
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
File: STl-M7McCo9o_NIHK9qazLZdAuw.mft (raw, json)
Hash identifier: sg9MFaCbCPp51Ndw8nhhuKhMz0wfd1h1yfHGBFDqgCg=
Subject key identifier: 40:B1:36:09:7F:06:01:FF:06:41:69:A6:2B:99:40:47:03:23:AC:BA
Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
Certificate issuer: /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Certificate serial: 0145
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
Manifest number: 0136
Signing time: Fri 17 Jul 2026 06:41:50 +0000
Manifest this update: Fri 17 Jul 2026 06:41:50 +0000
Manifest next update: Fri 24 Jul 2026 06:41:50 +0000
Files and hashes: 1: STl-M7McCo9o_NIHK9qazLZdAuw.crl (hash: 8NmN2PdGUyvOFJ75n06lUWx8+LNS3HdaPqz6picLPKc=)
2: F5B752E4AC6411EF85E4707CC4F9AE02.roa (hash: +U79SJGHyy8k6WAyu8iP6KnaD5T4i/lGu+9WzwRR3B0=)
3: F6BDBBE2AC6411EF85E4707CC4F9AE02.roa (hash: l+pckd4e+wGHq76Itfq46OX2oo+gwBe5SQosKDXEtIs=)
4: F63554A0AC6411EF85E4707CC4F9AE02.roa (hash: QVjM8s9479b2xcLfLXbYsiyhxsijbHL3ngAdlsSGHfI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:41:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325 (0x145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Validity
Not Before: Jul 17 06:41:50 2026 GMT
Not After : Jul 24 06:41:50 2026 GMT
Subject: CN=6a59ceae-fa3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:0e:81:d4:b2:f1:2a:07:31:fb:72:20:08:
9c:88:63:92:ea:b7:8c:33:f7:be:8f:ad:ca:84:a1:
a4:a5:cc:b3:5e:4e:6e:f6:e9:04:1c:50:e1:f9:40:
21:65:72:3a:7e:3f:95:03:b5:9e:55:a4:f9:a7:67:
43:5e:f6:48:ff:e1:99:be:fb:14:2b:bf:15:5f:3f:
45:38:6a:88:cd:25:e3:eb:e8:37:47:bf:81:9c:6a:
4c:89:f3:35:04:8c:05:35:3e:cb:e4:02:59:7e:b3:
61:af:0e:50:76:4c:c1:67:e1:a5:24:31:a4:74:e9:
fe:55:3b:9c:44:7f:32:e0:a4:08:f9:67:97:02:5f:
fa:f7:7b:f2:98:0b:ca:48:73:e9:12:a0:40:8d:ea:
cd:7c:a7:b2:ea:7a:ef:1d:ab:d6:e6:b4:fd:bd:77:
26:90:c7:87:14:92:c4:4f:63:46:3c:b4:b6:dd:0f:
62:89:9e:53:91:28:a7:1e:e2:dd:90:9d:31:6c:04:
0b:c2:53:2d:30:eb:03:f2:bf:82:97:fd:22:b4:4c:
42:09:19:50:72:51:ec:47:a0:9c:47:ad:22:94:52:
e5:3e:ec:d0:45:a3:35:c6:d7:7d:7b:32:1b:35:f1:
85:fc:b7:8f:e2:a5:1b:a0:a6:ab:21:cb:f7:85:6b:
0d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B1:36:09:7F:06:01:FF:06:41:69:A6:2B:99:40:47:03:23:AC:BA
X509v3 Authority Key Identifier:
keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:c1:5e:e0:5c:11:d4:c7:26:e1:92:35:42:75:b0:61:2a:91:
ad:28:9b:99:33:a6:db:3e:26:00:9b:5e:f6:7d:c3:5c:8a:f1:
b8:fd:d0:e3:14:39:eb:89:8b:2b:11:17:62:23:31:d5:7d:d5:
5d:c8:ac:d7:3c:a4:b0:e1:8f:03:97:ed:23:35:62:13:b0:7c:
d5:79:ca:dc:d5:8f:b8:d4:18:b5:cf:9a:80:12:78:c4:ff:91:
c1:5a:42:0a:ba:e2:cb:e8:b5:c2:83:23:9b:fa:43:f5:18:e7:
e2:96:ee:bb:b4:30:60:f9:8a:60:58:63:04:3c:27:3d:4b:ae:
00:56:a6:46:6e:09:b5:cf:c1:60:e4:da:68:21:57:46:3d:65:
d2:b6:7c:d0:b8:91:bd:73:75:c1:77:42:ba:e5:d1:fd:c1:a3:
9c:ed:c4:b0:6e:e7:7e:35:3b:89:f4:57:c3:e0:47:98:c9:cd:
97:2c:da:69:1b:7a:bf:20:4c:4d:6d:7e:83:a0:56:6b:80:85:
17:8d:b3:4d:a6:8b:9b:9b:cb:9e:3d:b2:71:16:ba:54:ca:fb:
81:fc:d1:33:b7:11:5d:a3:2c:62:09:64:d3:81:bf:99:c8:cb:
d6:04:65:86:4c:c9:10:b5:47:f5:2e:27:f5:30:50:29:58:75:
31:6f:69:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:14 2026 by rpki-client