$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft File: hkxROVpl1d5w7NMKrSemn0ubIrw.mft (raw, json) Hash identifier: WWkgZP1MYSOppEivKXoX0iFnvg0WclsNCF66WWhWE1U= Subject key identifier: 96:95:0A:87:0B:61:FC:1D:6D:8C:9F:67:71:1A:AC:B9:AA:13:18:27 Authority key identifier: 86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC Certificate issuer: /CN=A9125E1B/serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft Manifest number: 01FD Signing time: Thu 23 Jul 2026 04:28:51 +0000 Manifest this update: Thu 23 Jul 2026 04:28:51 +0000 Manifest next update: Thu 30 Jul 2026 04:28:51 +0000 Files and hashes: 1: hkxROVpl1d5w7NMKrSemn0ubIrw.crl (hash: HNcmb+hQFw3x1Te3F3Ub8QqHrWgChgZC6locyL1wRCk=) 2: BA3E92207D2311EEA3696814C4F9AE02.roa (hash: JeqqccV0moh9xl5LOsL93SB6Ep+iaPUP/pq2BF+emVw=) 3: B9CAD7A47D2311EEA3696814C4F9AE02.roa (hash: n/+iSZ/XdamVp91QYBtpJ28J2tmDpxBk4yTTzrUUrg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125E1B, serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Validity Not Before: Jul 23 04:28:51 2026 GMT Not After : Jul 30 04:28:51 2026 GMT Subject: CN=6a619883-d35c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:da:c5:0f:eb:0d:c9:a9:ed:90:d1:94:32:2d: e4:51:af:8c:71:a5:96:79:37:d9:9d:9c:db:d8:33: 5f:ae:92:0b:c7:56:c8:e6:75:aa:6b:c4:50:04:19: d6:96:6f:a5:76:04:98:7e:97:5f:ba:6d:ce:60:30: 3a:54:a8:d6:8d:a3:6b:00:35:27:14:89:e1:7c:b6: 45:5a:49:2e:6b:0b:59:16:73:e3:e9:20:ac:d8:55: fb:93:75:80:fa:36:ca:74:e8:0e:99:0c:d2:4f:59: c7:23:11:84:2b:c8:d6:c4:58:ab:dd:27:55:67:d0: 1e:aa:a4:8a:ff:88:fe:53:50:97:77:64:18:0c:34: d0:b5:f9:82:c5:47:b8:60:ab:26:4b:bd:17:ad:16: e3:69:e9:73:e5:96:10:77:48:f8:a2:3a:4e:95:b2: ab:2a:0c:f8:a7:63:13:a0:8f:89:b7:27:99:33:e6: 97:40:0c:ad:50:d2:6b:f0:9b:67:28:0f:60:f0:b0: d7:f2:f4:0a:c2:b4:fd:54:a9:2d:c6:12:da:ba:6c: d6:e3:97:98:a5:48:dd:be:03:a8:15:ef:83:5f:f5: 9b:52:ed:13:02:25:b7:cb:d9:a9:8a:22:e7:7b:eb: 9d:34:f3:ce:0c:1b:fc:52:d0:2b:a3:a6:80:69:2c: e2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:95:0A:87:0B:61:FC:1D:6D:8C:9F:67:71:1A:AC:B9:AA:13:18:27 X509v3 Authority Key Identifier: keyid:86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:0a:20:90:c1:2f:ba:4d:e2:cd:2b:df:35:12:16:4b:99:ea: ce:ee:01:bc:e3:0a:7c:41:f6:93:55:3d:b7:99:d1:da:5f:f2: 31:3f:5a:32:ed:4c:95:39:4c:9a:d5:5e:c8:0c:3a:26:33:76: 02:20:64:fe:bc:87:4c:91:51:dc:44:c4:62:c2:e3:db:9b:4e: 94:c1:66:3d:70:a7:47:ef:9d:18:46:57:af:1e:11:c4:51:96: c9:37:a5:6c:59:42:b2:65:fe:51:8f:be:b2:60:a8:22:78:c7: 64:92:fa:25:76:ac:e3:65:60:dd:95:33:f5:22:e6:34:0f:f3: 9b:69:e8:8d:f5:78:2c:66:25:c6:5b:1f:3b:2b:de:b3:a6:a7: 2a:2a:06:e0:8d:d7:71:74:24:38:66:7f:2a:fc:bf:7b:89:45: c4:35:48:62:93:d2:8c:cf:37:c8:72:28:7c:0e:80:d1:d6:88: 25:a6:8f:6c:c7:3d:07:a3:93:28:ce:a4:56:03:82:97:27:ea: 60:94:07:7e:29:fc:ed:9d:32:a5:4c:0c:c0:91:dc:e7:52:b8: 74:2d:c2:8e:cb:ce:d8:a1:13:b3:95:86:02:79:d2:d9:34:ad: 85:c4:51:62:ce:78:11:bf:27:87:94:b9:11:d0:ae:9e:74:81: 5d:a5:4d:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVFMUIxMTAvBgNVBAUTKDg2NEM1MTM5NUE2NUQ1REU3MEVDRDMwQUFEMjdBNjlG NEI5QjIyQkMwHhcNMjYwNzIzMDQyODUxWhcNMjYwNzMwMDQyODUxWjAYMRYwFAYD VQQDEw02YTYxOTg4My1kMzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09rFD+sNyantkNGUMi3kUa+McaWWeTfZnZzb2DNfrpILx1bI5nWqa8RQBBnW lm+ldgSYfpdfum3OYDA6VKjWjaNrADUnFInhfLZFWkkuawtZFnPj6SCs2FX7k3WA +jbKdOgOmQzST1nHIxGEK8jWxFir3SdVZ9AeqqSK/4j+U1CXd2QYDDTQtfmCxUe4 YKsmS70XrRbjaelz5ZYQd0j4ojpOlbKrKgz4p2MToI+JtyeZM+aXQAytUNJr8Jtn KA9g8LDX8vQKwrT9VKktxhLaumzW45eYpUjdvgOoFe+DX/WbUu0TAiW3y9mpiiLn e+udNPPODBv8UtAro6aAaSziFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJaVCocL YfwdbYyfZ3EarLmqExgnMB8GA1UdIwQYMBaAFIZMUTlaZdXecOzTCq0npp9LmyK8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUUxQi83NDk1MjUxNDdE MjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9oa3hST1ZwbDFkNXc3Tk1LclNlbW4wdWJJ cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hreFJPVnBsMWQ1dzdOTUtyU2VtbjB1Yklydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUUxQi83NDk1MjUxNDdEMjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9oa3hST1ZwbDFk NXc3Tk1LclNlbW4wdWJJcncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAggogkMEvuk3izSvfNRIWS5nqzu4BvOMKfEH2k1U9t5nR2l/yMT9aMu1MlTlM mtVeyAw6JjN2AiBk/ryHTJFR3ETEYsLj25tOlMFmPXCnR++dGEZXrx4RxFGWyTel bFlCsmX+UY++smCoInjHZJL6JXas42Vg3ZUz9SLmNA/zm2nojfV4LGYlxlsfOyve s6anKioG4I3XcXQkOGZ/Kvy/e4lFxDVIYpPSjM83yHIofA6A0daIJaaPbMc9B6OT KM6kVgOClyfqYJQHfin87Z0ypUwMwJHc51K4dC3CjsvO2KETs5WGAnnS2TSthcRR Ys54Eb8nh5S5EdCunnSBXaVNzA== -----END CERTIFICATE-----Generated at Fri Jul 24 19:09:38 2026 by rpki-client