
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
File: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft (raw, json)
Hash identifier: S6HryY9c6NswYoU45jImrvSAIPhtcCH4qjYW0owYLYw=
Subject key identifier: 0D:04:B5:85:02:3B:F5:57:FA:6E:88:36:62:AC:72:BD:B9:E7:1B:54
Authority key identifier: D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5
Certificate issuer: /CN=A9192920/serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5
Certificate serial: 0805
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
Manifest number: 0837
Signing time: Thu 16 Apr 2026 21:08:09 +0000
Manifest this update: Thu 16 Apr 2026 21:08:08 +0000
Manifest next update: Thu 23 Apr 2026 21:08:08 +0000
Files and hashes: 1: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl (hash: Iu/s+xmYM6ddw4B/f78SAqu7fzCh8TOuSaMOm7EHODo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl
rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2053 (0x805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192920, serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5
Validity
Not Before: Apr 16 21:08:08 2026 GMT
Not After : Apr 23 21:08:08 2026 GMT
Subject: CN=69e14fb9-ef41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:f7:93:ca:52:b5:e8:6a:fe:fd:59:6b:d9:
e4:cc:c9:8c:9a:0b:d4:8c:a4:2a:49:99:7d:86:6e:
20:9c:ea:d7:26:12:dc:1d:49:0d:19:47:95:a1:a2:
d3:fc:3d:c5:f1:12:57:82:23:6f:a2:7e:51:44:6f:
9a:dc:c5:e6:b1:d4:24:70:e0:ff:37:9c:e3:b0:f3:
09:cc:96:87:79:69:09:50:cb:e8:dd:a4:0f:33:81:
70:bc:a3:48:bc:17:d7:78:d5:6c:52:f5:8a:72:61:
9f:29:27:34:b6:19:e7:39:52:53:47:c0:ce:ba:ae:
e0:a7:7c:e6:bf:a0:d7:68:9e:3f:c4:94:93:ab:51:
21:d5:3b:5d:8e:6f:dc:c5:8f:00:a9:31:f6:29:93:
97:01:24:b4:28:9b:3e:a3:b5:ae:c7:e0:b2:a9:b4:
a0:d2:24:b5:d0:25:cc:34:f4:5a:c2:29:e8:60:e5:
16:bf:14:13:c3:8e:38:c5:f0:5e:b7:3b:f3:ee:c9:
e1:c8:a8:9d:15:b6:8e:22:2f:27:79:62:25:14:f9:
21:9e:c7:a7:25:f9:83:fc:eb:8d:cd:b5:6d:79:2c:
c6:85:99:2f:26:15:a5:5e:07:fb:2e:3c:e1:5c:3f:
f1:aa:99:97:3a:ce:5c:11:bc:ae:5e:a2:80:1c:a4:
57:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:04:B5:85:02:3B:F5:57:FA:6E:88:36:62:AC:72:BD:B9:E7:1B:54
X509v3 Authority Key Identifier:
keyid:D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:2e:6a:ab:c6:9a:54:e7:1e:41:cd:19:32:b9:53:45:49:1e:
27:5a:1b:9a:1c:17:29:95:e0:28:92:08:34:71:75:54:b7:79:
d2:d7:ba:71:42:7b:ac:27:9a:f9:49:bc:1e:2f:30:2d:8a:80:
89:0d:2c:3e:c7:bc:45:be:75:2d:d3:b1:a7:2a:d1:40:a6:24:
61:7c:de:2d:ee:55:8d:fd:8f:07:79:f8:f6:ea:ae:9d:f7:38:
62:7f:d8:b1:f9:fa:c9:71:69:4d:bb:73:77:c6:98:5c:08:d3:
dc:0e:5f:22:d0:24:61:8e:23:53:5e:dc:27:22:c5:5d:d0:dd:
cc:e3:2e:9e:ab:34:a8:ba:5a:63:cf:15:bd:2b:98:73:9f:e6:
68:4b:48:42:d9:1c:c3:c6:9a:37:2b:6f:aa:c1:66:16:8d:49:
9a:d0:39:6e:28:38:e1:91:f6:4f:ac:b9:3c:c8:ae:29:14:5e:
0d:9a:cc:75:c5:07:78:ca:ad:ae:e9:9b:84:36:dd:b0:9c:49:
52:0b:f7:69:9c:d9:97:13:30:d8:34:a2:76:e7:e0:29:eb:a0:
7d:86:b1:58:52:54:03:54:1c:64:91:41:33:a1:6a:4e:90:e7:
56:4c:d6:ae:85:bd:73:4d:96:e2:73:22:02:47:f2:c7:4d:52:
79:ad:e4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:35:53 2026 by rpki-client