
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
File: hejumo0wUoWZBi0Iy5y51RPfa9c.mft (raw, json)
Hash identifier: Fq1oAeylJ7ps24maFRNMJdnOcLrnpvo38u3UNkoVudg=
Subject key identifier: 9E:7F:C2:36:57:5F:0D:F4:49:86:3F:0C:A2:12:4D:18:0F:AB:4A:5D
Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Certificate serial: 014A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
Manifest number: 012E
Signing time: Mon 27 Jul 2026 07:40:52 +0000
Manifest this update: Mon 27 Jul 2026 07:40:51 +0000
Manifest next update: Mon 03 Aug 2026 07:40:51 +0000
Files and hashes: 1: hejumo0wUoWZBi0Iy5y51RPfa9c.crl (hash: 6ytx3odHHdh/pNJOxXQbY9T5hb2H2TKy8SCCsIwVRms=)
2: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (hash: M5DGOXJP2e8jtsaJQ/vq9iASwvCcNNyavpWr6WEN/BA=)
3: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (hash: gUcqtC95g/7PYjkg92p/7QAIqkLozNb3MYQLoLKJN7U=)
4: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (hash: 0ugNO0JFbaqHVmsAuT0FX27EtH3EefDNknaja626TkQ=)
5: 1D79B286505111F1A6C3F8BB94833773.roa (hash: 3xKQOlORUB1srg8b9eZ+3Jlw2fisqPQnTL+nLDSZlQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Validity
Not Before: Jul 27 07:40:51 2026 GMT
Not After : Aug 3 07:40:51 2026 GMT
Subject: CN=6a670b84-c6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:78:e5:74:93:96:1a:43:d8:16:68:ce:30:
b8:99:d4:10:a3:9a:e8:98:78:63:20:5a:be:d8:a1:
39:5e:8a:ba:b3:e4:84:94:e7:66:ea:96:b2:df:1f:
c3:5d:63:9d:c6:13:38:b4:47:dd:a8:9c:72:8e:82:
ea:9b:75:9c:95:ac:f4:20:3c:dd:bf:b7:a5:fb:25:
55:af:21:ec:eb:66:99:d6:47:0a:9a:ce:03:d6:9a:
7b:5c:75:43:f0:f2:04:49:79:82:b0:09:9b:a2:43:
92:99:de:c6:bc:94:72:4a:31:6a:68:51:21:1b:e2:
72:d2:80:69:4b:52:56:d7:c6:9c:56:96:ef:33:cf:
f8:fa:97:6a:fb:21:96:76:d5:6d:2e:e9:c2:c4:83:
e7:06:f7:8f:3f:55:6b:cf:63:11:f4:23:da:83:24:
e3:8c:51:bf:ad:42:74:6e:08:e4:39:61:20:05:a0:
2c:b1:0a:34:6c:70:be:1e:40:d6:f8:66:42:cd:cc:
c4:3f:a5:b2:f8:04:8f:b7:91:fb:5c:6f:6a:5c:a3:
be:9d:35:42:c4:7d:ce:ab:f3:9c:68:39:9c:be:66:
0e:50:31:17:48:5c:46:f6:0c:6a:c0:59:40:87:05:
db:53:29:12:a6:39:e9:86:93:58:cf:7d:22:b1:e1:
76:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7F:C2:36:57:5F:0D:F4:49:86:3F:0C:A2:12:4D:18:0F:AB:4A:5D
X509v3 Authority Key Identifier:
keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:9c:2d:6a:a5:e8:f3:d5:b0:dc:41:10:49:de:d5:a9:1f:b6:
1d:12:0e:13:d6:37:84:6a:31:c1:e8:b5:e7:30:45:f4:61:da:
ea:a2:7e:86:fa:e9:56:73:ca:11:19:cd:c6:c3:c7:50:df:e2:
b8:87:b9:5c:ad:2a:74:13:e2:7c:d7:93:61:dc:37:a2:13:d6:
92:1c:21:e7:c4:2a:5d:8a:68:ea:21:5c:62:82:43:eb:3a:ec:
e8:d0:bf:f4:46:34:6f:66:d3:40:13:ed:bd:27:e3:9d:a7:1e:
23:e0:82:6c:34:e6:ba:9f:a7:e4:22:12:bf:3c:af:27:73:58:
c7:94:31:98:ad:0a:22:4a:7d:04:8d:62:35:8a:09:f5:23:35:
ef:f0:e1:71:e7:ae:2b:b2:e4:a7:8e:68:84:2c:e4:fe:7e:e4:
8a:dd:9f:20:bd:02:87:42:bc:71:05:d9:44:48:aa:c1:dd:e8:
4c:e1:2b:fa:d8:aa:04:d0:90:26:45:2f:d5:76:95:ac:04:57:
3e:0f:09:bd:94:86:0c:b3:be:af:9b:bd:f6:86:76:43:ec:7a:
00:af:a0:ce:fd:01:87:cf:1b:e2:f7:ab:ed:39:a1:7a:48:e7:
17:88:27:1d:bc:47:bd:24:ac:15:ef:af:10:3c:85:03:87:9c:
6c:31:63:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:12:25 2026 by rpki-client