
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
File: SErowNFXmbX_CB_kDD4eAOTolHg.mft (raw, json)
Hash identifier: lrP5qC961rp3em/CAchiCW8vco62i/mn6eoaYojNmM8=
Subject key identifier: 37:60:80:DF:0F:41:C4:51:F2:76:DE:7F:C5:9C:C8:49:83:3C:E0:18
Authority key identifier: 48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78
Certificate issuer: /CN=A9148827/serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478
Certificate serial: 0C05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
Manifest number: 0BEC
Signing time: Thu 24 Sep 2026 18:56:53 +0000
Manifest this update: Thu 24 Sep 2026 18:56:53 +0000
Manifest next update: Thu 01 Oct 2026 18:56:53 +0000
Files and hashes: 1: SErowNFXmbX_CB_kDD4eAOTolHg.crl (hash: hNvNX3bVm5MceggfZX2MrUiGU0djlD0gWMza3Ntm8ME=)
2: E5DE3744492611EAA7ADEB71C4F9AE02.roa (hash: KuN44DKGBq1IgfFCnFPCdEKjgAmIvKASFe1F8KZvnoI=)
3: 09DF69582A3411EB9E69467DC4F9AE02.roa (hash: KzRK2aas8eOCnSmqY3CGoTXt2kRSyd0CQk65Ns8wG6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl
rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:56:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3077 (0xc05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148827, serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478
Validity
Not Before: Sep 24 18:56:53 2026 GMT
Not After : Oct 1 18:56:53 2026 GMT
Subject: CN=6ab57275-171f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:ca:5d:eb:4e:5f:36:00:35:cd:54:f3:08:
53:aa:32:9f:8f:86:98:dc:94:d3:06:42:fa:83:4d:
07:60:40:21:64:14:c3:10:1e:f6:35:38:61:82:73:
de:93:cb:50:61:f5:69:b5:ae:24:e7:1e:33:ae:72:
37:5d:aa:d0:a6:65:04:f4:c2:db:55:a8:45:ab:24:
4d:0a:6a:aa:bc:6f:cb:aa:34:74:82:f8:6b:82:d7:
11:70:26:5d:5e:69:96:4c:4e:6e:54:f2:9a:83:01:
1b:80:bf:47:a4:53:5d:e2:a9:2e:0c:c2:41:0c:a3:
79:0a:51:19:67:be:a5:cb:70:88:59:d3:bd:42:fd:
db:59:6b:26:72:bf:63:ff:c6:f0:46:f7:67:87:df:
8d:04:7f:7a:ba:11:2b:14:b4:ec:c5:68:a0:28:ca:
56:51:99:ca:c3:ee:db:ea:9b:aa:9e:66:57:1f:b1:
14:7e:ae:f4:b8:1a:8f:b7:53:ac:a1:9d:94:e1:b9:
7a:a1:21:60:d7:43:91:af:f5:8a:7d:9e:f4:c3:bf:
c8:52:4a:58:6a:41:d3:53:d5:72:72:93:02:a6:b7:
90:fb:63:b7:c1:fc:b6:7a:91:62:b6:aa:32:1e:99:
ff:3c:02:dd:f7:1a:46:da:7c:a6:97:10:1d:23:82:
cb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:60:80:DF:0F:41:C4:51:F2:76:DE:7F:C5:9C:C8:49:83:3C:E0:18
X509v3 Authority Key Identifier:
keyid:48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:32:82:1a:5d:dc:8d:b9:0c:59:d1:8f:a6:9e:89:00:9a:60:
af:8b:71:b6:bf:1b:f8:fe:9b:9b:01:7d:fe:a6:8e:29:e1:48:
a7:b9:d7:1b:d2:41:4e:70:58:97:50:18:9d:5c:23:a6:be:ab:
9c:40:41:12:51:6b:66:b9:3c:06:1b:d5:98:a3:38:20:84:25:
3f:37:1e:fa:a7:8a:96:bb:7b:b1:be:48:28:3e:0a:42:2f:b0:
57:ca:81:77:4f:9a:77:29:98:d3:4e:3e:51:e4:5d:e9:98:6e:
31:b5:d7:58:af:39:66:f3:73:0a:a9:e1:c7:3a:e4:0a:f5:ab:
c6:61:88:c1:6f:11:a3:18:e1:cb:9b:f2:c3:85:8f:20:23:82:
70:84:8f:87:6a:45:17:73:30:b3:71:7e:99:bd:eb:51:97:b6:
98:c1:bd:40:78:13:d0:9d:5e:5b:de:55:b7:84:8d:6e:fc:78:
72:75:61:a5:4b:af:7e:43:a9:65:3a:d4:9a:ba:cc:df:e6:43:
ef:c4:21:c8:ab:bc:71:68:b0:a8:13:c6:16:af:87:df:79:47:
3b:8a:08:9c:5d:14:e0:14:33:35:d9:a0:18:61:08:11:76:de:
96:8b:71:91:d6:27:d5:91:5f:0e:65:58:b9:e4:38:99:e0:12:
73:9a:04:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:41:26 2026 by rpki-client