$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft File: hkxROVpl1d5w7NMKrSemn0ubIrw.mft (raw, json) Hash identifier: QKKf1NDxtt67Gm0D4Sp1MEtSzEMJrpDy0Z5UcZCUUSA= Subject key identifier: 19:21:4B:E4:D4:C8:81:D5:4A:18:A7:63:30:BA:84:E3:53:E1:C3:2D Authority key identifier: 86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC Certificate issuer: /CN=A9125E1B/serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft Manifest number: 01C7 Signing time: Sun 05 Apr 2026 03:15:35 +0000 Manifest this update: Sun 05 Apr 2026 03:15:35 +0000 Manifest next update: Sun 12 Apr 2026 03:15:35 +0000 Files and hashes: 1: hkxROVpl1d5w7NMKrSemn0ubIrw.crl (hash: wvqjJPbJgJf1s30ZirqvIDcwm1a54dqEZefvsoLz26Y=) 2: BA3E92207D2311EEA3696814C4F9AE02.roa (hash: JeqqccV0moh9xl5LOsL93SB6Ep+iaPUP/pq2BF+emVw=) 3: B9CAD7A47D2311EEA3696814C4F9AE02.roa (hash: n/+iSZ/XdamVp91QYBtpJ28J2tmDpxBk4yTTzrUUrg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125E1B, serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Validity Not Before: Apr 5 03:15:35 2026 GMT Not After : Apr 12 03:15:35 2026 GMT Subject: CN=69d1d3d7-d9b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:22:b7:c3:e6:92:0e:3c:7c:2a:47:0c:db:11: f0:c7:82:cf:27:99:16:c9:28:a7:9c:a9:91:19:8b: d2:32:36:ab:fc:c1:f6:a2:25:71:af:bc:b9:7e:2b: b8:2a:e4:5d:57:35:3b:e6:7d:ad:22:52:a6:6a:70: ee:9b:1e:d7:07:39:9c:cf:a6:95:a3:1c:61:a9:91: b4:12:3f:9f:a8:e2:61:11:86:ed:98:24:56:3d:a9: e8:b3:11:98:08:96:1f:e8:5a:b3:4c:00:fa:3d:b2: 54:22:d6:f8:dd:99:a0:55:44:00:13:88:5b:52:ff: e2:a0:22:db:b1:31:1d:69:45:cc:76:e3:43:8c:0b: 95:04:40:52:b6:22:1f:2c:83:e3:db:de:81:b6:b9: 7d:d5:e6:22:38:3b:28:c6:41:8e:47:17:c8:37:a0: d0:0c:4c:8e:e8:94:27:0f:36:02:bd:6c:5d:fe:70: a3:85:63:9d:c9:8d:45:43:c3:86:56:ea:73:d1:20: de:23:ee:e8:13:4a:de:41:98:a4:58:42:40:83:3a: a5:00:2b:3b:60:76:98:6b:92:21:b0:84:4c:50:57: 0c:17:a3:d7:fa:67:dd:87:4a:d2:41:d0:60:b2:d3: d7:e6:e8:41:ca:f1:5f:4b:3c:67:06:e8:e0:2b:54: 59:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:21:4B:E4:D4:C8:81:D5:4A:18:A7:63:30:BA:84:E3:53:E1:C3:2D X509v3 Authority Key Identifier: keyid:86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:d2:df:31:f1:23:56:11:21:95:f1:4e:4d:96:a1:01:24:06: ce:d8:f0:78:43:ee:01:78:ce:5c:36:c8:8c:03:73:26:0e:a4: 1b:68:e0:52:59:ef:ab:79:5d:57:b8:77:41:b3:8f:4d:c3:b6: 04:21:df:e1:38:9c:8d:5a:06:6f:fa:93:e1:49:d5:47:d8:09: 97:b7:1b:65:7b:a4:4f:78:c6:98:37:84:da:d6:d5:3a:34:46: 77:3d:70:dd:87:51:95:4e:02:cd:66:a6:4d:de:4f:57:a9:50: 49:03:94:5a:ce:e1:1d:d0:d2:52:37:4d:2f:75:85:81:f6:81: 6b:56:27:42:44:1a:88:c8:6a:57:ba:df:71:b1:1b:a6:db:22: bd:ad:10:f4:69:96:d0:b2:dc:b6:24:ce:f1:d5:ed:75:88:30: 6d:4b:32:b6:8a:2c:0d:a8:57:b5:08:d1:95:61:82:ce:47:11: d3:4f:d9:6a:98:a2:05:65:a5:64:20:ff:89:81:b1:af:29:45: 71:8e:74:9c:15:60:17:93:55:68:24:c9:55:f7:6e:a7:9a:24: 4b:7d:22:13:b4:24:ca:35:48:a8:ad:b2:9f:3a:ba:a3:4e:7f: 64:a2:5a:a4:10:03:14:81:d8:32:ed:ce:0f:8f:e1:25:93:ad: f7:06:e3:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVFMUIxMTAvBgNVBAUTKDg2NEM1MTM5NUE2NUQ1REU3MEVDRDMwQUFEMjdBNjlG NEI5QjIyQkMwHhcNMjYwNDA1MDMxNTM1WhcNMjYwNDEyMDMxNTM1WjAYMRYwFAYD VQQDEw02OWQxZDNkNy1kOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSK3w+aSDjx8KkcM2xHwx4LPJ5kWySinnKmRGYvSMjar/MH2oiVxr7y5fiu4 KuRdVzU75n2tIlKmanDumx7XBzmcz6aVoxxhqZG0Ej+fqOJhEYbtmCRWPanosxGY CJYf6FqzTAD6PbJUItb43ZmgVUQAE4hbUv/ioCLbsTEdaUXMduNDjAuVBEBStiIf LIPj296Btrl91eYiODsoxkGORxfIN6DQDEyO6JQnDzYCvWxd/nCjhWOdyY1FQ8OG Vupz0SDeI+7oE0reQZikWEJAgzqlACs7YHaYa5IhsIRMUFcMF6PX+mfdh0rSQdBg stPX5uhByvFfSzxnBujgK1RZnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBkhS+TU yIHVShinYzC6hONT4cMtMB8GA1UdIwQYMBaAFIZMUTlaZdXecOzTCq0npp9LmyK8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUUxQi83NDk1MjUxNDdE MjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9oa3hST1ZwbDFkNXc3Tk1LclNlbW4wdWJJ cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hreFJPVnBsMWQ1dzdOTUtyU2VtbjB1Yklydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUUxQi83NDk1MjUxNDdEMjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9oa3hST1ZwbDFk NXc3Tk1LclNlbW4wdWJJcncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABNLfMfEjVhEhlfFOTZahASQGztjweEPuAXjOXDbIjANzJg6kG2jgUlnvq3ld V7h3QbOPTcO2BCHf4TicjVoGb/qT4UnVR9gJl7cbZXukT3jGmDeE2tbVOjRGdz1w 3YdRlU4CzWamTd5PV6lQSQOUWs7hHdDSUjdNL3WFgfaBa1YnQkQaiMhqV7rfcbEb ptsiva0Q9GmW0LLctiTO8dXtdYgwbUsytoosDahXtQjRlWGCzkcR00/ZapiiBWWl ZCD/iYGxrylFcY50nBVgF5NVaCTJVfdup5okS30iE7QkyjVIqK2ynzq6o05/ZKJa pBADFIHYMu3OD4/hJZOt9wbjhA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:32:16 2026 by rpki-client