$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft File: hypmcnatRHCKRH_b6IHxYueQ3WM.mft (raw, json) Hash identifier: mVCmOVMxTNCpbmIr5iIYYfoJNBKRZQzUOv7OsCjNs6I= Subject key identifier: 2B:20:A7:18:1A:AC:7B:39:F0:AF:3D:C6:74:E0:1F:B3:FB:BF:E0:46 Authority key identifier: 87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63 Certificate issuer: /CN=A91C5153/serialNumber=872A667276AD44708A447FDBE881F162E790DD63 Certificate serial: 0741 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft Manifest number: 0737 Signing time: Thu 10 Sep 2026 21:50:48 +0000 Manifest this update: Thu 10 Sep 2026 21:50:48 +0000 Manifest next update: Thu 17 Sep 2026 21:50:48 +0000 Files and hashes: 1: hypmcnatRHCKRH_b6IHxYueQ3WM.crl (hash: j3+zxuBUrKhmfX44FCNeB9B2Iitus7bYcIpFE2Tl4dk=) 2: 5B194E5EDFF311EBBC814169C4F9AE02.roa (hash: lxGB+kQPl99LoovTIjfu6TOzCg3+LkNfQtQnhwV1Azc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:50:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1857 (0x741) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5153, serialNumber=872A667276AD44708A447FDBE881F162E790DD63 Validity Not Before: Sep 10 21:50:48 2026 GMT Not After : Sep 17 21:50:48 2026 GMT Subject: CN=6aa32638-474c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f2:a9:99:2e:6d:fc:b7:b1:3f:81:a5:5a:4c: 65:22:00:02:b8:14:a1:5b:ee:30:5e:9c:9b:15:1d: b0:70:a7:d1:64:69:73:0a:60:47:e4:ab:4a:01:4b: 6c:d0:10:0a:e8:63:2d:87:a0:f0:cb:48:57:4f:33: 14:01:47:58:fc:67:ad:b2:8b:5e:0c:d7:24:83:d2: eb:71:06:cd:eb:93:94:b5:80:eb:56:eb:2b:76:6a: c4:30:23:45:c6:4d:48:73:06:82:18:20:66:95:19: 75:f9:86:fb:12:b9:ae:e8:58:eb:2f:cf:db:01:0a: 8a:8b:bb:ea:36:b0:91:31:be:29:3c:3b:24:cf:a9: 9f:08:50:a3:74:92:d9:f7:40:c0:82:2a:7d:de:f3: 19:e7:1d:70:23:a9:5f:92:82:c9:c7:b4:85:03:3d: 13:29:d0:68:73:fa:3c:fa:1b:43:98:af:8c:e1:56: 17:a7:a3:8d:90:dc:90:45:8e:74:9c:a1:81:2f:c3: d6:67:c5:39:da:d7:f7:aa:59:2c:1c:21:21:32:be: 30:3f:0b:63:a6:76:94:28:4b:4e:1f:bf:9b:3b:68: ec:dc:f0:31:97:51:3d:f4:d5:aa:cc:50:57:ad:5b: 44:b6:5c:dc:db:a8:87:d0:3d:3c:ba:e3:94:dc:bf: a1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:20:A7:18:1A:AC:7B:39:F0:AF:3D:C6:74:E0:1F:B3:FB:BF:E0:46 X509v3 Authority Key Identifier: keyid:87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:5f:a9:ec:11:c5:80:8e:d5:2a:33:24:6c:a5:f2:ee:bf:c0: 