
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
File: hejumo0wUoWZBi0Iy5y51RPfa9c.mft (raw, json)
Hash identifier: m8o94bvsaQNPeytG9V/sKaSAr798pxNuAFOkZ8iHU1U=
Subject key identifier: 65:2E:97:33:A5:FA:E1:AC:63:20:B1:8B:51:CE:D0:04:04:54:27:25
Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Certificate serial: 016B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
Manifest number: 014F
Signing time: Tue 29 Sep 2026 05:49:03 +0000
Manifest this update: Tue 29 Sep 2026 05:49:02 +0000
Manifest next update: Tue 06 Oct 2026 05:49:02 +0000
Files and hashes: 1: hejumo0wUoWZBi0Iy5y51RPfa9c.crl (hash: jid2G+iuoEcWjgY62X1qVifE7Ik54I+DiK7wM+QmGT8=)
2: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (hash: M5DGOXJP2e8jtsaJQ/vq9iASwvCcNNyavpWr6WEN/BA=)
3: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (hash: gUcqtC95g/7PYjkg92p/7QAIqkLozNb3MYQLoLKJN7U=)
4: 1D79B286505111F1A6C3F8BB94833773.roa (hash: 3xKQOlORUB1srg8b9eZ+3Jlw2fisqPQnTL+nLDSZlQI=)
5: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (hash: 0ugNO0JFbaqHVmsAuT0FX27EtH3EefDNknaja626TkQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 05:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 363 (0x16b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Validity
Not Before: Sep 29 05:49:02 2026 GMT
Not After : Oct 6 05:49:02 2026 GMT
Subject: CN=6abb514f-1005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:47:99:52:39:fa:2f:8f:39:3d:2c:6a:02:92:
2e:bb:de:6b:22:9f:66:54:b6:af:f0:fe:0e:d0:c4:
c5:57:03:c7:a8:d9:17:4f:b7:e4:f7:82:bc:ea:6a:
cc:79:bc:de:59:bc:f0:6b:68:2e:11:67:d1:26:32:
37:9c:2c:e9:44:49:67:87:4f:d8:1b:2c:73:95:88:
78:38:f7:73:d3:ec:87:6e:a1:a2:3e:cb:cf:b6:07:
df:16:1c:1e:c2:cd:9b:0d:be:8f:ff:c5:d3:90:11:
6a:f8:e0:84:02:1b:36:97:91:a9:68:74:6e:88:39:
8d:2d:37:89:0c:88:83:13:84:3c:ca:e1:9b:f3:9b:
47:b8:ca:e2:5c:80:c4:f4:f8:64:1b:8f:38:d9:d6:
00:d5:9d:bc:ab:d4:7c:fe:5a:42:0e:58:31:df:1b:
5b:0f:75:2f:ee:c8:d4:ee:53:5c:93:c1:a8:ab:69:
04:a4:48:50:48:12:b7:c9:20:70:46:be:26:57:9d:
3c:ae:eb:fd:a4:29:5e:1f:33:22:d4:64:ee:30:7c:
48:0b:f2:14:1d:d5:eb:99:e9:9a:8e:a1:f3:58:fd:
5a:53:01:89:31:6c:2f:90:f0:ae:55:7e:bc:6a:f2:
db:fe:49:30:bd:5e:53:d5:d3:b0:ee:a6:ce:1b:f5:
70:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2E:97:33:A5:FA:E1:AC:63:20:B1:8B:51:CE:D0:04:04:54:27:25
X509v3 Authority Key Identifier:
keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d2:84:97:b1:10:f1:19:9c:88:67:13:b5:b1:7c:bf:77:f1:
c3:31:73:29:5b:45:b5:82:58:f3:81:94:3f:74:d5:d4:00:ac:
fd:da:86:2b:e0:e2:70:e3:b2:aa:d4:a0:6b:c7:14:14:4d:1e:
0a:14:f4:0e:24:81:90:b6:c4:5b:13:d0:7e:6c:e9:a1:64:7c:
1d:81:f6:81:b1:45:7c:58:f6:e8:a2:49:a4:73:1a:70:0b:c0:
3c:06:c7:fd:32:ed:d8:de:f8:ec:7f:69:df:3a:02:33:7c:a7:
01:3d:51:3b:57:c5:26:27:23:8c:41:dc:6f:62:a2:d4:2a:a8:
c9:44:ac:26:f4:c0:66:6e:a9:14:72:9d:ef:35:71:c3:aa:cb:
ff:f8:77:60:67:98:ab:79:bb:c6:9a:f8:b3:1b:32:e1:4f:01:
b7:98:62:82:c9:64:b5:c2:35:af:d1:02:d5:76:a5:ba:95:da:
73:a0:0d:8b:24:15:be:47:b3:7b:b4:2c:1f:de:e6:47:36:3d:
90:df:28:48:f6:eb:7e:31:01:65:fd:7d:99:16:3a:90:02:0c:
05:e3:8d:55:a2:0d:1c:ae:fc:6e:ad:96:0b:80:f6:44:b1:85:
72:ef:fa:f5:32:d7:75:ca:49:d8:9a:dc:a1:b2:ea:47:3d:de:
1c:37:04:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:17:44 2026 by rpki-client