
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
File: STl-M7McCo9o_NIHK9qazLZdAuw.mft (raw, json)
Hash identifier: GbghFBWVsem6PK7inF7MgswhkChwL+Q7FepWm5G+Kx0=
Subject key identifier: CF:1D:3E:DC:0F:BD:1B:35:9D:C4:67:0C:80:C1:10:9B:BD:A4:B9:C7
Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
Certificate issuer: /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
Manifest number: 0120
Signing time: Mon 01 Jun 2026 06:35:23 +0000
Manifest this update: Mon 01 Jun 2026 06:35:23 +0000
Manifest next update: Mon 08 Jun 2026 06:35:23 +0000
Files and hashes: 1: STl-M7McCo9o_NIHK9qazLZdAuw.crl (hash: w1nRmKmAODYff7UA9eKjz0TzDlYnuNslixZE6USh1+o=)
2: F6BDBBE2AC6411EF85E4707CC4F9AE02.roa (hash: l+pckd4e+wGHq76Itfq46OX2oo+gwBe5SQosKDXEtIs=)
3: F5B752E4AC6411EF85E4707CC4F9AE02.roa (hash: +U79SJGHyy8k6WAyu8iP6KnaD5T4i/lGu+9WzwRR3B0=)
4: F63554A0AC6411EF85E4707CC4F9AE02.roa (hash: QVjM8s9479b2xcLfLXbYsiyhxsijbHL3ngAdlsSGHfI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Validity
Not Before: Jun 1 06:35:23 2026 GMT
Not After : Jun 8 06:35:23 2026 GMT
Subject: CN=6a1d282b-de49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:b1:ef:1b:9e:36:f4:fe:31:60:76:47:64:
f4:7e:6a:a0:cf:1b:ff:6b:c5:3b:ce:d6:29:7b:00:
64:fd:ff:1f:f4:62:8c:46:f3:fd:19:ca:94:ae:5d:
22:84:2b:80:03:a3:8c:e1:f0:b9:fd:e3:1f:ca:26:
40:b6:03:5f:b2:84:73:0e:17:69:30:1c:52:d1:69:
db:3a:40:08:fc:68:63:9f:dc:a8:36:9f:1a:21:e4:
3f:8e:a3:15:3d:9c:87:7e:63:16:18:4e:04:8e:95:
2c:7e:1f:83:1d:3b:85:9b:5e:08:e6:ac:66:37:3e:
8d:6e:c4:9b:82:66:00:57:a9:22:59:4b:4f:de:c9:
96:a1:25:bc:78:14:7d:86:49:88:9a:92:9f:45:09:
bc:96:92:18:7a:d1:27:42:7c:7a:4f:0d:94:a7:95:
19:61:66:e6:6f:06:1e:99:3b:1d:83:b3:b9:65:02:
b7:4a:65:bc:86:f6:36:0a:ab:73:e3:11:7e:29:ed:
f1:be:ba:fd:d0:c7:98:14:15:89:47:bf:d6:9d:7e:
6e:45:44:a5:59:18:e4:e8:53:d2:9f:b4:dd:44:15:
4e:cc:a0:ff:4c:58:e1:ad:8e:c5:31:47:cc:cb:60:
f4:7a:ba:dd:0f:bc:37:eb:cf:87:58:00:ed:3d:7d:
69:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1D:3E:DC:0F:BD:1B:35:9D:C4:67:0C:80:C1:10:9B:BD:A4:B9:C7
X509v3 Authority Key Identifier:
keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:35:fa:78:be:b7:5a:e5:ee:87:43:4e:95:58:a5:31:1e:0f:
32:dc:52:ab:33:64:08:93:a8:4a:27:e5:98:9a:c7:b0:0b:34:
4c:8e:e8:5b:ee:9a:a2:f6:75:fe:d7:19:8c:5b:6c:d7:42:00:
fb:cf:0e:4a:a4:77:58:09:70:f3:cb:ff:aa:ad:ca:49:49:0f:
62:a7:ee:8c:79:04:7f:df:f3:56:92:4b:0f:54:d9:e2:bb:17:
b8:cd:6c:b6:67:f9:52:df:4f:65:16:52:3a:69:b1:59:1f:85:
71:c7:e2:7c:ca:ac:72:c2:09:e0:6a:90:a1:cf:b9:af:13:d4:
47:66:29:84:1e:b3:a9:5f:20:a8:fd:d9:21:04:d3:f3:7a:2a:
3b:9e:f7:6a:c1:c3:2d:be:4e:8c:d8:57:87:7b:28:69:7b:12:
18:48:c4:21:88:b0:50:d6:73:45:14:9c:73:eb:0b:fc:f5:18:
72:50:fd:c6:6b:3a:38:97:24:3d:0f:47:53:5d:20:42:c7:c7:
b4:72:ab:f4:de:52:22:7b:9f:69:85:3f:14:89:51:7e:79:a2:
79:24:8b:a9:8b:c3:a4:a4:d3:e0:d2:7e:be:74:82:70:ec:8a:
7a:5d:9a:75:37:38:c0:ed:c4:8b:b6:31:7c:37:66:c6:1d:d3:
49:f9:1e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:38 2026 by rpki-client