$ rpki-client -vvf rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft File: SErowNFXmbX_CB_kDD4eAOTolHg.mft (raw, json) Hash identifier: SXXBxam4JX5X++qSzm76vMz9UuDNtSc6Ejyb57a7qTI= Subject key identifier: D9:13:AC:76:77:54:90:7F:1B:D9:5C:E6:CD:41:E6:C9:37:AE:04:83 Authority key identifier: 48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78 Certificate issuer: /CN=A9148827/serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478 Certificate serial: 0BA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft Manifest number: 0B8E Signing time: Tue 24 Mar 2026 18:57:05 +0000 Manifest this update: Tue 24 Mar 2026 18:57:04 +0000 Manifest next update: Tue 31 Mar 2026 18:57:04 +0000 Files and hashes: 1: SErowNFXmbX_CB_kDD4eAOTolHg.crl (hash: Ljdly4c5CrrkMOAcdTEgu7RAUrYiGs2sT55VFF62QXA=) 2: E5DE3744492611EAA7ADEB71C4F9AE02.roa (hash: KuN44DKGBq1IgfFCnFPCdEKjgAmIvKASFe1F8KZvnoI=) 3: 09DF69582A3411EB9E69467DC4F9AE02.roa (hash: KzRK2aas8eOCnSmqY3CGoTXt2kRSyd0CQk65Ns8wG6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2983 (0xba7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148827, serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478 Validity Not Before: Mar 24 18:57:04 2026 GMT Not After : Mar 31 18:57:04 2026 GMT Subject: CN=69c2de81-188f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3f:cc:5f:83:4e:8b:76:e6:b9:4b:26:27:c8: f9:a2:dc:9c:c1:6c:48:1f:0c:93:78:1f:24:6b:9a: 76:18:a0:ac:bd:44:8e:8c:bb:d1:40:79:3c:06:18: d2:f9:f7:a5:e5:24:57:20:33:e5:03:37:0b:9c:39: d4:a5:2d:92:6b:6a:53:cd:f2:22:f8:58:c7:f4:5e: 17:d7:b2:e7:4f:61:8f:d0:93:5c:ca:c6:11:4a:2b: 71:ed:8d:3f:96:a1:85:4f:8f:02:25:92:20:73:12: 60:77:05:14:a2:5f:a0:82:59:90:f6:0c:6b:50:f3: 1b:0a:de:b0:7b:ab:44:55:04:5a:01:5d:69:4d:2b: 9c:41:e4:2a:c2:c1:14:14:4d:fd:7b:79:3c:00:af: 7b:97:dd:52:30:c1:2b:e8:23:ce:1c:69:00:7c:5a: 68:ee:f6:d2:15:b3:ee:25:f8:c0:e4:6d:e3:48:09: cb:41:0a:cf:19:45:11:96:7d:71:5c:58:ba:b4:c3: ac:04:bc:68:e2:d5:2f:ae:bf:af:22:f3:0c:bb:cc: df:36:f5:68:55:10:90:eb:04:27:c1:bb:5f:87:96: 20:0d:3d:0b:20:dc:b6:af:d1:ae:bf:4d:e5:b1:75: 80:a4:86:64:b2:68:29:bb:ee:69:8a:b7:ad:99:89: e3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:13:AC:76:77:54:90:7F:1B:D9:5C:E6:CD:41:E6:C9:37:AE:04:83 X509v3 Authority Key Identifier: keyid:48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:bb:66:4e:67:4c:37:5f:11:6b:f6:e7:46:9f:26:6d:67:13: