This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft
File: sbozBTw5ulhlU3dDESOJ4wDEiAc.mft (raw, json)
Hash identifier: 7C8iQgLhvCFoWC21STTk4IKMk55ajco60M+0RDqGNrc=
Subject key identifier: 11:98:5D:63:C9:B7:27:5C:FB:CA:0B:0B:A7:3D:15:54:29:1D:D4:90
Authority key identifier: B1:BA:33:05:3C:39:BA:58:65:53:77:43:11:23:89:E3:00:C4:88:07
Certificate issuer: /CN=A9150384/serialNumber=B1BA33053C39BA5865537743112389E300C48807
Certificate serial: 0CEC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft
Manifest number: 0CD5
Signing time: Thu 04 Dec 2025 17:41:49 +0000
Manifest this update: Thu 04 Dec 2025 17:41:48 +0000
Manifest next update: Thu 11 Dec 2025 17:41:48 +0000
Files and hashes: 1: sbozBTw5ulhlU3dDESOJ4wDEiAc.crl (hash: OWiUUSZrWy590xrJhxZRBiF3lS/8atjNyVGG4Lm7xWc=)
2: 3240ED82D62D11EFB0442B5DC4F9AE02.roa (hash: TMu5hEbfrLw2YdTkxYULJSdYTtAL2nPXUFAhyo3Mq1Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.crl
rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 17:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3308 (0xcec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150384, serialNumber=B1BA33053C39BA5865537743112389E300C48807
Validity
Not Before: Dec 4 17:41:48 2025 GMT
Not After : Dec 11 17:41:48 2025 GMT
Subject: CN=6931c7dd-5625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d1:42:15:bc:d1:c5:d6:ee:b3:64:69:d2:32:
0f:72:5f:43:26:e4:51:71:45:88:b3:4b:b5:af:ef:
ae:43:d6:a1:b7:af:53:c5:0e:8d:6d:69:63:bf:36:
e2:97:d1:53:b8:fe:a8:00:7a:5e:3f:1a:1b:d7:d0:
95:09:e6:0a:2e:63:1a:be:7c:fb:de:40:dc:fe:a0:
18:93:c5:04:e4:b3:e1:5c:c6:8c:17:b9:8c:69:c1:
1d:01:1d:3c:d7:ee:d2:e2:78:23:a5:64:9d:4f:fb:
26:65:64:91:fd:4a:7d:b6:5a:4e:fd:37:d2:94:cd:
ff:5e:9e:e8:4f:91:e2:f1:b2:5d:06:82:9d:41:7e:
75:06:ad:06:85:5d:61:8a:5f:be:88:b7:f0:d7:30:
cc:b3:ee:2e:95:08:e2:48:09:40:0c:f1:3d:14:3a:
54:0a:ac:03:cd:c4:a3:4c:3a:0d:57:c2:23:a9:cd:
fc:1c:74:d6:b1:46:26:29:9c:1b:ef:e7:62:96:00:
e5:83:36:01:35:de:cf:e1:80:ab:43:af:e2:d0:e2:
74:d9:3c:a2:9e:59:aa:f1:27:e3:6f:4f:1e:d0:0a:
49:b9:0e:7c:9d:c2:47:c2:31:00:e1:b4:7a:f1:b8:
10:1b:14:52:03:56:b3:62:a1:07:e8:15:5c:7e:f3:
6d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:98:5D:63:C9:B7:27:5C:FB:CA:0B:0B:A7:3D:15:54:29:1D:D4:90
X509v3 Authority Key Identifier:
keyid:B1:BA:33:05:3C:39:BA:58:65:53:77:43:11:23:89:E3:00:C4:88:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sbozBTw5ulhlU3dDESOJ4wDEiAc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150384/937F372E005A11EAA094BD31C4F9AE02/sbozBTw5ulhlU3dDESOJ4wDEiAc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:54:72:9b:ef:7d:e5:aa:bd:44:a2:48:d4:8a:62:93:5c:2e:
