
$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
File: sehPrPrLwLeDhWHvIeKPL6z13-w.mft (raw, json)
Hash identifier: vO2eMzjmnDtq5dmocuAkhoOoDDvLit2DmuYFWLObspk=
Subject key identifier: 8C:CC:8F:49:34:32:8D:B2:1C:8B:C5:C4:E3:13:5A:29:38:C7:24:16
Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
Certificate issuer: /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Certificate serial: 0B65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
Manifest number: 0AFD
Signing time: Wed 22 Jul 2026 19:54:33 +0000
Manifest this update: Wed 22 Jul 2026 19:54:33 +0000
Manifest next update: Wed 29 Jul 2026 19:54:33 +0000
Files and hashes: 1: sehPrPrLwLeDhWHvIeKPL6z13-w.crl (hash: FQoxKYxnCURwHGWIMkdsPmEy0ZuWZFdGIKzbIHMe3g8=)
2: B364F656C0AD11EEACCA627AC4F9AE02.roa (hash: ABIzRnS9XvFxLIehdn3s265872TfVCUlGLIf7r900hs=)
3: B3E738FAB0F811EA895AE231C4F9AE02.roa (hash: 13Cs6llbmHpC85Gbd7YS//QxM6ULLm2BvcaEMsw7bf0=)
4: 1855E96CABBD11EA9A38D358C4F9AE02.roa (hash: C4qtiieLbHSavnjWGc8HqMNc0o5hdHd+rkM4wQ92qNE=)
5: 36C13562946211F0A915C35EC4F9AE02.roa (hash: 1NX+V4nMdU0uu4W41gO+PJfYAkOiCjrRa6G9ZsWqv5c=)
6: 2FDA4F26E20711EF9B64614EC4F9AE02.roa (hash: YORNS40ObCMRCfS65pJfVFUYvG63mt43oEQIm4FnLwI=)
7: 146B772C82DC11EA9B13000CC4F9AE02.roa (hash: /F/F2gcWI41fUgxjbXz0fFgreZGYqAitM//lesabkeQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2917 (0xb65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917576D, serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Validity
Not Before: Jul 22 19:54:33 2026 GMT
Not After : Jul 29 19:54:33 2026 GMT
Subject: CN=6a611ff9-074b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ba:21:e8:d9:1f:a2:b6:23:a2:3e:ec:35:d5:
8a:05:69:80:79:90:0c:ec:07:d8:27:01:06:57:dd:
39:e7:b7:8e:08:fc:bb:2f:2b:00:e3:d8:d6:09:e8:
55:3a:e2:87:a1:ad:a4:8c:39:f5:2e:9b:f6:06:82:
1d:06:3c:8c:bc:fd:09:17:8e:35:6b:29:5a:cb:0c:
eb:55:c3:3a:14:7a:56:40:f0:78:71:00:1f:a4:59:
6f:7e:66:6c:d5:06:e3:f8:f2:4a:31:3a:07:ad:a9:
8e:4c:01:8b:52:00:b0:98:6a:24:7a:ac:03:b8:0d:
44:97:7d:48:5d:7c:58:83:34:6e:7e:d8:f7:25:e8:
8f:8c:e5:9d:e0:19:1a:15:40:46:06:4d:75:97:7e:
5b:38:20:21:a9:5b:fb:93:f8:cd:01:21:2d:1b:41:
90:a1:92:54:89:c2:26:08:eb:a1:79:ba:6f:d4:a9:
9c:d9:87:95:8c:25:25:f3:ed:02:05:65:8f:2b:4b:
bb:34:47:a5:2b:f3:4a:8b:8f:69:56:75:0c:2b:90:
3f:95:4f:a5:6d:32:a9:76:3c:61:70:d0:c3:28:6a:
a7:ec:d4:79:a6:2c:74:c9:0c:07:36:c5:90:4c:7b:
b9:eb:d9:ae:fb:85:17:e2:29:18:42:ab:c2:81:1b:
c8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CC:8F:49:34:32:8D:B2:1C:8B:C5:C4:E3:13:5A:29:38:C7:24:16
X509v3 Authority Key Identifier:
keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:c9:63:d8:51:a4:03:21:d4:7e:e7:77:80:66:d2:79:6f:b9:
d8:09:a6:77:1d:95:62:2a:66:6a:13:b5:d8:92:c9:81:b3:13:
82:1e:e1:47:d1:42:bc:14:bf:7b:7d:bd:84:b4:3e:1c:72:a2:
e7:57:f9:41:61:01:fa:59:69:bd:fd:37:89:34:2f:c1:bb:fd:
9c:22:fb:6b:1b:42:8e:a4:83:80:42:41:07:6b:97:fa:9e:a0:
b3:fb:8c:18:24:a5:45:1e:44:01:f6:d5:f8:97:28:60:e2:40:
65:cc:c8:37:ea:86:57:05:00:51:3e:bf:f8:37:f1:fd:da:e9:
61:e3:42:c0:b2:60:af:88:cd:5d:bd:3b:50:a9:7d:b4:6b:39:
73:25:18:58:53:c0:65:e9:b7:0b:9b:f0:ad:b1:71:1d:28:9e:
d3:e1:8d:86:74:5a:57:35:d6:89:59:f2:73:06:22:02:73:d4:
bb:c2:ca:17:3f:6e:8b:59:bb:d1:ed:ee:0f:13:48:b7:76:11:
29:33:26:7e:5c:27:de:ce:89:eb:0c:dd:62:c6:1f:33:78:e0:
d6:4c:a8:8a:7f:7f:72:6a:67:3c:29:fb:ee:8a:11:21:4d:3b:
44:93:64:aa:09:d8:0d:dc:8c:f5:7f:4a:65:53:21:a8:bc:02:
6f:13:34:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:02 2026 by rpki-client