$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft File: hkxROVpl1d5w7NMKrSemn0ubIrw.mft (raw, json) Hash identifier: /cmzYTcZjQqvOmAG9HPmLehpo9FT6OQ/iqXoGxDC/JQ= Subject key identifier: 9C:1A:CE:64:95:E4:20:BE:B0:CB:0C:3D:55:03:C0:CC:A0:85:0B:7C Authority key identifier: 86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC Certificate issuer: /CN=A9125E1B/serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft Manifest number: 0225 Signing time: Fri 09 Oct 2026 03:19:32 +0000 Manifest this update: Fri 09 Oct 2026 03:19:32 +0000 Manifest next update: Fri 16 Oct 2026 03:19:32 +0000 Files and hashes: 1: hkxROVpl1d5w7NMKrSemn0ubIrw.crl (hash: 9SV7EPQ/JUJME2ZIVdOtBV9xFnoAJZpvakA0HVtlNQw=) 2: BA3E92207D2311EEA3696814C4F9AE02.roa (hash: JeqqccV0moh9xl5LOsL93SB6Ep+iaPUP/pq2BF+emVw=) 3: B9CAD7A47D2311EEA3696814C4F9AE02.roa (hash: n/+iSZ/XdamVp91QYBtpJ28J2tmDpxBk4yTTzrUUrg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 03:19:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125E1B, serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Validity Not Before: Oct 9 03:19:32 2026 GMT Not After : Oct 16 03:19:32 2026 GMT Subject: CN=6ac85d44-6419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ba:ba:f7:8b:b4:e7:be:75:ac:c3:54:03:67: 58:9d:db:a4:21:17:f3:f6:5d:3e:da:71:7f:79:a1: a2:b1:4f:4b:15:8e:24:fb:52:cc:a8:8c:1e:03:9c: 67:f9:ef:b2:ac:2f:35:02:c3:c8:d2:47:fd:8f:7e: 3b:29:a9:e6:00:5d:6c:16:f0:43:ec:4f:11:08:0e: 50:04:16:37:26:51:2d:c0:20:b5:cf:08:b8:b1:4e: 1e:dc:1c:8b:91:e0:20:c0:0c:7a:0f:5b:64:52:ee: 5b:5a:7e:92:3e:ae:70:46:f8:0d:1b:96:c6:42:c9: 5a:28:b5:57:b3:7c:d2:f8:f0:67:6a:58:98:f0:cc: 64:7d:00:4d:d4:f0:82:26:49:a0:1c:9f:05:91:86: 59:5c:e6:da:d9:42:b9:df:a6:71:19:5e:45:16:34: ea:0c:9f:50:35:ce:7f:61:77:b7:6d:99:a5:ea:e9: 3f:bf:ba:42:06:05:15:1f:04:f9:27:d3:99:53:2a: bc:e0:fe:e7:03:05:d3:0e:87:6b:b0:81:78:6e:98: 47:e4:0b:d3:36:24:47:6c:b8:d0:e8:9c:60:69:69: bc:6f:51:a4:d2:34:d5:f9:3c:ee:d7:f2:98:cd:e6: fd:3f:ad:c3:e0:18:e6:7a:55:2e:32:e2:05:52:98: 61:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1A:CE:64:95:E4:20:BE:B0:CB:0C:3D:55:03:C0:CC:A0:85:0B:7C X509v3 Authority Key Identifier: keyid:86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:70:3f:fd:ed:e4:d8:69:f0:dd:af:95:3f:b7:7d:25:74:a5: 5c:a9:c6:a5:6b:d0:1d:ed:f8:5e:6e:03:c6:2b:0d:b1:44:d4: