
$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
File: sehPrPrLwLeDhWHvIeKPL6z13-w.mft (raw, json)
Hash identifier: pdRh3DbMhkljVZokDrSs/d0LRHqMAuPoGO/TlIBvfqE=
Subject key identifier: A9:FA:89:E4:DD:9B:F2:69:5A:F8:94:27:B4:17:50:AC:AA:54:B0:1C
Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
Certificate issuer: /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Certificate serial: 0B41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
Manifest number: 0AD9
Signing time: Tue 12 May 2026 19:38:42 +0000
Manifest this update: Tue 12 May 2026 19:38:42 +0000
Manifest next update: Tue 19 May 2026 19:38:42 +0000
Files and hashes: 1: sehPrPrLwLeDhWHvIeKPL6z13-w.crl (hash: yTXeCUpRGG/L6h9x/bIL4+zgU0ctQ4petv+ztyGls60=)
2: 146B772C82DC11EA9B13000CC4F9AE02.roa (hash: /F/F2gcWI41fUgxjbXz0fFgreZGYqAitM//lesabkeQ=)
3: 1855E96CABBD11EA9A38D358C4F9AE02.roa (hash: C4qtiieLbHSavnjWGc8HqMNc0o5hdHd+rkM4wQ92qNE=)
4: 2FDA4F26E20711EF9B64614EC4F9AE02.roa (hash: YORNS40ObCMRCfS65pJfVFUYvG63mt43oEQIm4FnLwI=)
5: B3E738FAB0F811EA895AE231C4F9AE02.roa (hash: 13Cs6llbmHpC85Gbd7YS//QxM6ULLm2BvcaEMsw7bf0=)
6: 36C13562946211F0A915C35EC4F9AE02.roa (hash: 1NX+V4nMdU0uu4W41gO+PJfYAkOiCjrRa6G9ZsWqv5c=)
7: B364F656C0AD11EEACCA627AC4F9AE02.roa (hash: ABIzRnS9XvFxLIehdn3s265872TfVCUlGLIf7r900hs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:38:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2881 (0xb41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917576D, serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Validity
Not Before: May 12 19:38:42 2026 GMT
Not After : May 19 19:38:42 2026 GMT
Subject: CN=6a0381c2-8e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:3a:8e:f8:11:04:e6:eb:32:00:da:08:1e:
50:8e:8e:f8:7b:6a:dd:c8:a7:c6:ed:f7:3d:96:a2:
ec:66:f2:72:ee:6b:dd:f5:85:70:d2:3f:b9:ad:6a:
68:da:54:66:56:da:8c:b0:ad:ba:7a:ce:7b:aa:5f:
fa:cb:4f:a0:fc:5e:80:14:a1:c2:c4:83:7b:a0:d6:
c8:ab:6c:df:c1:5d:82:17:c2:d9:f7:d8:73:d4:eb:
cc:ab:b0:34:ff:61:cf:2e:8b:e0:e9:50:ef:02:67:
9c:ea:29:d9:88:7b:5c:59:e2:06:52:53:21:ac:34:
69:72:b0:d7:a7:e7:5c:ed:62:db:6a:ec:25:9a:92:
39:0d:3a:fc:69:1c:33:8f:8b:16:d3:0b:8c:f1:5c:
82:ca:b8:0e:1a:c4:6b:cc:01:ce:7b:00:e2:67:e7:
51:60:00:51:0b:64:dd:42:8e:32:23:6a:3b:44:70:
b8:d5:ba:b3:b2:9d:f8:b0:04:ca:01:1b:78:05:9d:
b4:b8:e5:07:56:2b:99:45:47:8f:05:44:1c:e7:08:
30:b6:06:f1:08:fc:28:b2:eb:4d:81:ab:90:8c:52:
eb:86:d8:9c:76:3c:1c:74:63:28:31:ae:e3:58:7d:
5a:5e:9f:f3:1b:fc:1b:82:db:3c:90:52:f9:34:e9:
04:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FA:89:E4:DD:9B:F2:69:5A:F8:94:27:B4:17:50:AC:AA:54:B0:1C
X509v3 Authority Key Identifier:
keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:b8:77:fe:e0:b6:9d:ca:01:ae:f7:3e:43:3e:aa:76:c9:12:
f8:67:f5:2c:de:0a:8d:ad:33:42:95:49:e0:62:83:76:00:0c:
47:f2:b1:ab:6e:08:42:d6:b8:97:b8:fe:bd:01:b8:e4:b4:66:
ed:9b:54:90:50:c0:9d:76:84:a0:23:a8:f1:9b:aa:33:e2:1e:
c7:b0:58:57:00:2f:1f:cc:d0:5c:ee:61:a8:69:24:05:73:62:
15:58:63:c6:e2:35:76:7b:6e:28:bc:e9:bf:91:30:e4:c3:49:
0a:dc:8b:4a:0b:84:5d:35:33:d4:e7:e2:9d:4d:3d:43:91:2d:
0c:0e:a7:8d:13:29:52:62:0d:7f:45:a5:b7:2e:ba:01:82:82:
ba:a0:aa:ef:f1:8f:44:80:ed:df:30:ad:5e:92:d2:9c:e1:8b:
e6:70:f5:b2:bc:12:da:ac:42:88:24:e7:73:8d:f9:98:3f:e8:
f9:a4:e9:5e:22:c6:ff:01:d3:2d:ec:5d:33:a0:ea:2a:7c:86:
e5:b5:c8:07:16:da:ac:77:fb:c9:43:c6:49:2a:f0:ab:4d:a9:
52:fc:d7:a2:a1:27:67:89:35:0d:da:fd:3a:50:a3:5a:25:8c:
66:c4:36:b4:57:be:61:1f:32:b2:27:b7:be:1e:e6:3a:42:5f:
ae:c4:fb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:06:45 2026 by rpki-client