
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
File: STl-M7McCo9o_NIHK9qazLZdAuw.mft (raw, json)
Hash identifier: uK1p9aWeqZKr2LNZEwbSeWnrVSC8oudgVBVtCO5rxA8=
Subject key identifier: 20:E2:EA:24:F4:9D:08:56:0B:B3:D7:00:B1:E0:CF:5C:9D:B0:1B:EB
Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
Certificate issuer: /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Certificate serial: 0171
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
Manifest number: 0162
Signing time: Sun 11 Oct 2026 05:39:38 +0000
Manifest this update: Sun 11 Oct 2026 05:39:38 +0000
Manifest next update: Sun 18 Oct 2026 05:39:38 +0000
Files and hashes: 1: STl-M7McCo9o_NIHK9qazLZdAuw.crl (hash: qbt0r+7ay9V9hXQEJYOMEp7KcIEoU4bFtqdUVpAGcEE=)
2: F6BDBBE2AC6411EF85E4707CC4F9AE02.roa (hash: l+pckd4e+wGHq76Itfq46OX2oo+gwBe5SQosKDXEtIs=)
3: F63554A0AC6411EF85E4707CC4F9AE02.roa (hash: QVjM8s9479b2xcLfLXbYsiyhxsijbHL3ngAdlsSGHfI=)
4: F5B752E4AC6411EF85E4707CC4F9AE02.roa (hash: +U79SJGHyy8k6WAyu8iP6KnaD5T4i/lGu+9WzwRR3B0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Validity
Not Before: Oct 11 05:39:38 2026 GMT
Not After : Oct 18 05:39:38 2026 GMT
Subject: CN=6acb211a-db61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:94:d6:bb:3e:24:30:f4:fe:46:39:eb:80:
5a:a7:ea:32:99:60:dc:4e:63:4f:7b:17:16:02:61:
4d:25:ba:08:1a:72:0e:30:5b:6f:c3:b1:c5:ad:76:
61:4f:6f:f1:c3:e9:65:1e:fe:86:4f:13:90:38:d1:
f3:89:16:cb:47:06:5a:d5:74:77:ca:01:62:79:84:
38:e7:1f:b9:c7:fe:c2:85:1e:fa:41:f6:b3:44:e8:
48:1e:36:8a:79:8b:ad:a0:e6:e2:01:ab:90:e0:39:
fb:6d:45:70:e9:a4:57:dc:b4:02:95:5c:7f:37:2a:
08:56:ef:6c:1b:75:38:7e:bf:d2:cd:3d:ae:57:53:
78:ef:f9:f9:fe:f4:34:ec:c4:6f:1a:b2:74:39:ea:
7f:23:d4:cd:fd:33:d2:dc:92:a2:a5:f7:5f:41:00:
3d:06:6f:c8:3e:89:64:f6:b7:f1:5f:eb:86:b4:e4:
2a:20:5e:5d:78:3d:07:d4:0c:cb:78:f5:ef:0a:51:
b0:07:20:db:8d:c8:ea:ed:01:81:86:db:ab:6e:34:
3c:a9:20:a7:18:fb:1f:26:e5:af:4f:ec:ad:63:f7:
25:e2:75:ef:89:67:4a:3c:f4:56:14:ad:3b:53:d7:
0a:4c:a4:aa:64:9b:3f:ce:8c:38:8f:0c:83:a1:86:
1f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E2:EA:24:F4:9D:08:56:0B:B3:D7:00:B1:E0:CF:5C:9D:B0:1B:EB
X509v3 Authority Key Identifier:
keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8a:44:93:c7:3b:fa:0d:c4:79:ff:f8:c4:0a:42:77:84:19:
2b:82:20:8d:ce:84:f8:1e:b8:5c:da:d0:31:8d:bd:77:be:64:
47:a1:62:9c:f0:76:70:d2:df:b0:7d:14:13:13:57:08:71:33:
91:0e:75:dc:e4:f2:be:8d:92:11:d0:36:5c:fa:5e:24:38:fc:
a0:05:8b:b0:9e:fe:81:5b:b6:1a:b6:ec:72:f4:c5:75:34:07:
df:a5:8b:c4:5e:48:f4:23:58:db:29:2c:80:e9:ba:bd:55:1b:
db:00:12:7e:4f:ba:42:8f:be:d9:44:f8:fb:0e:45:fa:63:25:
ad:6b:c7:de:8d:32:9b:ba:e4:3a:94:94:0c:e0:22:d6:be:97:
9b:35:b9:f8:a7:61:09:cf:19:6e:bf:62:6c:89:79:0e:66:b6:
fc:f6:8f:8b:a9:0e:91:63:1a:7b:8e:c9:a3:20:2f:2d:4e:a7:
28:53:14:f8:43:f1:26:a5:02:d5:4c:ec:51:d5:4d:1c:9f:fe:
6e:3b:ac:bf:90:c8:a9:ef:fe:7f:3c:0d:76:2e:28:2a:6a:12:
a6:0d:23:b6:18:04:ac:ea:85:55:42:79:07:3b:ab:e9:2c:76:
b5:20:df:ac:55:0e:84:46:6e:cd:ec:06:d5:24:e0:95:05:9b:
a7:0a:a8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:46:16 2026 by rpki-client