This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
File: sboYaLp865TN1k8FdBOaAaULkNU.mft (raw, json)
Hash identifier: 2sVX6C5VjPIacEOxGDFJHkj+UTqh6A6mOgsJYJmJoIs=
Subject key identifier: 48:33:60:98:A5:5B:6F:0F:C0:A5:D8:50:64:41:00:D1:90:34:08:8B
Authority key identifier: B1:BA:18:68:BA:7C:EB:94:CD:D6:4F:05:74:13:9A:01:A5:0B:90:D5
Certificate issuer: /CN=A91DF233/serialNumber=B1BA1868BA7CEB94CDD64F0574139A01A50B90D5
Certificate serial: CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
Manifest number: C8
Signing time: Fri 19 Dec 2025 05:00:53 +0000
Manifest this update: Fri 19 Dec 2025 05:00:53 +0000
Manifest next update: Fri 26 Dec 2025 05:00:53 +0000
Files and hashes: 1: sboYaLp865TN1k8FdBOaAaULkNU.crl (hash: 3G+N0tLxnCBDPBP93BqSvolBaaj2ba1w0xriVPnHU04=)
2: 386FD4FCB37D11EF8D6EAF63C4F9AE02.roa (hash: fMXoiRh607T1jSC9KZpE1UKghQnNh7LQid1KP9KwKXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.crl
rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF233, serialNumber=B1BA1868BA7CEB94CDD64F0574139A01A50B90D5
Validity
Not Before: Dec 19 05:00:53 2025 GMT
Not After : Dec 26 05:00:53 2025 GMT
Subject: CN=6944dc05-8e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:77:ff:57:10:b2:29:72:28:a9:ec:a0:1b:0b:
3a:9c:e0:89:ab:72:5d:ab:b7:c0:a1:eb:fc:81:75:
77:09:0c:2b:f1:af:55:30:c9:84:18:d5:9b:02:1d:
b3:9b:43:7e:75:60:23:73:d1:63:61:3e:e4:7c:e0:
97:30:65:66:8e:4a:fb:7a:38:9e:b2:94:31:b9:78:
5f:52:d5:ab:ff:01:5f:ba:68:56:10:ed:d5:f4:1e:
73:b5:52:85:18:03:36:ba:b7:0b:49:7f:89:0b:b2:
18:5f:16:a2:e9:80:a8:49:3e:8f:27:8d:19:fe:64:
1e:28:a4:a4:73:1f:01:b7:41:69:49:9d:1b:37:bf:
90:6e:32:4c:35:ea:1f:c6:ab:7b:a2:6e:43:70:72:
8e:02:fc:9d:ee:39:9b:5c:74:bd:54:9e:06:bb:a4:
23:44:37:dc:4d:75:07:df:96:a3:09:c2:22:6c:07:
88:86:11:29:9f:2c:bb:65:26:93:e7:40:30:69:c7:
f2:9e:29:f3:ce:9e:29:b8:b1:c5:4a:51:0d:52:3b:
73:1e:9a:7c:b4:17:84:98:c0:74:7f:30:fe:fc:d0:
90:5a:b9:eb:4f:99:ed:7a:7b:d3:07:6f:25:50:fd:
f3:6d:70:a7:f2:3e:79:27:8d:85:4b:77:8f:b8:0a:
bd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:33:60:98:A5:5B:6F:0F:C0:A5:D8:50:64:41:00:D1:90:34:08:8B
X509v3 Authority Key Identifier:
keyid:B1:BA:18:68:BA:7C:EB:94:CD:D6:4F:05:74:13:9A:01:A5:0B:90:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c3:01:c8:2d:8e:14:88:94:0b:76:32:a3:3d:ac:84:c2:4f:
53:2a:5d:17:24:17:f6:fc:38:4e:92:d3:0d:92:7e:2d:9b:21:
61:f8:19:53:20:75:39:78:18:ec:6d:50:ba:f5:ef:f5:7e:80:
47:4b:7b:af:fd:71:7c:38:cd:e4:f8:23:57:2d:32:f8:bb:56:
a1:dc:19:14:7c:eb:92:33:4b:fe:20:ca:d2:db:6b:50:34:88:
b4:46:02:92:29:07:92:a2:b1:cc:3a:54:73:3c:6c:45:14:f2:
0f:71:21:a3:3a:9e:3e:67:90:9c:f0:c7:3e:fa:39:15:32:a5:
f4:63:a8:50:b2:aa:be:98:65:7c:ce:8c:8a:30:31:e8:ea:0a:
da:20:51:a3:f9:6e:e7:86:a1:1a:6c:cc:aa:fc:d7:35:97:cf:
b4:60:39:fa:6d:44:6f:0b:4c:27:5e:0b:ad:2d:ac:32:5a:cd:
d9:a2:c1:27:4d:f7:af:a1:02:1b:c3:57:a9:82:0e:3d:ca:16:
a4:52:5e:24:ec:fe:57:f1:fe:5a:c7:19:a6:3c:f5:ec:11:72:
4f:d0:f6:51:76:56:44:6b:1c:02:10:7f:4b:a7:07:ee:f3:42:
b4:59:73:ce:57:9f:46:80:60:55:b0:c6:b0:14:ce:2c:0e:cf:
63:48:88:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:26:22 2025 by rpki-client