
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
File: hejumo0wUoWZBi0Iy5y51RPfa9c.mft (raw, json)
Hash identifier: VXGp+1/La3CwwpWZRLmK0NoyhEKRdI/v95ThFPJR+ZM=
Subject key identifier: A1:BD:59:AF:F2:39:11:A8:5F:1D:AD:CD:67:79:C1:AF:94:CA:48:23
Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Certificate serial: 016A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
Manifest number: 014E
Signing time: Sun 27 Sep 2026 05:49:07 +0000
Manifest this update: Sun 27 Sep 2026 05:49:06 +0000
Manifest next update: Sun 04 Oct 2026 05:49:06 +0000
Files and hashes: 1: hejumo0wUoWZBi0Iy5y51RPfa9c.crl (hash: FEkVIqWIArpabFgef0Sk5LOVi+kI2CluAaZJgYleWW4=)
2: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (hash: gUcqtC95g/7PYjkg92p/7QAIqkLozNb3MYQLoLKJN7U=)
3: 1D79B286505111F1A6C3F8BB94833773.roa (hash: 3xKQOlORUB1srg8b9eZ+3Jlw2fisqPQnTL+nLDSZlQI=)
4: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (hash: 0ugNO0JFbaqHVmsAuT0FX27EtH3EefDNknaja626TkQ=)
5: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (hash: M5DGOXJP2e8jtsaJQ/vq9iASwvCcNNyavpWr6WEN/BA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 05:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Validity
Not Before: Sep 27 05:49:06 2026 GMT
Not After : Oct 4 05:49:06 2026 GMT
Subject: CN=6ab8ae53-984d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:1b:57:a9:a9:ff:d5:06:90:de:8f:b8:52:
a2:73:2d:7e:bd:c5:98:7b:f2:f7:32:25:ac:37:63:
51:49:c8:7c:a9:00:e8:a0:6f:7c:5e:e5:83:6b:12:
4e:07:50:be:3f:e5:f6:5f:17:78:84:8c:0d:89:7a:
b5:23:2f:7f:a3:f5:da:c0:8f:98:cf:91:64:5b:a3:
09:59:a6:a8:bd:8f:3e:0a:53:64:03:c7:96:d0:cc:
22:4b:2c:71:96:b1:61:88:22:0d:15:aa:97:d0:51:
9d:21:aa:ed:f1:9c:a5:ce:12:66:6e:94:93:10:3d:
3d:9d:96:80:d1:f1:6e:4f:b9:32:fd:9c:a3:68:b4:
69:0a:6a:35:85:5f:22:0e:a7:05:d8:64:9c:ac:cb:
33:9c:95:be:29:76:08:26:4f:c1:fd:f3:ae:41:16:
bd:dc:a2:56:2e:91:b3:74:91:6f:75:71:c8:bb:5d:
98:10:b9:70:22:ea:d3:93:ba:57:f9:58:0d:5e:e0:
de:be:97:4e:67:a9:ea:c2:0c:cb:0a:62:2f:ec:df:
c2:68:fd:dc:5e:f3:80:f8:63:a9:8c:ea:ba:68:1e:
92:d2:34:ae:a3:9d:95:b7:00:a6:df:eb:c0:a7:fb:
74:24:b3:78:b7:71:cc:04:1f:45:45:15:95:5d:b2:
73:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BD:59:AF:F2:39:11:A8:5F:1D:AD:CD:67:79:C1:AF:94:CA:48:23
X509v3 Authority Key Identifier:
keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a6:11:1a:c3:fb:3d:1e:1e:c3:cd:34:80:fa:25:12:08:14:
ae:fe:bd:f2:67:c7:96:f2:bc:1e:6a:d4:1f:06:9a:16:61:36:
45:66:30:1e:8d:8a:ec:94:af:d8:08:b4:8d:cc:11:b0:90:65:
7e:a0:4e:94:22:e5:22:dd:b3:39:8e:15:00:ed:0c:a5:0e:c1:
c8:44:1c:00:fb:40:54:92:92:88:32:48:5e:af:59:93:73:5e:
90:aa:80:8e:34:bb:cb:6c:3c:e8:8e:4f:ec:3f:b7:51:fd:04:
09:38:5e:9b:8f:b8:66:6f:1a:ce:17:ad:2e:a8:a2:fb:7f:53:
d0:7b:69:02:74:c3:72:99:0c:1f:73:aa:26:2b:a4:9b:0f:1a:
90:5c:85:cb:e7:80:e6:0d:fb:39:ee:69:40:6f:33:b7:f9:b6:
b9:ff:0a:cd:31:f0:f0:62:59:97:c9:cb:31:78:84:3d:e9:0c:
91:fa:d6:92:37:96:dc:c0:66:b9:88:33:b4:93:0c:f6:df:c5:
f7:16:d8:6c:44:2c:d3:3f:68:2e:98:5a:47:fa:92:f8:ee:cd:
06:07:aa:59:25:75:1d:ae:73:29:50:f2:95:cb:2f:19:98:cf:
80:93:a1:02:31:22:66:31:cc:67:25:74:b1:fb:ce:42:16:93:
87:e4:de:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:28:08 2026 by rpki-client