
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
File: hypmcnatRHCKRH_b6IHxYueQ3WM.mft (raw, json)
Hash identifier: UMlJvxG3RHGlwZpd5BQrdTgf5QRUpEKXuvk+z0ncbT0=
Subject key identifier: 47:BC:26:22:A0:F7:F8:2F:16:AA:7C:68:73:C5:26:6F:D1:04:CB:EF
Authority key identifier: 87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63
Certificate issuer: /CN=A91C5153/serialNumber=872A667276AD44708A447FDBE881F162E790DD63
Certificate serial: 06E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
Manifest number: 06DE
Signing time: Tue 24 Mar 2026 21:53:42 +0000
Manifest this update: Tue 24 Mar 2026 21:53:42 +0000
Manifest next update: Tue 31 Mar 2026 21:53:42 +0000
Files and hashes: 1: hypmcnatRHCKRH_b6IHxYueQ3WM.crl (hash: Qdu8dJcMbv4+vKddcXMKCcpOMgtI7fuzi22fTi3wnxI=)
2: 5B194E5EDFF311EBBC814169C4F9AE02.roa (hash: tke6i0pq+LEOQk6Ad75JGfrTsv/Pc8WPCS1dXSrK9V8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl
rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:53:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1767 (0x6e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5153, serialNumber=872A667276AD44708A447FDBE881F162E790DD63
Validity
Not Before: Mar 24 21:53:42 2026 GMT
Not After : Mar 31 21:53:42 2026 GMT
Subject: CN=69c307e6-24d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:0a:87:13:9b:61:88:e2:ed:08:a8:57:eb:
c2:16:97:0d:86:a7:98:97:21:15:f3:fc:43:f5:7f:
d9:0d:90:50:c2:03:b7:b7:c1:f1:39:18:43:db:f9:
a5:87:e2:1b:b2:4d:b4:be:f8:75:a1:bb:92:01:f8:
6d:ca:8a:0b:8c:8f:40:0e:e2:24:66:a3:17:1f:1f:
9a:bf:2d:e4:03:07:d0:f0:34:64:09:94:ee:ce:ba:
52:c4:06:08:64:70:39:8d:1c:1b:9e:85:bc:5c:de:
54:e2:94:f8:37:3c:ff:e9:4f:89:00:4c:22:f3:e6:
0e:97:c9:b7:ff:eb:4d:21:32:db:69:ec:8e:bf:52:
e8:d8:12:9e:44:f4:5e:09:02:e8:ee:27:88:5e:01:
41:a5:ae:41:46:d2:2a:a9:ac:df:a5:ed:8c:aa:e4:
c8:40:cf:b4:b7:3d:5f:43:76:43:3b:b5:e8:43:5a:
fe:39:3f:19:d3:e9:ac:1e:da:19:b0:3f:88:f6:18:
b9:97:09:4f:39:19:11:b5:71:48:4c:79:f9:90:a8:
be:84:ba:cb:b4:3d:99:c3:21:98:fd:ef:b7:f3:e7:
55:2c:f8:df:9a:a2:04:6d:ce:2b:71:a5:88:e5:a5:
af:5e:01:c0:e0:b0:26:51:3d:a6:3e:f2:af:62:b6:
88:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BC:26:22:A0:F7:F8:2F:16:AA:7C:68:73:C5:26:6F:D1:04:CB:EF
X509v3 Authority Key Identifier:
keyid:87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9f:85:c5:d1:1d:6a:cc:90:44:b1:70:22:b3:a3:07:26:82:
34:f8:fa:e1:95:ff:0a:1c:0a:f0:35:77:9a:e8:6e:0a:75:3f:
06:96:f5:19:fb:6c:1e:7c:d3:89:c0:26:b8:79:67:dc:82:25:
1c:34:94:c8:9e:b1:a6:f9:93:13:97:09:c0:39:e0:ec:fc:9d:
5d:83:b6:8a:ea:0d:65:1e:94:13:41:c8:fd:54:68:f6:73:50:
3d:ad:f6:1f:14:46:c4:af:46:2b:8d:5e:ed:29:56:6f:ec:b6:
c6:d9:e7:ad:50:e1:8b:33:a2:6f:c3:d7:42:ff:61:db:d8:a1:
5f:ff:1e:29:fd:50:ee:d0:5c:cf:c8:a5:0e:f3:fd:06:61:4e:
a5:b4:05:c6:d5:ab:ca:20:40:cd:c5:3d:0e:be:3e:63:af:0b:
6b:e6:c6:7c:40:0a:72:69:19:e9:d7:de:06:c2:ae:5f:7f:a2:
39:5a:45:c5:21:37:3c:da:53:91:37:7f:32:b1:00:15:7a:ed:
59:9f:90:82:ec:9e:ae:04:f6:21:75:09:49:4a:b1:de:25:02:
06:04:d6:8d:c6:46:43:e0:85:32:24:e8:03:0e:8d:3e:11:ff:
27:b7:7d:ce:02:35:6c:5f:07:b6:b9:e6:b2:a3:8e:f7:0e:3c:
88:6a:ad:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:47 2026 by rpki-client