$ rpki-client -vvf rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft File: SErowNFXmbX_CB_kDD4eAOTolHg.mft (raw, json) Hash identifier: DHsDW2UmVe0oT+fxk4XOkGiPmlv7/7W2XyljM8X7euc= Subject key identifier: EC:90:7E:8E:1C:6B:34:53:6E:F5:4F:64:30:32:86:64:49:3F:E3:B1 Authority key identifier: 48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78 Certificate issuer: /CN=A9148827/serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478 Certificate serial: 0B3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft Manifest number: 0B2A Signing time: Thu 18 Sep 2025 19:31:34 +0000 Manifest this update: Thu 18 Sep 2025 19:31:33 +0000 Manifest next update: Thu 25 Sep 2025 19:31:33 +0000 Files and hashes: 1: SErowNFXmbX_CB_kDD4eAOTolHg.crl (hash: hi9EieJpC2oScPWSpbw6rvNVSBsaYfLQksJO6oZbBdI=) 2: 09DF69582A3411EB9E69467DC4F9AE02.roa (hash: Vs9WbC7+FXTpkpEtrPfe5o3W7t/VcDXrHl+kg25ZJHc=) 3: E5DE3744492611EAA7ADEB71C4F9AE02.roa (hash: 6/Bcw5YjZPi9shssWW0OtrdPJZKAVnJFq1ohKYFJu8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2879 (0xb3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148827, serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478 Validity Not Before: Sep 18 19:31:33 2025 GMT Not After : Sep 25 19:31:33 2025 GMT Subject: CN=68cc5e16-789f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:48:37:91:b2:2a:52:23:92:1a:09:e4:31:36: 49:de:a9:76:41:73:21:01:74:34:8e:81:4c:3a:eb: 9e:3f:15:ec:ef:19:ea:0f:f4:61:5c:dd:43:03:40: 0e:fe:f2:22:4b:e1:9d:13:76:7d:7b:41:88:16:83: e6:d1:c5:07:b8:56:59:41:40:50:a5:87:95:89:86: b4:81:ea:bd:9d:a4:d0:02:22:7f:14:88:75:24:2c: a4:5a:92:d5:dd:c2:6b:23:95:14:0f:45:ee:31:31: b2:33:c2:87:dc:54:c4:a3:67:63:4d:e8:d2:94:91: c6:31:41:9d:a7:b3:18:3e:12:be:a6:df:00:c2:30: 4d:a7:32:cb:0e:7d:17:9f:d2:04:f9:1c:75:ca:ee: e1:44:ee:be:91:ed:ca:1a:48:49:7e:c3:61:f1:a8: 7f:cf:bf:b1:df:0f:d6:74:2f:2d:e7:5a:83:9a:9f: 04:ce:6e:28:54:8b:83:c1:28:cc:0c:8e:4d:64:57: 8c:ec:a1:44:00:99:d5:b0:0a:08:68:29:73:66:0f: f1:1f:6a:e9:91:38:0b:3b:46:bf:28:22:6c:f8:ee: cd:1d:02:7b:cd:f1:74:59:ac:a7:f5:ba:a6:69:e0: 8b:7e:4d:85:f7:68:52:55:f7:cd:7f:98:cc:3d:fe: b9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:90:7E:8E:1C:6B:34:53:6E:F5:4F:64:30:32:86:64:49:3F:E3:B1 X509v3 Authority Key Identifier: keyid:48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:1c:8c:31:4c:ab:9a:ed:c8:0a:b3:57:f8:62:fc:3f:44:82: 