
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
File: SErowNFXmbX_CB_kDD4eAOTolHg.mft (raw, json)
Hash identifier: ePlfpjReWoXhSo9D19/uuVwSooaROuTf0lrMk9vDgFU=
Subject key identifier: 9B:7A:43:EB:93:19:A7:18:03:11:65:E4:AF:B0:C3:7A:81:CB:1F:A5
Authority key identifier: 48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78
Certificate issuer: /CN=A9148827/serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478
Certificate serial: 0C04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
Manifest number: 0BEB
Signing time: Tue 22 Sep 2026 18:51:03 +0000
Manifest this update: Tue 22 Sep 2026 18:51:03 +0000
Manifest next update: Tue 29 Sep 2026 18:51:03 +0000
Files and hashes: 1: SErowNFXmbX_CB_kDD4eAOTolHg.crl (hash: 34/AlrB8z+BfhHKD7cI07qINT6ggW3uwZpHzgcYRMzw=)
2: E5DE3744492611EAA7ADEB71C4F9AE02.roa (hash: KuN44DKGBq1IgfFCnFPCdEKjgAmIvKASFe1F8KZvnoI=)
3: 09DF69582A3411EB9E69467DC4F9AE02.roa (hash: KzRK2aas8eOCnSmqY3CGoTXt2kRSyd0CQk65Ns8wG6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl
rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3076 (0xc04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148827, serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478
Validity
Not Before: Sep 22 18:51:03 2026 GMT
Not After : Sep 29 18:51:03 2026 GMT
Subject: CN=6ab2ce17-8b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:4c:f0:75:0d:a9:d4:6c:ce:be:ae:a5:a1:
e4:a6:dc:ea:e4:97:e7:64:0b:a3:80:4a:a2:cd:90:
91:db:b0:9b:a3:91:5b:1f:bf:ff:30:88:42:b5:0f:
7d:2f:4a:a9:25:fe:06:eb:ae:a7:66:42:48:8c:2a:
c4:5d:33:5f:95:39:4d:c6:c0:58:13:07:07:9c:43:
a6:62:36:e9:78:f5:d8:e1:91:8a:80:be:64:50:01:
d8:c4:2a:e4:a9:1a:59:1c:64:c4:76:58:e6:9f:7c:
1a:0c:3c:1d:60:01:1c:2e:6a:1c:9a:55:78:cc:7a:
8a:73:86:02:0c:0c:92:0e:2a:f9:d4:b8:81:37:88:
40:ae:9e:97:4e:48:80:d1:c1:78:fd:5b:f1:ce:61:
a3:f5:8c:6c:a0:95:0a:79:82:e1:c2:58:ee:86:55:
2e:be:09:b5:1d:fe:8c:10:23:f1:60:cc:e6:6f:96:
f7:73:7c:20:91:f6:c5:0d:fc:d5:f0:05:78:6c:87:
0e:eb:52:ac:16:b6:db:36:0c:39:cc:2d:4a:52:34:
fe:7b:9f:f4:bb:6d:fd:4e:cb:39:56:3e:89:cc:09:
b6:d4:46:f9:2b:1f:a7:84:67:d1:bf:22:d2:31:74:
21:a5:51:89:31:30:2d:52:86:fb:b7:84:cc:45:02:
87:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7A:43:EB:93:19:A7:18:03:11:65:E4:AF:B0:C3:7A:81:CB:1F:A5
X509v3 Authority Key Identifier:
keyid:48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:cb:61:71:3b:40:90:c1:60:6b:dd:c6:fa:a5:0f:27:cc:f8:
71:ad:d4:c4:d4:4f:f4:58:42:bd:d1:b4:b2:88:63:7b:80:78:
ce:75:3f:08:ce:6b:11:10:3e:a4:fe:c5:3d:38:c5:c3:ea:44:
05:e7:21:8e:37:a2:8a:d4:32:3b:fa:69:9f:72:20:37:c4:51:
7d:1e:4e:0b:d1:54:a9:b2:33:56:3e:6c:dc:7b:44:89:e1:67:
84:eb:71:04:63:ce:22:85:a5:92:e1:c3:3d:dc:c7:06:d2:2a:
c6:61:1e:58:29:3a:7f:67:a0:bb:08:f2:0e:ed:68:f1:bf:b1:
e1:15:80:ee:ee:cb:a4:ca:43:2d:a0:34:04:f3:bd:72:11:64:
68:82:c2:3f:3c:1a:19:3b:94:7b:5f:c0:c2:0a:cf:c8:d8:e2:
75:2b:bc:c1:2c:f8:8d:8c:15:45:85:b3:45:89:2e:42:e6:30:
e8:a6:92:31:a6:93:e8:99:a4:22:48:b7:c8:68:12:6c:90:24:
64:d6:a1:bc:70:49:a6:90:4b:84:f9:28:53:68:a3:ef:df:b6:
8d:7a:41:9f:e2:7a:fc:04:7d:1e:0a:5f:80:2b:00:3d:57:83:
b2:74:e9:2a:53:8f:01:d3:ad:ea:92:fd:88:3f:68:ef:02:d8:
0b:ae:5e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:58:07 2026 by rpki-client