$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft File: hejumo0wUoWZBi0Iy5y51RPfa9c.mft (raw, json) Hash identifier: w7jOSazDIOEFUbatUeClKO59uh+j4MR9rTT11p9y2Ow= Subject key identifier: 54:61:D3:B0:BA:F5:AC:70:C5:5A:58:21:24:9B:9C:36:E7:2C:D2:57 Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft Manifest number: 51 Signing time: Sat 31 May 2025 06:51:14 +0000 Manifest this update: Sat 31 May 2025 06:51:14 +0000 Manifest next update: Sat 07 Jun 2025 06:51:14 +0000 Files and hashes: 1: hejumo0wUoWZBi0Iy5y51RPfa9c.crl (hash: PIkDuxiTrJgwPwYBalV4/2AoiXBYT+B6hBjathe4uRw=) 2: E24B9ECE152B11F0A742CE86C4F9AE02.roa (hash: 3Rxi2WwZpfu8F7jhnMuFGFa5sVmkxpF3HfYHLo71KOI=) 3: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (hash: LPMf8e8oe7ripTj9cOjgsGbklShL3L+ImY+41IEZRaQ=) 4: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (hash: smhXonMxctlF/fMtWQXaFUBBXx8Ym0WOVFbM4hK9hVk=) 5: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (hash: HYfNBrw+oBYJTv3EK6ZW0QGVMQFBO/Tp09If6c2XiUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:51:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7 Validity Not Before: May 31 06:51:14 2025 GMT Not After : Jun 7 06:51:14 2025 GMT Subject: CN=683aa6e2-3060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:72:c7:ce:36:aa:01:4f:3b:2a:02:b8:3a:ba: b4:17:34:6a:79:09:ca:f1:7b:c4:04:f3:ac:ce:4c: ae:4d:56:ab:ae:8f:36:d4:c0:69:12:10:f3:91:77: e5:f3:62:1b:fd:aa:da:8e:6f:6a:20:2c:a8:7e:e7: cc:6e:03:db:60:84:b1:6d:57:d4:5b:2e:c0:08:24: 9d:33:65:7e:91:6d:39:7f:a9:6f:96:9a:2b:ac:26: 67:6d:d4:6f:a4:ef:60:fd:3c:f1:ca:94:ee:5e:6d: d4:55:19:6e:ac:98:fb:db:a9:25:82:ae:20:1f:57: 4c:7d:68:e7:a7:32:69:ab:61:a4:58:66:60:c3:4b: b8:f6:69:77:d2:f1:6e:50:3c:d7:51:8a:6d:db:8a: 14:84:f0:94:af:e9:62:51:b6:e8:65:7b:75:d3:48: a6:6b:06:5d:fb:91:1c:16:90:fd:64:9f:0c:34:12: 19:6a:50:a6:a4:5c:13:9a:31:af:33:8f:24:d7:4d: db:9e:f3:ee:85:bf:bc:bd:ed:4d:f6:4d:fe:23:ab: 32:1b:7c:28:32:7e:37:59:76:9c:8f:20:2c:e3:6d: 8b:ce:b2:df:f2:7b:43:00:a0:aa:ba:b7:e4:98:c9: 05:5c:69:05:03:6d:fb:77:93:aa:e6:b1:b7:1a:fc: 9c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:61:D3:B0:BA:F5:AC:70:C5:5A:58:21:24:9B:9C:36:E7:2C:D2:57 X509v3 Authority Key Identifier: keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b5:06:58:6b:25:78:9e:e8:70:45:e3:ff:9b:d1:6e:0c:c8: