
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft
File: stutBbafR5fu9x8D1lq-rdKJLIA.mft (raw, json)
Hash identifier: 9YfD1QsLOMDAVvRBCUkGxSNlYuhaVXLnNsE7sH8iyY4=
Subject key identifier: A9:8F:B8:72:EC:BC:CC:55:AC:32:19:B7:A3:74:5C:E8:BE:70:51:FC
Authority key identifier: B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80
Certificate issuer: /CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80
Certificate serial: 03E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft
Manifest number: 03D4
Signing time: Fri 17 Apr 2026 00:29:35 +0000
Manifest this update: Fri 17 Apr 2026 00:29:35 +0000
Manifest next update: Fri 24 Apr 2026 00:29:35 +0000
Files and hashes: 1: stutBbafR5fu9x8D1lq-rdKJLIA.crl (hash: 1Z/TewMBW22NxvVrLrDTb/imoDT3EuXXKA7mVftRSeQ=)
2: 897E89B4D56B11EFBE0EB053C4F9AE02.roa (hash: 59clnCTTqffhtdg3nSmGiWZQyGuiBR09wGUf8GvsiJc=)
3: 73AF033CF4DA11EFA82A4918C4F9AE02.roa (hash: vcKD0c092EwQlGRDyBF+m3f7p1gimaLImuv+7uPMwTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl
rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 992 (0x3e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D1A4, serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80
Validity
Not Before: Apr 17 00:29:35 2026 GMT
Not After : Apr 24 00:29:35 2026 GMT
Subject: CN=69e17eef-f351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a6:6d:11:e7:1c:5a:90:a0:c2:25:13:bc:51:
97:fa:4e:77:6a:e8:82:47:a7:a7:4d:5b:f9:7c:3a:
e7:c2:45:ae:4b:31:6f:3b:77:e5:36:c2:cc:70:3b:
6f:44:e3:61:95:59:d2:9e:6c:46:49:f5:7f:26:c9:
5e:15:c5:c0:76:18:26:04:a3:3c:e5:7a:9a:6e:6a:
22:aa:2b:d0:a4:12:cc:66:f0:4d:a7:a1:26:08:c3:
da:f7:4a:81:77:09:45:79:a3:b6:92:0e:d7:7c:97:
58:59:3e:ce:1a:09:32:5d:98:6c:4e:7d:24:11:be:
ad:34:98:db:59:e6:71:9f:ef:ee:ff:ad:25:e8:97:
10:e6:f4:ae:f2:3b:2d:53:bc:1c:1f:ae:19:f8:52:
07:a9:64:27:2b:ea:f7:d6:be:fe:d4:06:d4:4c:cd:
52:c1:33:cb:b1:98:41:a3:32:9f:08:58:59:48:2b:
05:98:a2:52:79:7a:1e:86:84:7a:3b:9a:c0:7c:60:
fc:eb:23:7f:89:c5:dd:41:3d:e9:42:56:f1:35:26:
1d:ff:4d:9f:2e:d9:4d:5e:30:32:52:f6:46:58:61:
58:a8:07:fa:2e:52:45:e4:30:d7:02:17:f0:76:76:
da:90:f8:69:75:46:59:c0:b2:73:46:44:e6:43:15:
b9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8F:B8:72:EC:BC:CC:55:AC:32:19:B7:A3:74:5C:E8:BE:70:51:FC
X509v3 Authority Key Identifier:
keyid:B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:c3:39:67:41:b3:28:f6:25:37:de:2f:44:61:62:3f:cf:60:
a2:03:d2:31:f1:d3:3e:0a:aa:64:a5:d5:5f:f0:23:65:17:a1:
98:53:f1:bb:72:3c:58:5b:d6:d4:ce:74:d5:cb:84:74:14:cc:
1d:19:8c:ec:ad:22:40:f3:59:27:dc:be:48:33:25:87:8b:60:
9d:c0:d6:08:5d:aa:08:c6:10:8a:6b:77:3d:1d:e7:7b:8c:fa:
5c:e4:5f:f0:0b:a3:2d:59:80:24:24:41:c1:ba:5b:fc:bf:43:
61:8a:bc:dc:0c:37:19:d0:70:ac:e9:97:e3:1d:4c:5c:fd:74:
9b:ed:67:28:c5:62:ee:da:e0:7a:0a:e2:da:83:39:ab:da:3a:
a6:49:50:0c:e8:38:67:dd:75:5e:af:04:d8:9b:30:c3:0b:93:
05:5c:22:2b:42:8c:1f:46:7c:8e:49:1b:a3:01:10:1d:25:26:
ff:4d:6e:55:b0:3a:f7:0e:bb:c2:59:bc:3c:e4:e0:69:77:1b:
e6:36:e0:7c:33:11:6d:dd:31:c0:ef:31:3c:e8:73:84:bd:5f:
df:76:aa:fe:a8:1d:9e:1a:0b:ca:82:6a:a2:e5:20:19:a5:a3:
b3:54:d1:a6:8b:0f:06:21:d0:05:1c:8d:55:84:01:4f:59:8a:
5c:0c:12:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:51:53 2026 by rpki-client