
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft
File: stutBbafR5fu9x8D1lq-rdKJLIA.mft (raw, json)
Hash identifier: 9W351++TkK5bdGDQO17TktAeZFrnPHJTM7V7VAefFd0=
Subject key identifier: A9:9F:8D:1A:85:BA:15:C6:75:B9:87:37:91:84:93:22:59:17:49:01
Authority key identifier: B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80
Certificate issuer: /CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80
Certificate serial: 03D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft
Manifest number: 03C8
Signing time: Wed 25 Mar 2026 00:17:03 +0000
Manifest this update: Wed 25 Mar 2026 00:17:03 +0000
Manifest next update: Wed 01 Apr 2026 00:17:03 +0000
Files and hashes: 1: stutBbafR5fu9x8D1lq-rdKJLIA.crl (hash: J2p0iuw0On5faDQiIN71PCIoCNc4/+Q26RB+2HEaQ2c=)
2: 73AF033CF4DA11EFA82A4918C4F9AE02.roa (hash: vcKD0c092EwQlGRDyBF+m3f7p1gimaLImuv+7uPMwTs=)
3: 897E89B4D56B11EFBE0EB053C4F9AE02.roa (hash: 59clnCTTqffhtdg3nSmGiWZQyGuiBR09wGUf8GvsiJc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl
rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:17:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 980 (0x3d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D1A4, serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80
Validity
Not Before: Mar 25 00:17:03 2026 GMT
Not After : Apr 1 00:17:03 2026 GMT
Subject: CN=69c3297f-b3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:0e:c1:c6:18:c6:49:0d:00:68:ae:3e:07:
ae:a4:58:9d:46:53:5c:8d:9d:70:c7:ec:66:e5:e7:
34:90:d5:04:34:c3:e0:72:e1:4f:e7:4e:45:9e:52:
ab:64:9d:3a:07:70:6e:d9:9c:a2:2c:d6:51:59:3a:
c7:3d:e4:3a:d4:28:41:33:ad:55:c4:11:fd:6b:4c:
79:59:8d:a4:63:b8:b9:06:43:db:01:c9:d7:c9:d1:
24:d1:bc:c6:18:b1:37:e8:93:53:b4:15:66:35:6e:
5f:3a:c7:46:7e:33:6a:14:22:9d:60:fb:21:ee:14:
95:92:b5:1e:83:76:9c:84:ef:63:e3:2a:a9:0a:34:
91:05:1f:43:52:19:39:09:3e:f4:23:f2:67:19:08:
26:7e:18:08:5c:39:bf:e1:f0:55:e9:08:53:c0:a3:
a7:81:3b:25:2a:d3:06:fe:92:dc:b9:22:68:45:94:
9f:e0:25:85:c0:e3:e2:1f:82:b3:ad:c6:eb:bc:1f:
b1:54:07:e4:b2:87:8f:13:99:d0:64:de:42:24:fd:
3b:0b:19:74:87:43:57:a9:62:4b:31:b5:4c:8c:1d:
bc:da:77:60:64:69:8f:63:34:0e:f3:04:57:5a:16:
96:43:61:1f:d1:c0:c6:e9:41:74:3d:6b:f8:3a:db:
f6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9F:8D:1A:85:BA:15:C6:75:B9:87:37:91:84:93:22:59:17:49:01
X509v3 Authority Key Identifier:
keyid:B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:aa:53:c5:78:c3:bb:d4:ff:9b:f4:ca:0d:6d:72:66:1f:b5:
a0:f4:81:c9:75:ba:26:1e:4b:b9:af:e2:a9:53:a1:1a:a5:1e:
d8:78:24:87:0c:a9:da:70:69:5d:96:c1:47:40:9b:d9:86:cf:
8e:a2:2d:3a:30:e0:4d:86:68:67:8d:bc:31:bd:f9:d0:f9:ed:
bd:0c:d3:68:50:4b:98:16:e1:08:f6:41:3d:10:fa:a2:dc:34:
2c:e8:24:1f:a1:08:ed:95:84:b3:82:b9:7b:f3:63:b1:45:d4:
bd:cb:ca:67:c6:0b:37:0c:28:83:f1:b8:a2:8f:44:8e:8f:56:
df:f5:fb:ab:56:39:e0:6b:54:4b:f0:5c:f1:2d:65:b4:9a:49:
9e:d6:ae:49:04:ef:18:b6:d3:f1:57:26:63:6c:5c:da:cb:f6:
6c:35:07:f3:6c:14:c3:46:ed:07:c3:e0:76:cf:67:d6:f0:17:
e0:bf:d0:88:98:0a:55:de:b1:37:73:f3:4f:1e:75:81:fa:29:
44:38:d7:57:75:c6:35:c4:bd:38:99:f3:42:a1:16:85:d0:7b:
f1:34:21:f2:f1:70:54:8c:d2:c5:bf:49:54:b8:46:d8:5b:2a:
c7:58:03:fa:cb:d5:77:e3:b6:11:cf:6d:b8:2d:ef:76:dc:59:
2a:77:09:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:45 2026 by rpki-client