
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft
File: sbozBTw5ulhlU3dDESOJ4wDEiAc.mft (raw, json)
Hash identifier: aUpx3f2xvuyMY+63YSGMJb53QwE5CoExLAvFVbAHHWE=
Subject key identifier: CA:9F:3E:A7:4C:C4:09:88:95:D1:2F:FB:EA:AA:83:98:BD:45:B0:A6
Authority key identifier: B1:BA:33:05:3C:39:BA:58:65:53:77:43:11:23:89:E3:00:C4:88:07
Certificate issuer: /CN=A9150384/serialNumber=B1BA33053C39BA5865537743112389E300C48807
Certificate serial: 0D4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft
Manifest number: 0D30
Signing time: Wed 20 May 2026 18:08:23 +0000
Manifest this update: Wed 20 May 2026 18:08:22 +0000
Manifest next update: Wed 27 May 2026 18:08:22 +0000
Files and hashes: 1: sbozBTw5ulhlU3dDESOJ4wDEiAc.crl (hash: aPr8MpVAXb9CAunKbjbjBSC5PGYvY/mbufs0awMgblY=)
2: 3240ED82D62D11EFB0442B5DC4F9AE02.roa (hash: goxpVgCyktDRuj+zXY8IwkJZe67SlMAI6ql6BNqLFHg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.crl
rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:08:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3402 (0xd4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150384, serialNumber=B1BA33053C39BA5865537743112389E300C48807
Validity
Not Before: May 20 18:08:22 2026 GMT
Not After : May 27 18:08:22 2026 GMT
Subject: CN=6a0df896-0bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:06:1e:7f:a0:98:ff:80:c6:9e:5e:e7:24:
bb:99:a4:8c:bb:ea:61:75:ff:f7:c3:be:3d:cf:70:
7d:68:12:b5:5c:e4:8b:f5:d0:40:1e:b3:ae:3b:df:
b2:7a:84:b3:73:74:37:dd:d4:cb:71:46:14:a5:63:
af:db:ee:ef:19:e2:40:0b:83:c1:ff:e4:b1:03:b9:
d7:ec:b0:4e:06:4d:ee:12:1f:01:9d:14:f1:56:96:
46:a1:67:91:10:7b:9f:e8:b6:9b:6a:f6:88:26:ce:
4f:fe:9d:46:25:40:4c:51:ab:b5:7d:8b:6f:64:38:
ff:7f:0b:86:3a:49:62:23:0a:46:80:8e:f4:e9:df:
77:9e:8b:20:e5:8b:2c:e5:02:1c:e4:2e:4d:5e:be:
e3:6e:63:99:22:3f:43:0b:72:bf:6c:41:9a:6e:1d:
09:e9:9d:06:e0:31:00:d9:3b:89:62:af:fe:06:ef:
21:bf:f6:82:7d:2b:ce:80:9d:ff:13:e3:04:c2:01:
26:15:b6:84:9b:ea:1e:ea:e4:9c:58:24:26:5f:2a:
e5:d3:fa:95:62:29:46:77:3a:0b:ce:10:58:2c:0f:
f4:8e:87:ba:29:96:1d:4f:4e:6c:e7:0e:db:10:0b:
2c:34:1c:6f:4a:3c:df:81:da:91:01:5c:aa:fe:5f:
71:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9F:3E:A7:4C:C4:09:88:95:D1:2F:FB:EA:AA:83:98:BD:45:B0:A6
X509v3 Authority Key Identifier:
keyid:B1:BA:33:05:3C:39:BA:58:65:53:77:43:11:23:89:E3:00:C4:88:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:fe:05:7a:88:46:a2:3b:7d:b8:d5:78:49:b4:d1:f3:6e:bc:
