This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
File: sehPrPrLwLeDhWHvIeKPL6z13-w.mft (raw, json)
Hash identifier: q2tOfK7J/0gYgZvEPoAp7fpst1NDeQr3GOjtlYWOR5s=
Subject key identifier: 3E:9F:F1:11:06:75:D5:66:8C:D9:20:CD:C9:68:7F:FD:10:D0:5E:36
Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
Certificate issuer: /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Certificate serial: 0ADE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
Manifest number: 0A82
Signing time: Thu 04 Dec 2025 19:02:31 +0000
Manifest this update: Thu 04 Dec 2025 19:02:31 +0000
Manifest next update: Thu 11 Dec 2025 19:02:31 +0000
Files and hashes: 1: sehPrPrLwLeDhWHvIeKPL6z13-w.crl (hash: 0XSGMZE59Wvp9UU1y08rYhCMcvq9T7gqQvYrNjWlMLw=)
2: 146B772C82DC11EA9B13000CC4F9AE02.roa (hash: RaEy/c0RDVPJljVOjzCUx5HkOYe2NH7gDK679iI3lU8=)
3: 36C13562946211F0A915C35EC4F9AE02.roa (hash: O+WXljzzkselauIWKcKRYMMWphA8HHOCCBSiwkUZ9Jc=)
4: 2FDA4F26E20711EF9B64614EC4F9AE02.roa (hash: 46HPj9/aVPYDWikrpiKeLjIAgPfeI7qV8Myh5jS+VwI=)
5: B3E738FAB0F811EA895AE231C4F9AE02.roa (hash: 6fyTIIfouSHt0bSoCvpr+tLclfajnShRN3BsA0C3Qx0=)
6: 1855E96CABBD11EA9A38D358C4F9AE02.roa (hash: r4rzBCbIMp3iFvqhDbSXEyN/C18fjuivfYiSBwzRiCs=)
7: B364F656C0AD11EEACCA627AC4F9AE02.roa (hash: JABgVO7prSck9fbCln3+qySnrKsMtx5IICa3wzwukPI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2782 (0xade)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917576D, serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Validity
Not Before: Dec 4 19:02:31 2025 GMT
Not After : Dec 11 19:02:31 2025 GMT
Subject: CN=6931dac7-5351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:5a:19:36:a8:96:ee:81:ec:60:23:c1:4e:
70:39:56:ca:7f:96:d4:57:34:72:82:f9:a1:9c:af:
9a:15:b0:29:6b:1a:1f:16:95:75:3c:15:0d:39:58:
ef:05:56:71:51:d1:82:72:a1:cb:c3:24:85:40:5b:
ff:74:70:6c:c5:a7:ec:46:c4:14:7c:b8:5b:6f:0e:
c7:d1:03:62:4a:5e:2a:4d:06:61:6c:48:da:dd:36:
1d:03:ab:73:c7:0f:dd:6b:94:d9:e6:43:49:c3:da:
b1:52:12:fc:36:0d:53:ab:30:7b:b5:b8:e3:94:92:
15:9d:64:0b:b2:85:a2:d8:10:fc:ac:a3:94:3a:33:
83:5e:26:7c:e3:c7:83:e1:69:07:2e:da:70:4a:77:
b8:df:cc:cf:ac:6e:6a:d2:59:ef:06:a0:cc:0d:d3:
fa:78:ca:9a:98:08:9c:df:1f:23:2f:9d:9c:34:33:
90:f8:bd:8c:18:5f:fd:34:6b:16:52:05:0c:80:25:
75:dd:34:57:ca:a9:5b:58:bb:d5:41:aa:ee:24:5b:
b6:a3:b4:2e:3f:b7:6d:b7:d9:a4:52:15:74:43:9c:
de:2a:b8:ff:ff:73:0a:dc:aa:d9:63:d7:8d:3a:57:
b0:31:4f:a9:97:57:ab:63:6c:d6:ba:7b:e0:ea:77:
9c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9F:F1:11:06:75:D5:66:8C:D9:20:CD:C9:68:7F:FD:10:D0:5E:36
X509v3 Authority Key Identifier:
keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:58:28:23:c7:0c:52:ca:07:8b:13:7a:b3:f8:09:48:b1:ae:
a0:6c:df:30:af:8f:15:3c:ae:a8:05:c9:13:ec:04:bd:87:af:
17:d2:5a:82:25:45:09:7a:39:d7:5d:13:44:20:61:ea:26:5c:
d0:46:58:2c:54:5f:2a:9a:90:f2:ac:97:47:7a:ba:63:e1:9e:
ba:26:64:b6:ed:ac:82:e1:53:cc:80:99:43:34:f5:a5:bc:ab:
e1:0b:47:34:6f:d0:a0:77:e9:a9:1d:a8:3d:4f:92:aa:59:d5:
40:97:be:fa:54:2b:8a:e7:d4:f8:56:86:6d:c8:39:1c:f1:4e:
4f:63:1b:9c:f1:b8:92:1b:ca:c0:d7:a8:8c:15:bd:c9:48:29:
e9:28:b2:c8:78:14:31:65:3a:3a:cf:78:40:32:12:82:80:a5:
6e:fa:69:cc:38:a5:94:88:fd:d0:0d:8d:6c:29:7b:32:6e:b9:
cf:35:5f:3c:64:e0:9d:46:c5:39:32:1c:98:f4:92:35:7b:ec:
53:6b:de:1f:14:69:47:3c:20:59:72:63:42:c8:9e:99:0a:e0:
b1:de:30:8d:23:39:9f:fd:a8:6d:eb:6a:f6:e9:a1:44:c5:a6:
7e:b9:96:ce:72:64:65:96:a1:2b:f7:44:4a:6b:bd:c3:0a:f7:
6b:71:c6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:36:53 2025 by rpki-client