3a:34:3a:f1:78:0c:b2:b9:23:2b:82:c4:1d:67:d6:62:70:4d: 34:c8:d3:c5:b9:52:ef:e6:b1:63:0e:f0:79:cd:c7:13:ae:41: 70:d6:6b:9a:65:f8:65:3d:3c:bc:10:dc:6a:7d:41:11:3a:0e: f8:01:08:b3:b4:f6:2e:9d:2c:cb:8a:30:f7:96:d3:e8:48:ad: 30:07:c3:37:a3:74:dd:59:33:2e:3a:db:c7:27:a5:fd:ef:cb: 25:c9:87:71:c9:93:b1:eb:a4:89:49:7f:7f:43:7c:dd:44:50: f1:5b:87:7e:41:b8:31:7a:21:bb:ac:73:c6:3b:ce:b4:35:d3: bb:d4:12:9e:9a:63:8a:95:f7:4e:e5:89:02:26:1f:1e:76:3d: 4e:46:46:6b:73:22:c5:3f:1f:22:49:b3:50:29:16:a7:2e:64: 13:1f:bb:ff:f3:62:85:88:e3:fb:ac:d3:a2:7c:c7:fb:c6:07: c7:fe:33:82:bb:46:c6:2c:14:68:14:44:e4:3e:72:65:db:c6: ed:ae:05:a0:8c:19:03:a5:c8:41:5a:f3:f4:b9:62:43:4b:b9: 4a:71:94:48:28:bc:24:f7:cc:0c:f1:4c:e2:a9:c5:64:2b:01: 75:1a:14:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxNTMxMTAvBgNVBAUTKDg3MkE2NjcyNzZBRDQ0NzA4QTQ0N0ZEQkU4ODFGMTYy RTc5MERENjMwHhcNMjYwOTEwMjE1MDQ4WhcNMjYwOTE3MjE1MDQ4WjAYMRYwFAYD VQQDEw02YWEzMjYzOC00NzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvKpmS5t/LexP4GlWkxlIgACuBShW+4wXpybFR2wcKfRZGlzCmBH5KtKAUts 0BAK6GMth6Dwy0hXTzMUAUdY/GetsoteDNckg9LrcQbN65OUtYDrVusrdmrEMCNF xk1IcwaCGCBmlRl1+Yb7Ermu6FjrL8/bAQqKi7vqNrCRMb4pPDskz6mfCFCjdJLZ 90DAgip93vMZ5x1wI6lfkoLJx7SFAz0TKdBoc/o8+htDmK+M4VYXp6ONkNyQRY50 nKGBL8PWZ8U52tf3qlksHCEhMr4wPwtjpnaUKEtOH7+bO2js3PAxl1E99NWqzFBX rVtEtlzc26iH0D08uuOU3L+h2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCsgpxga rHs58K89xnTgH7P7v+BGMB8GA1UdIwQYMBaAFIcqZnJ2rURwikR/2+iB8WLnkN1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTE1My85NTQyODFDMjkw NDgxMUVCQTQ4RTk2MzBDNEY5QUUwMi9oeXBtY25hdFJIQ0tSSF9iNklIeFl1ZVEz V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5cG1jbmF0UkhDS1JIX2I2SUh4WXVlUTNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTE1My85NTQyODFDMjkwNDgxMUVCQTQ4RTk2MzBDNEY5QUUwMi9oeXBtY25hdFJI Q0tSSF9iNklIeFl1ZVEzV00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYV+p7BHFgI7VKjMkbKXy7r/AOjQ68XgMsrkjK4LEHWfWYnBNNMjTxblS7+ax Yw7wec3HE65BcNZrmmX4ZT08vBDcan1BEToO+AEIs7T2Lp0sy4ow95bT6EitMAfD N6N03VkzLjrbxyel/e/LJcmHccmTseukiUl/f0N83URQ8VuHfkG4MXohu6xzxjvO tDXTu9QSnppjipX3TuWJAiYfHnY9TkZGa3MixT8fIkmzUCkWpy5kEx+7//NihYjj +6zTonzH+8YHx/4zgrtGxiwUaBRE5D5yZdvG7a4FoIwZA6XIQVrz9LliQ0u5SnGU SCi8JPfMDPFM4qnFZCsBdRoU8w== -----END CERTIFICATE-----Generated at Fri Sep 11 14:59:40 2026 by rpki-client