$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft File: hkxROVpl1d5w7NMKrSemn0ubIrw.mft (raw, json) Hash identifier: eAJBPyN+IpycnjfFtIoBOrSNMFdE1q9KQZuCcUMSJxQ= Subject key identifier: CB:AD:BB:12:04:06:5B:31:FF:7C:21:FA:47:C4:CF:91:72:38:96:51 Authority key identifier: 86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC Certificate issuer: /CN=A9125E1B/serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft Manifest number: 021F Signing time: Sun 27 Sep 2026 03:12:46 +0000 Manifest this update: Sun 27 Sep 2026 03:12:45 +0000 Manifest next update: Sun 04 Oct 2026 03:12:45 +0000 Files and hashes: 1: hkxROVpl1d5w7NMKrSemn0ubIrw.crl (hash: 9nDznRfPAZza2AXjTWSPpPAPpV12SOz59XRub01td8Q=) 2: BA3E92207D2311EEA3696814C4F9AE02.roa (hash: JeqqccV0moh9xl5LOsL93SB6Ep+iaPUP/pq2BF+emVw=) 3: B9CAD7A47D2311EEA3696814C4F9AE02.roa (hash: n/+iSZ/XdamVp91QYBtpJ28J2tmDpxBk4yTTzrUUrg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 03:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125E1B, serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Validity Not Before: Sep 27 03:12:45 2026 GMT Not After : Oct 4 03:12:45 2026 GMT Subject: CN=6ab889ae-a834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:89:be:70:16:d7:a0:6c:8a:e0:42:06:00:ce: 6c:cb:47:93:7d:bc:90:a3:93:64:80:a9:59:62:17: 19:0e:54:78:b3:a0:f7:9f:11:74:24:8c:d0:8e:4d: 70:fc:69:7c:3b:20:3d:9a:90:7b:ac:03:7a:74:16: d2:81:ff:69:1a:cf:ba:39:6f:76:a8:e1:ad:3d:17: 5c:ac:66:86:1d:65:a8:79:53:57:1c:74:e2:5f:f4: f9:ba:9b:75:a5:f6:9a:9f:fb:cd:ed:8e:6f:4f:30: 7f:61:3a:19:2c:cd:2d:bf:11:0c:c5:28:48:ee:3b: 5a:8c:5d:20:d4:21:ec:05:f5:e7:88:9e:42:b0:39: 3d:62:e6:70:95:1c:e3:be:e9:71:8c:8e:e0:bd:b4: f1:7a:13:ff:6f:7d:f1:2d:39:57:7f:11:e7:4a:97: e1:13:93:57:ff:2f:d6:31:32:cc:d8:fa:d0:27:ed: 3f:87:77:ba:87:59:b3:a2:ae:46:1b:44:16:91:f7: fc:15:7f:19:81:38:24:11:eb:37:ce:13:ed:10:3b: 11:fb:db:b3:4c:48:fa:a0:b7:3e:26:2f:24:05:56: f0:1c:6f:0c:04:7a:56:3a:d4:8c:85:c9:6a:08:ec: f4:15:d4:fa:10:32:44:13:71:e5:e2:1e:e1:82:ec: 1f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AD:BB:12:04:06:5B:31:FF:7C:21:FA:47:C4:CF:91:72:38:96:51 X509v3 Authority Key Identifier: keyid:86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:1c:05:ce:1b:ed:15:65:00:08:51:ae:0d:f8:1a:23:8c:59: fb:d8:38:c0:eb:f8:05:da:14:ca:bd:13:9b:6e:dc:49:b0:b6: f2:67:c8:8c:43:69:14:a9:f4:28:28:fa:d5:75:1e:a2:ad:c7: d1:64:1c:98:63:81:a0:4a:7d:84:42:bb:2a:0c:24:05:6b:3d: 5b:18:9c:5c:8b:f3:27:1a:8b:50:0a:ec:1b:e5:3a:a4:32:98: 28:6a:2c:1a:bc:53:99:1f:ab:00:ef:28:dd:80:da:93:ca:de: 83:26:1b:57:cc:e1:ce:c7:a1:5f:82:65:4d:a8:55:83:61:74: 10:0e:c1:08:05:48:34:28:e4:ac:90:13:e3:32:d4:02:da:44: b5:c7:49:35:4e:ad:cf:03:22:b5:67:e6:ed:ab:30:0e:ec:16: b1:74:9d:89:60:9f:23:37:44:c9:dd:a3:75:6e:e4:d5:fb:c9: 9a:db:6e:a9:d7:0b:75:ee:2d:54:e0:84:bd:1e:d7:1e:d3:2b: 27:cc:23:ba:dd:21:91:cd:35:6f:29:40:17:f1:bc:fb:a3:0e: 1c:48:fb:a7:e5:cc:bd:64:1e:4e:96:4f:8e:b7:38:88:da:78: 62:9c:cb:f2:e4:97:30:4e:49:fd:ad:e2:6b:c2:11:ea:13:89: 61:58:94:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVFMUIxMTAvBgNVBAUTKDg2NEM1MTM5NUE2NUQ1REU3MEVDRDMwQUFEMjdBNjlG NEI5QjIyQkMwHhcNMjYwOTI3MDMxMjQ1WhcNMjYxMDA0MDMxMjQ1WjAYMRYwFAYD VQQDEw02YWI4ODlhZS1hODM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIm+cBbXoGyK4EIGAM5sy0eTfbyQo5NkgKlZYhcZDlR4s6D3nxF0JIzQjk1w /Gl8OyA9mpB7rAN6dBbSgf9pGs+6OW92qOGtPRdcrGaGHWWoeVNXHHTiX/T5upt1 pfaan/vN7Y5vTzB/YToZLM0tvxEMxShI7jtajF0g1CHsBfXniJ5CsDk9YuZwlRzj vulxjI7gvbTxehP/b33xLTlXfxHnSpfhE5NX/y/WMTLM2PrQJ+0/h3e6h1mzoq5G G0QWkff8FX8ZgTgkEes3zhPtEDsR+9uzTEj6oLc+Ji8kBVbwHG8MBHpWOtSMhclq COz0FdT6EDJEE3Hl4h7hguwf1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMutuxIE Blsx/3wh+kfEz5FyOJZRMB8GA1UdIwQYMBaAFIZMUTlaZdXecOzTCq0npp9LmyK8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUUxQi83NDk1MjUxNDdE MjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9oa3hST1ZwbDFkNXc3Tk1LclNlbW4wdWJJ cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hreFJPVnBsMWQ1dzdOTUtyU2VtbjB1Yklydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUUxQi83NDk1MjUxNDdEMjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9oa3hST1ZwbDFk NXc3Tk1LclNlbW4wdWJJcncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIBwFzhvtFWUACFGuDfgaI4xZ+9g4wOv4BdoUyr0Tm27cSbC28mfIjENpFKn0 KCj61XUeoq3H0WQcmGOBoEp9hEK7KgwkBWs9WxicXIvzJxqLUArsG+U6pDKYKGos GrxTmR+rAO8o3YDak8regyYbV8zhzsehX4JlTahVg2F0EA7BCAVINCjkrJAT4zLU AtpEtcdJNU6tzwMitWfm7aswDuwWsXSdiWCfIzdEyd2jdW7k1fvJmttuqdcLde4t VOCEvR7XHtMrJ8wjut0hkc01bylAF/G8+6MOHEj7p+XMvWQeTpZPjrc4iNp4YpzL 8uSXME5J/a3ia8IR6hOJYViUFg== -----END CERTIFICATE-----Generated at Sun Sep 27 12:02:33 2026 by rpki-client