
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft
File: sTgy_KSTRJYjasOJSZjD3VE9fAk.mft (raw, json)
Hash identifier: RBBXystN8QMLcAaWCtH78vPk5tx6bYZg2ZcXSchn5GE=
Subject key identifier: 96:1C:C8:82:BB:96:3F:56:0B:BE:B8:22:27:41:B2:D0:1C:95:FD:FD
Authority key identifier: B1:38:32:FC:A4:93:44:96:23:6A:C3:89:49:98:C3:DD:51:3D:7C:09
Certificate issuer: /CN=A91D4A16/serialNumber=B13832FCA4934496236AC3894998C3DD513D7C09
Certificate serial: 022D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft
Manifest number: 0228
Signing time: Sun 01 Mar 2026 03:30:27 +0000
Manifest this update: Sun 01 Mar 2026 03:30:27 +0000
Manifest next update: Sun 08 Mar 2026 03:30:27 +0000
Files and hashes: 1: sTgy_KSTRJYjasOJSZjD3VE9fAk.crl (hash: 0yZxfSc2QNIjpbm5s6xGqF2uTlgOFKjz1KkrDokdU+g=)
2: 61DBE422A88B11EFAF507987C4F9AE02.roa (hash: 5JjQBJx2Pjnhm+6Kg83lIxJriPqmmDrWvmhqbV4seEo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.crl
rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557 (0x22d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4A16, serialNumber=B13832FCA4934496236AC3894998C3DD513D7C09
Validity
Not Before: Mar 1 03:30:27 2026 GMT
Not After : Mar 8 03:30:27 2026 GMT
Subject: CN=69a3b2d3-135f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:86:3e:c0:91:07:a3:11:38:0c:dc:eb:db:
77:cf:64:20:1d:e9:db:f7:e1:02:42:43:ab:81:c6:
eb:3e:c1:76:5b:1e:1b:2a:34:d8:24:39:17:d8:06:
18:ca:ad:05:c2:5e:00:7e:11:64:d3:09:88:cd:49:
1e:fd:ec:a1:ba:fb:f0:ed:30:63:f4:1d:f4:5b:e3:
d0:32:0d:4d:9e:c0:13:51:93:88:1a:c6:e4:ea:d8:
5c:02:87:4b:c4:4a:bf:af:a4:fb:a3:69:fc:02:88:
95:e3:0b:4c:5a:10:b1:df:e3:b2:4b:0a:cc:ca:98:
25:d1:53:67:bc:c8:5f:b6:0e:9f:b1:9a:97:50:af:
0d:5f:6e:d6:63:d0:4b:6d:3e:63:f5:a9:df:62:77:
41:ba:be:75:34:5d:31:b5:b4:38:98:7d:5e:d0:62:
b6:7b:c5:4e:2e:d0:d4:da:8f:f5:dc:4b:01:7e:8e:
ac:4f:f1:d6:a5:73:74:d1:79:a5:54:58:ba:c0:a3:
0c:3e:a4:0f:e4:fc:04:85:57:19:9b:03:c9:46:40:
cf:4c:3a:7e:49:51:45:24:70:3a:94:93:43:93:21:
1b:72:91:45:ab:c1:57:e0:7e:fe:a9:0c:dd:bc:e0:
4d:3b:d0:bf:e1:f5:62:bd:11:84:67:dc:8e:68:0a:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1C:C8:82:BB:96:3F:56:0B:BE:B8:22:27:41:B2:D0:1C:95:FD:FD
X509v3 Authority Key Identifier:
keyid:B1:38:32:FC:A4:93:44:96:23:6A:C3:89:49:98:C3:DD:51:3D:7C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:63:cf:cf:79:f9:2b:87:1a:31:a1:54:74:7f:e2:fd:79:3a:
16:36:2a:f0:2a:b0:56:a6:e3:e0:4c:da:c8:42:fd:b8:bb:03:
81:c5:c5:09:27:bb:1e:a4:23:13:f6:23:a3:e7:81:03:31:2a:
e1:d3:ac:9f:80:ed:9d:50:e4:eb:18:da:40:74:ff:8b:21:54:
3b:a6:3b:77:c8:4a:f4:d6:bb:e8:09:2c:5a:19:5a:24:7b:3f:
ae:84:d8:44:7b:a3:87:1c:3f:46:14:5d:4b:e1:15:9b:10:47:
6e:f7:0d:c5:5b:e3:34:ca:74:56:83:fd:b7:bd:53:bd:56:5a:
8b:49:ce:a2:5c:fa:cb:70:2c:02:08:83:61:35:b8:00:d5:0d:
c2:0a:41:3a:3a:98:b6:c7:f4:39:3e:3a:84:bf:37:1f:0f:41:
2f:1c:8f:c0:9c:a6:27:a2:b0:ab:0b:70:c1:38:f3:e7:0e:67:
8d:80:f0:24:70:09:58:0c:52:77:5c:04:3f:57:42:81:4d:ea:
86:ef:51:96:31:04:ff:46:4e:76:78:47:db:f2:2e:a1:fa:55:
f9:d1:2f:9d:e9:de:0a:fd:31:7a:15:13:87:9c:a4:26:f3:e8:
4c:e1:a8:66:65:84:1d:e2:9d:4c:02:36:d0:e3:c6:33:ad:7c:
a0:b1:25:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:11:02 2026 by rpki-client