4c:b3:c5:13:02:2f:b1:40:19:82:2c:0b:0a:c5:ff:cd:99:74: 4f:75:3d:45:ab:8b:d7:23:cd:26:c7:f9:00:de:ef:0e:b1:ec: 5e:d5:d9:54:21:d4:02:6d:40:23:16:06:a6:f3:95:f0:8b:f1: 6f:77:e6:75:bd:14:30:c6:9b:ca:7b:79:a0:71:4b:bc:ae:1f: db:37:0b:a4:df:52:70:7c:76:ef:8f:d6:75:2b:80:a9:5e:a2: 69:ed:ff:71:eb:24:b5:4f:88:e8:d7:92:56:b0:5a:2b:32:63: a1:77:1d:10:98:97:05:a9:7e:30:0d:3b:fa:c9:4b:6a:cd:6f: 22:d7:d3:00:ce:64:1a:75:bc:a2:ad:38:3e:db:dd:51:ba:f4: 19:6a:57:60:85:a3:83:cc:36:20:cb:16:ee:29:41:a9:2d:89: 37:86:0f:95:d7:23:50:4e:d2:ff:87:d2:37:50:75:7e:72:42: 16:67:6a:78:ec:7c:a0:81:49:19:5c:7d:b2:22:5a:90:73:06: 17:d4:05:19:53:88:fd:20:8d:99:a5:db:d9:92:d2:24:62:59: f8:12:ed:21:c0:1c:6e:ef:95:15:e7:be:64:55:0e:ce:13:5d: a2:c1:8d:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4MjcxMTAvBgNVBAUTKDQ4NEFFOEMwRDE1Nzk5QjVGRjA4MUZFNDBDM0UxRTAw RTRFODk0NzgwHhcNMjUwOTE4MTkzMTMzWhcNMjUwOTI1MTkzMTMzWjAYMRYwFAYD VQQDEw02OGNjNWUxNi03ODlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00g3kbIqUiOSGgnkMTZJ3ql2QXMhAXQ0joFMOuuePxXs7xnqD/RhXN1DA0AO /vIiS+GdE3Z9e0GIFoPm0cUHuFZZQUBQpYeViYa0geq9naTQAiJ/FIh1JCykWpLV 3cJrI5UUD0XuMTGyM8KH3FTEo2djTejSlJHGMUGdp7MYPhK+pt8AwjBNpzLLDn0X n9IE+Rx1yu7hRO6+ke3KGkhJfsNh8ah/z7+x3w/WdC8t51qDmp8Ezm4oVIuDwSjM DI5NZFeM7KFEAJnVsAoIaClzZg/xH2rpkTgLO0a/KCJs+O7NHQJ7zfF0Wayn9bqm aeCLfk2F92hSVffNf5jMPf65lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyQfo4c azRTbvVPZDAyhmRJP+OxMB8GA1UdIwQYMBaAFEhK6MDRV5m1/wgf5Aw+HgDk6JR4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODgyNy84ODg3MTkzNjQ5 MjUxMUVBQTk0NDk3NkZDNEY5QUUwMi9TRXJvd05GWG1iWF9DQl9rREQ0ZUFPVG9s SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NFcm93TkZYbWJYX0NCX2tERDRlQU9Ub2xIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODgyNy84ODg3MTkzNjQ5MjUxMUVBQTk0NDk3NkZDNEY5QUUwMi9TRXJvd05GWG1i WF9DQl9rREQ0ZUFPVG9sSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAHIwxTKua7cgKs1f4Yvw/RIJMs8UTAi+xQBmCLAsKxf/NmXRPdT1F q4vXI80mx/kA3u8Osexe1dlUIdQCbUAjFgam85Xwi/Fvd+Z1vRQwxpvKe3mgcUu8 rh/bNwuk31JwfHbvj9Z1K4CpXqJp7f9x6yS1T4jo15JWsForMmOhdx0QmJcFqX4w DTv6yUtqzW8i19MAzmQadbyirTg+291RuvQZaldghaODzDYgyxbuKUGpLYk3hg+V 1yNQTtL/h9I3UHV+ckIWZ2p47HyggUkZXH2yIlqQcwYX1AUZU4j9II2ZpdvZktIk Yln4Eu0hwBxu75UV575kVQ7OE12iwY09 -----END CERTIFICATE-----Generated at Thu Sep 18 23:29:19 2025 by rpki-client