$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft File: sehPrPrLwLeDhWHvIeKPL6z13-w.mft (raw, json) Hash identifier: AkbKYjoITkp3BMW2RynQgMVlSu3/j6pYQpZzkf/NN3s= Subject key identifier: FE:B9:F9:34:47:AB:AC:FA:DC:29:14:63:22:CB:DC:EE:31:9D:F6:1F Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC Certificate issuer: /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC Certificate serial: 0B28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft Manifest number: 0AC0 Signing time: Tue 24 Mar 2026 19:25:41 +0000 Manifest this update: Tue 24 Mar 2026 19:25:40 +0000 Manifest next update: Tue 31 Mar 2026 19:25:40 +0000 Files and hashes: 1: sehPrPrLwLeDhWHvIeKPL6z13-w.crl (hash: KR8A6sy+65XlzZb0jCpiD69N6INWonoaqUKVBC2tH8Q=) 2: B3E738FAB0F811EA895AE231C4F9AE02.roa (hash: 13Cs6llbmHpC85Gbd7YS//QxM6ULLm2BvcaEMsw7bf0=) 3: B364F656C0AD11EEACCA627AC4F9AE02.roa (hash: ABIzRnS9XvFxLIehdn3s265872TfVCUlGLIf7r900hs=) 4: 2FDA4F26E20711EF9B64614EC4F9AE02.roa (hash: YORNS40ObCMRCfS65pJfVFUYvG63mt43oEQIm4FnLwI=) 5: 36C13562946211F0A915C35EC4F9AE02.roa (hash: 1NX+V4nMdU0uu4W41gO+PJfYAkOiCjrRa6G9ZsWqv5c=) 6: 146B772C82DC11EA9B13000CC4F9AE02.roa (hash: /F/F2gcWI41fUgxjbXz0fFgreZGYqAitM//lesabkeQ=) 7: 1855E96CABBD11EA9A38D358C4F9AE02.roa (hash: C4qtiieLbHSavnjWGc8HqMNc0o5hdHd+rkM4wQ92qNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2856 (0xb28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917576D, serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC Validity Not Before: Mar 24 19:25:40 2026 GMT Not After : Mar 31 19:25:40 2026 GMT Subject: CN=69c2e534-9131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e5:41:ef:f1:d0:74:10:93:5a:03:b2:16:d8: fe:08:b3:ff:35:04:b1:02:d5:bd:41:b1:c6:b5:09: 84:ab:aa:6a:eb:27:c4:0d:d6:4c:4f:6b:76:67:58: f8:8d:b3:90:56:e7:46:8c:f8:44:d4:b9:1e:e1:31: df:87:b9:32:0a:57:cd:5d:aa:8b:b4:ab:0b:95:37: da:f5:aa:96:3c:39:c1:a3:8f:5c:c7:16:ab:f5:98: 86:f8:aa:19:35:2e:71:54:7a:1a:71:39:53:49:81: 9b:01:f2:d3:5f:d5:b4:1b:e0:0f:73:c0:29:c9:5a: 17:80:c9:6d:eb:61:91:81:e8:4f:50:1b:c8:b1:36: 8f:0d:53:40:a0:81:66:fb:8b:8b:8a:23:e2:d1:f1: 1c:1d:48:00:ed:a1:f9:30:05:08:1b:dc:74:fd:52: 36:d0:82:1f:8c:0a:4a:a0:de:e9:59:83:74:64:05: b9:d1:ea:92:fb:47:8b:d8:08:e0:15:1f:a7:c3:cc: 5a:59:d4:50:84:a4:68:e3:ae:c3:f9:8c:9d:7d:0d: 35:60:94:6a:d8:c2:24:2f:75:39:e9:35:59:34:dc: 32:d4:ad:de:52:d4:c7:19:92:53:4a:54:9f:c5:10: 33:70:60:9c:5c:94:86:01:ff:62:d7:2b:8f:09:fe: 3c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B9:F9:34:47:AB:AC:FA:DC:29:14:63:22:CB:DC:EE:31:9D:F6:1F