Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
File:                     STl-M7McCo9o_NIHK9qazLZdAuw.mft (raw, json)
Hash identifier:          /XVw4FAgygchBS0V0J7qiLLkpm4G6MwcDgOJGcB5LnA=
Subject key identifier:   88:AB:45:3D:C6:DB:3D:53:6A:D6:B2:FB:0D:1D:4E:7D:E6:AC:C9:15
Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
Certificate issuer:       /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Certificate serial:       0179
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
Manifest number:          016A
Signing time:             Tue 27 Oct 2026 05:13:25 +0000
Manifest this update:     Tue 27 Oct 2026 05:13:25 +0000
Manifest next update:     Tue 03 Nov 2026 05:13:25 +0000
Files and hashes:         1: STl-M7McCo9o_NIHK9qazLZdAuw.crl (hash: Ia/FMKk2NZmty7y8NejoA/lA9RkF7E02n+Ch3AHG08g=)
                          2: F5B752E4AC6411EF85E4707CC4F9AE02.roa (hash: +U79SJGHyy8k6WAyu8iP6KnaD5T4i/lGu+9WzwRR3B0=)
                          3: F63554A0AC6411EF85E4707CC4F9AE02.roa (hash: QVjM8s9479b2xcLfLXbYsiyhxsijbHL3ngAdlsSGHfI=)
                          4: F6BDBBE2AC6411EF85E4707CC4F9AE02.roa (hash: l+pckd4e+wGHq76Itfq46OX2oo+gwBe5SQosKDXEtIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
                          rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 05:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
        Validity
            Not Before: Oct 27 05:13:25 2026 GMT
            Not After : Nov  3 05:13:25 2026 GMT
        Subject: CN=6ae032f5-f144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:76:c4:ac:75:d5:00:cf:e1:75:58:be:9e:b5:
                    f1:9d:be:c5:51:61:84:fe:e0:df:a7:81:a2:c0:a3:
                    58:35:00:4c:73:73:7d:73:ea:c3:71:1e:e2:89:2f:
                    23:ff:47:7b:a7:cc:6e:85:00:da:55:d4:be:fd:9c:
                    78:c3:f1:e4:63:65:8b:43:73:b7:14:99:3b:a0:ec:
                    75:f6:f3:7e:08:93:5c:99:b2:91:62:e4:92:14:d9:
                    21:bc:a6:e5:58:4b:e5:ce:8a:a0:06:6d:9b:b0:e7:
                    1f:20:0e:f5:74:e3:39:2a:24:30:49:c1:09:37:6f:
                    c7:7b:7e:63:1c:bf:a6:33:9b:e9:e6:8f:79:c5:0a:
                    a3:b6:f8:8f:f7:4a:b1:69:a4:e7:a0:f7:95:7c:7d:
                    5b:97:f9:55:8f:69:a6:c4:2a:77:c2:b3:47:51:6a:
                    b6:8b:60:3f:a1:46:de:21:86:81:23:35:ea:c9:da:
                    70:c1:83:e6:39:dd:61:72:d9:36:56:1d:a5:d7:10:
                    13:de:d6:55:2d:d1:25:e2:bc:1e:40:2d:f0:6d:2a:
                    eb:32:41:41:15:c4:0f:cf:4c:6c:10:d6:5b:bc:8c:
                    43:2c:ee:30:b2:ee:6c:5f:10:71:89:9e:8c:15:84:
                    93:1d:b3:01:ff:88:18:52:9e:10:a5:2c:28:d3:54:
                    fc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AB:45:3D:C6:DB:3D:53:6A:D6:B2:FB:0D:1D:4E:7D:E6:AC:C9:15
            X509v3 Authority Key Identifier:
                keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:41:19:91:34:b3:2b:71:59:1f:b9:00:b9:68:c5:32:bc:81:
         ea:9f:73:e5:70:35:d4:77:0f:61:a0:b9:62:b9:8c:c0:03:b5:
         57:5a:81:e1:f5:c4:27:f6:82:c8:14:6a:a4:fb:c3:ab:ed:b9:
         5b:c9:8f:b8:80:26:b4:93:ee:70:ce:36:c8:ee:d8:ab:1e:69:
         37:3b:c8:3f:e3:05:e9:6e:0e:4c:b5:3a:04:fc:17:54:bf:0b:
         54:bc:04:67:37:c2:37:e3:ec:45:9b:e0:4b:42:74:7f:fd:6b:
         fb:fb:e8:05:a3:27:41:6e:6a:11:5c:4a:9e:85:7b:f8:8c:08:
         0a:e6:bb:6d:d4:ec:3f:3e:52:8a:76:ba:c5:d9:01:1e:b4:b2:
         91:33:0d:40:07:e1:21:43:83:2d:55:1d:45:f6:6e:7b:28:51:
         fb:13:d5:89:90:94:42:9c:6f:61:cd:7f:b6:db:11:ca:99:ae:
         fa:87:b6:ca:29:8c:5a:5a:02:22:60:52:c9:10:6e:96:ea:a7:
         b5:da:63:c6:f8:1e:96:32:15:8a:32:e4:df:d3:6d:e3:01:8a:
         4c:68:c0:3d:b9:4d:da:93:cb:49:f3:91:27:e5:fb:33:96:15:
         82:64:00:12:3a:72:b5:ff:b9:e9:b9:36:8f:a5:80:9f:d4:83:
         e5:6a:a7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:03:47 2026 by rpki-client