
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft
File: sTgy_KSTRJYjasOJSZjD3VE9fAk.mft (raw, json)
Hash identifier: uMnZcqzpyPqrsDpI1Pxa1dsJFlk9PPIDo6JjIlJ+I+E=
Subject key identifier: 02:C4:01:27:B4:18:C4:B1:B0:B6:CF:9D:BC:F9:C9:77:7E:80:80:E1
Authority key identifier: B1:38:32:FC:A4:93:44:96:23:6A:C3:89:49:98:C3:DD:51:3D:7C:09
Certificate issuer: /CN=A91D4A16/serialNumber=B13832FCA4934496236AC3894998C3DD513D7C09
Certificate serial: 025A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft
Manifest number: 0253
Signing time: Thu 21 May 2026 02:23:30 +0000
Manifest this update: Thu 21 May 2026 02:23:29 +0000
Manifest next update: Thu 28 May 2026 02:23:29 +0000
Files and hashes: 1: sTgy_KSTRJYjasOJSZjD3VE9fAk.crl (hash: +XdbrPtM/kW3m/Z7E/f7Ax20FvAidIlfI4oyVSX/bg0=)
2: 61DBE422A88B11EFAF507987C4F9AE02.roa (hash: dsx+NKPNaeGu5VjwmCjHB3rJ2l0LHRp9QzffSXcc09g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.crl
rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:23:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602 (0x25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4A16, serialNumber=B13832FCA4934496236AC3894998C3DD513D7C09
Validity
Not Before: May 21 02:23:29 2026 GMT
Not After : May 28 02:23:29 2026 GMT
Subject: CN=6a0e6ca2-7221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5f:63:ec:d4:fc:1a:0c:78:d9:05:cb:d5:f3:
52:9e:99:1c:e1:04:f5:86:1f:e9:79:1d:d0:8d:61:
06:7c:ac:38:33:55:05:06:c4:8a:bf:c0:0b:c7:99:
80:97:b3:e4:0b:ee:38:b7:0a:f2:bf:da:f1:bf:64:
fd:9d:a7:6c:8c:47:9a:1a:eb:f4:c4:df:d1:4b:c8:
7f:f4:0d:25:14:99:b3:e8:7f:0d:93:0b:5d:99:5e:
4e:84:bc:80:19:71:aa:55:52:60:57:39:6e:9c:ae:
be:21:95:db:9c:b7:37:81:00:ac:f1:ac:71:d7:5d:
9c:88:c9:c9:f4:86:1f:32:59:34:d6:d7:af:d0:fa:
07:4e:89:97:3f:d5:86:d8:ee:ce:cc:73:55:bc:d5:
7a:77:d9:6e:f1:56:eb:04:22:c6:c5:03:e6:5a:85:
62:51:73:5f:e6:23:e0:55:a0:e3:5c:40:90:6c:90:
4c:e8:72:ad:13:37:72:4a:6c:0a:df:94:52:7b:50:
4e:1f:cc:63:fc:46:50:f2:d5:e6:9e:50:91:e2:ac:
75:97:38:b4:e5:9d:65:ee:df:53:34:3b:f9:2e:be:
be:bf:39:bb:b1:be:50:ad:df:cb:a4:05:17:c4:7b:
92:37:ff:da:6f:61:1c:cb:05:f2:58:a7:e0:41:6e:
f1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C4:01:27:B4:18:C4:B1:B0:B6:CF:9D:BC:F9:C9:77:7E:80:80:E1
X509v3 Authority Key Identifier:
keyid:B1:38:32:FC:A4:93:44:96:23:6A:C3:89:49:98:C3:DD:51:3D:7C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:92:8e:48:48:66:a7:d9:3b:09:26:3b:ea:7d:c9:30:3f:c6:
0f:65:b8:71:f9:ff:b3:2f:b3:0c:cb:e6:f0:6e:30:13:16:19:
7c:98:dc:03:63:84:4c:ee:19:6d:5c:d2:17:7e:95:e8:4a:99:
4a:0f:5d:32:f7:30:b6:39:30:9f:d8:f8:f9:79:c8:26:95:1e:
13:8b:7c:7a:a4:57:c3:d1:41:20:43:78:ad:fc:8b:5b:c8:9c:
1c:d8:28:48:e5:78:b8:fa:22:8d:2b:70:c3:97:62:49:b9:fc:
d8:e1:0d:75:34:0d:0b:87:54:6d:5b:28:87:f0:d6:02:a1:48:
4c:f5:38:8c:8c:6a:90:cc:a5:d7:91:d6:39:58:54:e3:59:83:
04:c9:aa:f4:de:a2:59:50:b8:92:4d:72:c8:2e:8d:a2:09:20:
59:26:67:68:38:b2:aa:96:a9:12:3d:3c:d8:59:dc:16:b6:4d:
ca:e0:ce:f2:fe:b0:b5:e8:fd:88:94:69:c1:87:7a:a7:28:99:
49:cf:2d:fe:5e:97:12:72:f2:a4:10:40:b4:7f:1c:6e:56:81:
c0:61:45:f2:08:df:5f:9b:8e:98:20:3f:a1:19:02:86:7a:63:
0f:04:3c:52:8b:3a:a5:58:01:c8:b4:2f:7a:5f:1a:2b:85:7c:
15:fc:ce:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:35:35 2026 by rpki-client