$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft File: hejumo0wUoWZBi0Iy5y51RPfa9c.mft (raw, json) Hash identifier: nI0VTHET1DNChbKHlw8bjyD+PYJoilywFMB3YHa8ieI= Subject key identifier: FC:B8:4E:A3:95:9B:80:61:1F:4A:A3:F5:CC:95:57:55:6D:8D:70:5C Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft Manifest number: A0 Signing time: Mon 03 Nov 2025 06:20:07 +0000 Manifest this update: Mon 03 Nov 2025 06:20:06 +0000 Manifest next update: Mon 10 Nov 2025 06:20:06 +0000 Files and hashes: 1: hejumo0wUoWZBi0Iy5y51RPfa9c.crl (hash: dGcCKKSSgyOcUSqD3RBCt55O6ebjYNTdJ/t2HF02xT4=) 2: E24B9ECE152B11F0A742CE86C4F9AE02.roa (hash: 3Rxi2WwZpfu8F7jhnMuFGFa5sVmkxpF3HfYHLo71KOI=) 3: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (hash: LPMf8e8oe7ripTj9cOjgsGbklShL3L+ImY+41IEZRaQ=) 4: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (hash: smhXonMxctlF/fMtWQXaFUBBXx8Ym0WOVFbM4hK9hVk=) 5: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (hash: HYfNBrw+oBYJTv3EK6ZW0QGVMQFBO/Tp09If6c2XiUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7 Validity Not Before: Nov 3 06:20:06 2025 GMT Not After : Nov 10 06:20:06 2025 GMT Subject: CN=69084997-ec2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:42:80:b5:2e:9b:cb:9c:29:f5:a1:b8:18: 96:73:c3:2b:a7:d8:93:6d:ca:f4:3d:e2:13:aa:af: 1e:0f:4d:5d:1f:20:b2:ef:2a:8b:79:c7:0a:a8:0e: d7:89:32:7a:3d:a3:e4:89:b7:9b:8b:64:f0:58:85: d5:87:e1:99:9d:f3:53:51:02:98:67:c4:60:54:a6: 5d:bd:8a:5a:a7:c2:4e:20:ce:b2:d5:2d:df:53:3d: cb:69:76:ad:22:94:09:03:84:53:fd:ff:14:00:86: 50:dc:25:d2:7e:51:94:51:ed:c2:00:6a:ec:ec:e1: 5b:bd:43:6a:34:97:d9:d4:83:65:8f:ae:a7:43:9a: fb:15:88:60:47:ad:c0:de:35:59:13:ba:9d:5b:65: 73:08:32:dd:00:85:fb:47:29:a0:9f:47:01:77:60: b8:32:11:b7:12:56:6f:a7:41:81:cb:7c:3b:e2:d2: 19:c4:83:71:6b:a3:97:92:3f:6f:4c:b0:c0:86:13: 50:b1:df:20:89:4c:45:f1:50:95:de:bb:86:37:21: f9:a6:a1:cb:db:0e:d5:03:4d:77:72:b7:8f:37:06: 73:26:f0:58:17:f3:e9:e1:3c:45:d8:d0:0e:35:78: 3e:a4:7f:ba:1b:cd:10:b4:1a:7c:54:aa:8b:de:c4: 9d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B8:4E:A3:95:9B:80:61:1F:4A:A3:F5:CC:95:57:55:6D:8D:70:5C X509v3 Authority Key Identifier: keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c8:ae:fc:4b:23:a0:34:2b:33:f3:8a:ad:ad:fb:a5:04:b0: 5f:ce:3d:24:88:fc:e3:b0:a4:7c:b8:28:38:30:9b:72:29:0a: