$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft File: hkxROVpl1d5w7NMKrSemn0ubIrw.mft (raw, json) Hash identifier: W34KZRMR5Y5YHRHvAXEygQ8tLBMNsJO6id3s705C9t8= Subject key identifier: 8B:D2:8F:B9:FC:89:0C:9D:12:B4:CB:AA:2B:9F:41:0E:00:1A:89:03 Authority key identifier: 86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC Certificate issuer: /CN=A9125E1B/serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft Manifest number: 01CD Signing time: Fri 17 Apr 2026 03:25:08 +0000 Manifest this update: Fri 17 Apr 2026 03:25:08 +0000 Manifest next update: Fri 24 Apr 2026 03:25:08 +0000 Files and hashes: 1: hkxROVpl1d5w7NMKrSemn0ubIrw.crl (hash: 4Mh45ZPNjebGU2UCwJW5bIPtwvUIC3TqOVU4H+mYHpA=) 2: B9CAD7A47D2311EEA3696814C4F9AE02.roa (hash: n/+iSZ/XdamVp91QYBtpJ28J2tmDpxBk4yTTzrUUrg0=) 3: BA3E92207D2311EEA3696814C4F9AE02.roa (hash: JeqqccV0moh9xl5LOsL93SB6Ep+iaPUP/pq2BF+emVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125E1B, serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Validity Not Before: Apr 17 03:25:08 2026 GMT Not After : Apr 24 03:25:08 2026 GMT Subject: CN=69e1a814-d325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:80:af:2d:31:ec:22:d7:30:c7:62:01:7a:4b: 85:64:98:43:bf:30:01:3d:37:97:6c:d1:c7:7d:07: 8b:ad:f7:44:9f:e7:20:20:30:94:c8:2e:87:0b:8d: fd:78:1c:69:8d:75:fa:ac:d8:10:10:e1:b1:96:b2: 0e:71:ff:95:f9:13:eb:39:8f:07:4a:72:e7:98:62: ad:91:23:43:ee:5e:98:08:52:f1:8c:0a:5e:50:dc: 2d:b4:6e:cd:eb:ce:17:ac:17:cd:8c:10:17:85:16: ec:aa:c4:e1:3e:92:3a:30:53:a7:0c:45:e6:39:c2: 6c:48:1d:7d:f0:8e:17:47:59:40:04:aa:3f:ec:61: 13:ca:df:42:74:fe:1a:f4:a3:b3:a1:55:05:04:7d: 81:1b:21:45:ec:29:4e:d2:d0:f1:9b:b4:db:6e:22: b3:7f:6f:0d:09:c5:56:2c:a3:e4:6b:f5:e8:9c:70: fd:76:91:25:12:41:ef:6e:c6:1b:4d:7e:d5:ea:64: 34:d7:08:f0:b0:a2:57:0e:23:69:02:17:75:74:c2: 67:73:ce:b5:0d:d8:4b:4f:09:f6:0b:06:2b:31:91: 85:c1:02:1d:b8:71:54:c5:81:23:4d:48:a1:a8:9f: ae:5b:7e:f0:ce:3d:33:1e:ba:99:5b:f2:47:f5:df: a9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D2:8F:B9:FC:89:0C:9D:12:B4:CB:AA:2B:9F:41:0E:00:1A:89:03 X509v3 Authority Key Identifier: keyid:86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:60:c5:03:f7:83:fa:9e:2f:e9:bf:68:3f:22:3f:81:d3:6d: 21:66:ad:e9:66:bf:53:fa:d5:44:96:7c:4e:a6:c2:11:31:09: 61:83:5b:11:de:ae:54:68:c1:2e:fa:76:73:09:62:bd:f5:c2: c8:a5:fd:42:bd:f9:5b:52:f2:89:83:f3:d5:0b:28:ae:db:04: 37:b1:10:d5:39:a1:2c:2d:ba:79:02:da:ed:ab:ad:7d:a7:67: 1f:34:5a:fb:b2:5b:d5:7f:38:bf:2f:e5:7e:43:f4:3d:1e:11: 94:da:f8:66:a6:e3:61:ca:aa:ec:f1:ef:51:bc:19:6c:fc:fe: e1:92:e4:5f:36:a5:6b:75:f3:a0:34:12:8e:0c:79:f9:51:e0: c4:e4:ab:58:a3:80:8e:50:b9:c7:76:d4:b4:d7:8d:b5:c6:be: 01:89:fc:66:46:93:67:3f:7d:12:3a:2b:3a:3c:11:e4:c8:0f: 43:cb:c1:e6:45:c4:5d:f7:63:55:4d:09:25:4a:14:9b:9d:a0: bc:c1:c1:4e:84:07:77:2f:f1:ce:4a:b6:6c:e6:57:2c:f9:a6: f6:72:00:a0:0c:50:83:62:22:b9:6e:c3:00:52:85:46:aa:b1: 59:95:49:40:e9:a3:cf:ed:79:79:42:39:4a:8b:7c:e7:06:28: 28:7a:5d:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVFMUIxMTAvBgNVBAUTKDg2NEM1MTM5NUE2NUQ1REU3MEVDRDMwQUFEMjdBNjlG NEI5QjIyQkMwHhcNMjYwNDE3MDMyNTA4WhcNMjYwNDI0MDMyNTA4WjAYMRYwFAYD VQQDEw02OWUxYTgxNC1kMzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooCvLTHsItcwx2IBekuFZJhDvzABPTeXbNHHfQeLrfdEn+cgIDCUyC6HC439 eBxpjXX6rNgQEOGxlrIOcf+V+RPrOY8HSnLnmGKtkSND7l6YCFLxjApeUNwttG7N 684XrBfNjBAXhRbsqsThPpI6MFOnDEXmOcJsSB198I4XR1lABKo/7GETyt9CdP4a 9KOzoVUFBH2BGyFF7ClO0tDxm7TbbiKzf28NCcVWLKPka/XonHD9dpElEkHvbsYb TX7V6mQ01wjwsKJXDiNpAhd1dMJnc861DdhLTwn2CwYrMZGFwQIduHFUxYEjTUih qJ+uW37wzj0zHrqZW/JH9d+pmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIvSj7n8 iQydErTLqiufQQ4AGokDMB8GA1UdIwQYMBaAFIZMUTlaZdXecOzTCq0npp9LmyK8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUUxQi83NDk1MjUxNDdE MjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9oa3hST1ZwbDFkNXc3Tk1LclNlbW4wdWJJ cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hreFJPVnBsMWQ1dzdOTUtyU2VtbjB1Yklydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUUxQi83NDk1MjUxNDdEMjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9oa3hST1ZwbDFk NXc3Tk1LclNlbW4wdWJJcncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKWDFA/eD+p4v6b9oPyI/gdNtIWat6Wa/U/rVRJZ8TqbCETEJYYNbEd6uVGjB Lvp2cwlivfXCyKX9Qr35W1LyiYPz1QsortsEN7EQ1TmhLC26eQLa7autfadnHzRa +7Jb1X84vy/lfkP0PR4RlNr4ZqbjYcqq7PHvUbwZbPz+4ZLkXzala3XzoDQSjgx5 +VHgxOSrWKOAjlC5x3bUtNeNtca+AYn8ZkaTZz99EjorOjwR5MgPQ8vB5kXEXfdj VU0JJUoUm52gvMHBToQHdy/xzkq2bOZXLPmm9nIAoAxQg2IiuW7DAFKFRqqxWZVJ QOmjz+15eUI5Sot85wYoKHpdIw== -----END CERTIFICATE-----Generated at Fri Apr 17 15:58:24 2026 by rpki-client