
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
File: SErowNFXmbX_CB_kDD4eAOTolHg.mft (raw, json)
Hash identifier: jPnNZgpRsjm4nmNkxvoVY+UgLG3TQ/G1LgozZRlHis8=
Subject key identifier: FB:14:1F:56:BC:90:5A:7D:02:DE:62:70:93:D6:4A:1C:D5:07:F1:C3
Authority key identifier: 48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78
Certificate issuer: /CN=A9148827/serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478
Certificate serial: 0BC4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
Manifest number: 0BAB
Signing time: Wed 20 May 2026 19:06:51 +0000
Manifest this update: Wed 20 May 2026 19:06:51 +0000
Manifest next update: Wed 27 May 2026 19:06:51 +0000
Files and hashes: 1: SErowNFXmbX_CB_kDD4eAOTolHg.crl (hash: ELtEf9Ndyw0Ytt4Jr2lQThwYCbEP4pd0kVl+wnTSDUw=)
2: E5DE3744492611EAA7ADEB71C4F9AE02.roa (hash: KuN44DKGBq1IgfFCnFPCdEKjgAmIvKASFe1F8KZvnoI=)
3: 09DF69582A3411EB9E69467DC4F9AE02.roa (hash: KzRK2aas8eOCnSmqY3CGoTXt2kRSyd0CQk65Ns8wG6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl
rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 19:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3012 (0xbc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148827, serialNumber=484AE8C0D15799B5FF081FE40C3E1E00E4E89478
Validity
Not Before: May 20 19:06:51 2026 GMT
Not After : May 27 19:06:51 2026 GMT
Subject: CN=6a0e064b-d89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:56:2f:b1:bf:e7:64:d7:61:6f:f2:2c:96:75:
56:be:a2:93:89:df:c6:b9:0e:fa:4a:28:62:53:09:
56:e5:93:ef:a3:ca:bc:11:42:cb:14:1d:00:54:68:
a6:a7:9c:8c:4a:39:22:18:8a:6f:8d:2d:65:35:2c:
a2:1d:66:ed:2e:5b:2c:d2:a4:5b:ed:13:3a:bf:47:
80:65:e5:15:cf:13:16:b9:72:dd:1b:28:71:c0:c3:
39:9d:8e:39:de:4c:a1:ea:3c:97:c3:3b:1d:e1:28:
8d:13:f2:de:14:c2:34:5f:4a:67:82:f3:bb:82:2d:
d1:dd:6b:0f:6a:2a:32:ee:45:18:03:c4:9c:1b:3b:
dc:53:2f:39:90:3a:71:7b:8c:75:52:e6:c9:1a:e9:
94:48:f5:33:51:47:ae:18:08:7f:52:88:02:65:24:
c3:09:01:85:e1:f5:8b:e9:cc:8e:32:b5:1d:6a:fc:
88:59:f7:b9:71:b1:79:dd:43:89:0c:85:6f:f3:ea:
72:36:93:c0:e8:f4:3a:4d:50:71:ef:c3:62:3f:52:
a3:99:78:ab:d9:84:5e:61:1f:5e:38:0d:ed:a4:6e:
e6:6a:69:8c:5a:6c:b6:18:78:5b:36:16:e9:c6:6f:
51:bd:7e:50:b8:e9:44:47:0f:36:64:86:74:27:aa:
e2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:14:1F:56:BC:90:5A:7D:02:DE:62:70:93:D6:4A:1C:D5:07:F1:C3
X509v3 Authority Key Identifier:
keyid:48:4A:E8:C0:D1:57:99:B5:FF:08:1F:E4:0C:3E:1E:00:E4:E8:94:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SErowNFXmbX_CB_kDD4eAOTolHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148827/88871936492511EAA944976FC4F9AE02/SErowNFXmbX_CB_kDD4eAOTolHg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:35:96:23:e3:cf:44:b6:3e:0f:5b:01:16:3a:26:e4:f5:05:
6a:9a:3a:a2:5b:90:3a:cc:17:88:3b:77:1e:66:ae:d6:26:7d:
95:b8:0a:4e:21:9e:3b:97:f6:0b:ab:3f:4c:b4:51:d6:f5:bd:
5e:0c:8b:13:73:ca:8a:36:d0:cd:dc:83:55:5e:e5:73:c9:8a:
ee:9f:f9:d3:01:8c:9a:d6:1c:9a:a8:dc:3c:b1:cf:b5:74:3d:
d9:4f:e1:4c:fb:6b:d4:69:38:ba:ef:c5:57:96:09:0e:fb:c2:
a6:be:f7:b1:40:3b:1b:8f:fc:2e:1d:63:22:06:8b:11:b8:d0:
11:25:ef:2e:97:e9:88:00:bc:8d:34:a5:db:c4:11:4c:7b:74:
b4:3a:25:5e:d1:ee:a5:f0:71:7b:d0:08:a8:df:30:b7:cb:e0:
8b:52:ba:62:ee:4e:a8:1d:13:38:87:99:1d:fa:30:ca:23:f4:
22:dd:83:ec:4d:fa:56:91:57:a7:e4:cd:3e:46:80:ce:d0:98:
7e:96:01:19:42:a0:e1:eb:3f:1c:d5:01:65:cd:14:7f:27:30:
8f:ee:4e:94:52:68:b4:b0:42:4c:db:41:44:2d:4c:89:f0:86:
6b:9c:4e:92:b1:b6:ff:8a:0c:fd:26:6d:7e:78:d9:db:e8:8d:
2e:8b:69:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:53:09 2026 by rpki-client