
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
File: hejumo0wUoWZBi0Iy5y51RPfa9c.mft (raw, json)
Hash identifier: fFNK+35yRw2R9NnKq4mnM/9qbAtK5V0xh/OXVNNMTRc=
Subject key identifier: 00:37:D2:D0:C4:00:AA:71:EE:E1:C7:E1:E0:F0:CF:1B:CD:EC:A7:85
Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Certificate serial: 010C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
Manifest number: F6
Signing time: Fri 17 Apr 2026 05:59:25 +0000
Manifest this update: Fri 17 Apr 2026 05:59:25 +0000
Manifest next update: Fri 24 Apr 2026 05:59:25 +0000
Files and hashes: 1: hejumo0wUoWZBi0Iy5y51RPfa9c.crl (hash: +YhfMwwCgxP5TLgZDkh2DBnEnBUZtTVthnV9H/IcxNA=)
2: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (hash: YWJ03eczjPT20FOiBzL6QwaUBYD1U8rRundkIkTarnY=)
3: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (hash: 9ccYCAGywOpI3Ngw5Xg7sr3eIj39IizVDSsoN3RDO9w=)
4: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (hash: bSkYTFB0UsXdnNdZTRnK8kVgujK8Jo5X2o57i26bETE=)
5: E24B9ECE152B11F0A742CE86C4F9AE02.roa (hash: dv0jyH5SUQRhVHKrDemhfUr6t0VsYEFlqz2wf8kFRqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Validity
Not Before: Apr 17 05:59:25 2026 GMT
Not After : Apr 24 05:59:25 2026 GMT
Subject: CN=69e1cc3d-994c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fb:43:19:75:3a:6d:42:dd:e1:31:96:8d:a6:
6c:3f:61:96:61:71:fa:75:19:d6:88:f2:d0:b1:02:
f7:bb:ec:95:2e:03:f8:cb:51:18:a5:91:ef:58:4c:
d2:e1:e7:a0:5f:1e:58:89:9b:28:c8:e0:1c:98:e6:
d0:aa:1f:4f:31:cf:b1:99:86:5d:eb:9d:84:9e:ce:
e0:ff:11:b1:75:9e:0e:9e:75:fd:2c:a3:0a:9e:74:
34:93:c1:57:84:08:30:29:36:a5:f6:ab:13:59:2d:
9c:de:34:38:5c:e8:bb:cd:71:51:3d:5a:34:ff:01:
f9:ca:61:46:1e:6b:6e:40:40:33:f9:63:b9:59:22:
5e:f0:5f:45:3b:00:2d:b9:eb:2e:29:71:53:62:b3:
a5:d0:7f:9b:a9:60:ff:5c:c7:6f:ad:5f:68:a0:a0:
08:05:5f:24:d4:f2:5b:2e:d1:ea:79:85:ba:43:e5:
ac:cf:34:4e:c6:f4:2a:81:65:bd:75:f7:1d:5e:de:
0f:37:0b:24:34:50:ef:58:6c:d2:9d:4a:27:d0:54:
d1:c0:f9:09:f8:6a:ec:d8:4a:dc:0f:f6:73:3f:07:
1c:d8:27:bb:73:73:c3:a4:c2:c3:71:af:f3:41:f6:
1f:bc:98:20:a1:57:b4:fe:cf:8a:db:f5:ad:ec:ab:
da:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:37:D2:D0:C4:00:AA:71:EE:E1:C7:E1:E0:F0:CF:1B:CD:EC:A7:85
X509v3 Authority Key Identifier:
keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:84:7b:52:01:41:0c:df:ce:62:bc:29:18:1d:cd:92:ba:f9:
14:58:8b:a9:a7:2c:76:8f:19:c6:76:87:bf:1f:83:08:97:8e:
22:9f:5b:5a:ff:0e:1b:97:e0:b4:9d:c5:77:93:7f:ee:c4:82:
c5:a4:6d:de:16:6b:bc:ac:84:3e:58:7c:9d:28:b5:ec:00:fc:
79:43:29:59:cd:35:ac:79:62:c9:98:70:01:03:e0:39:36:af:
61:6d:7c:6e:f7:e5:07:12:3f:f5:87:b2:19:b8:b2:89:0a:67:
33:61:16:01:e8:fc:36:20:12:79:98:85:44:8f:1f:47:83:12:
de:ae:65:22:d0:1d:4e:1f:7b:68:6d:22:7a:c9:c9:07:b0:43:
c4:48:a1:92:91:41:af:63:bc:04:90:4f:33:30:ee:0c:c5:d2:
4d:25:9f:6c:c8:7e:65:50:27:b6:d6:9f:ed:6f:9c:a3:6c:d3:
be:13:b2:31:15:1e:77:57:7a:62:fa:b7:5a:81:08:89:2e:4e:
b3:70:12:69:e5:d6:99:2b:b3:83:7f:80:e2:7b:ff:dc:f8:60:
84:8e:b8:c6:52:5a:86:5f:64:48:db:55:b7:f6:96:67:12:5c:
5d:03:f7:7c:fa:1f:e5:64:c5:b4:71:69:4b:30:bf:70:a8:79:
6b:c7:0c:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA4QTUxMTAvBgNVBAUTKDg1RThFRTlBOEQzMDUyODU5OTA2MkQwOENCOUNCOUQ1
MTNERjZCRDcwHhcNMjYwNDE3MDU1OTI1WhcNMjYwNDI0MDU1OTI1WjAYMRYwFAYD
VQQDEw02OWUxY2MzZC05OTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3/tDGXU6bULd4TGWjaZsP2GWYXH6dRnWiPLQsQL3u+yVLgP4y1EYpZHvWEzS
4eegXx5YiZsoyOAcmObQqh9PMc+xmYZd652Ens7g/xGxdZ4OnnX9LKMKnnQ0k8FX
hAgwKTal9qsTWS2c3jQ4XOi7zXFRPVo0/wH5ymFGHmtuQEAz+WO5WSJe8F9FOwAt
uesuKXFTYrOl0H+bqWD/XMdvrV9ooKAIBV8k1PJbLtHqeYW6Q+WszzROxvQqgWW9
dfcdXt4PNwskNFDvWGzSnUon0FTRwPkJ+Grs2ErcD/ZzPwcc2Ce7c3PDpMLDca/z
QfYfvJggoVe0/s+K2/Wt7KvaKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAA30tDE
AKpx7uHH4eDwzxvN7KeFMB8GA1UdIwQYMBaAFIXo7pqNMFKFmQYtCMucudUT32vX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDhBNS9EMTUwMzEzNkM5
MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1VvV1pCaTBJeTV5NTFSUGZh
OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hlanVtbzB3VW9XWkJpMEl5NXk1MVJQZmE5Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDhBNS9EMTUwMzEzNkM5MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1Vv
V1pCaTBJeTV5NTFSUGZhOWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl4R7UgFBDN/OYrwpGB3Nkrr5FFiLqacsdo8ZxnaHvx+DCJeOIp9bWv8OG5fg
tJ3Fd5N/7sSCxaRt3hZrvKyEPlh8nSi17AD8eUMpWc01rHliyZhwAQPgOTavYW18
bvflBxI/9YeyGbiyiQpnM2EWAej8NiASeZiFRI8fR4MS3q5lItAdTh97aG0iesnJ
B7BDxEihkpFBr2O8BJBPMzDuDMXSTSWfbMh+ZVAnttaf7W+co2zTvhOyMRUed1d6
Yvq3WoEIiS5Os3ASaeXWmSuzg3+A4nv/3PhghI64xlJahl9kSNtVt/aWZxJcXQP3
fPof5WTFtHFpSzC/cKh5a8cMPw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:48:49 2026 by rpki-client