a0:ed:de:00:38:4e:61:f7:60:6b:23:25:a2:94:09:a6:0f:7a: 3a:6a:a3:a0:a6:7c:55:f7:68:2d:03:c3:55:3e:6b:1a:61:cd: 4c:cd:0e:ec:53:84:08:84:8a:79:04:c8:00:a9:45:f2:b3:86: 9c:75:9f:2b:13:08:70:c0:22:89:1b:90:9c:b8:19:fd:ee:43: c7:7f:84:45:6e:6a:85:2d:ce:6c:c9:6f:5f:67:51:e1:d0:3e: 12:e2:74:49:77:39:e8:71:83:6b:71:ae:6e:c8:36:cb:64:d7: e0:62:f9:d2:8f:0f:9f:99:c9:eb:0f:56:d8:8b:b2:cd:7d:b6: b8:de:8b:45:31:d3:9b:39:8a:98:d5:e0:c1:b9:2a:53:29:2e: 79:ed:43:6a:13:14:d0:7c:fe:e5:de:4a:69:6e:6e:2b:54:8e: aa:54:78:7c:31:fc:ea:a1:f8:55:c6:7d:61:2e:be:0e:0c:28: b9:53:fd:96:b1:c7:d4:a9:55:a9:69:99:19:eb:d6:67:1d:a7: 16:14:46:66:3c:f6:a3:4d:0f:a4:e7:90:92:d4:bf:9b:3a:d0: 07:93:f7:b9:90:b4:de:ea:b5:b1:72:51:37:ce:02:97:f3:da: bf:41:5a:da -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDhBNTExMC8GA1UEBRMoODVFOEVFOUE4RDMwNTI4NTk5MDYyRDA4Q0I5Q0I5RDUx M0RGNkJENzAeFw0yNTA1MzEwNjUxMTRaFw0yNTA2MDcwNjUxMTRaMBgxFjAUBgNV BAMTDTY4M2FhNmUyLTMwNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8csfONqoBTzsqArg6urQXNGp5Ccrxe8QE86zOTK5NVquujzbUwGkSEPORd+Xz Yhv9qtqOb2ogLKh+58xuA9tghLFtV9RbLsAIJJ0zZX6RbTl/qW+WmiusJmdt1G+k 72D9PPHKlO5ebdRVGW6smPvbqSWCriAfV0x9aOenMmmrYaRYZmDDS7j2aXfS8W5Q PNdRim3bihSE8JSv6WJRtuhle3XTSKZrBl37kRwWkP1knww0EhlqUKakXBOaMa8z jyTXTdue8+6Fv7y97U32Tf4jqzIbfCgyfjdZdpyPICzjbYvOst/ye0MAoKq6t+SY yQVcaQUDbft3k6rmsbca/JzrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVGHTsLr1 rHDFWlghJJucNucs0lcwHwYDVR0jBBgwFoAUhejumo0wUoWZBi0Iy5y51RPfa9cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOEE1L0QxNTAzMTM2Qzkx QjExRUY4ODdENkYyQ0M0RjlBRTAyL2hlanVtbzB3VW9XWkJpMEl5NXk1MVJQZmE5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGVqdW1vMHdVb1daQmkwSXk1eTUxUlBmYTljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw OEE1L0QxNTAzMTM2QzkxQjExRUY4ODdENkYyQ0M0RjlBRTAyL2hlanVtbzB3VW9X WkJpMEl5NXk1MVJQZmE5Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJu1BlhrJXie6HBF4/+b0W4MyKDt3gA4TmH3YGsjJaKUCaYPejpqo6Cm fFX3aC0Dw1U+axphzUzNDuxThAiEinkEyACpRfKzhpx1nysTCHDAIokbkJy4Gf3u Q8d/hEVuaoUtzmzJb19nUeHQPhLidEl3Oehxg2txrm7INstk1+Bi+dKPD5+ZyesP VtiLss19trjei0Ux05s5ipjV4MG5KlMpLnntQ2oTFNB8/uXeSmlubitUjqpUeHwx /Oqh+FXGfWEuvg4MKLlT/Zaxx9SpValpmRnr1mcdpxYURmY89qNND6TnkJLUv5s6 0AeT97mQtN7qtbFyUTfOApfz2r9BWto= -----END CERTIFICATE-----Generated at Sat May 31 16:59:24 2025 by rpki-client