
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
File: SErowNFXmbX_CB_kDD4eAOTolHg.mft (raw, json)
Hash identifier: 5RuHBgKIKid0XuTzeYE/ULXOQni3AutDRuDD6WIDQ0M=
Subject key identifier: 7A:AD:8D:79:96:E2:5A:F8:C4:70:47:63:7B:AE:BE:F3:83:23:82:8A
Authority key identifier: 48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78
Certificate issuer: /CN=A9148827/serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478
Certificate serial: 0BB3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
Manifest number: 0B9A
Signing time: Thu 16 Apr 2026 19:02:34 +0000
Manifest this update: Thu 16 Apr 2026 19:02:34 +0000
Manifest next update: Thu 23 Apr 2026 19:02:34 +0000
Files and hashes: 1: SErowNFXmbX_CB_kDD4eAOTolHg.crl (hash: sUWD1VUPneq7pO55WCqhbcU5Vzt8XN31SejVNnFdSUE=)
2: E5DE3744492611EAA7ADEB71C4F9AE02.roa (hash: KuN44DKGBq1IgfFCnFPCdEKjgAmIvKASFe1F8KZvnoI=)
3: 09DF69582A3411EB9E69467DC4F9AE02.roa (hash: KzRK2aas8eOCnSmqY3CGoTXt2kRSyd0CQk65Ns8wG6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl
rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2995 (0xbb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148827, serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478
Validity
Not Before: Apr 16 19:02:34 2026 GMT
Not After : Apr 23 19:02:34 2026 GMT
Subject: CN=69e1324a-06d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:24:9a:9d:69:57:15:e7:ef:a7:1b:16:ca:11:
38:3c:a4:48:15:e7:63:cc:1b:8d:c9:b3:59:01:3a:
e4:be:13:e6:70:6d:cd:3a:4a:02:d1:ba:ea:de:b4:
54:08:5c:16:09:67:88:7e:5f:51:0e:c4:43:32:43:
bb:c1:4b:50:50:a2:88:99:49:2e:a8:60:ce:85:67:
37:37:33:5a:0e:4a:a0:68:2b:64:e4:58:34:8e:db:
0b:ee:69:27:93:82:82:cf:17:76:12:27:a6:8a:bb:
c2:ad:a3:44:50:0e:ae:2b:8f:8f:8a:e3:67:45:12:
1a:96:57:fb:c9:f9:80:39:51:46:3b:98:56:89:c2:
43:4a:4d:9d:0e:28:64:ac:07:01:94:e3:5c:38:9c:
89:43:dd:a8:cb:47:d5:c4:4d:0c:a2:f6:f1:10:83:
2d:21:fe:42:a3:8b:b5:bf:9a:67:19:74:92:34:c8:
62:f1:6d:8d:5f:73:ed:e9:2d:75:09:3d:80:11:e9:
14:5a:7b:16:4f:df:e5:6e:d8:70:da:17:a4:05:7b:
87:1c:40:af:b1:b5:d2:6f:f7:e4:df:0b:70:5d:f8:
07:3f:80:cd:1e:36:0f:f4:be:33:a8:f9:ac:c1:30:
f5:9d:a6:7d:d7:56:43:bc:e3:1f:7b:fb:3f:94:36:
ff:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AD:8D:79:96:E2:5A:F8:C4:70:47:63:7B:AE:BE:F3:83:23:82:8A
X509v3 Authority Key Identifier:
keyid:48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:0d:87:23:02:da:80:2e:ad:2e:65:e5:e1:63:98:64:f5:dd:
54:a8:8a:b1:86:e9:9f:2d:7a:e0:dc:0a:9c:01:e5:cc:18:b1:
37:06:e5:ac:b4:a8:e6:c3:ae:c8:ea:a9:51:a3:5b:61:e2:6f:
2b:55:08:ae:82:27:f0:67:0d:05:1a:df:9a:17:47:8c:19:b8:
05:a4:9d:a5:b0:94:61:95:34:03:10:5e:7c:a3:f5:68:75:dd:
d1:a0:02:2c:1d:2a:88:eb:f7:d7:f8:a5:89:14:61:35:ce:f9:
b6:19:19:0a:0d:ce:d3:ab:44:39:45:0f:c8:36:e3:6c:0c:fc:
ec:8b:2b:9d:88:50:6b:f4:82:06:d3:1f:71:d2:41:aa:05:45:
f0:af:19:54:ab:3a:92:ec:e9:94:4e:7d:46:66:62:2f:18:cf:
a3:f3:3d:2d:0c:ac:d1:35:7b:3e:34:29:3f:63:0c:19:a3:d6:
9e:5d:36:ae:30:33:63:cb:a7:3e:48:72:e1:9e:80:80:82:3a:
b2:6e:2d:27:5f:ef:59:b9:aa:7c:62:a5:8a:80:65:4b:69:5b:
64:9a:76:5e:17:46:ba:2b:41:bb:4a:b3:a9:57:aa:89:6b:ae:
56:aa:01:ff:d8:dc:1b:0b:6a:ae:80:e3:b3:c9:30:d2:cb:f8:
70:99:81:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:35:56 2026 by rpki-client