
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
File: STl-M7McCo9o_NIHK9qazLZdAuw.mft (raw, json)
Hash identifier: /XVw4FAgygchBS0V0J7qiLLkpm4G6MwcDgOJGcB5LnA=
Subject key identifier: 88:AB:45:3D:C6:DB:3D:53:6A:D6:B2:FB:0D:1D:4E:7D:E6:AC:C9:15
Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
Certificate issuer: /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Certificate serial: 0179
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
Manifest number: 016A
Signing time: Tue 27 Oct 2026 05:13:25 +0000
Manifest this update: Tue 27 Oct 2026 05:13:25 +0000
Manifest next update: Tue 03 Nov 2026 05:13:25 +0000
Files and hashes: 1: STl-M7McCo9o_NIHK9qazLZdAuw.crl (hash: Ia/FMKk2NZmty7y8NejoA/lA9RkF7E02n+Ch3AHG08g=)
2: F5B752E4AC6411EF85E4707CC4F9AE02.roa (hash: +U79SJGHyy8k6WAyu8iP6KnaD5T4i/lGu+9WzwRR3B0=)
3: F63554A0AC6411EF85E4707CC4F9AE02.roa (hash: QVjM8s9479b2xcLfLXbYsiyhxsijbHL3ngAdlsSGHfI=)
4: F6BDBBE2AC6411EF85E4707CC4F9AE02.roa (hash: l+pckd4e+wGHq76Itfq46OX2oo+gwBe5SQosKDXEtIs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 05:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377 (0x179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Validity
Not Before: Oct 27 05:13:25 2026 GMT
Not After : Nov 3 05:13:25 2026 GMT
Subject: CN=6ae032f5-f144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:76:c4:ac:75:d5:00:cf:e1:75:58:be:9e:b5:
f1:9d:be:c5:51:61:84:fe:e0:df:a7:81:a2:c0:a3:
58:35:00:4c:73:73:7d:73:ea:c3:71:1e:e2:89:2f:
23:ff:47:7b:a7:cc:6e:85:00:da:55:d4:be:fd:9c:
78:c3:f1:e4:63:65:8b:43:73:b7:14:99:3b:a0:ec:
75:f6:f3:7e:08:93:5c:99:b2:91:62:e4:92:14:d9:
21:bc:a6:e5:58:4b:e5:ce:8a:a0:06:6d:9b:b0:e7:
1f:20:0e:f5:74:e3:39:2a:24:30:49:c1:09:37:6f:
c7:7b:7e:63:1c:bf:a6:33:9b:e9:e6:8f:79:c5:0a:
a3:b6:f8:8f:f7:4a:b1:69:a4:e7:a0:f7:95:7c:7d:
5b:97:f9:55:8f:69:a6:c4:2a:77:c2:b3:47:51:6a:
b6:8b:60:3f:a1:46:de:21:86:81:23:35:ea:c9:da:
70:c1:83:e6:39:dd:61:72:d9:36:56:1d:a5:d7:10:
13:de:d6:55:2d:d1:25:e2:bc:1e:40:2d:f0:6d:2a:
eb:32:41:41:15:c4:0f:cf:4c:6c:10:d6:5b:bc:8c:
43:2c:ee:30:b2:ee:6c:5f:10:71:89:9e:8c:15:84:
93:1d:b3:01:ff:88:18:52:9e:10:a5:2c:28:d3:54:
fc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AB:45:3D:C6:DB:3D:53:6A:D6:B2:FB:0D:1D:4E:7D:E6:AC:C9:15
X509v3 Authority Key Identifier:
keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:41:19:91:34:b3:2b:71:59:1f:b9:00:b9:68:c5:32:bc:81:
ea:9f:73:e5:70:35:d4:77:0f:61:a0:b9:62:b9:8c:c0:03:b5:
57:5a:81:e1:f5:c4:27:f6:82:c8:14:6a:a4:fb:c3:ab:ed:b9:
5b:c9:8f:b8:80:26:b4:93:ee:70:ce:36:c8:ee:d8:ab:1e:69:
37:3b:c8:3f:e3:05:e9:6e:0e:4c:b5:3a:04:fc:17:54:bf:0b:
54:bc:04:67:37:c2:37:e3:ec:45:9b:e0:4b:42:74:7f:fd:6b:
fb:fb:e8:05:a3:27:41:6e:6a:11:5c:4a:9e:85:7b:f8:8c:08:
0a:e6:bb:6d:d4:ec:3f:3e:52:8a:76:ba:c5:d9:01:1e:b4:b2:
91:33:0d:40:07:e1:21:43:83:2d:55:1d:45:f6:6e:7b:28:51:
fb:13:d5:89:90:94:42:9c:6f:61:cd:7f:b6:db:11:ca:99:ae:
fa:87:b6:ca:29:8c:5a:5a:02:22:60:52:c9:10:6e:96:ea:a7:
b5:da:63:c6:f8:1e:96:32:15:8a:32:e4:df:d3:6d:e3:01:8a:
4c:68:c0:3d:b9:4d:da:93:cb:49:f3:91:27:e5:fb:33:96:15:
82:64:00:12:3a:72:b5:ff:b9:e9:b9:36:8f:a5:80:9f:d4:83:
e5:6a:a7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:03:47 2026 by rpki-client