
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
File: SErowNFXmbX_CB_kDD4eAOTolHg.mft (raw, json)
Hash identifier: swNfTmSTCspNzHvUN9liNtb/M3iaoZDaVTAtvEW1428=
Subject key identifier: 17:D3:D4:9B:63:E8:BC:15:89:A1:B6:75:81:CA:E6:9B:81:BB:58:6F
Authority key identifier: 48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78
Certificate issuer: /CN=A9148827/serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478
Certificate serial: 0B97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
Manifest number: 0B80
Signing time: Sun 01 Mar 2026 23:46:13 +0000
Manifest this update: Sun 01 Mar 2026 23:46:13 +0000
Manifest next update: Sun 08 Mar 2026 23:46:13 +0000
Files and hashes: 1: SErowNFXmbX_CB_kDD4eAOTolHg.crl (hash: 2HHF8YG1o7adNAvQf/L6oEXfaw/u4yF6YkgiB0oew6k=)
2: 09DF69582A3411EB9E69467DC4F9AE02.roa (hash: ri73lgcCQzm6JhMsh4Vh2H8XDHz5sHVwf2RnyIfJyeU=)
3: E5DE3744492611EAA7ADEB71C4F9AE02.roa (hash: UM1kcSz/Dg09qJlAkqXCgaTlMKExN0i6q4Q8IVYWDIE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl
rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2967 (0xb97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148827, serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478
Validity
Not Before: Mar 1 23:46:13 2026 GMT
Not After : Mar 8 23:46:13 2026 GMT
Subject: CN=69a4cfc5-6bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a0:bd:c3:58:54:da:54:a9:7a:75:44:cc:de:
93:01:e7:ed:19:84:0b:fb:fb:9f:bd:f0:e0:ed:a9:
94:5a:c8:31:81:73:1c:b2:59:db:ba:b2:fc:8a:c1:
d5:d5:64:07:a6:70:7c:06:3f:5b:a7:c0:47:ed:b0:
eb:07:eb:d6:1b:62:bc:e5:f5:ce:33:90:23:e7:2e:
d0:5d:82:02:f4:5b:ba:86:4d:00:41:ce:d9:54:72:
63:2a:2d:bc:ae:94:0c:76:1b:09:83:54:d3:f1:94:
57:ae:47:ba:ff:83:07:b3:e7:43:1f:3c:20:32:f0:
c8:a6:bd:5e:d3:f9:68:9a:88:af:ff:85:50:89:5e:
d0:a8:d6:19:ba:e5:9a:cb:f2:71:56:30:5b:35:5a:
19:90:13:69:de:07:e7:a4:a3:e7:4a:d3:bd:a0:25:
f8:d0:04:4e:28:48:bf:01:df:74:80:f4:05:2a:c8:
2b:7a:bf:f8:1b:ea:84:d1:96:c4:ba:72:61:9a:22:
df:3c:df:97:a3:e4:b1:16:11:d7:8c:39:88:e0:6e:
d9:0e:fd:0a:32:14:b5:cc:b2:11:66:fc:ca:c2:ad:
be:0d:05:10:22:4d:5a:eb:9f:4f:ad:27:1b:80:72:
3b:98:8a:2d:24:77:1f:b5:d0:be:7b:34:8f:a8:ce:
e1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D3:D4:9B:63:E8:BC:15:89:A1:B6:75:81:CA:E6:9B:81:BB:58:6F
X509v3 Authority Key Identifier:
keyid:48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a9:e6:1f:16:cd:08:20:24:5f:61:90:7b:ed:df:0b:ea:e1:
64:01:da:52:3d:20:da:8f:9f:ff:22:f2:b2:7c:4f:0c:af:65:
e3:ac:8d:7e:78:15:94:cd:ee:18:9a:e0:58:11:cf:e4:1c:66:
6d:a6:22:6c:ef:42:9c:a9:56:d6:d7:c2:81:38:cb:86:93:9b:
3f:b4:1d:70:eb:27:c4:35:22:fc:44:16:b4:fd:9c:30:31:ad:
e9:10:61:1f:9a:80:f7:8c:f0:7d:69:57:06:29:34:98:ed:03:
91:53:6c:8a:7a:af:da:6d:f6:f0:78:a0:81:ab:13:51:60:b6:
13:17:e4:12:21:b2:f0:40:aa:61:ca:ac:d2:55:0f:fe:d8:da:
c9:2a:b7:8e:e4:46:88:6d:ce:d8:b1:86:db:65:7a:e4:87:0a:
2c:a7:cc:1c:83:f0:17:cd:ec:c4:60:16:bc:51:49:43:f0:fc:
2e:74:6c:34:76:95:fb:39:35:c5:de:48:dc:f5:e8:11:53:29:
c3:06:2f:f7:33:4e:cd:fc:ea:04:dd:eb:b7:61:19:c8:2e:b5:
d3:84:86:95:44:45:e2:ee:14:85:e2:60:eb:15:69:dc:0c:05:
5a:7b:19:8f:8b:e5:df:93:af:ff:b0:49:04:12:07:67:77:bf:
19:7b:da:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:51 2026 by rpki-client