d4:fd:1f:20:9f:dc:ab:0b:40:f7:43:7c:8f:73:75:c8:4e:62: ec:c5:30:a7:9f:a3:d6:52:c1:20:a2:ca:c1:2f:1d:4b:15:bf: d6:d7:b3:f3:b9:b2:fd:76:0e:fe:eb:bd:67:96:fa:ae:e7:ae: c1:cc:a4:b3:60:68:bd:76:49:fe:be:62:e7:b7:4c:fc:37:1a: 81:c8:66:6d:36:c6:14:99:7a:59:65:d9:b3:e5:e4:95:77:b7: bc:60:2b:97:6e:03:e6:4b:cc:4b:d5:5c:e2:0e:26:de:9d:91: ed:98:1f:2c:6e:56:52:98:ad:84:2a:26:6b:a6:ac:af:12:75: 8d:c6:40:49:b5:45:41:d6:2b:53:4d:ef:f8:e3:ab:63:63:ee: b1:ef:90:bf:1f:60:fe:cf:05:00:82:1a:84:09:5b:26:85:51: 87:d5:7b:96:a4:8e:e2:80:84:5a:64:2c:c0:d4:c9:b5:16:22: 8e:4d:77:68:6b:c0:f2:77:1f:7d:3d:72:21:79:79:c5:5a:1d: 1f:7f:01:a8:52:2a:a9:61:24:2d:3c:d7:d4:ea:f5:8d:05:4b: 82:c0:3d:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVFMUIxMTAvBgNVBAUTKDg2NEM1MTM5NUE2NUQ1REU3MEVDRDMwQUFEMjdBNjlG NEI5QjIyQkMwHhcNMjYxMDA5MDMxOTMyWhcNMjYxMDE2MDMxOTMyWjAYMRYwFAYD VQQDEw02YWM4NWQ0NC02NDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlbq694u05751rMNUA2dYndukIRfz9l0+2nF/eaGisU9LFY4k+1LMqIweA5xn +e+yrC81AsPI0kf9j347KanmAF1sFvBD7E8RCA5QBBY3JlEtwCC1zwi4sU4e3ByL keAgwAx6D1tkUu5bWn6SPq5wRvgNG5bGQslaKLVXs3zS+PBnaliY8MxkfQBN1PCC JkmgHJ8FkYZZXOba2UK536ZxGV5FFjTqDJ9QNc5/YXe3bZml6uk/v7pCBgUVHwT5 J9OZUyq84P7nAwXTDodrsIF4bphH5AvTNiRHbLjQ6JxgaWm8b1Gk0jTV+Tzu1/KY zeb9P63D4BjmelUuMuIFUphh4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJwazmSV 5CC+sMsMPVUDwMyghQt8MB8GA1UdIwQYMBaAFIZMUTlaZdXecOzTCq0npp9LmyK8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUUxQi83NDk1MjUxNDdE MjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9oa3hST1ZwbDFkNXc3Tk1LclNlbW4wdWJJ cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hreFJPVnBsMWQ1dzdOTUtyU2VtbjB1Yklydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUUxQi83NDk1MjUxNDdEMjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9oa3hST1ZwbDFk NXc3Tk1LclNlbW4wdWJJcncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANXA//e3k2Gnw3a+VP7d9JXSlXKnGpWvQHe34Xm4DxisNsUTU1P0fIJ/cqwtA 90N8j3N1yE5i7MUwp5+j1lLBIKLKwS8dSxW/1tez87my/XYO/uu9Z5b6rueuwcyk s2BovXZJ/r5i57dM/DcagchmbTbGFJl6WWXZs+XklXe3vGArl24D5kvMS9Vc4g4m 3p2R7ZgfLG5WUpithComa6asrxJ1jcZASbVFQdYrU03v+OOrY2Puse+Qvx9g/s8F AIIahAlbJoVRh9V7lqSO4oCEWmQswNTJtRYijk13aGvA8ncffT1yIXl5xVodH38B qFIqqWEkLTzX1Or1jQVLgsA9Lg== -----END CERTIFICATE-----Generated at Fri Oct 9 20:45:37 2026 by rpki-client