
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.mft
File: STM5VHszADpYWZg2-0yZ55RJzfI.mft (raw, json)
Hash identifier: 61AiBCff+OeL9Jg0BkxmxNXQERYDRkwQ0Q1EH69/Ano=
Subject key identifier: CE:8B:64:3B:B5:9D:C8:B4:71:EF:33:0B:AC:7D:26:5B:19:04:7E:BB
Authority key identifier: 49:33:39:54:7B:33:00:3A:58:59:98:36:FB:4C:99:E7:94:49:CD:F2
Certificate issuer: /CN=A916B795/serialNumber=493339547B33003A58599836FB4C99E79449CDF2
Certificate serial: 0B93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STM5VHszADpYWZg2-0yZ55RJzfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.mft
Manifest number: 0B6D
Signing time: Tue 28 Jul 2026 19:30:57 +0000
Manifest this update: Tue 28 Jul 2026 19:30:56 +0000
Manifest next update: Tue 04 Aug 2026 19:30:56 +0000
Files and hashes: 1: STM5VHszADpYWZg2-0yZ55RJzfI.crl (hash: CN9xGyAd27g8EPH4m6OpAVeHQ7xkGnlOORZHNCRlLqw=)
2: 28BBBAA2634211EABE282367C4F9AE02.roa (hash: 87ruUamCetqhSgYD0RcbOPf8uxPRNusOY0RxdgFfa4k=)
3: 04281A2C6E8211F0A2E51335C4F9AE02.roa (hash: bvbNtF0AY2UdGflEtQc3rZe1CpDIiWe7q6JZWQcMBNY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.crl
rsync://rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STM5VHszADpYWZg2-0yZ55RJzfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2963 (0xb93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B795, serialNumber=493339547B33003A58599836FB4C99E79449CDF2
Validity
Not Before: Jul 28 19:30:56 2026 GMT
Not After : Aug 4 19:30:56 2026 GMT
Subject: CN=6a690370-96d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7d:23:50:4d:46:8f:8d:ec:9c:40:f7:63:d6:
94:2f:c6:f5:56:da:8f:c3:99:7f:21:fb:4e:29:0c:
6e:49:7c:fe:ab:1b:21:ca:1d:6c:50:14:b6:f0:6f:
00:94:8a:2e:b2:05:16:54:9a:04:64:2c:10:b8:54:
c6:4e:89:91:76:38:b5:30:67:4f:ec:25:54:55:a0:
35:ad:82:9e:58:84:13:9a:7a:ae:fb:27:0e:f8:69:
ac:4a:b2:d1:0f:fa:0e:0a:ba:04:e0:22:4a:87:14:
9d:23:a3:0a:61:fb:7d:3b:88:ba:c7:1a:25:1c:d7:
be:0c:3e:18:e4:7d:22:ad:c1:21:61:50:e3:4d:59:
20:b7:b1:8a:f6:3d:6b:26:b0:03:fa:6a:8f:3a:d1:
ff:a2:30:37:85:45:94:20:7e:b1:dd:27:d7:6b:91:
e0:ff:b0:8a:7f:6b:36:f6:01:62:4d:3f:13:c2:9e:
95:3a:02:ca:0a:51:b5:28:66:6c:ec:3a:db:c7:63:
0b:aa:a2:a2:55:58:4f:ca:e0:24:7e:05:25:6c:a1:
25:a0:c5:b0:15:1a:f5:ff:9f:bd:bc:3b:61:68:07:
b8:ae:53:c0:ca:f8:1c:ae:d9:4b:be:d2:2d:08:79:
a5:db:4b:75:10:09:6f:c4:12:98:f8:10:d5:79:75:
b1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8B:64:3B:B5:9D:C8:B4:71:EF:33:0B:AC:7D:26:5B:19:04:7E:BB
X509v3 Authority Key Identifier:
keyid:49:33:39:54:7B:33:00:3A:58:59:98:36:FB:4C:99:E7:94:49:CD:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STM5VHszADpYWZg2-0yZ55RJzfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B795/BD032E04634011EAACCF0262C4F9AE02/STM5VHszADpYWZg2-0yZ55RJzfI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f4:22:c3:34:b3:f8:c3:a4:6d:b5:7c:8a:f2:66:7b:28:e3:
30:ed:ab:bc:5d:02:32:3b:f4:7c:6b:6e:88:9f:5f:e2:34:cd:
2b:0e:70:3a:ae:14:4d:b9:a3:fa:f6:3e:b7:18:c0:58:bf:d2:
00:95:ff:d1:91:7a:84:29:fb:bd:ae:97:f4:0c:91:38:6e:3f:
e8:cc:05:9d:c8:ca:0c:1a:d5:9c:eb:32:a6:03:67:ee:77:75:
ae:c3:43:1f:43:75:da:89:5b:b1:76:cf:94:19:19:45:ce:2d:
6a:ea:63:41:9d:e7:2f:ae:80:34:4c:21:86:06:c3:08:5a:41:
63:72:75:a5:60:c1:8f:a4:bf:b4:90:6c:c0:10:ca:24:6c:85:
fc:2f:76:cc:10:3b:e4:19:29:a7:3e:7f:9a:e7:57:55:05:ab:
2a:03:f9:d7:7b:6a:9d:44:f8:8b:0b:8b:60:70:51:66:ba:9a:
28:b4:10:fe:47:cb:19:31:74:cb:7e:47:59:ad:b8:7b:e5:b7:
a4:ba:e0:f2:ee:f0:47:07:b6:a5:66:22:83:f4:11:65:8b:dd:
06:83:3e:3f:80:78:0a:a9:b5:20:79:1f:0d:90:f0:43:86:4f:
83:3c:b4:30:33:da:e1:3c:d3:47:26:bb:49:8c:03:e5:44:6e:
3e:20:41:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:51:32 2026 by rpki-client