
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
File: hypmcnatRHCKRH_b6IHxYueQ3WM.mft (raw, json)
Hash identifier: QujFBKJEHW147izipJGcsdYN2bpXzDb2Y2WjQB1asIk=
Subject key identifier: 66:61:5D:B0:E7:F2:BF:F4:C1:F2:EC:79:62:34:0A:4B:4C:13:6A:35
Authority key identifier: 87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63
Certificate issuer: /CN=A91C5153/serialNumber=872A667276AD44708A447FDBE881F162E790DD63
Certificate serial: 06F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
Manifest number: 06EB
Signing time: Sat 18 Apr 2026 22:02:53 +0000
Manifest this update: Sat 18 Apr 2026 22:02:52 +0000
Manifest next update: Sat 25 Apr 2026 22:02:52 +0000
Files and hashes: 1: hypmcnatRHCKRH_b6IHxYueQ3WM.crl (hash: 3q8Y8L7v5H0tYutoTvC1YH2OlixTHmtvQxjQ1PYw3+8=)
2: 5B194E5EDFF311EBBC814169C4F9AE02.roa (hash: tke6i0pq+LEOQk6Ad75JGfrTsv/Pc8WPCS1dXSrK9V8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl
rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 22:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1780 (0x6f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5153, serialNumber=872A667276AD44708A447FDBE881F162E790DD63
Validity
Not Before: Apr 18 22:02:52 2026 GMT
Not After : Apr 25 22:02:52 2026 GMT
Subject: CN=69e3ff8d-6444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:28:85:91:55:05:72:48:91:f9:71:6e:18:
b1:be:47:5e:3d:f1:66:04:bf:19:d2:16:f7:b0:df:
7e:cd:06:82:24:b0:84:6a:e2:41:fb:24:85:78:8b:
dc:3c:da:fa:48:be:99:ae:81:8f:72:4f:ef:66:a9:
ac:d8:6a:83:6a:cd:5d:34:0f:0d:ca:3e:82:9b:f1:
e4:f0:7c:ad:3e:22:23:01:a5:33:e0:24:01:2f:df:
22:9b:61:c2:d6:92:22:ef:95:ee:db:db:5b:f3:c0:
95:bd:e0:7a:b0:22:1f:d6:7b:4e:04:ad:d3:0d:9c:
74:49:fa:3f:34:84:cf:52:43:f7:22:8a:85:a2:a4:
70:70:71:f9:71:ab:5c:6c:29:3a:84:ac:99:a5:5d:
c6:37:3e:a3:23:cf:16:2c:31:0c:28:de:f1:90:3e:
69:3a:6b:8f:31:2b:dd:e0:ba:c2:b0:29:e1:61:4b:
f1:2d:c7:04:7a:10:80:11:dc:a2:86:e8:c8:f1:27:
1b:d3:65:77:f7:19:93:bb:27:66:0d:f6:09:7e:d2:
73:0e:55:ba:25:35:98:4f:35:ec:4a:6b:56:6e:5d:
e4:e2:fe:10:12:1d:bd:dc:6f:ae:07:ad:2f:c6:ed:
e2:2c:52:0c:54:63:4a:93:a3:47:8b:28:df:68:6a:
cd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:61:5D:B0:E7:F2:BF:F4:C1:F2:EC:79:62:34:0A:4B:4C:13:6A:35
X509v3 Authority Key Identifier:
keyid:87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:90:b5:66:9b:d0:30:82:a3:03:a3:df:7b:f1:96:00:0f:05:
8a:9d:0f:3f:96:2c:88:c0:9a:d5:aa:69:1c:9e:f7:93:8a:dc:
52:79:f4:89:1a:a8:66:75:03:a3:b7:4c:4f:d3:a3:cb:8c:b3:
b1:a8:2f:c3:08:50:61:04:14:36:8a:6a:80:59:7a:81:5a:b4:
63:9a:f0:7a:bf:14:55:96:b1:42:9b:29:77:9a:73:f6:a8:47:
76:b4:c2:77:99:c6:f3:4f:8e:b6:a4:8b:52:ef:1f:99:74:df:
09:fc:b1:9a:c8:2b:84:f3:f6:55:5e:53:79:94:2d:74:1c:d7:
0d:5b:69:a9:92:c4:4d:ae:c6:ec:76:f1:6f:06:ac:5b:56:f7:
76:90:d1:3f:ce:6c:48:af:05:05:c6:e5:8d:5c:ef:83:ce:bc:
a8:35:4f:1b:77:c0:31:88:e9:8c:1c:17:ec:7d:da:7a:e2:99:
98:80:a8:09:53:0e:2d:57:c5:36:e1:51:4d:14:5a:ae:61:75:
5f:9d:ed:d3:47:a1:77:dc:98:e7:0b:81:29:f9:43:7d:b9:9b:
02:31:aa:9c:31:55:55:e5:ca:87:55:76:a5:e8:a3:d3:bf:7e:
2a:97:f4:47:db:e1:2d:af:ce:33:e2:2c:ad:fe:e0:23:67:b5:
21:d5:ec:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:18 2026 by rpki-client