
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
File: hypmcnatRHCKRH_b6IHxYueQ3WM.mft (raw, json)
Hash identifier: CKZNuAkFhno84lbnU+/usSrwo0dFS6NZEhcJlnFQl/s=
Subject key identifier: 19:1E:AD:3F:DE:6B:85:7A:17:11:C3:D6:51:D1:76:9F:26:E3:31:59
Authority key identifier: 87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63
Certificate issuer: /CN=A91C5153/serialNumber=872A667276AD44708A447FDBE881F162E790DD63
Certificate serial: 06ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
Manifest number: 06E4
Signing time: Sat 04 Apr 2026 21:57:13 +0000
Manifest this update: Sat 04 Apr 2026 21:57:12 +0000
Manifest next update: Sat 11 Apr 2026 21:57:12 +0000
Files and hashes: 1: hypmcnatRHCKRH_b6IHxYueQ3WM.crl (hash: cxy479oYID7kCbmHBnYFbfmOeikHAyw7LZGdDKaJTNM=)
2: 5B194E5EDFF311EBBC814169C4F9AE02.roa (hash: tke6i0pq+LEOQk6Ad75JGfrTsv/Pc8WPCS1dXSrK9V8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl
rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1773 (0x6ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5153, serialNumber=872A667276AD44708A447FDBE881F162E790DD63
Validity
Not Before: Apr 4 21:57:12 2026 GMT
Not After : Apr 11 21:57:12 2026 GMT
Subject: CN=69d18939-7558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:84:ad:9e:04:8a:88:41:be:88:06:df:fb:
20:5c:4d:fc:ef:16:88:0e:df:cb:de:75:bc:37:3c:
51:9a:60:da:8c:93:04:15:24:f6:2c:c0:f4:7c:d8:
33:e1:30:e8:df:09:67:6a:18:3e:2e:75:3d:83:12:
70:b9:1c:f9:3e:12:91:8c:74:52:86:fd:87:8f:b9:
a0:d8:6a:09:9d:9f:46:2f:2d:c1:07:16:59:d4:49:
9b:d5:c7:65:80:fe:85:66:b9:a5:f0:ac:dd:57:85:
5b:d8:c8:fe:75:cd:1d:fa:18:3a:31:74:dd:11:05:
2a:cb:bb:db:91:c5:ca:f8:2c:6b:24:ce:67:3a:30:
a1:7f:25:0f:0d:d2:7c:a6:55:58:e3:fa:ce:e9:4f:
66:c1:73:98:e3:3a:25:f7:f5:8a:19:7b:c1:3f:af:
4b:1a:e6:85:f8:56:7f:d1:3e:e5:bc:3f:10:aa:55:
ec:60:88:23:6e:d7:cb:44:ed:23:f3:81:30:2b:e7:
19:b1:a1:4d:95:19:0e:83:96:cb:c2:05:fd:92:73:
fa:de:f6:8b:22:df:ab:e8:33:37:55:70:be:a2:c6:
b4:59:28:78:7f:73:31:7e:07:f4:ab:25:66:72:d7:
5a:3e:6c:60:b7:2a:83:1b:03:d7:57:de:07:66:57:
ae:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1E:AD:3F:DE:6B:85:7A:17:11:C3:D6:51:D1:76:9F:26:E3:31:59
X509v3 Authority Key Identifier:
keyid:87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:70:36:c1:6a:20:60:65:e0:af:52:37:d2:70:ad:8e:2a:67:
