$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft File: hkxROVpl1d5w7NMKrSemn0ubIrw.mft (raw, json) Hash identifier: AqNrH/CDuCZPmRWmjhXYwGViHBu52qswuT852an1hQ8= Subject key identifier: 68:F9:2E:CC:1B:3C:31:6A:44:1C:70:7A:F4:77:F3:F1:96:C8:9C:BB Authority key identifier: 86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC Certificate issuer: /CN=A9125E1B/serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft Manifest number: 01B5 Signing time: Mon 02 Mar 2026 01:17:04 +0000 Manifest this update: Mon 02 Mar 2026 01:17:02 +0000 Manifest next update: Mon 09 Mar 2026 01:17:02 +0000 Files and hashes: 1: hkxROVpl1d5w7NMKrSemn0ubIrw.crl (hash: lvfqiysAQD2AV6gRTSFU9ajP6WqdzH//EonsxWW4JEk=) 2: B9CAD7A47D2311EEA3696814C4F9AE02.roa (hash: n/+iSZ/XdamVp91QYBtpJ28J2tmDpxBk4yTTzrUUrg0=) 3: BA3E92207D2311EEA3696814C4F9AE02.roa (hash: JeqqccV0moh9xl5LOsL93SB6Ep+iaPUP/pq2BF+emVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125E1B, serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Validity Not Before: Mar 2 01:17:02 2026 GMT Not After : Mar 9 01:17:02 2026 GMT Subject: CN=69a4e510-355f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fe:0b:44:fd:82:03:ea:b1:ec:a8:03:63:d4: 28:46:c3:09:d1:d1:9c:be:b1:74:a5:74:7b:da:16: 16:c0:f4:06:0a:23:f7:b7:0b:af:27:e4:ad:d4:85: 1a:55:fe:97:65:b2:2c:99:ef:5b:bc:6a:33:6b:97: b3:9b:1b:d2:d3:f9:0b:03:d4:38:28:65:31:62:51: 4a:90:c2:31:76:b1:e2:9d:04:e7:35:50:4c:16:35: f4:94:57:2d:b5:79:bc:9f:01:94:2b:7c:8a:95:4b: a1:37:f8:d6:f8:e0:11:65:a1:b3:85:0b:07:f3:63: 47:e7:8d:a8:c1:37:95:30:cb:df:6b:36:43:9f:48: 89:96:19:de:32:95:c2:84:bf:40:3d:f6:52:e8:0c: f7:d4:bd:6e:16:59:54:ce:48:f3:88:f6:3c:95:eb: 1a:b2:9e:3e:69:ab:aa:c5:10:e1:96:fc:a1:f6:04: bd:79:4c:cb:52:96:c5:ba:06:d3:2d:28:21:1b:42: 5c:13:6d:1f:81:20:bd:9e:0d:6a:f1:2d:df:25:c8: 67:fc:99:3b:35:06:10:0d:ec:39:88:51:98:26:d3: 53:ae:e5:0d:8d:1f:95:96:58:3a:d1:66:4e:7f:a0: 21:50:44:44:32:e1:5b:a8:4c:39:d6:7c:61:de:9f: 88:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F9:2E:CC:1B:3C:31:6A:44:1C:70:7A:F4:77:F3:F1:96:C8:9C:BB X509v3 Authority Key Identifier: keyid:86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:17:37:5f:8a:1b:df:2e:55:50:3c:48:68:ff:c5:d1:9d:7e: d4:a7:fc:b4:b9:61:c8:8a:19:9b:23:de:af:d0:9e:34:d9:62: ac:8c:c8:2b:9e:f1:53:57:6f:b5:0a:93:7f:71:73:40:2c:18: 30:77:b0:57:3b:4a:fb:c0:ce:04:d9:f9:8a:23:a0:8a:50:41: 73:ad:69:76:ff:30:28:63:91:7f:6b:c0:36:a3:5c:ae:3e:26: ff:bc:d1:32:26:0a:97:80:cc:fb:d9:af:2b:dd:e7:44:01:64: 33:34:f3:0b:ba:5b:54:b7:c3:ec:7e:26:84:48:b1:d6:8e:87: 13:dc:a4:e8:a5:9f:0b:41:00:ea:3b:47:a3:98:f0:af:3a:0e: 06:b7:6e:70:b1:ec:de:c5:0c:b6:28:d0:75:67:c4:7f:9d:ee: b0:81:3e:70:f6:13:f2:88:1e:e1:45:08:9a:2e:cc:72:8a:92: 76:af:03:4f:01:d6:37:3a:b7:bd:1e:0a:6c:c1:3a:93:ca:09: 25:cb:81:4f:34:23:cb:2a:dc:d1:76:a2:4b:9e:d9:32:cf:64: 1b:00:3e:ae:b6:1a:21:68:38:08:6c:fa:98:8d:26:1f:b2:86: 36:ad:f1:c8:c2:59:c2:78:ba:87:8d:0a:18:6b:55:6e:6e:de: c0:4f:1a:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVFMUIxMTAvBgNVBAUTKDg2NEM1MTM5NUE2NUQ1REU3MEVDRDMwQUFEMjdBNjlG NEI5QjIyQkMwHhcNMjYwMzAyMDExNzAyWhcNMjYwMzA5MDExNzAyWjAYMRYwFAYD VQQDEw02OWE0ZTUxMC0zNTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4P4LRP2CA+qx7KgDY9QoRsMJ0dGcvrF0pXR72hYWwPQGCiP3twuvJ+St1IUa Vf6XZbIsme9bvGoza5ezmxvS0/kLA9Q4KGUxYlFKkMIxdrHinQTnNVBMFjX0lFct tXm8nwGUK3yKlUuhN/jW+OARZaGzhQsH82NH542owTeVMMvfazZDn0iJlhneMpXC hL9APfZS6Az31L1uFllUzkjziPY8lesasp4+aauqxRDhlvyh9gS9eUzLUpbFugbT LSghG0JcE20fgSC9ng1q8S3fJchn/Jk7NQYQDew5iFGYJtNTruUNjR+Vllg60WZO f6AhUEREMuFbqEw51nxh3p+ISQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGj5Lswb PDFqRBxwevR38/GWyJy7MB8GA1UdIwQYMBaAFIZMUTlaZdXecOzTCq0npp9LmyK8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUUxQi83NDk1MjUxNDdE MjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9oa3hST1ZwbDFkNXc3Tk1LclNlbW4wdWJJ cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hreFJPVnBsMWQ1dzdOTUtyU2VtbjB1Yklydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUUxQi83NDk1MjUxNDdEMjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9oa3hST1ZwbDFk NXc3Tk1LclNlbW4wdWJJcncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIhc3X4ob3y5VUDxIaP/F0Z1+1Kf8tLlhyIoZmyPer9CeNNlirIzIK57xU1dv tQqTf3FzQCwYMHewVztK+8DOBNn5iiOgilBBc61pdv8wKGORf2vANqNcrj4m/7zR MiYKl4DM+9mvK93nRAFkMzTzC7pbVLfD7H4mhEix1o6HE9yk6KWfC0EA6jtHo5jw rzoOBrducLHs3sUMtijQdWfEf53usIE+cPYT8oge4UUImi7McoqSdq8DTwHWNzq3 vR4KbME6k8oJJcuBTzQjyyrc0XaiS57ZMs9kGwA+rrYaIWg4CGz6mI0mH7KGNq3x yMJZwni6h40KGGtVbm7ewE8aQg== -----END CERTIFICATE-----Generated at Mon Mar 2 10:56:57 2026 by rpki-client