
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
File: hejumo0wUoWZBi0Iy5y51RPfa9c.mft (raw, json)
Hash identifier: l5kMHpyowP4M+l5rXB4poROfpM1voBZMZ2BYBwjL8dQ=
Subject key identifier: BE:36:63:93:28:4F:1A:01:0B:11:68:6D:F0:B0:0E:35:06:FF:C8:12
Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Certificate serial: 0148
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
Manifest number: 012C
Signing time: Thu 23 Jul 2026 07:23:20 +0000
Manifest this update: Thu 23 Jul 2026 07:23:20 +0000
Manifest next update: Thu 30 Jul 2026 07:23:20 +0000
Files and hashes: 1: hejumo0wUoWZBi0Iy5y51RPfa9c.crl (hash: QBSw4WN//+VQ7JwyH+hDMgNIcx56ZXczdw30Bq0817E=)
2: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (hash: 0ugNO0JFbaqHVmsAuT0FX27EtH3EefDNknaja626TkQ=)
3: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (hash: gUcqtC95g/7PYjkg92p/7QAIqkLozNb3MYQLoLKJN7U=)
4: 1D79B286505111F1A6C3F8BB94833773.roa (hash: 3xKQOlORUB1srg8b9eZ+3Jlw2fisqPQnTL+nLDSZlQI=)
5: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (hash: M5DGOXJP2e8jtsaJQ/vq9iASwvCcNNyavpWr6WEN/BA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:23:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Validity
Not Before: Jul 23 07:23:20 2026 GMT
Not After : Jul 30 07:23:20 2026 GMT
Subject: CN=6a61c168-9220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:d5:97:ae:ef:54:25:72:3d:72:19:de:82:
fb:f2:61:20:e4:fc:ec:2f:1a:7f:f2:53:1a:66:52:
02:de:24:e0:16:67:25:a5:f2:9a:d2:a2:df:d5:db:
38:c1:fd:79:0d:45:a0:b4:49:6b:6c:e9:6c:84:f5:
5a:0e:bf:87:12:40:65:c8:8c:fe:12:e2:c7:4f:04:
cd:b4:0d:1e:e7:2e:0d:b1:17:cb:7c:ce:5e:da:76:
37:63:ec:19:96:a4:29:08:08:4c:fe:bf:c2:25:ca:
16:94:dd:fd:0b:3b:92:27:50:3f:37:bb:b9:9d:9c:
c2:24:8c:83:d1:6d:fe:10:05:fd:b1:00:80:ad:9f:
7f:3d:3f:6e:35:5d:d4:0c:4d:84:49:09:bf:99:e0:
78:4e:76:bd:e5:0f:54:02:51:37:98:e1:bb:3d:e5:
0a:97:2a:79:02:35:93:f5:81:da:ab:4f:c9:df:03:
a1:1d:2e:91:96:eb:1f:9f:03:36:e7:d1:67:ea:56:
18:8d:cb:8b:23:30:6a:86:e5:e9:65:62:12:79:f0:
31:ff:77:70:50:74:62:ab:0f:ee:b8:71:b8:f0:25:
be:10:d0:00:c5:24:ec:ad:c2:b8:6e:ae:c4:4c:93:
3a:91:ac:a1:d2:be:12:7e:91:55:2e:3b:de:0c:a6:
38:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:36:63:93:28:4F:1A:01:0B:11:68:6D:F0:B0:0E:35:06:FF:C8:12
X509v3 Authority Key Identifier:
keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:3e:ce:75:56:c4:25:b2:b9:10:a7:0d:80:1a:32:16:b2:31:
