$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft File: hejumo0wUoWZBi0Iy5y51RPfa9c.mft (raw, json) Hash identifier: fFZmJLEJJqYlfHvPc2D8pzAPbZJkL2tKCZBnRYfWNZU= Subject key identifier: 3B:DB:65:72:4E:36:3A:5B:BB:3C:F8:79:AD:9A:5B:F5:F0:97:6B:10 Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft Manifest number: 010D Signing time: Thu 21 May 2026 06:10:52 +0000 Manifest this update: Thu 21 May 2026 06:10:51 +0000 Manifest next update: Thu 28 May 2026 06:10:51 +0000 Files and hashes: 1: hejumo0wUoWZBi0Iy5y51RPfa9c.crl (hash: e/FtzchakoBWaOnGhTncnAPRkVRMN0dayKT4lk0ybUk=) 2: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (hash: gUcqtC95g/7PYjkg92p/7QAIqkLozNb3MYQLoLKJN7U=) 3: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (hash: 0ugNO0JFbaqHVmsAuT0FX27EtH3EefDNknaja626TkQ=) 4: 1D79B286505111F1A6C3F8BB94833773.roa (hash: 3xKQOlORUB1srg8b9eZ+3Jlw2fisqPQnTL+nLDSZlQI=) 5: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (hash: M5DGOXJP2e8jtsaJQ/vq9iASwvCcNNyavpWr6WEN/BA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 06:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7 Validity Not Before: May 21 06:10:51 2026 GMT Not After : May 28 06:10:51 2026 GMT Subject: CN=6a0ea1ec-d7a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5d:fa:07:20:f1:d9:d0:3d:ab:95:a1:a2:bf: ee:f9:e9:0e:e1:32:bc:44:c9:e8:7f:44:d0:57:3a: f4:e2:c5:d2:29:eb:da:d8:e8:d0:d4:04:33:8a:a0: 29:13:e1:19:bc:ee:63:2a:77:d3:09:68:c8:b2:7e: eb:81:4a:a0:32:f3:c5:75:54:16:33:17:1f:76:7a: 62:15:b1:4b:75:02:72:d5:5c:e4:94:78:23:8d:d7: 32:bd:da:6a:79:81:48:87:41:60:20:47:8f:b7:c6: 2f:23:cb:f8:5d:42:ae:3f:fa:6f:4b:7d:4a:7c:57: 77:a9:cc:6d:40:9b:4f:6b:e9:45:54:71:ac:30:38: b2:79:b3:e4:9b:7b:d3:96:19:38:a4:71:e1:e6:4f: bf:c9:38:5f:c2:5a:7a:20:f3:7c:04:d4:e0:70:4c: aa:f0:1b:d4:b2:09:f6:04:2a:7e:a6:76:51:d5:d1: 23:ff:69:00:a3:8c:2a:7a:7f:0f:ad:a9:2c:73:0d: e9:5a:0c:ca:9a:60:e7:1b:ec:47:3d:66:e4:40:af: a3:ae:67:01:8b:38:df:22:ac:25:60:42:da:48:76: 3c:ce:5e:a8:ee:12:0a:17:4d:ba:e8:d3:6e:ea:46: a5:1f:68:45:a3:86:bf:bd:c1:1a:69:95:51:43:5d: fb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DB:65:72:4E:36:3A:5B:BB:3C:F8:79:AD:9A:5B:F5:F0:97:6B:10 X509v3 Authority Key Identifier: keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:d7:d4:d8:d2:c0:13:36:61:52:80:44:3c:a6:a0:61:c4:28: f1:31:ef:0f:d7:c2:ed:e1:9e:45:fc:01:77:8d:64:af:e8:59: 70:d2:2f:d6:57:0b:64:22:49:81:2a:49:85:9b:d2:55:d9:ea: 85:3d:b2:af:0e:82:78:4c:4f:6b:89:f6:09:ba:76:51:de:ca: 9f:03:35:1a:e9:3d:88:2e:b4:dd:0a:3e:61:44:14:41:18:c1: d8:a0:5d:e9:25:6e:b4:58:d4:85:e6:27:e3:56:59:a4:6c:d8: 8b:86:3f:05:4f:2e:56:23:ff:d4:a7:91:f6:7c:9b:59:79:00: aa:34:f5:e2:45:c7:51:94:9a:6e:7f:17:f6:47:b2:f3:f4:47: e2:88:b2:f8:5d:8f:f7:7f:17:08:82:ef:90:de:4d:00:5a:16: c7:6a:5a:d5:06:20:41:01:09:30:64:20:14:55:88:eb:ff:9b: 59:63:30:6d:c8:76:9d:c9:40:14:93:64:1e:4c:36:ca:4f:35: b6:c8:c3:8a:67:f7:e1:2f:44:08:1d:db:e3:89:dd:15:a6:e5: 7f:78:39:63:7f:8f:6e:46:8d:93:1c:05:be:46:a0:e6:b4:4d: 79:59:88:23:24:bb:30:32:21:08:7d:67:e0:43:1f:4b:2f:fd: 14:1a:92:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA4QTUxMTAvBgNVBAUTKDg1RThFRTlBOEQzMDUyODU5OTA2MkQwOENCOUNCOUQ1 MTNERjZCRDcwHhcNMjYwNTIxMDYxMDUxWhcNMjYwNTI4MDYxMDUxWjAYMRYwFAYD VQQDEw02YTBlYTFlYy1kN2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1l36ByDx2dA9q5Whor/u+ekO4TK8RMnof0TQVzr04sXSKeva2OjQ1AQziqAp E+EZvO5jKnfTCWjIsn7rgUqgMvPFdVQWMxcfdnpiFbFLdQJy1VzklHgjjdcyvdpq eYFIh0FgIEePt8YvI8v4XUKuP/pvS31KfFd3qcxtQJtPa+lFVHGsMDiyebPkm3vT lhk4pHHh5k+/yThfwlp6IPN8BNTgcEyq8BvUsgn2BCp+pnZR1dEj/2kAo4wqen8P rakscw3pWgzKmmDnG+xHPWbkQK+jrmcBizjfIqwlYELaSHY8zl6o7hIKF0266NNu 6kalH2hFo4a/vcEaaZVRQ137jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDvbZXJO Njpbuzz4ea2aW/Xwl2sQMB8GA1UdIwQYMBaAFIXo7pqNMFKFmQYtCMucudUT32vX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDhBNS9EMTUwMzEzNkM5 MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1VvV1pCaTBJeTV5NTFSUGZh OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlanVtbzB3VW9XWkJpMEl5NXk1MVJQZmE5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDhBNS9EMTUwMzEzNkM5MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1Vv V1pCaTBJeTV5NTFSUGZhOWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMNfU2NLAEzZhUoBEPKagYcQo8THvD9fC7eGeRfwBd41kr+hZcNIv1lcLZCJJ gSpJhZvSVdnqhT2yrw6CeExPa4n2Cbp2Ud7KnwM1Guk9iC603Qo+YUQUQRjB2KBd 6SVutFjUheYn41ZZpGzYi4Y/BU8uViP/1KeR9nybWXkAqjT14kXHUZSabn8X9key 8/RH4oiy+F2P938XCILvkN5NAFoWx2pa1QYgQQEJMGQgFFWI6/+bWWMwbch2nclA FJNkHkw2yk81tsjDimf34S9ECB3b44ndFablf3g5Y3+PbkaNkxwFvkag5rRNeVmI IyS7MDIhCH1n4EMfSy/9FBqS4A== -----END CERTIFICATE-----Generated at Thu May 21 11:39:43 2026 by rpki-client