
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
File: STl-M7McCo9o_NIHK9qazLZdAuw.mft (raw, json)
Hash identifier: cgb2se16KhPL42z/X+Og05P7hrp3MUCvA6/znppAev4=
Subject key identifier: 3E:C9:C8:3B:F3:15:4A:E3:3C:ED:38:86:B8:B3:AE:E7:58:97:24:6E
Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
Certificate issuer: /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Certificate serial: 015E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
Manifest number: 014F
Signing time: Thu 03 Sep 2026 05:27:40 +0000
Manifest this update: Thu 03 Sep 2026 05:27:40 +0000
Manifest next update: Thu 10 Sep 2026 05:27:40 +0000
Files and hashes: 1: STl-M7McCo9o_NIHK9qazLZdAuw.crl (hash: fs6JzoOmtn9XrtX06cOSBIsApTFP5K2Bwe1ejUDDocw=)
2: F5B752E4AC6411EF85E4707CC4F9AE02.roa (hash: +U79SJGHyy8k6WAyu8iP6KnaD5T4i/lGu+9WzwRR3B0=)
3: F6BDBBE2AC6411EF85E4707CC4F9AE02.roa (hash: l+pckd4e+wGHq76Itfq46OX2oo+gwBe5SQosKDXEtIs=)
4: F63554A0AC6411EF85E4707CC4F9AE02.roa (hash: QVjM8s9479b2xcLfLXbYsiyhxsijbHL3ngAdlsSGHfI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 05:27:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Validity
Not Before: Sep 3 05:27:40 2026 GMT
Not After : Sep 10 05:27:40 2026 GMT
Subject: CN=6a99054c-f516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:64:fb:c3:24:3f:ab:57:23:8f:48:ca:54:2f:
e1:e1:af:fe:10:34:fb:07:bf:95:b7:af:b1:7e:86:
72:07:44:2b:25:cf:cd:f6:dc:e8:ae:22:74:3b:d9:
70:b2:e1:fc:2c:6c:4f:d5:8c:ce:d4:c0:06:13:36:
60:90:fc:49:b2:63:ec:c6:54:62:13:34:cd:64:12:
71:13:b1:e5:07:4e:76:73:d6:d6:19:b2:4e:bc:5b:
10:02:7c:54:54:9b:ec:58:2a:db:b5:f3:6f:31:03:
d3:12:15:97:00:26:b7:fa:2a:64:fe:07:f8:84:f7:
ce:08:28:2c:3a:ef:ef:33:c1:f0:5e:21:49:62:ef:
9c:ae:cf:a1:f6:f4:17:f5:47:b6:24:54:b1:a8:20:
d9:58:1a:21:4e:5f:7e:19:4e:6c:26:38:6b:d9:2e:
97:21:02:b9:ab:cb:cd:5e:6e:3f:ab:9c:bc:fb:ac:
5d:79:20:41:6d:16:62:64:73:86:b9:d8:fc:15:ff:
17:09:af:d4:62:d5:11:73:55:7f:4b:26:12:e6:c1:
da:4c:33:29:60:f5:9d:c3:43:3a:35:1c:fb:8e:24:
52:1d:da:25:26:7e:6d:04:fa:7d:09:0e:53:47:5e:
c4:25:af:df:80:4e:f7:2f:14:7a:08:e5:d5:af:c7:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C9:C8:3B:F3:15:4A:E3:3C:ED:38:86:B8:B3:AE:E7:58:97:24:6E
X509v3 Authority Key Identifier:
keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:17:8d:1b:da:1e:c8:51:0a:40:ad:3c:81:2d:a6:88:60:0a:
5d:16:c3:75:83:48:d3:77:83:d2:64:8d:17:91:95:3a:ca:41:
0e:0c:79:21:a1:80:e4:51:dd:d7:db:4d:a8:be:55:cc:0d:50:
a3:7d:ee:27:ac:f6:28:4b:8d:2f:ff:c4:8e:a1:de:31:3c:a3:
38:d1:df:4e:76:a5:a0:3a:95:21:da:2c:76:75:29:db:0d:f9:
5f:42:f5:5f:2f:59:83:f1:4f:91:3d:d7:97:aa:00:74:a4:eb:
cd:fd:26:54:9a:d8:86:53:b2:f8:1e:ec:0b:03:2b:87:4e:4f:
c6:93:f4:a2:d8:82:73:b5:2e:35:23:ee:b7:01:b6:c9:c3:8d:
14:8f:74:31:c1:e4:99:27:54:95:de:b1:8e:3c:fa:73:7d:50:
e8:a0:5c:ee:1a:de:fa:48:33:33:9e:58:57:55:69:d1:86:86:
7d:42:f5:33:02:d5:cd:9c:1a:a6:94:33:fb:26:da:99:5e:dd:
d4:bb:ac:56:d0:ce:d4:c9:07:aa:be:5f:2a:11:e6:92:2d:7a:
60:22:5d:69:7c:b1:be:a2:b9:3c:61:fd:5f:0a:9e:3f:9f:a9:
cb:a5:5c:db:a1:89:70:ae:1a:0a:99:40:6f:ca:8f:9c:21:54:
d9:5d:09:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:26:16 2026 by rpki-client