7d:aa:45:4d:66:da:09:54:6f:5f:85:47:ad:d9:67:0f:c8:57:
5c:fd:7d:3f:1e:d0:27:d1:c0:22:4a:c6:eb:77:90:b9:1d:45:
7e:76:27:87:8f:3c:44:bc:bc:49:31:f1:4b:84:bf:3e:91:d6:
17:1b:a7:28:38:80:2e:5a:79:ee:78:e5:27:fe:71:75:37:99:
ca:6c:8b:d5:4f:c4:9a:f1:80:98:85:3f:4f:fd:cc:08:a6:25:
f1:63:fe:b0:7c:a1:75:37:6d:c4:a9:14:71:06:d5:22:96:6e:
46:96:48:95:61:d5:ae:96:bf:b5:6e:7d:59:98:55:33:d7:d4:
80:39:d3:e1:f5:11:a2:16:2a:02:5a:b9:12:ed:86:76:28:56:
35:67:c5:19:d2:9b:10:db:3e:05:62:1a:c0:1c:d4:40:19:d2:
65:db:af:e0:1a:90:ab:b6:a2:35:9f:f9:aa:bd:af:87:16:e8:
73:3e:bc:83:5b:e8:b8:67:57:5c:5b:20:31:6e:12:a4:3c:02:
87:9e:02:f0:66:da:a0:64:f3:0f:54:5b:e4:d8:76:5f:ab:7e:
1c:bf:b4:09:af:5e:2e:35:f1:ed:4b:22:04:4b:4c:fe:9c:88:
a5:6c:21:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA4QTUxMTAvBgNVBAUTKDg1RThFRTlBOEQzMDUyODU5OTA2MkQwOENCOUNCOUQ1
MTNERjZCRDcwHhcNMjYwNzIzMDcyMzIwWhcNMjYwNzMwMDcyMzIwWjAYMRYwFAYD
VQQDEw02YTYxYzE2OC05MjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvJfVl67vVCVyPXIZ3oL78mEg5PzsLxp/8lMaZlIC3iTgFmclpfKa0qLf1ds4
wf15DUWgtElrbOlshPVaDr+HEkBlyIz+EuLHTwTNtA0e5y4NsRfLfM5e2nY3Y+wZ
lqQpCAhM/r/CJcoWlN39CzuSJ1A/N7u5nZzCJIyD0W3+EAX9sQCArZ9/PT9uNV3U
DE2ESQm/meB4Tna95Q9UAlE3mOG7PeUKlyp5AjWT9YHaq0/J3wOhHS6RlusfnwM2
59Fn6lYYjcuLIzBqhuXpZWISefAx/3dwUHRiqw/uuHG48CW+ENAAxSTsrcK4bq7E
TJM6kayh0r4SfpFVLjveDKY4wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL42Y5Mo
TxoBCxFobfCwDjUG/8gSMB8GA1UdIwQYMBaAFIXo7pqNMFKFmQYtCMucudUT32vX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDhBNS9EMTUwMzEzNkM5
MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1VvV1pCaTBJeTV5NTFSUGZh
OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hlanVtbzB3VW9XWkJpMEl5NXk1MVJQZmE5Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDhBNS9EMTUwMzEzNkM5MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1Vv
V1pCaTBJeTV5NTFSUGZhOWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKT7OdVbEJbK5EKcNgBoyFrIxfapFTWbaCVRvX4VHrdlnD8hXXP19Px7QJ9HA
IkrG63eQuR1FfnYnh488RLy8STHxS4S/PpHWFxunKDiALlp57njlJ/5xdTeZymyL
1U/EmvGAmIU/T/3MCKYl8WP+sHyhdTdtxKkUcQbVIpZuRpZIlWHVrpa/tW59WZhV
M9fUgDnT4fURohYqAlq5Eu2GdihWNWfFGdKbENs+BWIawBzUQBnSZduv4BqQq7ai
NZ/5qr2vhxbocz68g1vouGdXXFsgMW4SpDwCh54C8GbaoGTzD1Rb5Nh2X6t+HL+0
Ca9eLjXx7UsiBEtM/pyIpWwhvQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:12:34 2026 by rpki-client