
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
File: sboYaLp865TN1k8FdBOaAaULkNU.mft (raw, json)
Hash identifier: a2H1IdiFjt4y+c+x+6+ah1+1Kw56Xlruc4CRBYlkzjQ=
Subject key identifier: BC:D7:BE:55:78:8A:93:A9:99:59:02:42:BA:5B:83:1D:6D:B5:1C:50
Authority key identifier: B1:BA:18:68:BA:7C:EB:94:CD:D6:4F:05:74:13:9A:01:A5:0B:90:D5
Certificate issuer: /CN=A91DF233/serialNumber=B1BA1868BA7CEB94CDD64F0574139A01A50B90D5
Certificate serial: 0164
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
Manifest number: 015F
Signing time: Mon 05 Oct 2026 05:33:09 +0000
Manifest this update: Mon 05 Oct 2026 05:33:08 +0000
Manifest next update: Mon 12 Oct 2026 05:33:08 +0000
Files and hashes: 1: sboYaLp865TN1k8FdBOaAaULkNU.crl (hash: eSJu7hs3nk/DJBckfFpAVplECJPJrz4hPqdcaoCsdpE=)
2: 386FD4FCB37D11EF8D6EAF63C4F9AE02.roa (hash: IetKqAIBooa+U8zye1p9cy/XtE+vQXfntEYYvrxJfuk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.crl
rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 05:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 356 (0x164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF233, serialNumber=B1BA1868BA7CEB94CDD64F0574139A01A50B90D5
Validity
Not Before: Oct 5 05:33:08 2026 GMT
Not After : Oct 12 05:33:08 2026 GMT
Subject: CN=6ac33695-38cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:46:6e:e6:8e:ad:20:91:b0:43:51:fb:99:a3:
cb:42:14:d1:86:b1:ea:c2:ae:b1:9c:2a:d3:69:6f:
d8:c8:cd:77:3e:c5:bc:98:99:8f:58:38:f7:9c:b5:
91:32:64:d8:ac:d0:e4:1b:03:ed:11:88:d7:27:c2:
d4:49:7d:78:34:8d:f6:a6:f1:53:b4:a8:a7:75:29:
63:74:84:fa:19:29:e6:52:1c:8c:16:b7:ff:41:b8:
89:1b:2d:57:53:43:23:27:88:e8:d2:33:0e:db:5f:
d5:df:1c:0b:56:d6:b9:58:d2:be:03:61:b4:ee:2b:
b9:27:c3:8c:e5:75:ea:3b:db:bd:b1:7c:06:69:0c:
27:2c:5b:b1:bf:e4:00:b2:e9:f5:c2:67:32:68:07:
29:b1:f5:54:7b:69:14:96:bf:62:bd:bf:4a:2c:a8:
6f:db:e3:ea:bd:e4:e1:bc:0c:ea:5f:b3:9e:d0:69:
ba:c2:e0:39:91:40:40:97:b1:e6:0e:d3:9c:7f:9e:
3a:8f:2c:cb:f8:02:d6:17:e4:87:d3:2f:0f:68:0a:
0c:65:93:bf:43:84:87:b8:21:03:2e:07:ad:fd:b9:
fa:ad:3a:2c:c1:72:b6:c3:56:6b:56:c3:6e:3e:f7:
f5:ec:b0:33:64:71:c6:63:d7:f3:24:f9:ea:59:cb:
a1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D7:BE:55:78:8A:93:A9:99:59:02:42:BA:5B:83:1D:6D:B5:1C:50
X509v3 Authority Key Identifier:
keyid:B1:BA:18:68:BA:7C:EB:94:CD:D6:4F:05:74:13:9A:01:A5:0B:90:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:07:4a:14:a8:0d:3a:97:29:67:12:af:87:12:ff:79:90:03:
fd:49:c6:a2:c2:ab:75:e2:6b:2d:f7:88:de:9c:a9:84:e3:a3:
37:3a:66:b5:d7:4c:26:d0:ed:29:ae:50:11:00:42:55:e0:80:
0e:39:8c:da:ae:bb:10:8f:aa:d2:13:82:a9:93:56:75:02:74:
23:85:df:0c:ea:15:54:78:c1:42:06:4d:b6:c6:5b:fd:47:73:
84:a2:1d:c6:86:7d:25:26:97:6a:58:7b:7a:83:41:32:32:94:
b1:b6:05:b1:35:3f:a9:5c:f0:2c:fb:75:59:27:f0:35:44:43:
67:9a:64:3c:18:de:2b:cc:37:07:31:7d:6a:24:d6:0d:bf:88:
16:69:60:ab:3c:44:6f:07:e3:e1:79:33:24:63:4e:ef:63:6d:
45:40:4c:30:28:40:e0:39:56:1e:20:64:48:c7:a7:b4:15:3c:
ed:3c:89:76:76:bc:18:d3:88:06:0c:82:18:6e:26:0c:01:aa:
5c:5b:1c:b2:69:f1:ca:98:90:91:e4:f4:fd:19:4d:4f:07:ef:
10:d6:88:c7:04:d8:14:bc:f8:87:e4:b9:f5:a0:71:3d:93:f9:
21:7b:1d:78:cf:b4:49:11:c2:32:c6:6f:68:67:f7:23:81:7f:
ad:5c:6f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:08:26 2026 by rpki-client