
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
File: STl-M7McCo9o_NIHK9qazLZdAuw.mft (raw, json)
Hash identifier: WgfCflNjehryskCR8ZneE6+0qiwqIjZR44m3zl3aiF0=
Subject key identifier: 0A:FE:F8:C7:4A:AA:B8:EA:D0:97:11:B9:EE:D1:EB:E0:C0:B5:F2:B0
Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
Certificate issuer: /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
Manifest number: F2
Signing time: Tue 03 Mar 2026 05:57:22 +0000
Manifest this update: Tue 03 Mar 2026 05:57:21 +0000
Manifest next update: Tue 10 Mar 2026 05:57:21 +0000
Files and hashes: 1: STl-M7McCo9o_NIHK9qazLZdAuw.crl (hash: DTkXbXD4mC9+BRbQadzAiJ0vB3PLwL7aelSoF5HvdBc=)
2: F6BDBBE2AC6411EF85E4707CC4F9AE02.roa (hash: l+pckd4e+wGHq76Itfq46OX2oo+gwBe5SQosKDXEtIs=)
3: F5B752E4AC6411EF85E4707CC4F9AE02.roa (hash: +U79SJGHyy8k6WAyu8iP6KnaD5T4i/lGu+9WzwRR3B0=)
4: F63554A0AC6411EF85E4707CC4F9AE02.roa (hash: QVjM8s9479b2xcLfLXbYsiyhxsijbHL3ngAdlsSGHfI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Validity
Not Before: Mar 3 05:57:21 2026 GMT
Not After : Mar 10 05:57:21 2026 GMT
Subject: CN=69a67842-89a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:49:9c:e5:be:53:c1:19:2c:17:eb:02:ff:
d3:27:50:31:65:80:0b:a5:13:f4:57:2d:cd:18:53:
0b:6c:1f:10:00:6b:0b:3d:c9:b7:1d:c3:c3:5e:82:
44:ed:0e:0a:67:2c:a7:8f:76:56:8f:0c:85:69:57:
c1:33:7b:86:cf:c7:4b:69:d1:0e:cf:36:6e:c3:11:
13:3b:22:12:03:40:81:6b:fa:f5:ed:e3:f8:f5:d4:
10:1f:89:2d:03:d7:5d:09:cf:2a:40:08:38:52:3f:
bd:71:e0:48:db:f6:5b:5d:44:74:0a:38:30:4c:d8:
01:9c:30:f9:e4:5a:1a:a4:17:da:90:6f:6e:1f:6d:
46:b6:1e:cb:9c:66:4a:4d:4a:55:52:29:b2:29:6e:
81:62:01:75:c1:67:42:51:83:7a:66:66:b9:62:c9:
16:4c:8c:87:b0:04:a3:44:b4:a5:0f:22:d9:58:b7:
b5:11:73:ea:1f:2f:71:53:9a:e3:5e:bc:df:e5:20:
82:75:45:94:73:8e:9e:cb:b4:a4:f3:6c:38:c2:da:
c7:88:28:ca:7c:b3:3f:1b:cd:90:df:b4:ee:09:a4:
17:50:67:dd:9c:c4:93:a2:94:44:cb:17:51:8e:21:
67:18:de:79:5c:61:86:9f:20:79:a3:35:10:8e:f6:
ec:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FE:F8:C7:4A:AA:B8:EA:D0:97:11:B9:EE:D1:EB:E0:C0:B5:F2:B0
X509v3 Authority Key Identifier:
keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:73:2a:86:fd:7d:8a:ae:a3:5b:8a:27:40:a1:6c:f7:c6:94:
5e:26:e0:29:6b:a9:ae:9f:00:b7:c1:e8:64:77:87:ca:d6:e7:
d9:76:d7:c8:f0:57:e6:1f:d0:94:a1:51:c9:61:80:b9:52:f7:
96:b6:f0:40:d2:0c:e0:66:35:6c:8e:ba:e6:b0:75:f6:c2:cd:
47:d0:fc:8c:e9:66:bd:b1:a4:e2:4e:9b:38:0c:b1:a1:ac:9e:
33:90:43:23:40:53:83:d8:b7:1c:bc:d7:c0:de:87:c5:5e:c8:
6d:1f:13:97:79:61:19:b2:24:94:91:ea:c3:fe:3c:3d:b9:e4:
61:79:32:83:b8:85:2b:8f:b4:b3:15:d2:9d:2a:59:38:a9:ed:
de:25:8b:77:79:b2:1e:0d:8a:d6:af:25:98:42:43:db:a5:c9:
78:36:03:49:af:76:de:d6:29:e9:c5:dc:6a:9f:f4:e2:e1:ba:
d6:ed:a3:c1:b0:d1:42:79:a0:81:82:e4:a7:a2:66:49:05:b5:
d5:b2:d7:e3:2b:96:1f:5d:d5:9e:91:4e:2a:b7:17:71:75:27:
30:23:e5:47:5c:0c:4f:b9:5a:b2:a1:82:94:1a:53:0e:d9:a0:
2a:f7:be:c8:08:d6:eb:cf:2f:b9:ff:5f:d5:56:c4:d8:33:2a:
8f:5b:58:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:31:59 2026 by rpki-client