$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft File: hkxROVpl1d5w7NMKrSemn0ubIrw.mft (raw, json) Hash identifier: uWhJGq/E00t/BLfU4Cj7bezOV1l1dV7SNVCsPTd5Q+U= Subject key identifier: A4:6D:B1:AC:58:4A:F3:54:08:C3:BA:2E:F4:D3:40:F5:0E:6B:F0:E0 Authority key identifier: 86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC Certificate issuer: /CN=A9125E1B/serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft Manifest number: 0149 Signing time: Sat 09 Aug 2025 04:38:50 +0000 Manifest this update: Sat 09 Aug 2025 04:38:49 +0000 Manifest next update: Sat 16 Aug 2025 04:38:49 +0000 Files and hashes: 1: hkxROVpl1d5w7NMKrSemn0ubIrw.crl (hash: ae4TJWi6/UVO0tQ767iGz7zmQjh4n6ej/3TKnI/dcn4=) 2: BA3E92207D2311EEA3696814C4F9AE02.roa (hash: UKOODE+aPAFflvFmKVNYOJaCaH8V6bUeZIgoCqj/k80=) 3: B9CAD7A47D2311EEA3696814C4F9AE02.roa (hash: IP+1b1MWNwsXEa5/Ri8CW/cM8GMHLYMixTxcrnkax+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125E1B, serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Validity Not Before: Aug 9 04:38:49 2025 GMT Not After : Aug 16 04:38:49 2025 GMT Subject: CN=6896d0da-9efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d2:4f:0c:5e:23:55:c7:07:6c:5d:3c:72:80: 6d:2e:34:e2:77:1b:cd:06:65:37:00:45:32:68:a1: 01:43:a2:26:a4:02:37:0c:52:fb:c3:81:a5:d0:b2: c6:9e:35:b8:34:29:65:0f:40:66:ee:64:f5:c0:46: 22:19:1f:ef:78:5f:34:d8:93:95:b9:22:c6:0e:07: 23:56:32:f2:8a:61:89:f1:6e:c5:d0:1e:58:97:ea: 76:44:f9:37:c9:dc:31:06:b4:e1:4f:7d:df:17:2b: 3e:6e:42:37:77:58:7e:e9:24:bd:db:05:ff:11:d8: 35:1a:7a:8c:9c:7e:0a:da:60:3e:43:93:90:de:0e: c6:1d:15:b9:5e:16:19:c0:8f:51:a9:ba:c4:28:d4: 75:12:3e:b2:ae:15:43:35:a9:45:62:b1:9a:8e:e8: 0e:da:63:29:a5:26:1f:b1:e1:99:b7:ca:0d:ec:ce: 0b:c3:b4:2c:1f:0c:43:26:bc:a7:2e:b1:a6:4f:67: 37:3a:60:5d:91:83:84:f6:27:2b:59:32:60:8e:f8: 77:98:1c:0b:c5:c2:eb:e1:c8:af:92:6b:d3:7c:88: f9:b2:63:99:42:61:29:63:6f:08:e0:f8:2e:76:a4: 01:ba:d5:1a:29:c5:1f:1e:c1:c8:59:90:af:50:9e: ba:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6D:B1:AC:58:4A:F3:54:08:C3:BA:2E:F4:D3:40:F5:0E:6B:F0:E0 X509v3 Authority Key Identifier: keyid:86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:86:f7:e8:fe:9d:58:bd:35:6a:db:31:d6:f0:81:c7:26:37: 18:de:bb:bc:c1:6b:c8:c8:15:f2:f4:62:f3:7b:c9:9d:25:18: d7:2d:1e:b9:22:0e:8c:8b:ab:d9:0d:30:88:64:bf:6d:df:e6: b0:b3:81:bf:db:0e:44:ce:9f:91:64:fc:6e:c6:9b:b5:bd:68: 10:c7:c1:f1:6f:b6:30:04:12:c6:11:61:0e:86:ad:0a:24:a2: 05:33:5f:fd:37:d9:9f:d8:16:c4:81:78:a5:9d:d2:0d:b1:19: 79:4c:d1:17:b1:29:41:a6:f8:61:92:33:ca:b5:bd:61:b6:7b: d7:b0:b9:b5:6f:0f:b8:7e:ad:1b:3b:c8:02:57:76:37:36:e6: 57:1c:05:50:73:9f:1f:f2:0e:33:e7:26:27:4f:54:41:bb:83: 0c:0d:ca:80:39:8d:9b:be:c1:7e:94:a0:4d:c1:02:64:8e:32: 20:90:9b:e4:8b:d5:33:39:42:a5:e5:19:06:fa:91:3b:15:a8: a4:ae:52:e1:2d:51:de:3d:6b:21:80:ec:6b:14:87:6a:f7:a3: f0:35:52:8e:05:56:f2:35:61:03:ef:5a:2d:1e:60:21:d5:9b: 82:0b:c4:0a:9b:bc:33:48:1d:83:93:cb:53:3e:99:d5:8e:64: 94:4a:85:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVFMUIxMTAvBgNVBAUTKDg2NEM1MTM5NUE2NUQ1REU3MEVDRDMwQUFEMjdBNjlG NEI5QjIyQkMwHhcNMjUwODA5MDQzODQ5WhcNMjUwODE2MDQzODQ5WjAYMRYwFAYD VQQDEw02ODk2ZDBkYS05ZWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2tJPDF4jVccHbF08coBtLjTidxvNBmU3AEUyaKEBQ6ImpAI3DFL7w4Gl0LLG njW4NCllD0Bm7mT1wEYiGR/veF802JOVuSLGDgcjVjLyimGJ8W7F0B5Yl+p2RPk3 ydwxBrThT33fFys+bkI3d1h+6SS92wX/Edg1GnqMnH4K2mA+Q5OQ3g7GHRW5XhYZ wI9RqbrEKNR1Ej6yrhVDNalFYrGajugO2mMppSYfseGZt8oN7M4Lw7QsHwxDJryn LrGmT2c3OmBdkYOE9icrWTJgjvh3mBwLxcLr4civkmvTfIj5smOZQmEpY28I4Pgu dqQButUaKcUfHsHIWZCvUJ66JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRtsaxY SvNUCMO6LvTTQPUOa/DgMB8GA1UdIwQYMBaAFIZMUTlaZdXecOzTCq0npp9LmyK8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUUxQi83NDk1MjUxNDdE MjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9oa3hST1ZwbDFkNXc3Tk1LclNlbW4wdWJJ cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hreFJPVnBsMWQ1dzdOTUtyU2VtbjB1Yklydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUUxQi83NDk1MjUxNDdEMjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9oa3hST1ZwbDFk NXc3Tk1LclNlbW4wdWJJcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADhvfo/p1YvTVq2zHW8IHHJjcY3ru8wWvIyBXy9GLze8mdJRjXLR65 Ig6Mi6vZDTCIZL9t3+aws4G/2w5Ezp+RZPxuxpu1vWgQx8Hxb7YwBBLGEWEOhq0K JKIFM1/9N9mf2BbEgXilndINsRl5TNEXsSlBpvhhkjPKtb1htnvXsLm1bw+4fq0b O8gCV3Y3NuZXHAVQc58f8g4z5yYnT1RBu4MMDcqAOY2bvsF+lKBNwQJkjjIgkJvk i9UzOUKl5RkG+pE7FaikrlLhLVHePWshgOxrFIdq96PwNVKOBVbyNWED71otHmAh 1ZuCC8QKm7wzSB2Dk8tTPpnVjmSUSoWU -----END CERTIFICATE-----Generated at Sun Aug 10 19:59:45 2025 by rpki-client