$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft File: hkxROVpl1d5w7NMKrSemn0ubIrw.mft (raw, json) Hash identifier: lGYlFPiC5PPN3fBy8rMXeEYji9/8y27pcmykuVro8lU= Subject key identifier: 3D:09:43:42:F7:BA:25:88:BC:67:39:89:99:18:D6:0D:1D:E2:DD:D0 Authority key identifier: 86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC Certificate issuer: /CN=A9125E1B/serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft Manifest number: 01FF Signing time: Mon 27 Jul 2026 04:45:21 +0000 Manifest this update: Mon 27 Jul 2026 04:45:20 +0000 Manifest next update: Mon 03 Aug 2026 04:45:20 +0000 Files and hashes: 1: hkxROVpl1d5w7NMKrSemn0ubIrw.crl (hash: 0rHnZH8luJJy2/Fuqo514uZQTbxbywXA8G2Xrd4148k=) 2: BA3E92207D2311EEA3696814C4F9AE02.roa (hash: JeqqccV0moh9xl5LOsL93SB6Ep+iaPUP/pq2BF+emVw=) 3: B9CAD7A47D2311EEA3696814C4F9AE02.roa (hash: n/+iSZ/XdamVp91QYBtpJ28J2tmDpxBk4yTTzrUUrg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125E1B, serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Validity Not Before: Jul 27 04:45:20 2026 GMT Not After : Aug 3 04:45:20 2026 GMT Subject: CN=6a66e261-880e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5c:27:ac:46:da:9c:4e:d5:b9:0a:3a:0d:f7: da:46:c9:a5:53:7f:aa:71:1a:80:db:b3:ec:99:12: 84:b3:08:d4:18:d6:8c:bf:3b:85:45:38:96:d8:1b: eb:ab:1c:65:de:74:15:09:18:47:05:a6:3c:08:ee: 7e:87:03:51:eb:b5:3c:72:3d:94:40:81:e3:f6:3e: b3:db:a2:a8:89:8b:b2:d8:09:7f:3e:ce:96:f1:4f: 20:35:66:76:c9:6a:9a:c7:56:91:6f:bc:3d:7a:82: ed:d6:1d:d6:f9:32:c3:54:2b:7a:71:7b:8a:d5:c8: a7:73:8d:d1:48:22:b7:6d:59:38:4d:57:dc:a8:7c: fc:c8:b2:a3:3a:c7:08:5e:a0:7c:d0:b1:8b:e9:28: 90:2d:ba:87:99:76:bc:ab:11:9a:f7:3b:12:30:72: b5:f4:f6:5f:78:18:68:c7:d8:86:3f:85:cb:78:8d: a3:6a:b0:51:3d:69:8f:24:44:63:18:29:65:60:2a: e4:c0:36:7d:56:4a:04:5d:bd:e8:14:dd:de:bd:ba: 6f:f1:74:52:88:b7:d9:ea:41:79:48:70:47:a3:c5: 8f:c2:59:76:fc:91:ff:c8:36:d2:b1:6e:ab:1c:6b: 0d:c9:91:60:59:44:98:f7:2b:b6:52:ea:86:08:18: 52:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:09:43:42:F7:BA:25:88:BC:67:39:89:99:18:D6:0D:1D:E2:DD:D0 X509v3 Authority Key Identifier: keyid:86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:68:be:ec:be:93:f7:0b:17:4d:c6:b2:9d:40:96:7f:44:58: 64:d0:98:f8:87:7c:3c:5d:91:7e:69:64:63:1f:0b:c8:3a:9d: cc:47:6d:55:70:e8:b0:8a:7e:e5:2c:6f:4a:ed:b2:3d:e7:35: d4:23:5a:6a:83:a3:87:ae:9b:88:a6:03:0b:7b:7d:05:a0:81: c4:aa:56:fa:d0:1a:76:80:bc:a2:86:03:ae:bb:5d:b5:6d:49: 0a:57:80:cd:f8:bc:13:97:37:63:a7:e5:31:d0:fa:00:45:30: 03:b8:39:58:bd:7b:f7:35:5b:88:b3:80:17:8a:6f:95:cb:85: 1a:8e:d0:50:e6:91:a1:1a:12:d4:93:2d:71:aa:dc:17:01:29: fe:17:c4:93:ab:86:8c:55:06:19:fb:5c:00:18:a3:cc:ff:2d: e7:09:be:56:c1:e1:99:9c:8c:61:b7:4f:58:03:1e:d0:6f:15: 31:43:0f:f1:2b:88:45:9b:d2:08:ff:51:c9:85:d9:46:98:a8: a8:e0:c0:42:29:14:5e:4a:ea:67:4d:87:04:bf:73:f1:e3:10: 7c:94:52:4a:91:04:94:95:8a:23:6b:dd:83:7b:95:aa:d1:4d: a2:2b:7b:31:cd:7f:c4:54:5b:6a:d5:dd:84:44:98:35:96:1e: da:0a:a8:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVFMUIxMTAvBgNVBAUTKDg2NEM1MTM5NUE2NUQ1REU3MEVDRDMwQUFEMjdBNjlG NEI5QjIyQkMwHhcNMjYwNzI3MDQ0NTIwWhcNMjYwODAzMDQ0NTIwWjAYMRYwFAYD VQQDEw02YTY2ZTI2MS04ODBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVwnrEbanE7VuQo6DffaRsmlU3+qcRqA27PsmRKEswjUGNaMvzuFRTiW2Bvr qxxl3nQVCRhHBaY8CO5+hwNR67U8cj2UQIHj9j6z26KoiYuy2Al/Ps6W8U8gNWZ2 yWqax1aRb7w9eoLt1h3W+TLDVCt6cXuK1cinc43RSCK3bVk4TVfcqHz8yLKjOscI XqB80LGL6SiQLbqHmXa8qxGa9zsSMHK19PZfeBhox9iGP4XLeI2jarBRPWmPJERj GCllYCrkwDZ9VkoEXb3oFN3evbpv8XRSiLfZ6kF5SHBHo8WPwll2/JH/yDbSsW6r HGsNyZFgWUSY9yu2UuqGCBhSOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0JQ0L3 uiWIvGc5iZkY1g0d4t3QMB8GA1UdIwQYMBaAFIZMUTlaZdXecOzTCq0npp9LmyK8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUUxQi83NDk1MjUxNDdE MjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9oa3hST1ZwbDFkNXc3Tk1LclNlbW4wdWJJ cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hreFJPVnBsMWQ1dzdOTUtyU2VtbjB1Yklydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUUxQi83NDk1MjUxNDdEMjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9oa3hST1ZwbDFk NXc3Tk1LclNlbW4wdWJJcncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB2i+7L6T9wsXTcaynUCWf0RYZNCY+Id8PF2RfmlkYx8LyDqdzEdtVXDosIp+ 5SxvSu2yPec11CNaaoOjh66biKYDC3t9BaCBxKpW+tAadoC8ooYDrrtdtW1JCleA zfi8E5c3Y6flMdD6AEUwA7g5WL179zVbiLOAF4pvlcuFGo7QUOaRoRoS1JMtcarc FwEp/hfEk6uGjFUGGftcABijzP8t5wm+VsHhmZyMYbdPWAMe0G8VMUMP8SuIRZvS CP9RyYXZRpioqODAQikUXkrqZ02HBL9z8eMQfJRSSpEElJWKI2vdg3uVqtFNoit7 Mc1/xFRbatXdhESYNZYe2gqoxQ== -----END CERTIFICATE-----Generated at Wed Jul 29 01:15:24 2026 by rpki-client