
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
File: hejumo0wUoWZBi0Iy5y51RPfa9c.mft (raw, json)
Hash identifier: R64MIqTrBF2JvO5PkEbi4O4VU3US+KLD9cg4MTpqcxI=
Subject key identifier: F4:D4:E3:4A:C6:47:64:46:DD:45:08:CB:FF:1C:3E:4E:D9:EF:FC:B2
Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Certificate serial: 0134
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
Manifest number: 0118
Signing time: Sat 13 Jun 2026 06:03:24 +0000
Manifest this update: Sat 13 Jun 2026 06:03:24 +0000
Manifest next update: Sat 20 Jun 2026 06:03:24 +0000
Files and hashes: 1: hejumo0wUoWZBi0Iy5y51RPfa9c.crl (hash: pVrVY4ap3CpGyQs6SvqscPryj5hPzA1ZUfjJA9mZu9g=)
2: 1D79B286505111F1A6C3F8BB94833773.roa (hash: 3xKQOlORUB1srg8b9eZ+3Jlw2fisqPQnTL+nLDSZlQI=)
3: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (hash: 0ugNO0JFbaqHVmsAuT0FX27EtH3EefDNknaja626TkQ=)
4: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (hash: gUcqtC95g/7PYjkg92p/7QAIqkLozNb3MYQLoLKJN7U=)
5: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (hash: M5DGOXJP2e8jtsaJQ/vq9iASwvCcNNyavpWr6WEN/BA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Validity
Not Before: Jun 13 06:03:24 2026 GMT
Not After : Jun 20 06:03:24 2026 GMT
Subject: CN=6a2cf2ac-bc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:fb:ab:09:bc:82:95:49:4a:58:58:a0:70:
91:70:bf:09:db:81:9e:ad:29:7b:bf:1f:77:a1:d8:
fc:24:dd:83:2e:b7:ef:2c:d5:5d:e7:cc:d8:56:2e:
c3:a8:51:83:2b:3b:9e:73:cd:2f:ee:52:f6:e0:7a:
3d:28:70:44:2f:4c:29:5b:57:e7:6f:2a:a8:75:d0:
fe:39:a1:94:35:30:64:4c:c8:e8:60:fd:5e:ba:26:
d1:08:b1:2d:30:c7:89:d8:70:32:38:e0:13:4c:c4:
18:f6:23:23:df:92:d6:f1:46:73:a7:b9:d0:fe:22:
56:14:55:d0:8f:99:58:40:3e:f1:45:1a:e9:27:b9:
ff:69:81:22:f3:9a:d6:83:33:f6:ff:e7:de:1a:7b:
ec:7e:7f:fa:75:5e:ea:3a:ce:65:a2:7f:30:87:fd:
53:10:d0:5e:e6:41:5d:1e:06:71:d2:e1:65:f4:f4:
69:c1:b7:a0:95:ca:3e:dd:24:b0:b7:e1:72:83:a4:
5d:e2:72:49:27:13:6e:40:ea:73:0f:3c:8b:0e:8e:
e2:1c:12:44:55:88:33:23:3a:ec:53:23:e1:61:91:
9f:f3:cc:34:84:f9:d1:13:91:f5:91:3c:28:95:55:
b6:2c:6d:b6:e1:d3:17:62:37:76:cb:10:86:b1:ac:
d8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D4:E3:4A:C6:47:64:46:DD:45:08:CB:FF:1C:3E:4E:D9:EF:FC:B2
X509v3 Authority Key Identifier:
keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:df:c6:a1:0f:d0:c1:58:12:b6:5b:2f:bf:fb:e2:ef:5c:0b:
59:51:26:97:c4:36:d9:04:79:a2:c8:79:15:f8:57:23:91:1d:
aa:6e:c4:54:6c:63:48:ae:58:87:7b:22:59:90:45:0f:0b:f6:
b4:f5:58:04:d6:fc:35:bc:6f:61:21:cc:78:bc:8e:4c:69:f2:
05:0d:bb:fe:b9:d5:23:db:c9:4d:b4:83:8a:2b:d3:7e:57:1d:
37:3a:8b:ef:78:03:91:e2:3b:1d:7d:f4:25:7d:a6:2a:96:e4:
ce:37:d5:57:88:4e:5b:ff:09:19:54:6f:41:80:04:78:25:5d:
bb:8b:08:b2:f8:00:78:21:bf:1a:22:a2:3a:ad:30:ed:45:53:
f4:6b:09:1a:1a:6d:33:f1:57:b2:f7:24:5a:53:94:bc:35:59:
86:93:85:cf:e6:3f:0c:2e:64:71:7b:ed:64:ce:40:0c:57:44:
00:b5:58:01:3f:87:9a:a6:8d:8d:6f:3f:8b:58:e6:d8:b6:49:
b6:17:66:be:07:05:9f:5f:d7:7f:ec:2b:e7:8a:16:c4:7e:d6:
85:41:6b:1f:20:61:ff:f4:cd:a4:26:83:68:69:78:77:61:88:
08:5f:d1:f2:b8:c2:e3:75:5d:6c:ca:d8:22:f9:fd:e6:7f:d0:
cd:20:03:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:36:21 2026 by rpki-client