This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
File: sehPrPrLwLeDhWHvIeKPL6z13-w.mft (raw, json)
Hash identifier: Gp1v6H5Yvj5E1z8s542fTLrXulDhtqEjfi9VmbwWAQw=
Subject key identifier: DB:4C:E0:61:92:87:2B:2D:23:1C:70:B8:A4:BB:8A:B7:9C:4C:6C:8C
Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
Certificate issuer: /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Certificate serial: 0AFC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
Manifest number: 0A9F
Signing time: Sat 24 Jan 2026 19:10:30 +0000
Manifest this update: Sat 24 Jan 2026 19:10:29 +0000
Manifest next update: Sat 31 Jan 2026 19:10:29 +0000
Files and hashes: 1: sehPrPrLwLeDhWHvIeKPL6z13-w.crl (hash: PEP4t13MXSIj8pvwe8Pxe21DYAx2YzHjEdD5wEQ2kV8=)
2: 1855E96CABBD11EA9A38D358C4F9AE02.roa (hash: r4rzBCbIMp3iFvqhDbSXEyN/C18fjuivfYiSBwzRiCs=)
3: B3E738FAB0F811EA895AE231C4F9AE02.roa (hash: 6fyTIIfouSHt0bSoCvpr+tLclfajnShRN3BsA0C3Qx0=)
4: B364F656C0AD11EEACCA627AC4F9AE02.roa (hash: 0MEm1fmObOtqaltXf1Xz0+7DY1CRoAuGSkdHW1D0o+Q=)
5: 2FDA4F26E20711EF9B64614EC4F9AE02.roa (hash: 46HPj9/aVPYDWikrpiKeLjIAgPfeI7qV8Myh5jS+VwI=)
6: 146B772C82DC11EA9B13000CC4F9AE02.roa (hash: RaEy/c0RDVPJljVOjzCUx5HkOYe2NH7gDK679iI3lU8=)
7: 36C13562946211F0A915C35EC4F9AE02.roa (hash: O+WXljzzkselauIWKcKRYMMWphA8HHOCCBSiwkUZ9Jc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2812 (0xafc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917576D, serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Validity
Not Before: Jan 24 19:10:29 2026 GMT
Not After : Jan 31 19:10:29 2026 GMT
Subject: CN=69751926-7d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:84:69:fd:93:4a:eb:f9:ab:d7:64:fc:04:
52:90:a9:c7:97:50:16:18:c9:2b:05:b1:55:68:4c:
e1:ac:cc:53:44:85:dd:d6:34:58:d8:1b:ff:7b:89:
82:9b:0f:b6:b7:40:12:28:61:66:19:85:c3:85:23:
e1:94:19:c2:0d:66:2f:f1:fd:a9:cd:d0:64:ff:bf:
4d:ce:c1:bb:7a:f5:7d:79:b5:b2:96:5c:c9:91:f5:
1b:a1:6c:03:4d:0b:ce:6e:76:ee:eb:81:76:7d:3e:
79:1e:93:ee:a6:d8:b0:a0:06:ed:bf:b9:89:e9:8d:
58:75:0b:fb:7b:99:09:47:91:b3:a9:8d:29:da:a8:
97:fe:eb:0f:0b:91:59:69:5e:40:5a:a5:97:f1:ba:
60:b3:8c:ce:c6:cb:ce:95:b2:5b:37:6c:92:ed:f5:
34:ed:81:49:4c:26:d1:9b:3e:5b:17:ab:4e:a6:a8:
32:08:8e:1f:54:16:3a:8f:84:9a:a1:69:62:f1:eb:
6b:1b:8a:49:0c:1a:a0:1f:ae:90:cd:f7:23:8a:c9:
f7:f7:53:c5:40:b0:8d:81:d9:5c:b7:fe:e9:c5:8b:
4f:7e:97:62:b5:e6:d0:a8:e6:a8:9d:cd:ee:4a:6d:
a3:3e:e4:fd:57:2a:cf:1e:17:b4:31:0a:19:88:c4:
34:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4C:E0:61:92:87:2B:2D:23:1C:70:B8:A4:BB:8A:B7:9C:4C:6C:8C