X509v3 Authority Key Identifier: keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e7:44:0f:cb:bb:e3:50:fb:82:41:b0:a0:c9:18:28:97:6d: c6:08:7a:63:4b:b0:a1:00:79:67:69:03:40:21:16:7f:90:9c: 64:22:59:95:b8:2d:49:af:da:a6:1d:9a:fa:5a:f4:fb:10:89: 55:27:2f:f0:05:e0:e4:8e:48:0b:e3:a3:7c:d6:52:54:d6:6c: 22:91:c2:14:11:cb:a1:b7:3d:bc:24:9e:41:5c:ed:54:df:72: 55:ca:2c:01:31:3e:7c:c7:68:4d:2a:3c:0b:99:38:1d:dc:23: 43:1a:07:38:4b:28:a4:ad:df:bc:68:d4:c2:22:99:a3:b3:48: be:ce:41:46:c1:a4:d7:d3:3a:3e:68:78:d8:36:4f:95:7a:7f: b2:ee:39:40:cf:47:d8:91:4c:a7:8a:5e:89:df:e7:8d:c0:a4: 0f:41:cc:47:7e:c2:51:78:f5:b6:49:17:89:5f:d0:94:93:e2: af:03:a5:da:76:82:80:d0:48:9c:11:da:92:0b:8f:70:a4:13: 8f:b6:93:fa:5b:25:ba:02:6f:a3:79:e8:dd:f0:60:2a:63:1b: b7:bb:8d:16:f5:8f:92:51:b3:6d:33:ba:2b:40:8f:21:1e:c7: 2d:f1:45:cf:44:0b:dd:32:b3:21:9e:17:1b:f1:3f:af:75:08: 76:50:a4:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3NkQxMTAvBgNVBAUTKEIxRTg0RkFDRkFDQkMwQjc4Mzg1NjFFRjIxRTI4RjJG QUNGNURGRUMwHhcNMjYwMzI0MTkyNTQwWhcNMjYwMzMxMTkyNTQwWjAYMRYwFAYD VQQDEw02OWMyZTUzNC05MTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7+VB7/HQdBCTWgOyFtj+CLP/NQSxAtW9QbHGtQmEq6pq6yfEDdZMT2t2Z1j4 jbOQVudGjPhE1Lke4THfh7kyClfNXaqLtKsLlTfa9aqWPDnBo49cxxar9ZiG+KoZ NS5xVHoacTlTSYGbAfLTX9W0G+APc8ApyVoXgMlt62GRgehPUBvIsTaPDVNAoIFm +4uLiiPi0fEcHUgA7aH5MAUIG9x0/VI20IIfjApKoN7pWYN0ZAW50eqS+0eL2Ajg FR+nw8xaWdRQhKRo467D+YydfQ01YJRq2MIkL3U56TVZNNwy1K3eUtTHGZJTSlSf xRAzcGCcXJSGAf9i1yuPCf48bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP65+TRH q6z63CkUYyLL3O4xnfYfMB8GA1UdIwQYMBaAFLHoT6z6y8C3g4Vh7yHijy+s9d/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8zNjg3MkE1RTgy Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi9zZWhQclByTHdMZURoV0h2SWVLUEw2ejEz LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlaFByUHJMd0xlRGhXSHZJZUtQTDZ6MTMtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTc2RC8zNjg3MkE1RTgyQ0QxMUVBODk1QzdCNUNDNEY5QUUwMi9zZWhQclByTHdM ZURoV0h2SWVLUEw2ejEzLXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH+dED8u741D7gkGwoMkYKJdtxgh6Y0uwoQB5Z2kDQCEWf5CcZCJZlbgtSa/a ph2a+lr0+xCJVScv8AXg5I5IC+OjfNZSVNZsIpHCFBHLobc9vCSeQVztVN9yVcos ATE+fMdoTSo8C5k4HdwjQxoHOEsopK3fvGjUwiKZo7NIvs5BRsGk19M6Pmh42DZP lXp/su45QM9H2JFMp4peid/njcCkD0HMR37CUXj1tkkXiV/QlJPirwOl2naCgNBI nBHakguPcKQTj7aT+lslugJvo3no3fBgKmMbt7uNFvWPklGzbTO6K0CPIR7HLfFF z0QL3TKzIZ4XG/E/r3UIdlCk0A== -----END CERTIFICATE-----Generated at Thu Mar 26 11:29:32 2026 by rpki-client