
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
File: B82dMe1hhir1A-UglCjHyyfqiB8.mft (raw, json)
Hash identifier: ER9xjhLSq0As2V2KV/mH7xaRCU2ylHqb1BZzB4K9NOI=
Subject key identifier: FA:09:28:27:1F:51:5F:F1:0A:65:3B:BD:2B:F8:B3:45:5E:E4:44:08
Authority key identifier: 07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F
Certificate issuer: /CN=A91FD609/serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F
Certificate serial: 089F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
Manifest number: 088E
Signing time: Thu 16 Apr 2026 20:29:31 +0000
Manifest this update: Thu 16 Apr 2026 20:29:31 +0000
Manifest next update: Thu 23 Apr 2026 20:29:31 +0000
Files and hashes: 1: B82dMe1hhir1A-UglCjHyyfqiB8.crl (hash: Vn38+Btk/OmBPfXUC8Ssl6XRA0HlmLkLozTnYUDbUZc=)
2: 765DBCFEEC1A11EAA8520072C4F9AE02.roa (hash: E1osJa1V0JVtjqosfDLpGdKQTMEb5lq5v8Acf9g4j/A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl
rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2207 (0x89f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD609, serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F
Validity
Not Before: Apr 16 20:29:31 2026 GMT
Not After : Apr 23 20:29:31 2026 GMT
Subject: CN=69e146ab-47e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:14:b5:df:85:4e:a5:c3:f9:f1:ea:46:a6:13:
6b:8e:e9:0b:65:83:e6:fa:86:cd:32:f3:21:65:d0:
73:a4:10:a8:cd:a8:6c:d8:91:5f:9f:1f:d8:34:01:
73:36:15:c2:d0:43:5c:08:96:67:07:2e:53:c3:44:
18:03:7e:42:10:43:a7:90:99:47:c4:19:a2:07:39:
04:dc:bd:e0:7a:65:04:ee:0d:07:01:b0:07:08:8f:
35:37:f0:f9:03:67:e0:58:7e:3d:66:2d:aa:49:ae:
17:7d:54:ec:23:f2:89:88:b7:6d:b7:ee:9a:03:1e:
75:88:2c:00:fe:d9:cf:f5:0a:0f:df:d0:b9:b6:9e:
be:f1:5e:e1:d7:d4:1f:6c:cf:f5:0d:65:7c:a4:ad:
82:78:24:df:a5:ab:8c:00:b4:dc:fe:fd:af:3d:34:
37:d2:b2:53:25:9f:b7:cd:c4:77:4c:42:3c:c8:d2:
41:00:32:79:0f:33:f6:17:30:de:35:cd:e7:0f:9c:
75:84:8a:e5:22:13:23:f2:25:17:85:7a:59:1e:24:
69:48:ed:33:ba:e6:b2:15:3c:0d:56:c4:0a:5d:70:
0a:f1:2d:e8:2c:9e:9c:b3:e7:5d:30:ca:07:f1:35:
33:44:1d:3f:ea:80:8d:39:10:fb:97:a6:72:e7:0f:
89:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:09:28:27:1F:51:5F:F1:0A:65:3B:BD:2B:F8:B3:45:5E:E4:44:08
X509v3 Authority Key Identifier:
keyid:07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:56:5d:16:67:bc:91:59:7d:19:0d:8f:3a:05:b9:27:dd:fa:
02:e6:a2:6d:f8:2a:78:fd:0b:ae:f6:ab:cc:31:5c:51:6e:41:
0f:d6:f7:00:b5:ad:ea:84:73:a4:51:e1:98:97:4f:90:4a:78:
e3:48:8a:d9:52:36:0e:dd:00:64:d0:eb:5f:f6:00:2a:f5:6a:
c4:1a:13:dc:82:67:91:84:6d:aa:d3:f2:d3:29:66:27:8d:f7:
39:9a:76:21:fd:a8:a9:de:91:31:04:1f:3a:ba:81:ec:bb:ce:
16:98:c9:23:37:34:8d:ff:e4:4b:36:25:ac:2f:2c:6f:af:e0:
9a:bb:76:b8:da:d2:61:8c:60:9f:75:6f:f5:0a:6e:b2:3a:3b:
da:b6:2e:90:7c:9d:79:5c:c3:41:5e:a9:d8:70:11:6f:e8:25:
29:55:1f:6e:90:f0:11:65:22:70:c6:df:9d:6f:0b:3c:c2:c4:
33:94:94:1a:3f:f9:cf:b8:46:d0:d6:1a:41:83:f4:1c:a8:80:
90:3e:40:52:2c:54:ff:7b:14:e7:22:56:09:77:1d:53:ba:79:
76:11:55:d8:82:5f:8a:0e:c3:bb:48:7e:c3:e3:f7:55:62:47:
87:59:2c:41:06:d7:80:5f:b1:c7:97:04:2c:6b:40:e1:10:fd:
49:39:ad:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:03 2026 by rpki-client