
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
File: B82dMe1hhir1A-UglCjHyyfqiB8.mft (raw, json)
Hash identifier: ujUzfciGT+Iy1C8VIuxXZFIOnHwhNa1ZLrTPgIvAJss=
Subject key identifier: BC:8B:DA:20:F6:D5:40:2D:FD:52:1B:DA:04:9E:1F:94:8F:23:F6:15
Authority key identifier: 07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F
Certificate issuer: /CN=A91FD609/serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F
Certificate serial: 08C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
Manifest number: 08B0
Signing time: Mon 22 Jun 2026 20:32:51 +0000
Manifest this update: Mon 22 Jun 2026 20:32:51 +0000
Manifest next update: Mon 29 Jun 2026 20:32:51 +0000
Files and hashes: 1: B82dMe1hhir1A-UglCjHyyfqiB8.crl (hash: BR1KSLpmWxqY23hN6iGRBBleg+ZSXwt2mfQKuK3tVps=)
2: 765DBCFEEC1A11EAA8520072C4F9AE02.roa (hash: E1osJa1V0JVtjqosfDLpGdKQTMEb5lq5v8Acf9g4j/A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl
rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 20:32:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2241 (0x8c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD609, serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F
Validity
Not Before: Jun 22 20:32:51 2026 GMT
Not After : Jun 29 20:32:51 2026 GMT
Subject: CN=6a399bf3-7730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:af:df:58:c2:e0:86:63:6b:c8:5f:bf:5b:ff:
21:e6:d0:57:96:3e:ac:60:66:12:cb:e2:fa:bd:f6:
a4:6d:b4:f3:41:79:c0:3d:82:7e:90:fe:95:0f:b3:
ac:a9:42:c9:ee:17:74:c1:43:b3:fc:94:73:bc:ee:
61:b1:4f:e2:6d:b5:cf:60:1c:43:d9:de:a2:da:e9:
c4:49:e5:67:7f:4f:2c:68:9c:ce:8e:3a:99:a7:56:
9a:77:8c:5f:6e:92:d6:7f:7d:91:99:55:cc:ea:c3:
10:af:0c:db:9e:a4:ae:68:14:96:4c:5f:77:69:03:
4c:35:45:fd:dd:a0:54:19:dd:0f:69:72:54:ed:74:
ea:bb:eb:aa:68:43:f9:46:f2:04:ae:6b:77:22:17:
35:ce:43:2c:04:ff:16:20:87:71:f8:75:58:8b:7a:
44:c5:93:73:df:b0:b1:ae:38:82:ce:13:e2:49:61:
d0:6a:92:46:d8:8b:5f:4a:8f:93:61:ef:ed:2f:e2:
5e:af:15:05:3e:31:53:4a:cb:4b:df:64:d0:5f:22:
0d:d4:95:30:b7:a6:0d:89:b6:49:e0:81:a6:45:1e:
c2:04:84:27:a9:20:cb:bb:d2:9f:b8:f7:e7:fd:d0:
2d:36:99:ad:4b:ed:33:e4:be:57:e4:8a:e4:fd:8c:
9f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8B:DA:20:F6:D5:40:2D:FD:52:1B:DA:04:9E:1F:94:8F:23:F6:15
X509v3 Authority Key Identifier:
keyid:07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:92:62:57:03:94:05:ef:8b:00:7e:d7:27:07:cb:b7:c9:ed:
46:56:e2:c7:13:19:a3:db:ad:5e:aa:29:c9:a7:b9:45:7d:09:
61:28:c3:df:73:cd:f4:f9:d7:66:0a:2c:75:2a:ff:bf:4c:02:
ff:4c:33:a3:e3:4a:66:a5:83:2a:f9:14:35:9c:e6:4d:c7:10:
07:a1:48:a2:d3:6a:14:2b:7c:94:dd:a4:9a:57:bd:9e:bf:19:
25:0b:2d:bf:0a:39:af:e9:45:56:e7:86:c9:5a:ec:b9:34:12:
86:da:5d:9c:f1:54:28:2e:e1:62:65:3c:2a:6e:90:9d:9b:f1:
d6:a8:ec:70:2b:ab:7d:29:dd:d7:c1:58:04:1d:17:6d:a7:b9:
aa:e6:72:ad:25:32:a8:b5:f9:3a:2a:fb:7a:65:72:4c:df:5d:
cb:56:e6:07:0f:d9:3c:9c:2a:1d:61:8f:97:52:47:9f:f3:a4:
73:fc:84:95:43:e2:b3:ce:73:90:d2:1e:39:6b:80:85:12:aa:
57:9b:25:d9:93:6d:52:25:99:ad:e4:67:17:43:27:d5:7f:e1:
cb:a3:ff:67:75:ea:53:3e:a6:86:31:e9:46:82:7f:33:36:9a:
6a:f8:ba:d8:16:d6:68:52:e5:f4:9c:60:70:02:4a:22:63:91:
bd:28:0c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:16:13 2026 by rpki-client