
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft
File: sTgy_KSTRJYjasOJSZjD3VE9fAk.mft (raw, json)
Hash identifier: lIlxOFkW5MS2UfNI5yOrtQKQfnGVail57diyFTLd6Uk=
Subject key identifier: 90:FF:B5:88:EA:C1:09:E1:06:F0:56:8E:21:77:1F:C2:FF:9B:68:F2
Authority key identifier: B1:38:32:FC:A4:93:44:96:23:6A:C3:89:49:98:C3:DD:51:3D:7C:09
Certificate issuer: /CN=A91D4A16/serialNumber=B13832FCA4934496236AC3894998C3DD513D7C09
Certificate serial: 0299
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft
Manifest number: 0292
Signing time: Wed 23 Sep 2026 01:37:13 +0000
Manifest this update: Wed 23 Sep 2026 01:37:13 +0000
Manifest next update: Wed 30 Sep 2026 01:37:13 +0000
Files and hashes: 1: sTgy_KSTRJYjasOJSZjD3VE9fAk.crl (hash: oIfTbCwGauLd6uuWs2r4vfXEabzf0FLZ1jcYPaBj9MA=)
2: 61DBE422A88B11EFAF507987C4F9AE02.roa (hash: dsx+NKPNaeGu5VjwmCjHB3rJ2l0LHRp9QzffSXcc09g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.crl
rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665 (0x299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4A16, serialNumber=B13832FCA4934496236AC3894998C3DD513D7C09
Validity
Not Before: Sep 23 01:37:13 2026 GMT
Not After : Sep 30 01:37:13 2026 GMT
Subject: CN=6ab32d49-f9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d2:d0:32:5f:42:c3:37:1c:35:b2:6d:de:dd:
28:45:bf:2e:05:80:3a:b2:59:f0:40:af:b9:32:29:
9d:b4:2b:9d:1c:b9:36:2d:9a:06:a8:db:06:ff:68:
37:ee:fe:f4:ea:f4:11:07:da:49:ce:66:4a:54:f3:
97:33:60:65:56:7b:c5:f9:3d:dc:e5:53:2d:c2:b0:
d6:50:7c:18:4a:8d:5a:55:68:fa:06:db:34:fa:0d:
65:f0:4a:36:b5:ef:72:09:40:e6:67:1c:c8:ed:2f:
bd:30:07:24:7e:95:7e:cf:35:09:9b:85:41:de:55:
ed:f6:73:fd:11:3c:f7:27:04:a3:1b:40:c6:e3:28:
53:21:fb:2a:a2:3c:94:4e:20:3b:05:84:29:b6:4a:
18:76:53:3b:77:5a:3d:04:a5:91:8f:ea:bc:fd:38:
b3:32:b0:d5:64:c8:01:3c:32:b9:6f:cd:89:cc:55:
c3:c5:00:d1:cd:f9:96:0a:63:b0:a0:94:be:95:e8:
f9:ed:a1:84:81:8a:f1:d4:ed:70:78:a5:99:e8:27:
03:b8:37:a8:3f:ee:94:38:87:a0:b0:1a:c6:6e:7b:
78:47:67:f5:bc:62:29:bf:8e:ae:dc:ae:e5:61:fc:
11:25:e6:34:1f:9c:a9:50:40:c4:ac:64:b3:87:92:
65:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FF:B5:88:EA:C1:09:E1:06:F0:56:8E:21:77:1F:C2:FF:9B:68:F2
X509v3 Authority Key Identifier:
keyid:B1:38:32:FC:A4:93:44:96:23:6A:C3:89:49:98:C3:DD:51:3D:7C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:02:ba:cc:db:40:0d:b8:73:5e:27:d3:20:13:b7:6a:df:0a:
