
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft
File: stutBbafR5fu9x8D1lq-rdKJLIA.mft (raw, json)
Hash identifier: miX9JRWKwBFrlbnkLmxflZVGm/p8k9TaEsLsUf9wf+g=
Subject key identifier: C2:EE:8D:CB:18:23:EF:02:25:FD:42:23:47:6A:30:88:7B:68:CE:F1
Authority key identifier: B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80
Certificate issuer: /CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80
Certificate serial: 03C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft
Manifest number: 03BA
Signing time: Sun 01 Mar 2026 01:30:25 +0000
Manifest this update: Sun 01 Mar 2026 01:30:24 +0000
Manifest next update: Sun 08 Mar 2026 01:30:24 +0000
Files and hashes: 1: stutBbafR5fu9x8D1lq-rdKJLIA.crl (hash: 4csn3Bi83/I9rC5+jK9rL7SGABje+OMabzkv0xL0RAk=)
2: 897E89B4D56B11EFBE0EB053C4F9AE02.roa (hash: 7yly3hdDUnooff1AD5UaEbPn8g4l5l4qpcVVzY6AZJk=)
3: 73AF033CF4DA11EFA82A4918C4F9AE02.roa (hash: 3gM1BdbMTDqrDwIX93z+/V+zTYOD4jC/sFTj/5bifAc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl
rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 962 (0x3c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D1A4, serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80
Validity
Not Before: Mar 1 01:30:24 2026 GMT
Not After : Mar 8 01:30:24 2026 GMT
Subject: CN=69a396b1-73db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:20:c8:06:24:92:df:c6:3e:fe:6d:3d:4c:d9:
ac:8c:ca:e6:a1:dc:d4:a0:2a:2c:77:22:0a:fb:26:
2c:92:9b:b5:59:7f:71:d8:e1:b2:87:5f:56:8e:8c:
b0:9d:92:87:fe:61:48:fd:f2:6d:f2:bd:6e:1e:6a:
ae:cb:4d:05:6d:66:bd:95:8d:08:27:29:cb:22:e8:
cd:29:b7:c6:51:3c:7c:8b:9e:35:c4:b7:83:dc:41:
0c:fa:5c:27:24:9a:71:98:de:85:2b:5c:92:5e:c9:
db:4d:51:d8:bb:4d:03:e0:dd:67:65:4c:6d:28:5c:
3e:db:b8:41:7e:b8:09:a1:b6:ff:f1:39:ac:eb:0b:
b2:3c:7e:1a:2a:b2:ee:6c:76:00:e2:96:11:5a:3a:
49:a9:56:f9:df:7c:26:68:dc:6d:04:60:40:3f:13:
6b:86:89:6b:32:c6:fb:3b:91:03:db:a4:38:95:ce:
44:ea:a0:eb:12:d7:b0:c4:7c:dd:48:28:96:25:79:
c7:92:4f:a3:c0:a7:fc:d6:7f:dc:f4:14:65:09:dc:
f1:f4:84:7c:67:ab:3c:f2:a7:f7:30:f8:8a:80:3c:
69:0b:f1:1a:d5:4f:7a:3c:8f:a9:2c:13:15:3a:64:
97:15:a7:7b:c0:51:6b:8b:ab:46:54:cc:06:43:e0:
11:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EE:8D:CB:18:23:EF:02:25:FD:42:23:47:6A:30:88:7B:68:CE:F1
X509v3 Authority Key Identifier:
keyid:B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:26:a7:cb:57:0a:59:55:ea:e6:46:b1:32:37:e3:b4:b7:9d:
af:0a:3d:ea:6c:bc:7f:23:90:8e:57:5c:71:f2:5f:94:7f:ee:
53:8a:c3:02:12:11:33:cb:8e:01:3c:d1:f5:3a:a6:43:c1:d0:
b1:f6:b8:89:5c:af:6c:69:d9:3a:eb:32:a1:79:bb:71:1a:44:
5c:63:cb:01:f0:c0:62:f1:b1:be:00:46:61:f9:10:4b:b4:12:
e7:12:a8:08:38:71:4c:bf:e6:4c:41:26:22:70:d2:0a:84:87:
2e:b3:09:9c:02:b0:92:6d:03:c4:72:8d:bc:01:09:0d:ea:cf:
36:f0:a7:0b:86:93:ae:45:ab:f3:d2:47:93:b7:d4:e9:4d:65:
54:e4:e3:b5:3b:a2:03:36:5a:ca:88:cf:1a:8c:14:34:02:8d:
52:79:35:fb:1c:70:88:3b:8f:b9:af:e3:47:71:27:cf:ef:91:
c7:d0:7c:93:f6:60:e6:0b:43:7b:43:66:f4:cf:ce:9c:44:9e:
49:e2:9d:0c:c8:56:9e:ac:47:5a:73:32:8f:96:83:87:67:aa:
ba:cb:14:70:4f:13:e2:44:5f:e2:de:9a:31:7c:20:4a:f3:da:
b7:da:a3:ac:7f:dc:fc:e2:b2:26:fb:3d:f9:58:05:4b:66:bc:
33:43:01:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQxQTQxMTAvBgNVBAUTKEIyREJBRDA1QjY5RjQ3OTdFRUY3MUYwM0Q2NUFCRUFE
RDI4OTJDODAwHhcNMjYwMzAxMDEzMDI0WhcNMjYwMzA4MDEzMDI0WjAYMRYwFAYD
VQQDDA02OWEzOTZiMS03M2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzyDIBiSS38Y+/m09TNmsjMrmodzUoCosdyIK+yYskpu1WX9x2OGyh19Wjoyw
nZKH/mFI/fJt8r1uHmquy00FbWa9lY0IJynLIujNKbfGUTx8i541xLeD3EEM+lwn
JJpxmN6FK1ySXsnbTVHYu00D4N1nZUxtKFw+27hBfrgJobb/8Tms6wuyPH4aKrLu
bHYA4pYRWjpJqVb533wmaNxtBGBAPxNrholrMsb7O5ED26Q4lc5E6qDrEtewxHzd
SCiWJXnHkk+jwKf81n/c9BRlCdzx9IR8Z6s88qf3MPiKgDxpC/Ea1U96PI+pLBMV
OmSXFad7wFFri6tGVMwGQ+AR7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMLujcsY
I+8CJf1CI0dqMIh7aM7xMB8GA1UdIwQYMBaAFLLbrQW2n0eX7vcfA9Zavq3SiSyA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDFBNC8xRUI5RTNBNkM2
QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1ZnU5eDhEMWxxLXJkS0pM
SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N0dXRCYmFmUjVmdTl4OEQxbHEtcmRLSkxJQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDFBNC8xRUI5RTNBNkM2QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1
ZnU5eDhEMWxxLXJkS0pMSUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeCany1cKWVXq5kaxMjfjtLedrwo96my8fyOQjldccfJflH/uU4rDAhIRM8uO
ATzR9TqmQ8HQsfa4iVyvbGnZOusyoXm7cRpEXGPLAfDAYvGxvgBGYfkQS7QS5xKo
CDhxTL/mTEEmInDSCoSHLrMJnAKwkm0DxHKNvAEJDerPNvCnC4aTrkWr89JHk7fU
6U1lVOTjtTuiAzZayojPGowUNAKNUnk1+xxwiDuPua/jR3Enz++Rx9B8k/Zg5gtD
e0Nm9M/OnESeSeKdDMhWnqxHWnMyj5aDh2equssUcE8T4kRf4t6aMXwgSvPat9qj
rH/c/OKyJvs9+VgFS2a8M0MBuQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:56 2026 by rpki-client