1c:60:ab:bc:cd:32:cd:b1:7d:77:f1:cd:20:0c:39:75:4b:d2:
9a:16:90:50:57:ea:b4:41:a2:0d:cf:41:a4:66:dc:9b:9a:a5:
95:ca:17:8c:ff:e9:d1:f8:09:a0:36:f6:ea:ff:bc:70:ca:4a:
a8:cb:60:d7:04:84:53:1e:ec:10:41:89:3a:27:a2:32:e7:ee:
c2:93:a4:aa:6d:eb:e2:ac:50:5f:e1:d3:9b:6b:8d:9c:47:b1:
0b:e0:33:59:76:0c:1f:32:f2:e8:a0:55:20:5e:bf:e8:96:fc:
a8:4d:c0:d3:a8:9a:d7:e8:aa:a0:77:3f:fd:63:58:72:54:f4:
d4:ba:37:e4:86:32:82:d4:de:bb:60:cd:05:b7:09:ca:c4:3c:
cb:10:e7:b4:18:f2:e0:44:9c:9e:90:61:56:f9:df:06:f9:58:
7d:3c:19:ec:83:0d:81:91:af:27:d5:9c:10:20:d6:49:c2:19:
0e:1a:48:e8:c7:59:15:33:63:14:c1:4f:77:c2:1f:a8:2c:d3:
6b:dc:4e:c8:35:ff:e4:9a:84:cb:7d:ae:d1:4a:de:9b:cc:95:
c7:78:85:ed:60:26:0a:31:ae:cb:43:4e:36:a4:99:5b:0e:58:
e4:e0:13:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzUxNTMxMTAvBgNVBAUTKDg3MkE2NjcyNzZBRDQ0NzA4QTQ0N0ZEQkU4ODFGMTYy
RTc5MERENjMwHhcNMjYwNDA0MjE1NzEyWhcNMjYwNDExMjE1NzEyWjAYMRYwFAYD
VQQDEw02OWQxODkzOS03NTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt+2ErZ4EiohBvogG3/sgXE387xaIDt/L3nW8NzxRmmDajJMEFST2LMD0fNgz
4TDo3wlnahg+LnU9gxJwuRz5PhKRjHRShv2Hj7mg2GoJnZ9GLy3BBxZZ1Emb1cdl
gP6FZrml8KzdV4Vb2Mj+dc0d+hg6MXTdEQUqy7vbkcXK+CxrJM5nOjChfyUPDdJ8
plVY4/rO6U9mwXOY4zol9/WKGXvBP69LGuaF+FZ/0T7lvD8QqlXsYIgjbtfLRO0j
84EwK+cZsaFNlRkOg5bLwgX9knP63vaLIt+r6DM3VXC+osa0WSh4f3Mxfgf0qyVm
ctdaPmxgtyqDGwPXV94HZleu8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBkerT/e
a4V6FxHD1lHRdp8m4zFZMB8GA1UdIwQYMBaAFIcqZnJ2rURwikR/2+iB8WLnkN1j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTE1My85NTQyODFDMjkw
NDgxMUVCQTQ4RTk2MzBDNEY5QUUwMi9oeXBtY25hdFJIQ0tSSF9iNklIeFl1ZVEz
V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h5cG1jbmF0UkhDS1JIX2I2SUh4WXVlUTNXTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NTE1My85NTQyODFDMjkwNDgxMUVCQTQ4RTk2MzBDNEY5QUUwMi9oeXBtY25hdFJI
Q0tSSF9iNklIeFl1ZVEzV00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIHA2wWogYGXgr1I30nCtjipnHGCrvM0yzbF9d/HNIAw5dUvSmhaQUFfqtEGi
Dc9BpGbcm5qllcoXjP/p0fgJoDb26v+8cMpKqMtg1wSEUx7sEEGJOieiMufuwpOk
qm3r4qxQX+HTm2uNnEexC+AzWXYMHzLy6KBVIF6/6Jb8qE3A06ia1+iqoHc//WNY
clT01Lo35IYygtTeu2DNBbcJysQ8yxDntBjy4EScnpBhVvnfBvlYfTwZ7IMNgZGv
J9WcECDWScIZDhpI6MdZFTNjFMFPd8IfqCzTa9xOyDX/5JqEy32u0Urem8yVx3iF
7WAmCjGuy0NONqSZWw5Y5OAT/A==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:17 2026 by rpki-client