$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft File: STl-M7McCo9o_NIHK9qazLZdAuw.mft (raw, json) Hash identifier: yXqSrvKlfMcuCBz/2javH9FBR0f9mgf3frAd0dRRyRo= Subject key identifier: 09:37:71:98:8F:42:45:9C:3D:6B:E5:E8:6C:DC:E9:65:E7:92:BE:6C Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC Certificate issuer: /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft Manifest number: 0139 Signing time: Thu 23 Jul 2026 07:10:07 +0000 Manifest this update: Thu 23 Jul 2026 07:10:07 +0000 Manifest next update: Thu 30 Jul 2026 07:10:07 +0000 Files and hashes: 1: STl-M7McCo9o_NIHK9qazLZdAuw.crl (hash: n1Du2QAmA/DVfQEhv+KKdJ/Riy3m8PESi3tGeYPTPGo=) 2: F63554A0AC6411EF85E4707CC4F9AE02.roa (hash: QVjM8s9479b2xcLfLXbYsiyhxsijbHL3ngAdlsSGHfI=) 3: F6BDBBE2AC6411EF85E4707CC4F9AE02.roa (hash: l+pckd4e+wGHq76Itfq46OX2oo+gwBe5SQosKDXEtIs=) 4: F5B752E4AC6411EF85E4707CC4F9AE02.roa (hash: +U79SJGHyy8k6WAyu8iP6KnaD5T4i/lGu+9WzwRR3B0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC Validity Not Before: Jul 23 07:10:07 2026 GMT Not After : Jul 30 07:10:07 2026 GMT Subject: CN=6a61be4f-2e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:97:4e:09:98:04:b3:ff:bc:69:d4:a9:84:a2: b1:8a:dc:a0:a9:7d:1b:18:81:9a:33:a6:30:dd:b5: e4:86:a3:7a:65:e0:0d:8f:0a:79:f7:ea:6b:df:15: 1d:45:7f:d8:75:f2:29:8e:b6:d4:83:42:41:f4:07: 0a:ed:c4:8b:f2:b6:93:12:23:8a:87:4e:28:7b:35: e1:20:79:43:8e:ec:96:5e:81:5a:07:7e:f7:cc:e7: cd:e0:09:b8:9a:5c:9d:dd:fb:60:5c:62:25:57:fd: d9:cf:0d:1a:cc:70:1d:20:42:ca:f8:ba:92:0b:05: e0:e2:a8:c7:de:d3:7c:1d:e2:d4:2f:78:83:88:5e: 36:af:22:d2:24:72:21:90:32:b6:59:31:87:fc:dc: ac:58:c8:82:00:c5:93:52:ea:91:06:94:a0:0b:e8: 44:67:df:41:2c:aa:36:8e:55:35:4a:5e:94:db:8b: e6:18:82:3c:c1:ec:7a:cd:9a:1d:cf:a5:12:9e:07: 53:e7:c3:61:94:28:77:e1:9d:10:bd:d4:e0:fe:51: 46:0c:fd:1c:3d:97:aa:8f:71:70:a9:07:1e:2b:3e: 3a:a2:46:cd:4c:d3:f9:ed:7e:6a:e3:00:37:ec:7d: 0a:f8:f9:03:48:47:eb:ab:3e:6b:7e:70:d5:08:de: 87:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:37:71:98:8F:42:45:9C:3D:6B:E5:E8:6C:DC:E9:65:E7:92:BE:6C X509v3 Authority Key Identifier: keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:18:f0:2f:c0:66:9c:4b:86:c5:d9:5c:42:c5:64:c3:54:ee: f4:9b:af:16:ef:3b:38:4d:ec:b8:1f:94:74:31:94:63:2b:43: 