
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
File: STl-M7McCo9o_NIHK9qazLZdAuw.mft (raw, json)
Hash identifier: UYRM2H0IjBprcIlo+NJk5WskE5aezGxgwPaZzXTtXnA=
Subject key identifier: 6D:96:A6:79:3F:46:AB:F4:9A:4C:58:EB:E9:AB:72:2E:4E:0C:DB:91
Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
Certificate issuer: /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Certificate serial: 0174
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
Manifest number: 0165
Signing time: Sat 17 Oct 2026 05:41:09 +0000
Manifest this update: Sat 17 Oct 2026 05:41:08 +0000
Manifest next update: Sat 24 Oct 2026 05:41:08 +0000
Files and hashes: 1: STl-M7McCo9o_NIHK9qazLZdAuw.crl (hash: +ZY3dHwy3NhS9L9FRsvEo6vCPc/8VImuWInwGPSi5yM=)
2: F6BDBBE2AC6411EF85E4707CC4F9AE02.roa (hash: l+pckd4e+wGHq76Itfq46OX2oo+gwBe5SQosKDXEtIs=)
3: F5B752E4AC6411EF85E4707CC4F9AE02.roa (hash: +U79SJGHyy8k6WAyu8iP6KnaD5T4i/lGu+9WzwRR3B0=)
4: F63554A0AC6411EF85E4707CC4F9AE02.roa (hash: QVjM8s9479b2xcLfLXbYsiyhxsijbHL3ngAdlsSGHfI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 05:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Validity
Not Before: Oct 17 05:41:08 2026 GMT
Not After : Oct 24 05:41:08 2026 GMT
Subject: CN=6ad30a75-3905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0f:3c:80:6b:bc:7a:4d:a2:fa:fb:39:8c:94:
f4:c4:c8:3a:22:38:47:60:25:06:79:d2:ac:70:a7:
5a:9c:69:cc:28:40:8c:71:39:95:fe:2e:f8:a9:3e:
5d:02:c3:46:b1:17:2d:4b:d1:2b:ba:2f:f6:c7:39:
01:6e:5d:3b:2a:2c:8a:34:76:60:26:86:33:3a:6b:
ac:c4:86:60:72:7c:8e:15:b8:78:a9:c2:b3:65:aa:
f8:50:78:fc:5e:a4:13:6d:d0:82:4a:47:36:7f:8c:
fe:a2:a6:d7:d8:2e:b6:f5:b6:4f:a2:41:72:99:25:
f6:44:32:58:6e:07:ca:1d:46:d6:5b:e7:33:e1:7f:
27:45:8e:d6:96:ca:bd:ac:24:da:3f:ad:3d:f9:f8:
fc:e9:df:bd:af:db:66:06:66:f3:f3:b1:30:58:c0:
2e:a8:01:c0:7f:98:e4:7d:e8:34:6d:61:9b:52:9f:
4d:76:1b:40:81:55:b6:e8:68:b3:eb:08:99:30:e9:
8e:5a:49:84:cf:51:96:c7:da:9a:e5:4a:b7:01:6e:
01:96:9b:cd:ab:40:25:6b:d2:f6:96:be:81:ab:f5:
97:35:13:6f:14:5c:7d:f5:cd:2c:7c:18:39:a9:f0:
f1:03:2c:7d:99:cf:02:8f:8b:58:e4:a3:bc:62:59:
d4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:96:A6:79:3F:46:AB:F4:9A:4C:58:EB:E9:AB:72:2E:4E:0C:DB:91
X509v3 Authority Key Identifier:
keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:5a:97:35:12:c6:7a:d1:46:8e:a2:5e:2d:a7:4d:5f:82:47:
0f:e7:ef:ae:27:d2:65:98:ac:bc:8b:fd:24:88:a2:06:76:b7:
19:90:d7:32:cb:c9:97:a8:e1:18:8d:5e:90:07:65:4c:69:a8:
77:ac:b7:b3:b2:f9:81:e5:70:08:ec:e1:18:b2:31:cf:a3:a6:
1d:45:fa:04:50:ec:62:c3:8f:cb:33:c2:e4:d5:ad:9b:b0:40:
b3:6f:ab:d7:f4:47:6d:8a:a2:55:4c:63:2c:3b:a1:7d:a4:8f:
db:17:3d:64:e4:46:95:4f:19:41:8e:62:5a:75:ad:79:15:d1:
06:01:47:b2:fb:31:4c:12:b8:18:c6:42:66:fd:ae:d1:06:3b:
b7:4b:77:88:3c:ac:d5:8b:4f:44:bd:35:d2:56:60:5f:8c:45:
28:d9:1f:96:bd:b1:58:cb:0c:26:51:0b:9b:98:c0:e3:ff:bc:
dc:ab:89:ca:aa:c5:76:b7:3a:33:f3:18:4f:07:a9:06:fd:18:
e4:5b:a6:4b:ca:03:ff:1c:5a:d1:6f:e5:b6:27:26:e1:f6:01:
52:b5:02:2b:85:79:87:d2:1f:a0:a7:2d:85:a2:da:61:ce:a3:
bb:de:26:5f:b7:8b:f6:11:10:ff:6c:73:fa:6f:7a:0a:d2:45:
a9:f3:4f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 03:30:54 2026 by rpki-client