
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
File: B82dMe1hhir1A-UglCjHyyfqiB8.mft (raw, json)
Hash identifier: 2IO/b9KZSvwxb6cec0piw/1mmWgDomEEmQNCFeaJ7BY=
Subject key identifier: CF:00:32:A6:8B:95:35:16:C1:B2:6B:DD:E8:01:FB:13:0F:E7:AD:1E
Authority key identifier: 07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F
Certificate issuer: /CN=A91FD609/serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F
Certificate serial: 08F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
Manifest number: 08E8
Signing time: Sat 10 Oct 2026 20:27:13 +0000
Manifest this update: Sat 10 Oct 2026 20:27:12 +0000
Manifest next update: Sat 17 Oct 2026 20:27:12 +0000
Files and hashes: 1: B82dMe1hhir1A-UglCjHyyfqiB8.crl (hash: AYjhyCYf0rn4qbSWpkvLPFPKc9CJNnGGDNibdnflL0g=)
2: 765DBCFEEC1A11EAA8520072C4F9AE02.roa (hash: E1osJa1V0JVtjqosfDLpGdKQTMEb5lq5v8Acf9g4j/A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl
rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 20:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2297 (0x8f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD609, serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F
Validity
Not Before: Oct 10 20:27:12 2026 GMT
Not After : Oct 17 20:27:12 2026 GMT
Subject: CN=6aca9fa1-8ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:aa:97:57:95:a5:fb:94:d2:09:41:14:52:0d:
91:03:a8:21:e5:b5:7d:82:19:06:79:f2:6f:87:78:
95:10:19:11:44:82:37:0f:3d:cc:8d:35:a3:1b:c3:
98:47:10:56:70:82:3f:f9:16:7f:37:8d:99:7a:4e:
ca:5c:78:67:e6:51:96:88:bf:3a:ee:7c:55:b8:34:
9b:79:86:ad:68:4b:ea:ee:3b:04:21:70:2f:bb:d4:
70:aa:cb:95:a1:77:ab:27:8c:1c:c9:15:9e:96:7e:
8c:b4:cc:47:af:5e:da:2b:26:77:1e:75:2f:67:a5:
d9:0f:10:d8:05:49:04:e3:28:ac:04:ae:ec:8a:11:
bf:81:08:1f:0a:81:ec:f8:87:23:6c:4e:e4:08:0b:
1f:fe:d3:55:8b:43:f8:18:ed:d0:ed:5c:27:11:1b:
3e:73:44:58:00:78:a4:01:f2:1a:e6:13:ef:3d:db:
c9:8d:f6:9e:6b:fd:a9:b7:43:40:0a:39:93:e5:ab:
ef:2a:69:75:de:c6:7a:59:65:cb:b4:11:a7:0d:12:
01:36:56:1c:60:30:96:a0:37:c9:c4:61:9c:b0:f2:
a2:a2:6b:e4:21:7d:7b:77:cc:a6:8b:84:0e:d7:c5:
d6:b3:a3:5d:b7:1d:ea:3f:65:3f:0c:6d:80:a6:8b:
53:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:00:32:A6:8B:95:35:16:C1:B2:6B:DD:E8:01:FB:13:0F:E7:AD:1E
X509v3 Authority Key Identifier:
keyid:07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:17:25:cb:ca:6e:f9:e3:a0:2b:d8:03:44:2f:bb:f9:2c:09:
a6:55:eb:f0:6d:99:7b:41:51:0f:35:5c:ab:07:29:9c:64:6f:
c0:28:ef:56:d9:45:d4:3a:bc:9e:ae:6a:9a:8e:ab:36:06:a8:
3b:f6:fd:66:6a:52:7c:8f:98:56:32:bc:ea:da:68:24:9d:23:
9c:5b:ec:1d:43:23:87:ca:42:d8:af:79:bc:83:bc:8c:f4:41:
1e:5a:0d:c3:45:cb:3c:50:5b:b9:eb:41:ff:2f:64:75:df:12:
ce:a5:f6:2f:ec:db:28:cd:86:0d:0b:d7:09:a9:87:b1:19:29:
11:ac:d0:fb:f2:53:c8:e7:bd:00:32:52:25:04:b6:d1:31:b0:
91:38:0c:b6:0f:ea:9b:d7:30:2d:b9:19:6f:5a:d0:b2:8a:e8:
76:af:79:ec:20:c0:e8:2b:88:a8:ae:f0:f8:48:4d:06:e2:41:
d2:e7:02:67:22:cf:37:55:0d:95:41:53:ee:5b:bd:aa:f2:cb:
86:2d:c1:86:c0:9e:40:96:14:f2:7a:49:14:17:ed:bc:3c:f5:
53:a2:7a:1e:c5:30:28:4d:97:61:81:6c:a7:61:e2:58:b0:a2:
d8:f0:4a:81:60:02:6b:51:00:95:0c:f3:ea:18:a8:5f:c4:8c:
fb:34:82:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:38:20 2026 by rpki-client