
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
File: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft (raw, json)
Hash identifier: OZm74eiIMLiXlofaohGibfX5bY1jle9en6uML3IadAA=
Subject key identifier: 2E:36:FE:F7:12:4F:65:74:A8:B0:ED:11:67:80:D6:49:6B:15:4E:CF
Authority key identifier: D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5
Certificate issuer: /CN=A9192920/serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5
Certificate serial: 0838
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
Manifest number: 089D
Signing time: Sun 26 Jul 2026 21:46:06 +0000
Manifest this update: Sun 26 Jul 2026 21:46:06 +0000
Manifest next update: Sun 02 Aug 2026 21:46:06 +0000
Files and hashes: 1: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl (hash: keQ95zyzwUGm8J0rztqDlFF/piUOEAuyp/Fr7CEJ32s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl
rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 21:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2104 (0x838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192920, serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5
Validity
Not Before: Jul 26 21:46:06 2026 GMT
Not After : Aug 2 21:46:06 2026 GMT
Subject: CN=6a66801e-cfb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d1:f4:ce:8e:56:44:23:b4:8c:d1:e8:97:9e:
85:0f:cd:42:99:8d:d2:f4:55:d9:2c:ce:14:bf:e6:
93:ad:cb:6e:e1:9f:e2:db:07:97:58:a7:7e:ec:0c:
b0:b6:d4:a9:9a:20:46:11:bd:8b:f2:fa:91:58:a9:
c7:8d:39:e3:bf:21:c2:67:32:41:6b:08:eb:4e:b4:
4d:c8:d5:9d:74:23:7c:b5:db:b6:7b:c6:0e:c4:e4:
94:42:47:b6:f3:c6:2c:4e:11:8b:66:6d:b5:02:f5:
d6:30:ef:d2:a6:42:5a:dc:89:8e:8f:03:71:cd:12:
31:2e:f2:a4:c2:85:89:eb:79:95:7c:a9:72:98:cb:
18:be:dd:46:83:84:f5:a6:bb:56:b6:38:88:21:e4:
21:1b:84:09:66:56:f1:99:69:fd:fe:14:e6:8f:0e:
b9:43:56:79:e1:db:e3:79:5d:c9:4f:fa:0c:46:e8:
fa:ad:0f:9b:d2:dc:68:79:13:f3:a5:f5:7a:48:13:
55:6a:83:7d:35:41:63:5e:da:c0:36:10:2e:15:0f:
98:50:66:1e:d7:99:78:ee:57:82:28:03:0e:76:75:
15:3d:2b:64:e3:45:cc:84:02:29:e6:91:e0:59:e0:
d1:4b:56:b5:58:97:1c:a6:08:bb:35:f1:66:65:cd:
60:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:36:FE:F7:12:4F:65:74:A8:B0:ED:11:67:80:D6:49:6B:15:4E:CF
X509v3 Authority Key Identifier:
keyid:D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:8f:1f:b0:88:66:a3:7e:d7:51:f0:5f:14:43:d6:1f:a1:ba:
13:64:85:75:65:82:33:a5:6e:5f:52:d9:8b:ea:35:70:51:96:
f0:15:2b:3c:6a:9a:e5:28:d4:f8:14:de:8f:78:77:86:91:6f:
af:96:1f:24:b7:a4:fb:40:05:d9:d4:2f:ec:ad:ce:6e:63:17:
2e:a6:e9:5a:d5:0a:87:ab:60:76:56:03:9f:16:0a:c3:8b:8e:
53:18:f8:25:63:7a:61:e8:43:eb:bb:27:f8:bd:1b:87:9a:1b:
5c:5b:7f:d9:ac:66:96:b6:8c:e1:2f:63:de:5d:2d:c7:7e:5d:
a0:8b:cc:94:d7:65:ec:db:f2:e2:43:ec:2f:29:72:5c:e5:1d:
a0:11:19:d2:e5:6b:a5:65:f5:01:71:33:6a:85:8a:7b:ea:e1:
5c:66:af:57:65:4a:16:a6:28:93:13:46:0b:46:58:0b:25:23:
81:7e:cc:7f:e3:97:84:bb:11:6d:25:5b:2f:aa:86:bf:20:d1:
d0:d4:14:4d:21:aa:9c:8a:f7:d2:bf:06:09:c8:72:1d:18:da:
71:34:1b:de:1e:ee:13:6b:a4:c4:fe:27:8e:43:0c:dc:78:d4:
39:c1:2f:34:c2:69:60:71:90:e7:05:be:6d:92:b5:7f:aa:8d:
b5:77:ad:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTI5MjAxMTAvBgNVBAUTKEQ0QTFDNzFEMzU3M0E2RTQ0NjEzODk0MUQ3RjdFRkVD
RTM5N0FGQjUwHhcNMjYwNzI2MjE0NjA2WhcNMjYwODAyMjE0NjA2WjAYMRYwFAYD
VQQDEw02YTY2ODAxZS1jZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj9H0zo5WRCO0jNHol56FD81CmY3S9FXZLM4Uv+aTrctu4Z/i2weXWKd+7Ayw
ttSpmiBGEb2L8vqRWKnHjTnjvyHCZzJBawjrTrRNyNWddCN8tdu2e8YOxOSUQke2
88YsThGLZm21AvXWMO/SpkJa3ImOjwNxzRIxLvKkwoWJ63mVfKlymMsYvt1Gg4T1
prtWtjiIIeQhG4QJZlbxmWn9/hTmjw65Q1Z54dvjeV3JT/oMRuj6rQ+b0txoeRPz
pfV6SBNVaoN9NUFjXtrANhAuFQ+YUGYe15l47leCKAMOdnUVPStk40XMhAIp5pHg
WeDRS1a1WJccpgi7NfFmZc1gawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC42/vcS
T2V0qLDtEWeA1klrFU7PMB8GA1UdIwQYMBaAFNShxx01c6bkRhOJQdf37+zjl6+1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkyMC83MEMwNDQyNjI3
RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1UkdFNGxCMV9mdjdPT1hy
N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFLSEhIVFZ6cHVSR0U0bEIxX2Z2N09PWHI3VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjkyMC83MEMwNDQyNjI3RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1
UkdFNGxCMV9mdjdPT1hyN1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAco8fsIhmo37XUfBfFEPWH6G6E2SFdWWCM6VuX1LZi+o1cFGW8BUrPGqa5SjU
+BTej3h3hpFvr5YfJLek+0AF2dQv7K3ObmMXLqbpWtUKh6tgdlYDnxYKw4uOUxj4
JWN6YehD67sn+L0bh5obXFt/2axmlraM4S9j3l0tx35doIvMlNdl7Nvy4kPsLyly
XOUdoBEZ0uVrpWX1AXEzaoWKe+rhXGavV2VKFqYokxNGC0ZYCyUjgX7Mf+OXhLsR
bSVbL6qGvyDR0NQUTSGqnIr30r8GCchyHRjacTQb3h7uE2ukxP4njkMM3HjUOcEv
NMJpYHGQ5wW+bZK1f6qNtXetrw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:29:52 2026 by rpki-client