
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
File: hypmcnatRHCKRH_b6IHxYueQ3WM.mft (raw, json)
Hash identifier: LmK1PkpgMWfXDCphQqN5HLvujHaeANsRP87rIjllXb8=
Subject key identifier: 85:29:75:21:3D:12:78:A5:BE:F4:F5:EC:2E:04:34:C9:8C:AF:A2:64
Authority key identifier: 87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63
Certificate issuer: /CN=A91C5153/serialNumber=872A667276AD44708A447FDBE881F162E790DD63
Certificate serial: 0759
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
Manifest number: 074F
Signing time: Wed 28 Oct 2026 22:04:57 +0000
Manifest this update: Wed 28 Oct 2026 22:04:56 +0000
Manifest next update: Wed 04 Nov 2026 22:04:56 +0000
Files and hashes: 1: hypmcnatRHCKRH_b6IHxYueQ3WM.crl (hash: HU/5TgGMFe12UNKGrHh/AmMUw5rkxienaOtN/RG24Po=)
2: 5B194E5EDFF311EBBC814169C4F9AE02.roa (hash: lxGB+kQPl99LoovTIjfu6TOzCg3+LkNfQtQnhwV1Azc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl
rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 22:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1881 (0x759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5153, serialNumber=872A667276AD44708A447FDBE881F162E790DD63
Validity
Not Before: Oct 28 22:04:56 2026 GMT
Not After : Nov 4 22:04:56 2026 GMT
Subject: CN=6ae27188-1654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:79:b6:84:ef:41:60:0b:9e:02:09:d4:8c:fc:
a3:46:46:5b:61:05:9e:42:5e:5f:51:ef:32:4f:af:
52:04:e9:67:9f:7b:05:21:ff:69:5d:c5:6d:53:ad:
42:08:8c:9a:02:ea:01:9d:42:97:9d:1a:4d:6d:4e:
5e:97:98:18:04:01:3a:e0:d0:21:21:c1:cb:10:94:
77:7c:99:fb:41:6a:51:66:61:c2:b9:d4:73:d6:64:
5c:1f:01:40:eb:58:c2:78:24:59:89:64:f2:51:8c:
19:a3:10:40:c6:f6:56:bf:00:1a:63:51:75:84:14:
3a:82:fe:10:aa:ea:8d:32:88:31:06:92:3d:df:fe:
d8:bd:57:f4:1f:1e:1c:6b:8a:7c:9a:d3:30:46:14:
c2:d2:52:b0:3a:b5:7b:b7:32:b3:85:56:c0:ac:fc:
f7:f3:00:26:9a:3a:b9:aa:c2:69:4f:97:42:fe:b7:
cf:6b:62:64:6a:cd:26:5b:f9:e0:20:60:eb:ce:f9:
26:7b:31:91:22:60:e3:2a:40:2a:f2:85:24:5e:06:
0a:46:e6:aa:5d:0f:c7:8e:41:18:ca:2c:ca:b4:a6:
c4:73:bc:08:90:2a:9f:95:d6:a8:dd:22:95:12:e3:
65:da:e9:9b:b2:03:f6:db:22:46:76:9d:2d:95:d6:
3d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:29:75:21:3D:12:78:A5:BE:F4:F5:EC:2E:04:34:C9:8C:AF:A2:64
X509v3 Authority Key Identifier:
keyid:87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:9f:af:c5:d1:86:03:e1:69:b4:3a:8c:7a:5b:0e:55:9c:06:
79:32:7c:ce:a4:71:9b:56:1a:93:b4:8c:54:f7:ad:69:8f:d4:
fe:c5:53:d2:a4:ed:98:0d:8c:ec:85:88:16:0f:88:44:56:2c:
4b:29:89:ea:fc:06:4f:e3:fa:12:b3:32:db:d1:11:8b:d0:4b:
d2:e7:a8:5d:8a:55:ed:da:b1:3c:36:ec:9f:58:29:ca:0f:fe:
93:18:a6:46:d2:23:72:aa:2d:41:45:03:3b:15:9e:e2:4d:63:
51:f1:3f:89:15:28:ce:a5:c7:82:d8:c6:7c:e0:b1:04:b5:85:
40:74:ea:b0:bf:e7:a6:4c:8d:e7:01:5a:a2:50:f3:16:33:de:
d6:9a:bf:44:d3:c0:ec:38:6a:36:1e:53:2b:bf:84:7a:0e:7c:
15:e4:8c:e0:46:14:b8:07:93:0d:f3:bc:66:2e:4f:21:b8:f6:
3d:3c:bb:75:51:55:f1:69:39:c7:71:7d:5e:3f:ff:e1:dc:06:
41:56:27:2d:0d:cc:b6:45:14:27:16:5d:e5:0a:a6:58:10:51:
33:e0:e8:ba:a3:6f:be:4c:3d:0d:42:90:c2:7c:f9:de:b8:58:
98:c6:4d:33:90:ec:b9:be:4d:4e:44:6c:c0:50:07:4b:3b:8e:
26:bd:4d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:53:55 2026 by rpki-client