$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft File: hkxROVpl1d5w7NMKrSemn0ubIrw.mft (raw, json) Hash identifier: qYThrK/HndSic93yENQnIs7HHyDuRW/PIwfbgf+Dp0I= Subject key identifier: FB:F5:4E:21:CB:A2:EB:00:98:62:32:6C:76:EF:FE:36:66:62:C4:2E Authority key identifier: 86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC Certificate issuer: /CN=A9125E1B/serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Certificate serial: 0239 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft Manifest number: 022D Signing time: Sun 25 Oct 2026 03:04:42 +0000 Manifest this update: Sun 25 Oct 2026 03:04:42 +0000 Manifest next update: Sun 01 Nov 2026 03:04:42 +0000 Files and hashes: 1: hkxROVpl1d5w7NMKrSemn0ubIrw.crl (hash: cCLNXxXWw/XSY1YzQzCP9g7LldNuDvY333eoIjVNp3E=) 2: B9CAD7A47D2311EEA3696814C4F9AE02.roa (hash: n/+iSZ/XdamVp91QYBtpJ28J2tmDpxBk4yTTzrUUrg0=) 3: BA3E92207D2311EEA3696814C4F9AE02.roa (hash: JeqqccV0moh9xl5LOsL93SB6Ep+iaPUP/pq2BF+emVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 03:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 569 (0x239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125E1B, serialNumber=864C51395A65D5DE70ECD30AAD27A69F4B9B22BC Validity Not Before: Oct 25 03:04:42 2026 GMT Not After : Nov 1 03:04:42 2026 GMT Subject: CN=6add71ca-90db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:50:dc:25:07:6e:ab:72:2e:cd:77:bc:18:ac: b3:e6:26:67:32:0c:81:69:a0:a7:39:73:25:e7:54: e3:1c:e4:9b:4e:8a:c9:55:eb:0e:8c:54:90:f8:43: 91:71:9e:dc:ab:15:68:33:89:71:88:ae:b0:c3:bc: fa:21:43:60:01:d3:fd:d2:f3:9c:0c:64:31:11:1e: 35:e0:5b:5c:86:e5:6c:1d:f7:6a:25:00:c7:ef:37: df:d7:56:fd:3c:c0:a0:eb:f1:9c:04:65:ea:a4:9d: 05:a6:06:71:33:72:46:70:e8:84:67:f7:01:31:82: 8d:c7:f7:f3:5a:38:5a:82:99:95:0b:22:50:80:a6: a0:00:bb:0a:a5:a7:80:48:63:c0:6c:9d:59:95:df: 5b:44:d6:2e:bb:a0:99:39:18:cc:ec:df:e6:bb:22: af:59:c8:76:28:9d:bc:61:2c:30:19:b9:ac:6c:02: ff:78:69:88:64:a1:53:2e:3f:ee:d6:98:51:16:51: dd:d4:e1:10:ff:63:c6:3f:9b:d3:16:c8:6c:18:a8: 98:72:04:b2:52:35:18:3f:c4:db:91:7e:fa:bf:f0: cd:0e:41:9a:3f:fa:9e:ee:3c:84:91:14:34:95:11: 7d:5e:23:0c:c1:94:fc:3e:83:a9:c0:1e:01:f8:57: 90:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F5:4E:21:CB:A2:EB:00:98:62:32:6C:76:EF:FE:36:66:62:C4:2E X509v3 Authority Key Identifier: keyid:86:4C:51:39:5A:65:D5:DE:70:EC:D3:0A:AD:27:A6:9F:4B:9B:22:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkxROVpl1d5w7NMKrSemn0ubIrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E1B/749525147D2211EEA7B07460C4F9AE02/hkxROVpl1d5w7NMKrSemn0ubIrw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:d7:59:59:bc:5a:fd:40:7b:e2:14:e2:1e:7a:b8:4f:bc:ad: 