$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft File: hejumo0wUoWZBi0Iy5y51RPfa9c.mft (raw, json) Hash identifier: EmGdOHLk9ZMHNdnt8C8O7NJUCrt+qVcsnathFJAiKv4= Subject key identifier: 73:DF:27:41:F7:12:7A:8B:C0:52:01:DD:0D:8D:91:5A:9C:76:28:90 Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft Manifest number: EA Signing time: Wed 25 Mar 2026 05:38:27 +0000 Manifest this update: Wed 25 Mar 2026 05:38:26 +0000 Manifest next update: Wed 01 Apr 2026 05:38:26 +0000 Files and hashes: 1: hejumo0wUoWZBi0Iy5y51RPfa9c.crl (hash: 8brPr2qdmfPMT2tyutOeavR5Dnjw/UakSQye7ShkqpU=) 2: E24B9ECE152B11F0A742CE86C4F9AE02.roa (hash: dv0jyH5SUQRhVHKrDemhfUr6t0VsYEFlqz2wf8kFRqM=) 3: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (hash: 9ccYCAGywOpI3Ngw5Xg7sr3eIj39IizVDSsoN3RDO9w=) 4: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (hash: YWJ03eczjPT20FOiBzL6QwaUBYD1U8rRundkIkTarnY=) 5: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (hash: bSkYTFB0UsXdnNdZTRnK8kVgujK8Jo5X2o57i26bETE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7 Validity Not Before: Mar 25 05:38:26 2026 GMT Not After : Apr 1 05:38:26 2026 GMT Subject: CN=69c374d2-4443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e5:d9:d7:e7:a1:35:8d:06:19:1a:fb:f1:f1: 84:a7:a9:11:04:a5:ae:73:22:f3:5e:8c:2b:74:78: d3:c9:9b:2c:68:ca:d1:f4:42:95:04:25:1c:d2:1b: 02:e0:98:f1:58:0e:ab:f6:ee:b2:7e:ad:52:62:97: ed:0b:64:7d:bf:c3:56:6a:cb:57:e1:17:d5:d9:a6: 9a:ff:ab:1c:ff:34:f2:b4:11:db:3a:87:9d:13:96: c1:ba:5b:80:ab:11:45:fd:ba:85:0a:8a:a5:f8:a6: 71:08:81:12:5a:27:99:63:1b:d9:a4:f5:d6:e9:89: 51:fc:df:c2:eb:9f:1c:59:1c:3e:f3:56:91:42:d5: ed:0e:21:c0:2b:8b:39:5d:0e:76:da:f5:68:85:4f: 38:8c:77:c7:95:2d:a8:6d:c8:1a:6b:78:e4:ba:90: 9b:c4:55:25:78:3f:12:e0:55:5f:1c:56:29:2b:68: 14:c6:85:de:59:34:aa:5b:99:15:05:2c:de:9e:1e: 4d:65:a4:60:4c:b0:ab:2b:26:c3:9b:66:e2:d7:81: 5d:a8:82:67:ce:93:99:17:30:b9:96:5f:ed:68:33: 31:32:05:30:11:b9:28:17:40:48:a7:9f:58:f9:f7: 6c:87:e9:75:c9:35:6f:ed:46:b0:11:b7:f9:b6:7d: bd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DF:27:41:F7:12:7A:8B:C0:52:01:DD:0D:8D:91:5A:9C:76:28:90 X509v3 Authority Key Identifier: keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:df:54:4f:19:41:93:1c:63:4a:05:75:61:66:13:bd:2a:93: 69:3f:73:c6:c4:f9:e2:bf:a2:de:90:40:f9:60:3e:b7:28:1b: c5:a7:03:2a:c0:2a:79:30:6c:e7:79:95:a5:71:05:d2:7a:46: af:c0:30:ba:68:c1:fd:da:88:89:6d:ba:bd:b7:08:9a:dc:7c: d1:8a:d5:10:a8:0e:04:c9:ab:a5:98:a6:1a:03:83:27:39:c5: df:46:19:4f:79:68:33:47:97:da:05:13:1a:06:fe:82:b9:96: c6:2f:60:8a:76:c0:e7:0f:b9:7d:fb:04:76:e7:22:a3:56:07: 6a:82:24:b4:b3:73:85:7d:31:2e:10:74:1d:56:a4:fb:54:d1: 37:50:40:f2:42:84:af:0c:0c:83:17:e8:2a:dc:3b:0f:0e:58: 13:9c:e4:a0:75:aa:77:8b:b8:8e:71:61:29:6c:73:19:6b:ab: b3:0e:53:4a:71:31:2e:de:b1:5d:5b:0e:49:c3:fd:88:c2:92: 88:4b:27:27:be:9c:4c:ee:b3:2b:f2:27:31:88:c9:cb:72:b0: 35:ae:06:0e:a3:cc:c1:d8:89:6a:2e:92:80:7e:58:cf:c5:db: f3:25:f7:b1:f0:37:35:1f:41:e8:84:77:7d:5c:5e:9e:05:86: c9:ec:33:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA4QTUxMTAvBgNVBAUTKDg1RThFRTlBOEQzMDUyODU5OTA2MkQwOENCOUNCOUQ1 MTNERjZCRDcwHhcNMjYwMzI1MDUzODI2WhcNMjYwNDAxMDUzODI2WjAYMRYwFAYD VQQDEw02OWMzNzRkMi00NDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eXZ1+ehNY0GGRr78fGEp6kRBKWucyLzXowrdHjTyZssaMrR9EKVBCUc0hsC 4JjxWA6r9u6yfq1SYpftC2R9v8NWastX4RfV2aaa/6sc/zTytBHbOoedE5bBuluA qxFF/bqFCoql+KZxCIESWieZYxvZpPXW6YlR/N/C658cWRw+81aRQtXtDiHAK4s5 XQ522vVohU84jHfHlS2obcgaa3jkupCbxFUleD8S4FVfHFYpK2gUxoXeWTSqW5kV BSzenh5NZaRgTLCrKybDm2bi14FdqIJnzpOZFzC5ll/taDMxMgUwEbkoF0BIp59Y +fdsh+l1yTVv7UawEbf5tn29CwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHPfJ0H3 EnqLwFIB3Q2NkVqcdiiQMB8GA1UdIwQYMBaAFIXo7pqNMFKFmQYtCMucudUT32vX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDhBNS9EMTUwMzEzNkM5 MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1VvV1pCaTBJeTV5NTFSUGZh OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlanVtbzB3VW9XWkJpMEl5NXk1MVJQZmE5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDhBNS9EMTUwMzEzNkM5MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1Vv V1pCaTBJeTV5NTFSUGZhOWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATd9UTxlBkxxjSgV1YWYTvSqTaT9zxsT54r+i3pBA+WA+tygbxacDKsAqeTBs 53mVpXEF0npGr8AwumjB/dqIiW26vbcImtx80YrVEKgOBMmrpZimGgODJznF30YZ T3loM0eX2gUTGgb+grmWxi9ginbA5w+5ffsEducio1YHaoIktLNzhX0xLhB0HVak +1TRN1BA8kKErwwMgxfoKtw7Dw5YE5zkoHWqd4u4jnFhKWxzGWursw5TSnExLt6x XVsOScP9iMKSiEsnJ76cTO6zK/InMYjJy3KwNa4GDqPMwdiJai6SgH5Yz8Xb8yX3 sfA3NR9B6IR3fVxengWGyewz/A== -----END CERTIFICATE-----Generated at Thu Mar 26 04:15:13 2026 by rpki-client