X509v3 Authority Key Identifier:
keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:6c:d7:f6:d3:28:ff:f0:2b:f5:10:6e:c0:3c:32:cf:51:a1:
c2:0e:e7:31:d7:e2:4f:e9:28:29:87:31:1d:81:76:ce:57:d8:
7e:0a:49:a5:00:a0:a4:56:a9:02:0d:76:3d:ad:e4:9a:d5:e9:
a7:ec:8a:2a:c1:7a:e8:d8:a9:4a:45:1f:63:42:18:cf:87:08:
c9:69:01:6d:54:0e:12:23:20:98:34:7f:8c:06:5f:5b:6d:24:
9c:ad:64:08:f6:6c:5d:09:87:ce:0d:e0:64:ca:b1:7f:f7:8e:
c1:f0:9b:bf:a1:49:d1:59:68:1f:3e:56:f6:b0:15:c1:4a:2f:
13:c0:95:79:5c:ef:f9:a8:1d:e5:3d:63:ce:30:1c:77:17:9a:
e6:10:47:a0:69:5c:ae:64:d8:49:4a:7b:7c:9c:f5:c3:34:3e:
33:aa:87:60:73:b4:bc:ed:d3:d2:9d:05:f7:dc:db:a6:4a:c3:
ae:13:48:7c:e2:84:c0:c4:bf:ca:4e:23:47:8e:46:d0:d5:ac:
88:3b:be:80:27:42:26:e4:fb:39:ca:81:11:3a:dc:6d:ad:cf:
45:07:58:5f:12:39:1c:15:cf:3f:a4:4d:b2:87:f7:fa:6c:82:
98:75:6c:5f:2f:f4:8c:d4:2a:20:d0:6c:00:04:30:56:77:bb:
90:e5:e7:73
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU3NkQxMTAvBgNVBAUTKEIxRTg0RkFDRkFDQkMwQjc4Mzg1NjFFRjIxRTI4RjJG
QUNGNURGRUMwHhcNMjYwMTI0MTkxMDI5WhcNMjYwMTMxMTkxMDI5WjAYMRYwFAYD
VQQDDA02OTc1MTkyNi03ZDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvEmEaf2TSuv5q9dk/ARSkKnHl1AWGMkrBbFVaEzhrMxTRIXd1jRY2Bv/e4mC
mw+2t0ASKGFmGYXDhSPhlBnCDWYv8f2pzdBk/79NzsG7evV9ebWyllzJkfUboWwD
TQvObnbu64F2fT55HpPuptiwoAbtv7mJ6Y1YdQv7e5kJR5GzqY0p2qiX/usPC5FZ
aV5AWqWX8bpgs4zOxsvOlbJbN2yS7fU07YFJTCbRmz5bF6tOpqgyCI4fVBY6j4Sa
oWli8etrG4pJDBqgH66Qzfcjisn391PFQLCNgdlct/7pxYtPfpditebQqOaonc3u
Sm2jPuT9VyrPHhe0MQoZiMQ0OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtM4GGS
hystIxxwuKS7irecTGyMMB8GA1UdIwQYMBaAFLHoT6z6y8C3g4Vh7yHijy+s9d/s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8zNjg3MkE1RTgy
Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi9zZWhQclByTHdMZURoV0h2SWVLUEw2ejEz
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NlaFByUHJMd0xlRGhXSHZJZUtQTDZ6MTMtdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTc2RC8zNjg3MkE1RTgyQ0QxMUVBODk1QzdCNUNDNEY5QUUwMi9zZWhQclByTHdM
ZURoV0h2SWVLUEw2ejEzLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBBbNf20yj/8Cv1EG7APDLPUaHCDucx1+JP6SgphzEdgXbOV9h+Ckml
AKCkVqkCDXY9reSa1emn7IoqwXro2KlKRR9jQhjPhwjJaQFtVA4SIyCYNH+MBl9b
bSScrWQI9mxdCYfODeBkyrF/947B8Ju/oUnRWWgfPlb2sBXBSi8TwJV5XO/5qB3l
PWPOMBx3F5rmEEegaVyuZNhJSnt8nPXDND4zqodgc7S87dPSnQX33NumSsOuE0h8
4oTAxL/KTiNHjkbQ1ayIO76AJ0Im5Ps5yoEROtxtrc9FB1hfEjkcFc8/pE2yh/f6
bIKYdWxfL/SM1Cog0GwABDBWd7uQ5edz
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:16:47 2026 by rpki-client