
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft
File: STXJCZ1YAoESreyiiRQ1_MWPuiw.mft (raw, json)
Hash identifier: qwEx/1OrLQzl3sPsKNLVCQb6yCI5rCiw5yJUCC3hLRc=
Subject key identifier: 7E:C6:E4:CB:25:F9:53:0C:0F:EC:C1:D0:09:88:1C:47:90:A8:2D:02
Authority key identifier: 49:35:C9:09:9D:58:02:81:12:AD:EC:A2:89:14:35:FC:C5:8F:BA:2C
Certificate issuer: /CN=A9142E1E/serialNumber=4935C9099D58028112ADECA2891435FCC58FBA2C
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft
Manifest number: 0122
Signing time: Fri 17 Apr 2026 05:24:03 +0000
Manifest this update: Fri 17 Apr 2026 05:24:03 +0000
Manifest next update: Fri 24 Apr 2026 05:24:03 +0000
Files and hashes: 1: STXJCZ1YAoESreyiiRQ1_MWPuiw.crl (hash: WQHL/2MkxTjMdrTvmQaRg/r63lPKMe3pytD8AV3XI18=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.crl
rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142E1E, serialNumber=4935C9099D58028112ADECA2891435FCC58FBA2C
Validity
Not Before: Apr 17 05:24:03 2026 GMT
Not After : Apr 24 05:24:03 2026 GMT
Subject: CN=69e1c3f3-5dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8f:4d:e2:94:87:e1:01:ca:32:1a:6b:3e:8c:
81:3d:01:27:84:52:da:e7:5a:b1:1a:ce:59:c6:85:
64:42:e9:7b:27:6e:2d:72:d6:34:7d:78:00:dc:89:
f3:e8:16:55:88:70:fa:93:95:bc:6e:9d:29:ac:ce:
71:31:c1:17:1d:06:a6:90:7f:32:e1:ae:f7:2d:6c:
35:c4:35:ca:92:32:55:e7:91:be:bc:8a:45:e5:1e:
0f:a7:d2:9c:8d:d4:8e:3b:70:d0:e5:37:96:4a:f3:
90:ee:93:5f:de:f5:12:19:18:cf:1e:c1:ca:70:03:
dc:77:56:63:1f:ed:67:9a:ad:00:7a:c7:8c:ed:39:
c4:80:f0:ed:f2:0e:5e:90:21:c6:3d:03:58:89:ca:
f4:ab:a1:3f:cb:74:56:da:8d:0e:c4:22:0b:8f:65:
04:ed:39:f0:1c:d0:21:a5:f9:10:c3:28:e8:e3:28:
df:51:d4:b6:7b:fe:80:d9:24:8d:fd:14:71:d0:ad:
83:d0:c5:29:d5:f9:fe:95:dd:bf:12:ac:f6:3a:15:
d4:8e:2d:ca:bb:b5:28:b1:03:45:68:65:aa:b7:e2:
ee:ae:7b:aa:09:0c:87:da:94:cf:cb:94:b0:07:8f:
34:d1:88:0e:19:47:06:4f:20:f1:f9:2a:7a:f3:4a:
0e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C6:E4:CB:25:F9:53:0C:0F:EC:C1:D0:09:88:1C:47:90:A8:2D:02
X509v3 Authority Key Identifier:
keyid:49:35:C9:09:9D:58:02:81:12:AD:EC:A2:89:14:35:FC:C5:8F:BA:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:ff:35:52:01:c3:5d:06:ff:e8:10:35:a8:dd:6c:c9:72:bd:
bb:25:aa:83:0c:38:f5:2f:8f:40:5d:dd:6d:a1:c4:f9:37:b2:
d7:9c:da:2d:08:38:3c:59:8d:65:e6:82:58:ff:4b:f6:a6:54:
e7:b6:d4:4d:03:b1:e3:b0:9f:4d:1c:fb:60:9b:d3:cf:64:cb:
5f:47:29:c5:f4:44:85:28:51:76:70:86:7c:9c:6b:1c:be:d2:
11:b9:ad:29:39:76:8f:e4:70:5f:b6:9b:f9:d9:36:63:c9:91:
73:64:3c:8d:8c:d3:6b:90:0a:1c:5f:1e:fe:a5:df:65:0a:64:
07:81:9b:3d:f8:bd:ab:9e:90:df:37:a0:89:96:58:39:b8:df:
70:9b:51:c3:98:7c:87:00:92:ce:da:e1:01:a9:99:c8:e6:36:
fe:b7:6b:34:48:ff:64:5f:5a:4e:34:04:c3:2d:09:d0:0a:65:
06:a6:a3:9e:52:60:60:19:a8:eb:8e:65:92:08:31:ff:b9:56:
9d:88:34:77:76:e3:cf:89:17:e8:23:85:06:37:cb:b0:cb:05:
e9:d9:7d:b6:0c:08:e6:3e:b2:36:19:cd:ce:3d:0e:4b:bb:c9:
3a:a8:ed:7b:e5:e7:1a:9e:47:4b:c9:e7:1f:64:cb:e0:84:ea:
cb:be:84:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:35:40 2026 by rpki-client