6c:85:63:d9:73:fc:01:9f:5d:3c:dc:54:c0:d9:51:d2:64:b1:
50:32:f1:ec:fc:58:f0:f4:cd:79:7a:41:c6:ae:73:40:6d:e9:
76:e6:a2:3e:12:7f:77:57:18:d8:4c:dd:19:ec:e8:2d:64:46:
a4:e9:7c:a9:ec:1b:f5:6e:ed:db:4c:b4:b9:78:18:a6:e5:04:
0e:c5:1a:b8:57:1d:b5:96:b2:75:67:0b:06:46:b7:ce:b1:1c:
eb:6e:fe:46:7d:72:27:c9:63:93:de:39:46:64:38:48:c0:f9:
7e:44:f8:c5:80:44:3d:3e:f9:ed:ff:5d:45:fa:dd:18:6e:24:
4e:e7:0d:b5:ab:05:15:78:d4:e1:be:51:e2:2a:2a:16:5a:1b:
d5:f8:83:1b:74:87:0e:a5:78:4e:62:0a:5d:29:25:fc:02:4a:
fc:f0:78:8f:2b:1d:59:07:d6:9b:50:62:ba:32:e8:88:98:ab:
ef:4f:6e:6e:c1:11:60:a6:51:a5:a3:02:4b:a0:2e:f1:0f:27:
5e:06:8e:a0:be:c6:c0:5f:03:19:02:79:58:ab:f4:dd:5a:28:
d7:82:ab:27:36:0c:34:88:a2:83:e3:4b:8b:3e:7c:bd:d2:c0:
a7:91:0d:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTAzODQxMTAvBgNVBAUTKEIxQkEzMzA1M0MzOUJBNTg2NTUzNzc0MzExMjM4OUUz
MDBDNDg4MDcwHhcNMjYwNTIwMTgwODIyWhcNMjYwNTI3MTgwODIyWjAYMRYwFAYD
VQQDEw02YTBkZjg5Ni0wYmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsRgGHn+gmP+Axp5e5yS7maSMu+phdf/3w749z3B9aBK1XOSL9dBAHrOuO9+y
eoSzc3Q33dTLcUYUpWOv2+7vGeJAC4PB/+SxA7nX7LBOBk3uEh8BnRTxVpZGoWeR
EHuf6LabavaIJs5P/p1GJUBMUau1fYtvZDj/fwuGOkliIwpGgI706d93nosg5Yss
5QIc5C5NXr7jbmOZIj9DC3K/bEGabh0J6Z0G4DEA2TuJYq/+Bu8hv/aCfSvOgJ3/
E+MEwgEmFbaEm+oe6uScWCQmXyrl0/qVYilGdzoLzhBYLA/0joe6KZYdT05s5w7b
EAssNBxvSjzfgdqRAVyq/l9xBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMqfPqdM
xAmIldEv++qqg5i9RbCmMB8GA1UdIwQYMBaAFLG6MwU8ObpYZVN3QxEjieMAxIgH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDM4NC85MzdGMzcyRTAw
NUExMUVBQTA5NEJEMzFDNEY5QUUwMi9zYm96QlR3NXVsaGxVM2RERVNPSjR3REVp
QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Nib3pCVHc1dWxobFUzZERFU09KNHdERWlBYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDM4NC85MzdGMzcyRTAwNUExMUVBQTA5NEJEMzFDNEY5QUUwMi9zYm96QlR3NXVs
aGxVM2RERVNPSjR3REVpQWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANv4FeohGojt9uNV4SbTR8268bIVj2XP8AZ9dPNxUwNlR0mSxUDLx7PxY8PTN
eXpBxq5zQG3pduaiPhJ/d1cY2EzdGezoLWRGpOl8qewb9W7t20y0uXgYpuUEDsUa
uFcdtZaydWcLBka3zrEc627+Rn1yJ8ljk945RmQ4SMD5fkT4xYBEPT757f9dRfrd
GG4kTucNtasFFXjU4b5R4ioqFlob1fiDG3SHDqV4TmIKXSkl/AJK/PB4jysdWQfW
m1BiujLoiJir709ubsERYKZRpaMCS6Au8Q8nXgaOoL7GwF8DGQJ5WKv03Voo14Kr
JzYMNIiig+NLiz58vdLAp5ENDw==
-----END CERTIFICATE-----
Generated at Thu May 21 10:29:03 2026 by rpki-client