a8:db:29:d7:53:cc:9d:67:f7:a6:5b:eb:19:a0:55:82:94:ea:
ec:c9:00:d6:bc:3e:5e:48:ef:ce:09:ec:e4:ae:21:f3:e8:39:
24:58:67:57:31:94:ef:e8:0d:67:14:de:dc:29:71:1e:3f:1f:
71:ab:10:d2:24:6e:4e:37:17:8f:47:8f:5a:56:e7:01:bb:6d:
e6:88:ec:bb:63:8a:ad:d3:74:8a:a6:a9:19:0c:66:6d:97:d0:
2c:99:8c:62:6b:0b:1b:47:3c:9b:63:80:c4:83:68:c7:18:57:
e2:fb:19:07:12:6e:1b:d6:ee:4d:c5:ce:0f:b8:5a:66:68:ef:
61:6f:ab:9a:12:ec:3a:d8:4c:a9:19:ef:e9:09:6f:25:7e:8b:
de:58:17:aa:29:9d:82:b0:80:d6:2e:65:b2:51:da:4c:94:58:
8d:91:11:60:a7:14:28:6e:8d:f4:af:b7:52:38:48:8a:27:fb:
e7:ad:c6:ec:f8:90:28:58:90:52:d0:45:e6:83:70:d7:0b:07:
1d:d4:f7:38:ca:8e:7c:81:6e:99:d4:92:f3:cb:e3:f1:9a:30:
d6:13:42:91:f8:7e:c6:f2:cd:cc:8f:12:a1:96:0a:c7:39:0b:
f7:56:e5:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTAzODQxMTAvBgNVBAUTKEIxQkEzMzA1M0MzOUJBNTg2NTUzNzc0MzExMjM4OUUz
MDBDNDg4MDcwHhcNMjUxMjA0MTc0MTQ4WhcNMjUxMjExMTc0MTQ4WjAYMRYwFAYD
VQQDEw02OTMxYzdkZC01NjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1tFCFbzRxdbus2Rp0jIPcl9DJuRRcUWIs0u1r++uQ9aht69TxQ6NbWljvzbi
l9FTuP6oAHpePxob19CVCeYKLmMavnz73kDc/qAYk8UE5LPhXMaMF7mMacEdAR08
1+7S4ngjpWSdT/smZWSR/Up9tlpO/TfSlM3/Xp7oT5Hi8bJdBoKdQX51Bq0GhV1h
il++iLfw1zDMs+4ulQjiSAlADPE9FDpUCqwDzcSjTDoNV8Ijqc38HHTWsUYmKZwb
7+dilgDlgzYBNd7P4YCrQ6/i0OJ02Tyinlmq8Sfjb08e0ApJuQ58ncJHwjEA4bR6
8bgQGxRSA1azYqEH6BVcfvNtqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGYXWPJ
tydc+8oLC6c9FVQpHdSQMB8GA1UdIwQYMBaAFLG6MwU8ObpYZVN3QxEjieMAxIgH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDM4NC85MzdGMzcyRTAw
NUExMUVBQTA5NEJEMzFDNEY5QUUwMi9zYm96QlR3NXVsaGxVM2RERVNPSjR3REVp
QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Nib3pCVHc1dWxobFUzZERFU09KNHdERWlBYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDM4NC85MzdGMzcyRTAwNUExMUVBQTA5NEJEMzFDNEY5QUUwMi9zYm96QlR3NXVs
aGxVM2RERVNPSjR3REVpQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCpVHKb733lqr1EokjUimKTXC6o2ynXU8ydZ/emW+sZoFWClOrsyQDW
vD5eSO/OCezkriHz6DkkWGdXMZTv6A1nFN7cKXEePx9xqxDSJG5ONxePR49aVucB
u23miOy7Y4qt03SKpqkZDGZtl9AsmYxiawsbRzybY4DEg2jHGFfi+xkHEm4b1u5N
xc4PuFpmaO9hb6uaEuw62EypGe/pCW8lfoveWBeqKZ2CsIDWLmWyUdpMlFiNkRFg
pxQobo30r7dSOEiKJ/vnrcbs+JAoWJBS0EXmg3DXCwcd1Pc4yo58gW6Z1JLzy+Px
mjDWE0KR+H7G8s3MjxKhlgrHOQv3VuVx
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:33:39 2025 by rpki-client