d5:ea:66:0c:ae:fc:69:ce:2d:71:57:a8:29:a5:14:a0:b2:4c: b1:a0:cb:5c:11:74:5c:35:29:b1:53:a3:f4:bf:b7:fd:33:4e: ef:5b:e5:dd:7e:66:6f:a5:a7:f8:6c:e3:6f:3a:73:4c:d9:e0: 9f:d9:b3:5a:de:7d:50:0a:0b:12:c4:9d:ae:6f:46:99:7f:2b: 4d:6f:37:40:9e:fa:b3:83:55:9f:a3:ab:bc:06:32:d3:73:60: 7d:0e:46:b4:d5:ed:cc:77:4d:40:ac:4e:5a:e5:ce:06:7c:2d: c2:31:ee:2c:88:a7:cc:e4:fe:79:83:75:a0:0a:af:50:27:7c: 67:7e:7b:7c:ae:09:d9:df:cb:04:17:65:80:e4:9f:a7:72:59: bf:32:a5:0a:40:d2:ec:15:84:7b:15:7e:f8:9e:23:5e:23:e4: 2c:ce:43:2c:f0:42:47:6d:37:5e:95:15:e5:c8:41:6d:c4:15: 98:57:a2:5d:b8:a3:bb:c6:a7:f7:cb:99:4f:d3:3a:91:f8:aa: 62:2b:f4:4a:ed:de:cd:2e:96:8b:1b:fc:e0:0e:5c:2d:e8:a3: 5e:88:63:eb:76:ef:d7:56:a4:37:07:17:48:07:f8:d8:05:64: 48:19:4e:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4MjcxMTAvBgNVBAUTKDQ4NEFFOEMwRDE1Nzk5QjVGRjA4MUZFNDBDM0UxRTAw RTRFODk0NzgwHhcNMjYwMzI0MTg1NzA0WhcNMjYwMzMxMTg1NzA0WjAYMRYwFAYD VQQDEw02OWMyZGU4MS0xODhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwz/MX4NOi3bmuUsmJ8j5otycwWxIHwyTeB8ka5p2GKCsvUSOjLvRQHk8BhjS +fel5SRXIDPlAzcLnDnUpS2Sa2pTzfIi+FjH9F4X17LnT2GP0JNcysYRSitx7Y0/ lqGFT48CJZIgcxJgdwUUol+gglmQ9gxrUPMbCt6we6tEVQRaAV1pTSucQeQqwsEU FE39e3k8AK97l91SMMEr6CPOHGkAfFpo7vbSFbPuJfjA5G3jSAnLQQrPGUURln1x XFi6tMOsBLxo4tUvrr+vIvMMu8zfNvVoVRCQ6wQnwbtfh5YgDT0LINy2r9Guv03l sXWApIZksmgpu+5piretmYnjLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNkTrHZ3 VJB/G9lc5s1B5sk3rgSDMB8GA1UdIwQYMBaAFEhK6MDRV5m1/wgf5Aw+HgDk6JR4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODgyNy84ODg3MTkzNjQ5 MjUxMUVBQTk0NDk3NkZDNEY5QUUwMi9TRXJvd05GWG1iWF9DQl9rREQ0ZUFPVG9s SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NFcm93TkZYbWJYX0NCX2tERDRlQU9Ub2xIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODgyNy84ODg3MTkzNjQ5MjUxMUVBQTk0NDk3NkZDNEY5QUUwMi9TRXJvd05GWG1i WF9DQl9rREQ0ZUFPVG9sSGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj7tmTmdMN18Ra/bnRp8mbWcT1epmDK78ac4tcVeoKaUUoLJMsaDLXBF0XDUp sVOj9L+3/TNO71vl3X5mb6Wn+GzjbzpzTNngn9mzWt59UAoLEsSdrm9GmX8rTW83 QJ76s4NVn6OrvAYy03NgfQ5GtNXtzHdNQKxOWuXOBnwtwjHuLIinzOT+eYN1oAqv UCd8Z357fK4J2d/LBBdlgOSfp3JZvzKlCkDS7BWEexV++J4jXiPkLM5DLPBCR203 XpUV5chBbcQVmFeiXbiju8an98uZT9M6kfiqYiv0Su3ezS6Wixv84A5cLeijXohj 63bv11akNwcXSAf42AVkSBlOdQ== -----END CERTIFICATE-----Generated at Thu Mar 26 05:36:13 2026 by rpki-client