
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
File: sboYaLp865TN1k8FdBOaAaULkNU.mft (raw, json)
Hash identifier: rlid4totkcciM4sEDmFpzS1Nps7A0J0OMiUt7wJGogA=
Subject key identifier: 8A:D4:9E:10:54:53:C6:24:16:67:BE:CE:E1:58:85:A9:0B:76:C6:EC
Authority key identifier: B1:BA:18:68:BA:7C:EB:94:CD:D6:4F:05:74:13:9A:01:A5:0B:90:D5
Certificate issuer: /CN=A91DF233/serialNumber=B1BA1868BA7CEB94CDD64F0574139A01A50B90D5
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
Manifest number: AA
Signing time: Mon 03 Nov 2025 06:11:14 +0000
Manifest this update: Mon 03 Nov 2025 06:11:14 +0000
Manifest next update: Mon 10 Nov 2025 06:11:14 +0000
Files and hashes: 1: sboYaLp865TN1k8FdBOaAaULkNU.crl (hash: 5OVKRc4YFp0ZeXr08dNQ4qNz85eZft0c8CL/R/1G7kI=)
2: 386FD4FCB37D11EF8D6EAF63C4F9AE02.roa (hash: aJEyHw65stDKmv/A9AlKIYdtN6qUu7eSq0Nk49wiYVM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.crl
rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:11:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF233, serialNumber=B1BA1868BA7CEB94CDD64F0574139A01A50B90D5
Validity
Not Before: Nov 3 06:11:14 2025 GMT
Not After : Nov 10 06:11:14 2025 GMT
Subject: CN=69084782-c021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f1:39:68:c6:f2:b0:1b:7d:b8:15:ac:80:e2:
22:0b:80:3c:98:04:c5:dd:6c:ef:03:57:51:f2:0a:
37:9f:ca:66:73:12:d2:f8:9b:e4:47:80:a9:95:de:
cf:a9:fb:f5:48:25:76:01:ba:eb:12:1f:f4:81:2a:
ce:ca:0f:d9:16:2b:74:56:d3:de:93:5e:11:2d:7a:
b3:6c:45:c3:eb:e9:37:c9:55:03:bf:07:75:34:8a:
7e:1e:d5:30:5a:54:be:2d:b7:96:ea:02:79:2c:5f:
af:cc:fc:6d:11:1a:92:c0:f6:18:3b:50:0c:5b:c0:
c7:9b:40:ab:6d:4c:36:15:5b:ca:dc:30:62:e2:40:
d2:f4:e6:70:3a:26:30:a6:ed:b1:90:0a:f8:a3:72:
58:77:33:d1:7a:0a:c9:70:a0:4d:a4:f5:3f:d3:0a:
5b:ef:bf:99:fc:0b:ac:69:b5:32:7f:ae:1d:5d:ee:
d8:74:77:a8:9c:c4:29:7a:d9:16:ee:a0:ed:5f:13:
c2:c3:a4:c0:6b:a6:73:ed:91:d3:3f:40:cd:72:8c:
f9:fd:31:07:d7:8d:cc:10:83:fa:7e:06:3d:20:b5:
b2:12:9a:7d:ce:88:50:81:dd:b8:b3:31:d2:aa:ee:
af:aa:50:60:3a:3c:86:53:f9:df:4e:f5:19:c4:23:
ed:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D4:9E:10:54:53:C6:24:16:67:BE:CE:E1:58:85:A9:0B:76:C6:EC
X509v3 Authority Key Identifier:
keyid:B1:BA:18:68:BA:7C:EB:94:CD:D6:4F:05:74:13:9A:01:A5:0B:90:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:1a:c5:39:e5:60:d5:ac:29:91:a7:9f:a4:59:fc:5c:6c:0b:
51:f7:43:19:21:87:2a:72:11:f9:5d:3b:fe:2d:79:0f:19:2a:
f6:70:49:40:ce:6c:bd:e4:5a:30:40:b6:db:a3:33:a7:13:c1:
dc:b0:b5:24:e1:ea:d0:f4:6f:7c:6b:d1:c2:9a:fd:14:dc:e7:
3e:8e:1c:4f:ce:37:04:d3:66:be:c4:88:8e:e3:97:43:0c:64:
06:a6:73:57:01:92:08:4b:e3:e2:17:4b:78:46:8e:e3:5b:29:
b6:c7:ce:63:97:c9:9c:e0:eb:0b:47:28:3e:8e:e4:fc:9e:f6:
36:00:5f:1f:07:da:8d:23:6a:30:31:a5:96:ac:14:a1:d9:0e:
2e:fd:58:2b:38:8d:06:9b:bd:2f:73:bd:fa:7c:79:d7:1e:25:
4e:f0:d4:8b:4c:e8:01:71:7a:9e:ba:88:24:a7:3a:5f:03:79:
b1:aa:c2:1e:92:89:14:d5:27:df:5f:36:86:87:20:46:9a:94:
de:63:31:5d:3c:e0:66:a0:51:97:00:21:de:e3:88:c4:70:75:
21:ea:5c:44:84:a3:79:88:85:31:7a:c4:e3:0c:70:77:3e:99:
28:b6:53:c6:51:f8:a2:c5:88:a0:ff:f5:37:9e:4b:59:9f:07:
90:85:68:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:17:15 2025 by rpki-client