8a:16:00:1e:c7:62:8c:97:95:9f:8a:10:ac:0f:af:dc:ed:9c: 38:00:06:2e:b8:99:a1:f2:c6:3e:96:8e:2d:24:99:d0:fd:b8: cb:5e:ec:e6:05:66:9c:3f:1f:15:06:18:3c:20:f2:31:48:7b: 1d:15:8d:72:f5:12:bd:a3:44:77:f7:8b:ec:f5:3d:d0:75:c1: ac:ee:d9:12:79:c9:42:d6:92:67:65:27:1d:85:6c:40:2f:d4: 23:41:a8:f9:76:e0:a8:71:e6:26:3d:02:c3:e3:00:c3:63:8c: 0e:c7:db:4d:ce:e4:8e:0d:31:04:f8:94:b0:5e:98:b6:7a:9e: 11:7e:81:69:7c:7a:fc:da:fe:49:1a:14:65:c2:73:1e:6e:c5: a1:ae:d5:10:89:f9:c6:73:a3:64:fb:2f:00:67:ee:5a:cb:09: 88:cb:9c:93:68:30:14:71:70:0d:81:1a:c2:4f:1b:6c:b8:25: 2c:63:5f:f1:6d:00:93:72:5f:2a:60:b2:e4:42:7b:19:e3:69: 53:15:f7:33:77:d8:8f:ff:d7:9d:8d:00:02:f3:5d:5d:c8:d7: f6:b5:e6:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGQjYxMTAvBgNVBAUTKDQ5Mzk3RTMzQjMxQzBBOEY2OEZDRDIwNzJCREE5QUND QjY1RDAyRUMwHhcNMjYwNzIzMDcxMDA3WhcNMjYwNzMwMDcxMDA3WjAYMRYwFAYD VQQDEw02YTYxYmU0Zi0yZTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JdOCZgEs/+8adSphKKxitygqX0bGIGaM6Yw3bXkhqN6ZeANjwp59+pr3xUd RX/YdfIpjrbUg0JB9AcK7cSL8raTEiOKh04oezXhIHlDjuyWXoFaB373zOfN4Am4 mlyd3ftgXGIlV/3Zzw0azHAdIELK+LqSCwXg4qjH3tN8HeLUL3iDiF42ryLSJHIh kDK2WTGH/NysWMiCAMWTUuqRBpSgC+hEZ99BLKo2jlU1Sl6U24vmGII8wex6zZod z6USngdT58NhlCh34Z0QvdTg/lFGDP0cPZeqj3FwqQceKz46okbNTNP57X5q4wA3 7H0K+PkDSEfrqz5rfnDVCN6HXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAk3cZiP QkWcPWvl6Gzc6WXnkr5sMB8GA1UdIwQYMBaAFEk5fjOzHAqPaPzSByvamsy2XQLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUZCNi84NjQ3RTQxRUFD NjQxMUVGQjY4NDI2N0JDNEY5QUUwMi9TVGwtTTdNY0NvOW9fTklISzlxYXpMWmRB dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1NUbC1NN01jQ285b19OSUhLOXFhekxaZEF1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUZCNi84NjQ3RTQxRUFDNjQxMUVGQjY4NDI2N0JDNEY5QUUwMi9TVGwtTTdNY0Nv OW9fTklISzlxYXpMWmRBdXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhxjwL8BmnEuGxdlcQsVkw1Tu9JuvFu87OE3suB+UdDGUYytDihYAHsdijJeV n4oQrA+v3O2cOAAGLriZofLGPpaOLSSZ0P24y17s5gVmnD8fFQYYPCDyMUh7HRWN cvUSvaNEd/eL7PU90HXBrO7ZEnnJQtaSZ2UnHYVsQC/UI0Go+XbgqHHmJj0Cw+MA w2OMDsfbTc7kjg0xBPiUsF6YtnqeEX6BaXx6/Nr+SRoUZcJzHm7Foa7VEIn5xnOj ZPsvAGfuWssJiMuck2gwFHFwDYEawk8bbLglLGNf8W0Ak3JfKmCy5EJ7GeNpUxX3 M3fYj//XnY0AAvNdXcjX9rXmWg== -----END CERTIFICATE-----Generated at Fri Jul 24 15:31:24 2026 by rpki-client