$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft File: hejumo0wUoWZBi0Iy5y51RPfa9c.mft (raw, json) Hash identifier: GznKJBvdvK5+jAplpAb+iup0dCR1O/qNttQpht0rJ5k= Subject key identifier: EA:56:C2:31:06:0C:09:82:25:B2:AC:85:04:88:59:16:46:E5:37:46 Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft Manifest number: 012B Signing time: Tue 21 Jul 2026 07:18:22 +0000 Manifest this update: Tue 21 Jul 2026 07:18:21 +0000 Manifest next update: Tue 28 Jul 2026 07:18:21 +0000 Files and hashes: 1: hejumo0wUoWZBi0Iy5y51RPfa9c.crl (hash: 027MYrGxRlmh7zPn7bR1NuQ4T4jq6xJrNVzbEase7S4=) 2: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (hash: gUcqtC95g/7PYjkg92p/7QAIqkLozNb3MYQLoLKJN7U=) 3: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (hash: M5DGOXJP2e8jtsaJQ/vq9iASwvCcNNyavpWr6WEN/BA=) 4: 1D79B286505111F1A6C3F8BB94833773.roa (hash: 3xKQOlORUB1srg8b9eZ+3Jlw2fisqPQnTL+nLDSZlQI=) 5: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (hash: 0ugNO0JFbaqHVmsAuT0FX27EtH3EefDNknaja626TkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 07:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7 Validity Not Before: Jul 21 07:18:21 2026 GMT Not After : Jul 28 07:18:21 2026 GMT Subject: CN=6a5f1d3d-316f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a1:8c:f6:75:75:fe:cc:6d:f1:25:9d:af:a4: e9:74:51:cf:a2:fe:44:4c:8a:e7:3f:99:1a:9c:b3: 21:09:d2:20:f3:d4:05:9f:43:3a:b7:dd:53:23:62: d2:8f:b9:28:80:ab:0e:b3:44:e8:aa:43:a5:b1:9b: 9b:54:19:4f:56:8f:a5:95:b7:ae:c1:ee:73:1f:05: 7c:0c:78:36:d7:b5:56:a3:47:4b:a8:1a:a9:75:27: 1a:18:47:dc:2f:e3:ca:28:23:c2:b4:9e:f5:d2:b0: 12:34:6e:53:3f:1d:61:25:06:4e:84:f4:c8:9e:ed: 45:e7:df:c8:47:42:87:e3:5a:2a:c6:9d:cb:9b:5c: e1:3d:2e:e4:9d:27:4e:6e:94:aa:17:74:ae:de:10: e4:ac:ba:91:f0:31:9f:c9:8b:70:4c:01:92:6a:fd: 80:c9:6d:9f:56:c1:d2:0c:9a:88:f7:22:7c:d7:75: 83:4e:28:7e:66:31:c4:f5:57:6c:74:31:8f:2a:91: f6:d9:68:f5:43:94:5d:70:72:df:92:20:41:39:c2: 06:88:6b:7e:81:16:88:fb:8b:fa:44:6e:45:70:6c: 92:7b:46:c3:5a:2a:0c:2f:2b:27:fe:12:2c:8d:07: f8:1d:5a:83:75:bc:38:d2:5a:d3:10:0a:2c:cc:5a: b5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:56:C2:31:06:0C:09:82:25:B2:AC:85:04:88:59:16:46:E5:37:46 X509v3 Authority Key Identifier: keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:69:7b:83:d3:33:5d:b1:0e:0a:7f:03:54:3d:8e:9e:ec:15: bc:4e:ef:2e:fc:e3:aa:29:e4:7b:40:a4:a9:96:f2:d4:b8:f8: ee:77:32:e4:20:1c:a0:14:ed:2a:87:f5:0b:25:c7:71:5d:d9: 54:58:35:61:9b:43:a6:4a:55:30:01:4f:e1:1e:73:d4:a0:46: 22:26:f2:8e:20:2e:9c:fe:d3:13:8f:7b:11:71:7f:a2:f7:7c: ee:b4:f3:d4:e9:1f:d2:6f:6a:8f:07:79:83:06:38:e2:d3:c6: 1d:f7:26:b6:3e:a0:15:6d:e2:83:77:2b:be:72:72:fe:41:6f: 0c:91:20:25:55:93:84:43:a2:eb:ad:0a:1b:e7:d2:16:fc:ce: 95:2c:72:eb:34:f5:ef:47:a1:f6:2f:10:c7:f5:df:fd:66:9c: e7:03:55:d1:9d:f8:64:08:2e:ce:51:66:6b:3b:d1:a1:b6:2b: b5:fd:de:db:a0:df:ee:d1:fd:56:cc:ba:6f:9c:fd:eb:ca:08: 19:de:44:c7:64:65:55:92:8f:75:a8:c9:2f:64:3e:ec:cb:07: 0f:c1:b5:b3:3f:12:a6:a9:d8:2f:5e:62:9d:d2:de:fe:80:04: 3b:a5:31:65:d0:7b:de:2a:62:9c:17:85:60:17:92:5e:cb:fa: 7c:1f:c7:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA4QTUxMTAvBgNVBAUTKDg1RThFRTlBOEQzMDUyODU5OTA2MkQwOENCOUNCOUQ1 MTNERjZCRDcwHhcNMjYwNzIxMDcxODIxWhcNMjYwNzI4MDcxODIxWjAYMRYwFAYD VQQDEw02YTVmMWQzZC0zMTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyaGM9nV1/sxt8SWdr6TpdFHPov5ETIrnP5kanLMhCdIg89QFn0M6t91TI2LS j7kogKsOs0ToqkOlsZubVBlPVo+llbeuwe5zHwV8DHg217VWo0dLqBqpdScaGEfc L+PKKCPCtJ710rASNG5TPx1hJQZOhPTInu1F59/IR0KH41oqxp3Lm1zhPS7knSdO bpSqF3Su3hDkrLqR8DGfyYtwTAGSav2AyW2fVsHSDJqI9yJ813WDTih+ZjHE9Vds dDGPKpH22Wj1Q5RdcHLfkiBBOcIGiGt+gRaI+4v6RG5FcGySe0bDWioMLysn/hIs jQf4HVqDdbw40lrTEAoszFq1OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOpWwjEG DAmCJbKshQSIWRZG5TdGMB8GA1UdIwQYMBaAFIXo7pqNMFKFmQYtCMucudUT32vX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDhBNS9EMTUwMzEzNkM5 MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1VvV1pCaTBJeTV5NTFSUGZh OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlanVtbzB3VW9XWkJpMEl5NXk1MVJQZmE5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDhBNS9EMTUwMzEzNkM5MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1Vv V1pCaTBJeTV5NTFSUGZhOWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg2l7g9MzXbEOCn8DVD2OnuwVvE7vLvzjqinke0CkqZby1Lj47ncy5CAcoBTt Kof1CyXHcV3ZVFg1YZtDpkpVMAFP4R5z1KBGIibyjiAunP7TE497EXF/ovd87rTz 1Okf0m9qjwd5gwY44tPGHfcmtj6gFW3ig3crvnJy/kFvDJEgJVWThEOi660KG+fS FvzOlSxy6zT170eh9i8Qx/Xf/Wac5wNV0Z34ZAguzlFmazvRobYrtf3e26Df7tH9 Vsy6b5z968oIGd5Ex2RlVZKPdajJL2Q+7MsHD8G1sz8SpqnYL15indLe/oAEO6Ux ZdB73ipinBeFYBeSXsv6fB/H5g== -----END CERTIFICATE-----Generated at Tue Jul 21 23:57:06 2026 by rpki-client