
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft
File: stpsovF-3e60xFAzYfTYgigLyog.mft (raw, json)
Hash identifier: CUOtFrjkqPVDts14YWNKmSLSP5O1ibCI2ZACoQy66u0=
Subject key identifier: B2:27:36:4E:D3:35:C1:53:26:81:E0:71:DC:48:98:56:C3:FE:C7:6C
Authority key identifier: B2:DA:6C:A2:F1:7E:DD:EE:B4:C4:50:33:61:F4:D8:82:28:0B:CA:88
Certificate issuer: /CN=A9122FD2/serialNumber=B2DA6CA2F17EDDEEB4C4503361F4D882280BCA88
Certificate serial: 0886
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft
Manifest number: 0886
Signing time: Thu 26 Mar 2026 20:26:47 +0000
Manifest this update: Thu 26 Mar 2026 20:26:46 +0000
Manifest next update: Thu 02 Apr 2026 20:26:46 +0000
Files and hashes: 1: stpsovF-3e60xFAzYfTYgigLyog.crl (hash: f21ZwTEAYjuWOwRk08+biDyutaAemQOnkzuDijz+XKY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.crl
rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 20:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2182 (0x886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122FD2, serialNumber=B2DA6CA2F17EDDEEB4C4503361F4D882280BCA88
Validity
Not Before: Mar 26 20:26:46 2026 GMT
Not After : Apr 2 20:26:46 2026 GMT
Subject: CN=69c59687-33f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:69:08:1e:00:69:23:6d:c0:c3:aa:cb:9d:
a4:3c:8a:95:9c:ca:a8:9f:7e:26:af:d7:82:b3:7f:
4c:a5:59:c4:a8:3e:a2:0b:7d:d3:3b:aa:80:a8:84:
e8:99:fb:9e:aa:20:07:c7:f6:68:61:24:90:60:4f:
82:07:e0:a3:50:dd:b3:0a:b2:ff:29:3d:b0:dd:79:
e8:27:1c:69:1a:54:e7:d8:aa:10:31:00:2a:6f:8b:
8a:be:9a:4a:92:37:a2:10:3b:1d:3e:8f:03:04:c1:
16:4c:25:17:3a:fd:37:cb:c5:ab:6c:ae:e9:bc:54:
e6:73:a6:b2:7f:59:8b:1b:98:f5:04:cb:cc:aa:ac:
47:a4:ef:17:99:4d:0b:ce:31:a3:48:93:98:c2:c1:
32:9c:eb:26:a5:b3:bf:a7:d0:b5:e5:c9:ac:86:96:
10:ff:2d:79:f9:aa:3e:9e:c4:ae:b1:48:05:8b:ff:
c0:a7:dd:ee:5b:b4:81:f0:56:13:d8:f5:a3:04:06:
d7:39:bb:82:e4:5d:43:89:64:66:02:45:84:3a:d8:
3e:e6:0f:75:14:94:b6:ff:2f:87:d5:8b:9a:de:1d:
b5:0c:c7:47:8d:f4:d0:40:b1:28:a3:fc:77:30:33:
41:2a:76:1e:fb:68:16:e1:86:76:97:fd:2e:46:e4:
6d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:27:36:4E:D3:35:C1:53:26:81:E0:71:DC:48:98:56:C3:FE:C7:6C
X509v3 Authority Key Identifier:
keyid:B2:DA:6C:A2:F1:7E:DD:EE:B4:C4:50:33:61:F4:D8:82:28:0B:CA:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4f:ba:4f:3d:54:82:89:8a:4d:08:70:67:a4:ca:71:c0:5e:
35:ba:1b:4f:71:82:9e:d0:08:b4:e9:13:81:f4:40:72:55:d0:
e6:e3:b3:03:ad:7d:6d:bf:8e:e9:2d:e9:a8:4f:44:6c:49:2f:
50:34:96:52:8e:41:4c:8f:82:8a:db:b3:f7:04:d6:e3:ad:38:
56:d2:2f:05:55:40:77:64:1e:c3:94:01:80:24:60:f7:fa:26:
82:56:17:f1:f6:b3:ed:22:3d:57:41:48:6a:c5:9c:ce:c1:85:
cb:29:6b:59:3e:ee:01:2f:0b:d0:2a:b0:6e:2d:ec:81:5f:dc:
a5:e0:c8:3a:9a:f9:27:8d:78:17:16:30:10:12:ad:5c:b7:a3:
fa:c3:05:e0:1c:b3:d4:ef:f8:da:a1:86:7a:a2:f1:10:ac:03:
6a:1c:9f:86:f5:ce:54:fe:ee:c7:09:a7:d8:51:5f:cc:8d:02:
18:3f:43:eb:a7:72:b8:8b:f0:40:49:2b:94:e5:69:2e:cc:51:
1b:73:e9:64:1b:a0:2e:36:80:06:72:ea:fd:50:02:70:3c:dc:
ce:12:a4:38:3a:55:3c:40:0e:d9:78:e7:58:28:43:51:48:68:
46:6a:34:78:7f:62:29:a9:01:a6:e0:02:4d:0b:16:21:f6:5e:
86:58:1d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:07:27 2026 by rpki-client