1e:4a:ea:f2:1f:52:f0:9d:92:3a:15:63:8f:02:98:a9:fb:c6: ae:09:4d:9f:3a:3c:a5:3e:1d:fa:44:34:a2:ed:b2:ce:f3:a5: 9d:20:05:23:69:3d:f5:e8:19:32:aa:a7:90:cd:d7:cc:b4:b9: 7e:4d:61:08:6d:ca:61:be:36:eb:16:5e:be:d4:20:52:9b:61: 3a:3b:ff:7b:6b:04:7b:f1:42:1f:6f:1f:c0:83:b0:9a:8f:bf: af:dc:48:e3:31:a7:e9:2f:48:e7:34:3f:34:cd:85:b3:e9:2a: b3:47:19:82:62:bf:e8:18:eb:6e:f3:a6:fe:62:22:a5:fd:f9: 80:65:83:06:63:09:d8:53:24:e1:1f:38:08:64:f0:d5:9c:5a: 18:3a:38:87:15:28:ba:7d:b9:cb:f3:b6:ad:b8:a1:b4:51:f4: a6:4b:98:d9:84:81:2c:3f:ef:e7:2f:bf:cf:4a:29:df:6d:2c: e6:cc:ae:d3:95:55:30:0a:83:db:fe:86:b0:9b:f9:43:54:32: 3d:17:d6:a8:d0:56:d9:0e:82:4b:04:03:a5:6d:e6:63:dd:e9: a9:ca:f7:bb:06:a5:89:44:50:e1:25:8a:61:39:68:66:21:89: 07:cd:c9:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVFMUIxMTAvBgNVBAUTKDg2NEM1MTM5NUE2NUQ1REU3MEVDRDMwQUFEMjdBNjlG NEI5QjIyQkMwHhcNMjYxMDI1MDMwNDQyWhcNMjYxMTAxMDMwNDQyWjAYMRYwFAYD VQQDEw02YWRkNzFjYS05MGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1DcJQduq3IuzXe8GKyz5iZnMgyBaaCnOXMl51TjHOSbTorJVesOjFSQ+EOR cZ7cqxVoM4lxiK6ww7z6IUNgAdP90vOcDGQxER414FtchuVsHfdqJQDH7zff11b9 PMCg6/GcBGXqpJ0FpgZxM3JGcOiEZ/cBMYKNx/fzWjhagpmVCyJQgKagALsKpaeA SGPAbJ1Zld9bRNYuu6CZORjM7N/muyKvWch2KJ28YSwwGbmsbAL/eGmIZKFTLj/u 1phRFlHd1OEQ/2PGP5vTFshsGKiYcgSyUjUYP8TbkX76v/DNDkGaP/qe7jyEkRQ0 lRF9XiMMwZT8PoOpwB4B+FeQywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPv1TiHL ousAmGIybHbv/jZmYsQuMB8GA1UdIwQYMBaAFIZMUTlaZdXecOzTCq0npp9LmyK8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUUxQi83NDk1MjUxNDdE MjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9oa3hST1ZwbDFkNXc3Tk1LclNlbW4wdWJJ cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hreFJPVnBsMWQ1dzdOTUtyU2VtbjB1Yklydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUUxQi83NDk1MjUxNDdEMjIxMUVFQTdCMDc0NjBDNEY5QUUwMi9oa3hST1ZwbDFk NXc3Tk1LclNlbW4wdWJJcncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIddZWbxa/UB74hTiHnq4T7ytHkrq8h9S8J2SOhVjjwKYqfvGrglNnzo8pT4d +kQ0ou2yzvOlnSAFI2k99egZMqqnkM3XzLS5fk1hCG3KYb426xZevtQgUpthOjv/ e2sEe/FCH28fwIOwmo+/r9xI4zGn6S9I5zQ/NM2Fs+kqs0cZgmK/6BjrbvOm/mIi pf35gGWDBmMJ2FMk4R84CGTw1ZxaGDo4hxUoun25y/O2rbihtFH0pkuY2YSBLD/v 5y+/z0op320s5syu05VVMAqD2/6GsJv5Q1QyPRfWqNBW2Q6CSwQDpW3mY93pqcr3 uwaliURQ4SWKYTloZiGJB83JFA== -----END CERTIFICATE-----Generated at Sun Oct 25 14:37:17 2026 by rpki-client