
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
File: STl-M7McCo9o_NIHK9qazLZdAuw.mft (raw, json)
Hash identifier: aDZm9qo8CChRmZX+DqGCNthRWGGjNKTGJlvdvLJ/1hI=
Subject key identifier: 02:D8:FA:0A:45:AB:8C:7B:62:4D:78:87:8B:6A:1E:89:0F:86:7D:47
Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
Certificate issuer: /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Certificate serial: 0118
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
Manifest number: 0109
Signing time: Fri 17 Apr 2026 05:47:36 +0000
Manifest this update: Fri 17 Apr 2026 05:47:35 +0000
Manifest next update: Fri 24 Apr 2026 05:47:35 +0000
Files and hashes: 1: STl-M7McCo9o_NIHK9qazLZdAuw.crl (hash: bshn6Mv+J20Pnm8AXKXSeOfNik+g+aGbn86kOns7PGQ=)
2: F63554A0AC6411EF85E4707CC4F9AE02.roa (hash: QVjM8s9479b2xcLfLXbYsiyhxsijbHL3ngAdlsSGHfI=)
3: F5B752E4AC6411EF85E4707CC4F9AE02.roa (hash: +U79SJGHyy8k6WAyu8iP6KnaD5T4i/lGu+9WzwRR3B0=)
4: F6BDBBE2AC6411EF85E4707CC4F9AE02.roa (hash: l+pckd4e+wGHq76Itfq46OX2oo+gwBe5SQosKDXEtIs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Validity
Not Before: Apr 17 05:47:35 2026 GMT
Not After : Apr 24 05:47:35 2026 GMT
Subject: CN=69e1c977-6cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:22:53:dc:b7:53:fc:af:bf:79:d2:5b:50:d6:
f5:f3:e4:1d:41:89:23:85:20:06:a3:7f:71:74:ff:
09:19:33:f6:0b:6b:a8:5a:2b:a6:a9:e1:3c:39:59:
92:c0:b4:f7:2a:d0:00:94:db:2f:b2:a4:b8:ce:77:
94:59:d4:a7:3e:37:23:25:a2:4d:06:0f:bd:cf:1a:
bc:13:69:56:af:2f:77:bd:01:cf:37:e7:a9:4e:55:
93:13:fe:91:de:9e:bd:81:43:c4:ab:c1:a6:37:3f:
b9:b4:3d:00:5b:64:5f:20:80:97:f7:9b:48:c1:eb:
d1:55:78:31:33:bf:d4:f0:b0:87:5c:c3:0a:02:72:
af:3d:51:dc:37:60:f6:46:44:92:3f:3e:1d:30:21:
94:a4:93:ac:f6:6d:96:66:83:d3:6e:77:8b:d6:dd:
d9:41:bc:5e:3d:61:87:48:2a:57:e2:f5:8d:5c:24:
e9:07:f0:27:d6:42:77:4a:f4:fb:ec:b1:80:99:1a:
6c:89:cd:2a:1c:b4:f0:fb:73:23:18:a4:4f:2b:df:
5c:fa:77:88:90:fd:68:aa:12:d7:0f:75:bc:d6:ca:
5f:ac:e4:df:9b:23:8f:67:ce:96:94:bf:8a:a0:48:
c9:4d:fe:1e:ba:a8:fa:f8:75:6d:c9:8f:a5:8c:33:
fc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D8:FA:0A:45:AB:8C:7B:62:4D:78:87:8B:6A:1E:89:0F:86:7D:47
X509v3 Authority Key Identifier:
keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:d0:be:23:30:41:05:11:43:3a:5c:f0:2f:26:0f:c2:12:54:
68:90:51:07:e8:a8:09:ad:20:27:a2:48:5e:e5:a6:8d:c4:e8:
94:81:cd:e8:42:f7:9c:3a:77:40:ef:9e:89:49:e6:4c:bb:3c:
b5:af:d4:f0:66:23:d7:e2:9c:3a:18:0e:48:d4:5a:56:87:e9:
f7:86:71:fe:a5:2a:cc:88:ce:fa:8a:52:59:c7:6c:6e:4e:f0:
2c:a3:60:aa:6b:9b:11:c9:05:fe:71:d4:a5:f1:36:bf:49:73:
22:85:7e:18:31:01:65:ac:89:15:a5:e0:63:d4:95:37:90:6d:
8a:06:68:08:1d:2f:2f:0f:f9:63:e9:01:1c:eb:19:11:f7:8e:
22:bf:b2:19:39:59:84:11:ee:7b:3d:4a:e7:7c:80:f0:d8:03:
2b:3c:eb:20:40:71:12:71:ac:d0:0d:50:c6:ff:58:e4:24:3e:
b3:4d:5f:c8:dd:98:e2:b2:fd:b0:fd:86:ac:ab:8b:67:ad:c8:
f6:4e:7e:55:78:bc:cf:32:c2:cc:99:a9:1d:57:88:b9:40:b8:
15:2a:d6:f7:b0:4d:f2:d7:44:f6:f9:69:81:e3:32:56:27:70:
2c:93:1e:7e:0a:14:41:f5:33:fe:e4:f4:2b:83:5a:13:7b:e1:
37:e2:31:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:04:33 2026 by rpki-client