:55:78:
bc:be:09:45:90:17:d3:49:59:c9:fd:ef:ed:cf:34:
94:0a:4c:66:a8:3c:9f:fb:dc:66:62:97:7a:d1:58:
83:70:3d:99:1d:f0:3f:d5:f6:49:a2:9d:94:70:83:
d1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F0:9E:D6:0C:DA:58:4D:5D:BF:C8:55:6B:2F:10:2C:E8:97:E0:66
X509v3 Authority Key Identifier:
keyid:07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:fb:dd:60:be:25:2d:0d:64:13:60:94:68:a9:d0:1a:e2:d2:
68:a0:6a:cb:e7:ed:f0:ad:b6:6f:90:3e:3c:f1:02:9d:3f:10:
9a:e4:5b:e8:11:75:be:34:05:26:e8:9a:97:df:01:94:8d:d5:
d2:62:33:2f:23:c9:42:d4:ec:28:78:2d:81:9f:3e:55:6a:73:
f9:a8:6b:a4:dd:dc:49:81:97:3b:ba:c1:21:3d:93:72:10:58:
c0:30:2d:bb:4a:ea:17:96:a3:50:c8:43:65:fc:98:a7:83:b0:
f6:b9:42:55:67:11:30:70:7b:1a:5d:1f:da:44:09:97:ab:51:
03:9e:df:3d:6e:15:71:c1:d2:6f:b6:ee:53:bf:d3:ee:d6:34:
2e:a9:d5:f9:df:45:3a:17:f7:ec:9a:a3:b7:02:ba:71:65:2d:
30:c7:82:b8:f4:1d:32:1b:a9:5f:6d:d1:aa:0e:06:ae:45:c8:
58:35:b2:be:bf:2a:33:64:73:5c:8b:b6:91:ab:4d:83:6b:d0:
24:9f:4d:c3:22:8f:3b:04:f2:bf:e0:4f:0c:7a:f8:2b:23:c5:
0f:e6:d0:b9:2e:7d:fc:d3:0e:d3:ee:67:fe:ba:b9:63:8b:50:
3f:b4:2f:df:68:da:1e:18:35:b0:95:85:19:a2:3e:55:71:66:
7e:2b:23:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:42:47 2026 by rpki-client