$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft File: hejumo0wUoWZBi0Iy5y51RPfa9c.mft (raw, json) Hash identifier: /riSrq7gmBZowkJF+F9V2gCvkeJK2oE8aAAhHa4ap1c= Subject key identifier: CB:7C:0D:3A:41:54:E7:4E:16:AB:4D:53:2E:8D:C2:4D:04:B1:6F:59 Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft Manifest number: 61 Signing time: Tue 01 Jul 2025 07:50:57 +0000 Manifest this update: Tue 01 Jul 2025 07:50:57 +0000 Manifest next update: Tue 08 Jul 2025 07:50:56 +0000 Files and hashes: 1: hejumo0wUoWZBi0Iy5y51RPfa9c.crl (hash: eh70LlfN4s/LKU3+6Wsxt+o18Gs06o4S1gWPYUkdR6Q=) 2: E24B9ECE152B11F0A742CE86C4F9AE02.roa (hash: 3Rxi2WwZpfu8F7jhnMuFGFa5sVmkxpF3HfYHLo71KOI=) 3: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (hash: LPMf8e8oe7ripTj9cOjgsGbklShL3L+ImY+41IEZRaQ=) 4: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (hash: smhXonMxctlF/fMtWQXaFUBBXx8Ym0WOVFbM4hK9hVk=) 5: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (hash: HYfNBrw+oBYJTv3EK6ZW0QGVMQFBO/Tp09If6c2XiUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7 Validity Not Before: Jul 1 07:50:57 2025 GMT Not After : Jul 8 07:50:56 2025 GMT Subject: CN=68639361-195b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:48:11:d3:ca:3e:5c:68:91:f5:cb:c3:63:92: b7:bf:aa:90:45:57:68:20:c0:f3:6b:9f:da:a7:e9: e9:a9:65:53:ac:e3:20:3a:d5:73:02:42:cb:36:74: 4a:c6:92:61:76:35:cb:8f:55:10:f1:92:29:c9:a7: bc:4e:bd:9c:4d:07:8d:67:c1:03:b6:1f:ee:11:70: b8:53:00:eb:ca:d6:25:d4:cb:60:46:fb:c2:31:be: f2:7b:a9:5f:b4:03:95:d9:94:dc:44:a4:6e:3b:aa: 6c:c0:4e:f9:d2:b4:5b:55:91:c7:2a:69:a0:b2:47: 82:f0:21:c9:0d:3c:a0:03:b9:37:0a:af:0a:34:b3: ac:5f:53:33:45:d7:63:2a:5b:8d:07:1d:9b:1a:33: 68:84:c7:4c:1b:64:b7:5f:ee:c6:c0:23:68:9f:b6: 69:27:b5:5d:11:07:68:3a:f3:36:18:48:f4:77:48: ab:27:3d:91:3e:d6:f7:46:bb:48:08:e6:57:91:14: 9c:33:94:0e:cf:84:13:bf:db:ee:23:83:d3:b3:b5: 12:3a:73:4b:45:69:e1:a6:2c:4e:2e:59:5b:37:92: 66:f5:61:2c:7e:7e:3c:86:d5:e1:f0:9c:ac:16:ea: a2:79:5d:71:63:13:82:5c:11:3c:b4:c2:60:9d:98: 0f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7C:0D:3A:41:54:E7:4E:16:AB:4D:53:2E:8D:C2:4D:04:B1:6F:59 X509v3 Authority Key Identifier: keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:4f:22:ef:08:12:6c:03:63:c2:1c:ee:70:90:d6:64:15:4d: