
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft
File: sbozBTw5ulhlU3dDESOJ4wDEiAc.mft (raw, json)
Hash identifier: 8yYpJ89eq5LQS3OJ5VBhaTkeLV5+IWpNM5Obc/zhkig=
Subject key identifier: 6B:75:7C:A3:73:7B:DA:1D:3C:13:74:E7:BB:17:0C:28:11:E6:FE:D8
Authority key identifier: B1:BA:33:05:3C:39:BA:58:65:53:77:43:11:23:89:E3:00:C4:88:07
Certificate issuer: /CN=A9150384/serialNumber=B1BA33053C39BA5865537743112389E300C48807
Certificate serial: 0D21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft
Manifest number: 0D07
Signing time: Mon 02 Mar 2026 00:25:05 +0000
Manifest this update: Mon 02 Mar 2026 00:25:03 +0000
Manifest next update: Mon 09 Mar 2026 00:25:03 +0000
Files and hashes: 1: sbozBTw5ulhlU3dDESOJ4wDEiAc.crl (hash: xCz0NcPU+Guth+JoFC+Gh2AVWBnOQKlmswCN2HTReZs=)
2: 3240ED82D62D11EFB0442B5DC4F9AE02.roa (hash: goxpVgCyktDRuj+zXY8IwkJZe67SlMAI6ql6BNqLFHg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.crl
rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3361 (0xd21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150384, serialNumber=B1BA33053C39BA5865537743112389E300C48807
Validity
Not Before: Mar 2 00:25:03 2026 GMT
Not After : Mar 9 00:25:03 2026 GMT
Subject: CN=69a4d8e0-8f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:59:dd:a4:2d:95:72:f0:03:4c:b8:be:82:
87:a4:d6:12:23:46:27:0e:6d:96:15:2f:e6:47:e6:
b6:06:8b:f1:b8:4f:9c:aa:85:01:5a:bc:2c:47:49:
6c:e3:1c:a3:05:54:55:ee:9b:98:bf:ed:0a:08:76:
4a:5d:49:02:81:d9:f0:ca:c0:c2:c8:24:b0:3d:d4:
47:0a:d8:f6:5d:0f:61:d0:63:15:01:01:ef:cb:fc:
87:87:25:cb:1a:df:bb:e1:f4:f8:a3:e9:18:ad:c0:
7b:67:77:dd:11:32:d9:f9:3b:b2:ca:d1:d3:35:ef:
f5:7d:30:7a:59:6e:8c:93:84:bb:64:6a:92:d9:1b:
6f:0e:b1:fd:5a:48:f8:c0:8c:39:b3:3c:59:c9:b4:
ab:4a:90:46:4a:1f:68:37:ca:64:aa:b3:22:7a:b9:
17:95:05:02:b0:92:6b:95:07:bb:0f:76:dd:a9:03:
1f:13:69:4d:a9:12:6b:1b:81:27:7d:b1:e0:33:31:
44:21:64:8b:a5:3c:58:af:ba:c9:db:60:6f:b0:6f:
0e:68:7e:a2:86:aa:aa:51:78:87:48:a3:30:83:ec:
0c:d7:f4:7b:49:e2:09:04:91:33:f0:c5:7b:58:26:
12:f9:4b:06:ee:de:cd:2a:b1:fa:49:dd:cf:65:28:
fb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:75:7C:A3:73:7B:DA:1D:3C:13:74:E7:BB:17:0C:28:11:E6:FE:D8
X509v3 Authority Key Identifier:
keyid:B1:BA:33:05:3C:39:BA:58:65:53:77:43:11:23:89:E3:00:C4:88:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:cc:b3:bd:67:d2:b2:45:34:23:ab:2f:6c:3d:8b:76:55:60:
21:02:b4:93:9a:18:9f:12:0d:be:72:b6:d5:3d:18:e2:49:e3:
8f:04:19:11:c0:0b:94:fa:e8:5d:91:83:b0:b3:4d:f0:1f:95:
d8:9a:62:71:ea:4a:19:9f:60:0b:e1:2c:05:c9:2a:c5:09:8b:
b9:4f:c7:2d:a7:99:07:ca:2e:bf:1a:8b:d3:d8:1c:fc:67:df:
a9:a6:04:16:fe:44:fc:f6:31:d8:74:f8:44:b0:4a:30:91:e0:
b5:48:60:d5:67:a3:2d:c9:a5:55:c1:ea:db:a1:b8:76:b3:db:
e8:c0:e6:91:08:68:56:d5:77:1e:2c:9c:d3:7f:1d:f0:2a:e0:
dd:6a:5d:4e:c2:f0:04:ef:48:79:b5:0c:00:1b:1c:a9:e9:23:
0f:c7:3b:69:2d:69:7c:6d:d3:38:73:91:f7:50:cd:ed:cc:73:
b9:d9:d9:f2:4e:62:bb:2a:e4:46:7f:55:bb:5a:72:dc:68:5f:
2e:17:b3:57:da:8c:00:63:60:8a:b7:98:b8:58:59:ee:8b:bc:
1d:fe:94:95:6c:b5:5b:a7:38:a7:76:1d:f1:1c:28:2b:dc:91:
7a:65:b2:8a:3a:74:fa:d0:74:b2:16:5a:24:d4:d4:b0:97:b2:
10:aa:c4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:31:54 2026 by rpki-client