9f:45:23:c7:a7:a7:ed:36:7e:44:e0:78:9e:85:3d:96:50:77:
61:a9:64:09:3e:6c:ba:dd:82:b6:95:6a:88:cb:6f:01:76:81:
5a:e1:5f:20:a3:1b:16:b7:51:2c:77:7a:50:82:14:5c:ba:15:
22:20:7d:bb:25:a1:56:9d:98:00:29:67:7a:2f:7a:94:5e:23:
da:b0:e8:12:5c:52:d8:bc:54:6f:8d:df:71:97:b4:04:dc:87:
da:68:c9:96:c7:52:13:17:69:f4:65:1c:8c:66:20:3d:e4:00:
dd:e7:ec:01:2e:86:b0:88:ec:94:15:29:bf:94:5a:1a:57:81:
e7:e1:1f:df:13:9f:88:a0:9a:f3:a5:81:e2:6c:be:93:33:32:
8d:36:90:ef:2d:0a:b0:74:f1:0b:16:1d:db:fd:ad:48:30:31:
46:0a:2b:ad:c3:b0:7a:10:4d:f1:1a:74:cc:c0:d9:d8:ed:92:
a8:e1:a8:98:18:3c:ae:db:6d:0c:89:c4:39:d6:6c:59:b6:b2:
76:ed:10:10:d6:77:c8:90:64:92:99:29:cb:fc:4e:e0:11:60:
19:73:95:8d:6e:64:1d:8e:dc:67:5d:2c:3b:1e:e0:1c:30:6f:
5a:6c:8c:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDRBMTYxMTAvBgNVBAUTKEIxMzgzMkZDQTQ5MzQ0OTYyMzZBQzM4OTQ5OThDM0RE
NTEzRDdDMDkwHhcNMjYwOTIzMDEzNzEzWhcNMjYwOTMwMDEzNzEzWjAYMRYwFAYD
VQQDEw02YWIzMmQ0OS1mOWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAotLQMl9CwzccNbJt3t0oRb8uBYA6slnwQK+5MimdtCudHLk2LZoGqNsG/2g3
7v706vQRB9pJzmZKVPOXM2BlVnvF+T3c5VMtwrDWUHwYSo1aVWj6Bts0+g1l8Eo2
te9yCUDmZxzI7S+9MAckfpV+zzUJm4VB3lXt9nP9ETz3JwSjG0DG4yhTIfsqojyU
TiA7BYQptkoYdlM7d1o9BKWRj+q8/TizMrDVZMgBPDK5b82JzFXDxQDRzfmWCmOw
oJS+lej57aGEgYrx1O1weKWZ6CcDuDeoP+6UOIegsBrGbnt4R2f1vGIpv46u3K7l
YfwRJeY0H5ypUEDErGSzh5Jl0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJD/tYjq
wQnhBvBWjiF3H8L/m2jyMB8GA1UdIwQYMBaAFLE4Mvykk0SWI2rDiUmYw91RPXwJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEExNi9CQUU3RUZGRUND
NTMxMUVEODFGNEM1MTVDNEY5QUUwMi9zVGd5X0tTVFJKWWphc09KU1pqRDNWRTlm
QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NUZ3lfS1NUUkpZamFzT0pTWmpEM1ZFOWZBay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NEExNi9CQUU3RUZGRUNDNTMxMUVEODFGNEM1MTVDNEY5QUUwMi9zVGd5X0tTVFJK
WWphc09KU1pqRDNWRTlmQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdQK6zNtADbhzXifTIBO3at8Kn0Ujx6en7TZ+ROB4noU9llB3YalkCT5sut2C
tpVqiMtvAXaBWuFfIKMbFrdRLHd6UIIUXLoVIiB9uyWhVp2YAClnei96lF4j2rDo
ElxS2LxUb43fcZe0BNyH2mjJlsdSExdp9GUcjGYgPeQA3efsAS6GsIjslBUpv5Ra
GleB5+Ef3xOfiKCa86WB4my+kzMyjTaQ7y0KsHTxCxYd2/2tSDAxRgorrcOwehBN
8Rp0zMDZ2O2SqOGomBg8rtttDInEOdZsWbaydu0QENZ3yJBkkpkpy/xO4BFgGXOV
jW5kHY7cZ10sOx7gHDBvWmyMSw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 20:14:59 2026 by rpki-client