f3:b2:dd:c7:88:56:9f:9f:6d:7a:67:a6:67:04:77:b4:ef:ec: 38:d6:ab:43:dd:e5:73:83:4e:55:53:33:05:db:2f:95:5b:3a: 1e:eb:4b:f7:b1:f5:9b:43:a4:f7:56:c4:0d:25:ad:cd:98:a3: 14:17:79:96:5c:c7:6b:36:2d:07:1a:91:82:80:bc:a3:93:68: 0c:6f:27:e8:32:8b:68:f2:1e:18:29:d6:4d:4f:e1:e7:dc:60: 3f:c5:1e:38:b8:cb:80:d8:7f:9a:31:24:a2:a2:1f:03:02:f1: a0:51:f4:53:51:7f:ad:b9:c1:3c:15:cd:a2:27:25:d0:ea:9a: 3e:df:97:c5:5d:ca:28:fc:19:eb:a2:f3:02:7d:12:3b:44:ca: ef:39:a4:fe:f8:b5:05:e1:92:e0:d8:2a:0b:33:d8:2c:a5:52: 8d:49:98:56:8b:1f:c3:fb:fc:ac:7b:d1:d2:75:c8:e8:26:44: 45:d8:f7:ab:d5:f6:56:8c:3f:9a:55:2d:2d:77:cc:64:a2:4b: a1:76:6d:75:e0:17:5b:5d:11:aa:d3:97:2e:76:19:5c:53:20: 1f:4f:60:36:93:fa:b6:6d:6c:b0:64:9f:27:ac:0e:0e:52:7f: 50:7b:72:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDhBNTExMC8GA1UEBRMoODVFOEVFOUE4RDMwNTI4NTk5MDYyRDA4Q0I5Q0I5RDUx M0RGNkJENzAeFw0yNTA3MDEwNzUwNTdaFw0yNTA3MDgwNzUwNTZaMBgxFjAUBgNV BAMTDTY4NjM5MzYxLTE5NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfSBHTyj5caJH1y8Njkre/qpBFV2ggwPNrn9qn6empZVOs4yA61XMCQss2dErG kmF2NcuPVRDxkinJp7xOvZxNB41nwQO2H+4RcLhTAOvK1iXUy2BG+8IxvvJ7qV+0 A5XZlNxEpG47qmzATvnStFtVkccqaaCyR4LwIckNPKADuTcKrwo0s6xfUzNF12Mq W40HHZsaM2iEx0wbZLdf7sbAI2iftmkntV0RB2g68zYYSPR3SKsnPZE+1vdGu0gI 5leRFJwzlA7PhBO/2+4jg9OztRI6c0tFaeGmLE4uWVs3kmb1YSx+fjyG1eHwnKwW 6qJ5XXFjE4JcETy0wmCdmA/vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUy3wNOkFU 504Wq01TLo3CTQSxb1kwHwYDVR0jBBgwFoAUhejumo0wUoWZBi0Iy5y51RPfa9cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOEE1L0QxNTAzMTM2Qzkx QjExRUY4ODdENkYyQ0M0RjlBRTAyL2hlanVtbzB3VW9XWkJpMEl5NXk1MVJQZmE5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGVqdW1vMHdVb1daQmkwSXk1eTUxUlBmYTljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw OEE1L0QxNTAzMTM2QzkxQjExRUY4ODdENkYyQ0M0RjlBRTAyL2hlanVtbzB3VW9X WkJpMEl5NXk1MVJQZmE5Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADRPIu8IEmwDY8Ic7nCQ1mQVTfOy3ceIVp+fbXpnpmcEd7Tv7DjWq0Pd 5XODTlVTMwXbL5VbOh7rS/ex9ZtDpPdWxA0lrc2YoxQXeZZcx2s2LQcakYKAvKOT aAxvJ+gyi2jyHhgp1k1P4efcYD/FHji4y4DYf5oxJKKiHwMC8aBR9FNRf625wTwV zaInJdDqmj7fl8Vdyij8Geui8wJ9EjtEyu85pP74tQXhkuDYKgsz2CylUo1JmFaL H8P7/Kx70dJ1yOgmREXY96vV9laMP5pVLS13zGSiS6F2bXXgF1tdEarTly52GVxT IB9PYDaT+rZtbLBknyesDg5Sf1B7clw= -----END CERTIFICATE-----Generated at Wed Jul 2 19:55:14 2025 by rpki-client