
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.mft
File: STM5VHszADpYWZg2-0yZ55RJzfI.mft (raw, json)
Hash identifier: LHRrJ4NgGmeDZdKGzWbIt6+p2ju6sgInriPJ0O4if/I=
Subject key identifier: 5B:CF:CE:4E:2D:74:49:B4:47:82:2F:76:A3:D3:68:AD:C6:39:9F:17
Authority key identifier: 49:33:39:54:7B:33:00:3A:58:59:98:36:FB:4C:99:E7:94:49:CD:F2
Certificate issuer: /CN=A916B795/serialNumber=493339547B33003A58599836FB4C99E79449CDF2
Certificate serial: 0BB7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STM5VHszADpYWZg2-0yZ55RJzfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.mft
Manifest number: 0B91
Signing time: Tue 06 Oct 2026 19:18:08 +0000
Manifest this update: Tue 06 Oct 2026 19:18:07 +0000
Manifest next update: Tue 13 Oct 2026 19:18:07 +0000
Files and hashes: 1: STM5VHszADpYWZg2-0yZ55RJzfI.crl (hash: uGeNjyDup9J3fI9mOoeHgBC9kZ5tf/+r6VDEOucV+Lw=)
2: 28BBBAA2634211EABE282367C4F9AE02.roa (hash: 87ruUamCetqhSgYD0RcbOPf8uxPRNusOY0RxdgFfa4k=)
3: 04281A2C6E8211F0A2E51335C4F9AE02.roa (hash: bvbNtF0AY2UdGflEtQc3rZe1CpDIiWe7q6JZWQcMBNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.crl
rsync://rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STM5VHszADpYWZg2-0yZ55RJzfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2999 (0xbb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B795, serialNumber=493339547B33003A58599836FB4C99E79449CDF2
Validity
Not Before: Oct 6 19:18:07 2026 GMT
Not After : Oct 13 19:18:07 2026 GMT
Subject: CN=6ac54970-f2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:93:99:d6:69:2a:f0:b2:9c:45:e6:98:78:d1:
21:42:d7:d8:37:70:62:69:2b:c1:12:96:ba:c9:bf:
83:c8:20:3d:05:9a:ff:3e:9c:cd:72:f6:9c:10:f2:
70:5b:fd:06:39:8e:fd:e5:48:16:31:75:81:eb:53:
e5:31:ad:6e:77:85:9f:20:e3:66:9f:f2:d8:01:5f:
c7:eb:76:66:c6:22:c4:63:d1:5e:b0:30:95:81:26:
cc:9b:29:58:6c:26:d2:4c:b3:0c:22:01:50:e3:1a:
86:cc:c0:0c:c1:6a:f3:ca:d2:62:59:4f:8d:f6:22:
41:bc:b9:fc:f8:48:3f:3a:f1:57:97:55:f6:72:33:
ba:d2:74:e2:02:4a:b6:68:7b:73:95:e5:d3:72:af:
7e:d1:34:76:49:78:6c:4f:22:3f:8c:f9:35:85:e5:
43:d0:5d:20:81:38:0e:08:82:3c:00:62:1e:b9:b8:
9d:19:6f:1d:fe:f2:52:5a:5b:dd:98:4c:aa:99:a2:
2a:d8:f0:62:34:64:97:39:97:f7:6f:08:89:1e:e5:
02:4c:ca:d2:17:d7:08:bc:e8:17:78:71:bf:23:a8:
62:0c:e2:46:df:9b:22:22:0a:5b:c5:0d:79:00:45:
c1:60:00:b0:43:5b:6c:42:7a:8a:b1:25:08:d6:27:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CF:CE:4E:2D:74:49:B4:47:82:2F:76:A3:D3:68:AD:C6:39:9F:17
X509v3 Authority Key Identifier:
keyid:49:33:39:54:7B:33:00:3A:58:59:98:36:FB:4C:99:E7:94:49:CD:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STM5VHszADpYWZg2-0yZ55RJzfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:cc:16:46:83:d3:3f:45:c0:83:b6:e6:c5:2e:78:ac:45:cc:
66:e7:e8:07:3a:4e:77:9c:b1:da:75:ee:53:11:61:ed:a6:a7:
10:47:df:a8:54:e7:0f:50:6d:6e:08:9e:17:d9:ca:84:6c:32:
67:a1:f5:65:41:7b:f3:e9:0f:d1:50:c6:b1:05:b3:c1:2c:d6:
92:16:c4:04:08:39:b3:3a:e8:c5:c6:72:14:88:bf:c7:13:e7:
51:9d:01:d9:1f:2a:01:bc:9e:7d:74:64:55:be:79:17:fc:97:
ae:dd:13:39:53:ff:75:cf:51:8d:35:df:fa:e7:d6:23:e9:92:
6e:17:78:49:5c:76:4f:80:00:1a:e6:bb:ad:b8:78:f1:06:9d:
dc:aa:cb:bd:e3:7b:b1:59:e4:bc:1e:5a:51:b4:dc:43:70:97:
2f:ec:12:19:a3:de:55:0e:8d:7f:d5:78:a8:b6:b6:df:23:dc:
34:e7:ff:ff:93:65:16:af:88:6a:1f:d6:bc:bd:90:02:f5:a2:
bb:08:43:c0:8b:79:b8:f6:3d:20:88:8a:3f:33:07:84:5b:a4:
e9:a6:6f:22:f6:db:88:94:b6:70:dc:17:4d:85:a1:29:72:26:
e0:e6:2e:07:95:2d:c3:1e:1d:9e:6c:8c:38:4f:7f:ee:a3:30:
0f:ee:14:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:00:27 2026 by rpki-client