$ rpki-client -vvf rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft File: hdbxhJPYoIzHKxsJHUr1T48KKLM.mft (raw, json) Hash identifier: 9v9a+SJBk85e83pDFImZTgXZ+g4bKSRoSWaK507GEF8= Subject key identifier: 89:52:AD:C3:6B:54:13:03:41:0A:27:A3:8F:46:E6:75:06:E0:F6:1E Authority key identifier: 85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 Certificate issuer: /CN=A9125225/serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Certificate serial: 06FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft Manifest number: 06F1 Signing time: Tue 24 Mar 2026 21:49:34 +0000 Manifest this update: Tue 24 Mar 2026 21:49:33 +0000 Manifest next update: Tue 31 Mar 2026 21:49:33 +0000 Files and hashes: 1: hdbxhJPYoIzHKxsJHUr1T48KKLM.crl (hash: 1zbySy7NhW7IDdPcOVJTTmOQz1mzeGFt2xmMFM/bdPA=) 2: F66F50628A9C11EB9B2E044BC4F9AE02.roa (hash: taqp3LL8tAiDHV2u6BkFdJRyNn3w2njiu3rh4Og8etQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1789 (0x6fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125225, serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Validity Not Before: Mar 24 21:49:33 2026 GMT Not After : Mar 31 21:49:33 2026 GMT Subject: CN=69c306ee-828a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c7:c8:ab:44:81:01:e6:7b:34:7d:1c:eb:fc: 4a:a5:97:ef:07:be:57:15:cb:a7:35:ec:7a:d6:15: 59:e6:aa:c9:81:26:ef:5d:1f:2b:d6:80:33:18:51: 59:c8:e3:97:cd:14:e1:65:4b:c8:d0:ba:1f:04:13: 74:f0:fe:d7:83:e7:12:73:de:6f:0e:b2:1e:50:5a: 75:e0:6f:8e:93:8f:00:4f:07:25:10:5d:4a:90:00: 05:1a:77:0f:1f:05:a3:e2:7c:9f:74:63:37:9f:c5: 37:38:e9:3b:6f:c0:d9:3b:95:30:57:55:59:4f:35: 0d:1f:2a:f0:c2:3d:07:c8:c5:c2:bd:70:94:cf:61: d6:ad:c9:f8:c0:9d:35:3e:33:8a:2f:df:eb:8f:e9: 5e:49:6c:2f:cf:4f:32:c4:f5:0f:98:36:59:ff:54: 23:ab:ce:ee:3a:92:b0:79:0b:ac:24:46:28:91:3a: 51:e4:f1:9e:13:66:ba:b2:58:80:e1:2f:96:ca:b5: b0:6d:16:a2:25:67:e4:9b:ef:f4:50:05:68:24:9b: 3e:47:82:bf:14:ad:57:2c:86:a3:4f:39:f1:80:08: b0:54:fd:22:45:f8:c7:4a:15:2a:d6:32:c8:fa:69: 9a:5c:43:ba:84:ce:8d:db:35:e2:ff:11:2d:0b:7f: cb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:52:AD:C3:6B:54:13:03:41:0A:27:A3:8F:46:E6:75:06:E0:F6:1E X509v3 Authority Key Identifier: keyid:85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:16:6a:a5:03:80:f1:14:62:42:34:ad:9f:f3:e4:d4:cd:23: b3:50:63:8f:0d:b5:34:e1:07:cb:a8:18:21:13:3f:4b:4c:5d: b8:47:68:d0:2f:55:84:99:ee:bf:d2:7a:47:81:70:7a:68:40: 29:df:1b:a6:28:fa:58:e6:cb:9b:37:74:9b:42:b6:0e:83:64: 7d:ee:a8:80:8d:0b:00:66:9f:67:fd:16:69:da:f9:e2:a9:e6: c8:a6:67:5d:63:9a:d5:b9:66:5f:fc:ad:5e:9f:ca:05:7a:b2: 62:08:4d:91:54:5e:e7:df:19:3c:4d:8b:32:b8:a3:c0:6a:44: 07:ea:8e:e3:23:ce:8b:3e:1e:1b:36:51:4c:2b:94:f1:44:b2: 31:d1:52:b3:a1:4e:4b:a1:cd:d7:d9:ba:2d:8d:6a:92:98:8f: 53:08:64:8a:f5:71:3d:52:7f:51:8e:9d:c4:03:33:9a:45:4e: 51:03:03:3a:d5:8a:42:d6:6e:6e:15:83:40:db:1d:fa:85:03: 84:39:ec:9e:44:4f:3d:84:99:fc:21:75:23:10:d0:4f:84:6a: 6c:03:c0:83:f4:de:eb:51:35:be:77:46:62:c6:8b:00:5f:60: a3:86:21:1b:b1:80:f2:87:7f:fe:c7:1c:c2:d4:2c:2d:f2:ca: a3:39:cf:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUyMjUxMTAvBgNVBAUTKDg1RDZGMTg0OTNEOEEwOENDNzJCMUIwOTFENEFGNTRG OEYwQTI4QjMwHhcNMjYwMzI0MjE0OTMzWhcNMjYwMzMxMjE0OTMzWjAYMRYwFAYD VQQDEw02OWMzMDZlZS04MjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMfIq0SBAeZ7NH0c6/xKpZfvB75XFcunNex61hVZ5qrJgSbvXR8r1oAzGFFZ yOOXzRThZUvI0LofBBN08P7Xg+cSc95vDrIeUFp14G+Ok48ATwclEF1KkAAFGncP HwWj4nyfdGM3n8U3OOk7b8DZO5UwV1VZTzUNHyrwwj0HyMXCvXCUz2HWrcn4wJ01 PjOKL9/rj+leSWwvz08yxPUPmDZZ/1Qjq87uOpKweQusJEYokTpR5PGeE2a6sliA 4S+WyrWwbRaiJWfkm+/0UAVoJJs+R4K/FK1XLIajTznxgAiwVP0iRfjHShUq1jLI +mmaXEO6hM6N2zXi/xEtC3/LqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIlSrcNr VBMDQQono49G5nUG4PYeMB8GA1UdIwQYMBaAFIXW8YST2KCMxysbCR1K9U+PCiiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTIyNS9DQTY5MDQ0MjhB OUExMUVCODBDM0VENDdDNEY5QUUwMi9oZGJ4aEpQWW9JekhLeHNKSFVyMVQ0OEtL TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hkYnhoSlBZb0l6SEt4c0pIVXIxVDQ4S0tMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTIyNS9DQTY5MDQ0MjhBOUExMUVCODBDM0VENDdDNEY5QUUwMi9oZGJ4aEpQWW9J ekhLeHNKSFVyMVQ0OEtLTE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhRZqpQOA8RRiQjStn/Pk1M0js1Bjjw21NOEHy6gYIRM/S0xduEdo0C9VhJnu v9J6R4FwemhAKd8bpij6WObLmzd0m0K2DoNkfe6ogI0LAGafZ/0Wadr54qnmyKZn XWOa1blmX/ytXp/KBXqyYghNkVRe598ZPE2LMrijwGpEB+qO4yPOiz4eGzZRTCuU 8USyMdFSs6FOS6HN19m6LY1qkpiPUwhkivVxPVJ/UY6dxAMzmkVOUQMDOtWKQtZu bhWDQNsd+oUDhDnsnkRPPYSZ/CF1IxDQT4RqbAPAg/Te61E1vndGYsaLAF9go4Yh G7GA8od//sccwtQsLfLKoznPVg== -----END CERTIFICATE-----Generated at Thu Mar 26 23:46:55 2026 by rpki-client