
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
File: hejumo0wUoWZBi0Iy5y51RPfa9c.mft (raw, json)
Hash identifier: hDpGX+WdOh8pCrue4d37JYHOuMjcR6iGb7nrAKL9/Ng=
Subject key identifier: 68:DE:A5:E7:E6:A7:8C:FE:CF:F2:AB:9D:C0:9D:C1:41:D6:F0:3D:78
Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Certificate serial: 0106
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
Manifest number: F0
Signing time: Sun 05 Apr 2026 05:45:39 +0000
Manifest this update: Sun 05 Apr 2026 05:45:38 +0000
Manifest next update: Sun 12 Apr 2026 05:45:38 +0000
Files and hashes: 1: hejumo0wUoWZBi0Iy5y51RPfa9c.crl (hash: 7W+IcERTgRypjLjYORlPQOmrcFeWMWNW3VWrWOYWhvM=)
2: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (hash: 9ccYCAGywOpI3Ngw5Xg7sr3eIj39IizVDSsoN3RDO9w=)
3: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (hash: YWJ03eczjPT20FOiBzL6QwaUBYD1U8rRundkIkTarnY=)
4: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (hash: bSkYTFB0UsXdnNdZTRnK8kVgujK8Jo5X2o57i26bETE=)
5: E24B9ECE152B11F0A742CE86C4F9AE02.roa (hash: dv0jyH5SUQRhVHKrDemhfUr6t0VsYEFlqz2wf8kFRqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:45:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Validity
Not Before: Apr 5 05:45:38 2026 GMT
Not After : Apr 12 05:45:38 2026 GMT
Subject: CN=69d1f703-6ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:40:34:de:43:d3:d4:b3:c5:54:40:e9:a9:
98:a9:af:9a:78:74:a2:eb:45:a1:dd:0b:2e:50:a2:
d6:bd:d5:57:8f:53:a8:55:49:87:e6:5d:c0:5f:5a:
8e:20:b4:3b:50:73:7f:f9:f7:65:7d:eb:67:4b:07:
e5:15:8a:36:a4:e9:4e:c8:5a:92:b9:96:14:8d:3b:
3f:2d:e3:f7:45:47:64:10:3d:f2:a8:fa:0b:26:4f:
00:6e:39:4c:16:ed:00:b6:39:ee:8f:13:45:7f:d2:
73:70:05:27:1f:96:5e:10:b0:0b:5b:0b:81:fe:bb:
4a:0e:8d:9f:c0:03:3e:43:28:2d:af:0c:0f:9a:eb:
87:42:5d:9f:9f:cb:ed:cb:ae:b8:57:03:16:27:4a:
b8:fa:51:4a:92:4b:12:e2:43:a1:de:36:2b:95:83:
30:26:f5:85:3e:39:3c:51:12:1d:df:2a:5b:b4:04:
19:fe:33:9f:0d:f1:df:48:a5:75:50:62:0f:f5:5a:
bc:b2:8c:3a:8d:6c:6a:f8:7c:45:9a:f6:04:14:20:
d9:61:0f:57:f6:28:a4:0c:42:d5:7b:55:3d:e1:a6:
7a:47:c3:c6:10:f2:54:55:59:94:51:5c:32:28:6d:
75:6a:da:0c:57:c9:02:fc:b9:45:82:3b:f6:75:40:
d8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DE:A5:E7:E6:A7:8C:FE:CF:F2:AB:9D:C0:9D:C1:41:D6:F0:3D:78
X509v3 Authority Key Identifier:
keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:61:86:f3:37:f5:9e:2a:f3:f5:ea:a1:d4:d5:5e:d1:8d:54:
9a:93:17:33:88:ec:ca:c8:91:cc:b2:b6:75:d2:0d:96:a2:08:
59:c0:ef:ef:95:8b:87:17:af:ae:f8:c4:db:a5:95:66:8c:3e:
39:10:90:a8:55:c4:84:ab:11:4e:98:3f:75:45:1c:dc:bc:2e:
8a:8e:a6:f9:f6:3f:25:c7:db:3f:b6:dc:d8:c4:45:29:cb:a8:
64:93:3a:65:8f:e0:73:08:90:72:09:52:e3:67:ac:9b:38:91:
b9:65:a1:20:c7:01:c7:dd:1e:cb:07:48:aa:59:4f:2a:71:bd:
ce:27:97:be:4f:37:8e:0c:e2:f8:b6:3b:3b:2d:44:a3:43:34:
fe:35:8e:b7:d0:3f:f2:ca:2d:e5:e1:ff:52:2c:b8:7a:c3:f7:
8b:98:df:8d:05:88:42:03:9c:5c:6d:b9:be:ba:a9:3f:eb:b3:
1f:44:8a:78:12:86:47:22:c4:86:e6:22:40:fc:96:23:fb:ef:
31:6a:63:0b:71:1c:df:12:14:3c:57:ee:36:cf:8a:11:28:5a:
5a:ab:e6:42:80:55:90:3f:aa:cf:91:b0:35:91:db:8e:73:21:
99:55:f6:81:a6:dc:14:ef:dd:75:4e:cb:39:2a:18:a6:9f:9f:
74:ae:11:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:44:05 2026 by rpki-client