aa:f3:a2:5e:16:65:33:b4:55:5e:a2:39:2a:1a:ae:e3:fb:ea: 01:90:10:69:cd:8c:b9:73:b3:e6:ef:c5:91:a1:8c:37:85:44: 9f:c7:d5:d2:66:f0:ee:76:78:55:c1:0b:08:49:58:c7:f8:fd: b9:bd:b6:25:0f:d1:5a:7b:1c:2a:0f:2d:4b:9f:0e:0d:a9:30: aa:f8:6e:35:7b:2f:22:4a:e5:0a:68:fa:40:6b:0c:e3:eb:cd: 8f:83:d5:51:6d:d2:2c:b2:bd:dd:a0:f8:9e:fd:6b:df:18:93: 47:7a:c6:58:97:a1:02:71:6e:57:97:eb:28:ed:9e:0f:f1:75: 5b:75:0f:99:4c:28:ba:b8:5f:3a:89:07:23:22:92:f0:8c:d6: f8:3e:f4:21:63:fb:c8:27:be:15:35:81:64:9e:59:14:ac:81: e4:c0:5e:67:71:f8:f5:f9:2a:8d:f6:53:95:7d:32:4a:af:04: 19:df:50:a9:cc:8d:7c:46:e1:d5:c0:2b:ed:0e:e0:7d:d0:a0: f8:8f:55:55:5c:f1:82:0c:51:ba:ad:65:08:3c:dd:07:1e:ee: a4:23:52:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA4QTUxMTAvBgNVBAUTKDg1RThFRTlBOEQzMDUyODU5OTA2MkQwOENCOUNCOUQ1 MTNERjZCRDcwHhcNMjUxMTAzMDYyMDA2WhcNMjUxMTEwMDYyMDA2WjAYMRYwFAYD VQQDEw02OTA4NDk5Ny1lYzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszBCgLUum8ucKfWhuBiWc8Mrp9iTbcr0PeITqq8eD01dHyCy7yqLeccKqA7X iTJ6PaPkibebi2TwWIXVh+GZnfNTUQKYZ8RgVKZdvYpap8JOIM6y1S3fUz3LaXat IpQJA4RT/f8UAIZQ3CXSflGUUe3CAGrs7OFbvUNqNJfZ1INlj66nQ5r7FYhgR63A 3jVZE7qdW2VzCDLdAIX7Rymgn0cBd2C4MhG3ElZvp0GBy3w74tIZxINxa6OXkj9v TLDAhhNQsd8giUxF8VCV3ruGNyH5pqHL2w7VA013crePNwZzJvBYF/Pp4TxF2NAO NXg+pH+6G80QtBp8VKqL3sSdVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPy4TqOV m4BhH0qj9cyVV1VtjXBcMB8GA1UdIwQYMBaAFIXo7pqNMFKFmQYtCMucudUT32vX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDhBNS9EMTUwMzEzNkM5 MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1VvV1pCaTBJeTV5NTFSUGZh OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlanVtbzB3VW9XWkJpMEl5NXk1MVJQZmE5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDhBNS9EMTUwMzEzNkM5MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1Vv V1pCaTBJeTV5NTFSUGZhOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLyK78SyOgNCsz84qtrfulBLBfzj0kiPzjsKR8uCg4MJtyKQqq86Je FmUztFVeojkqGq7j++oBkBBpzYy5c7Pm78WRoYw3hUSfx9XSZvDudnhVwQsISVjH +P25vbYlD9FaexwqDy1Lnw4NqTCq+G41ey8iSuUKaPpAawzj682Pg9VRbdIssr3d oPie/WvfGJNHesZYl6ECcW5Xl+so7Z4P8XVbdQ+ZTCi6uF86iQcjIpLwjNb4PvQh Y/vIJ74VNYFknlkUrIHkwF5ncfj1+SqN9lOVfTJKrwQZ31CpzI18RuHVwCvtDuB9 0KD4j1VVXPGCDFG6rWUIPN0HHu6kI1Lr -----END CERTIFICATE-----Generated at Wed Nov 5 04:26:02 2025 by rpki-client