
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
File: sehPrPrLwLeDhWHvIeKPL6z13-w.mft (raw, json)
Hash identifier: +MLsuubK3mAQVgjpu7xZZ7K3tCotfA6i8tOaXA1pxVE=
Subject key identifier: BD:99:E7:74:A0:16:B8:0E:C4:65:9A:DE:51:16:51:C7:CA:96:38:B2
Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
Certificate issuer: /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Certificate serial: 0B89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
Manifest number: 0B20
Signing time: Sun 20 Sep 2026 19:24:16 +0000
Manifest this update: Sun 20 Sep 2026 19:24:16 +0000
Manifest next update: Sun 27 Sep 2026 19:24:16 +0000
Files and hashes: 1: sehPrPrLwLeDhWHvIeKPL6z13-w.crl (hash: gnMQ2Ulh25HZUC0jfwez07J6jMBnr/plTT+QER2PA2E=)
2: 36C13562946211F0A915C35EC4F9AE02.roa (hash: 1NX+V4nMdU0uu4W41gO+PJfYAkOiCjrRa6G9ZsWqv5c=)
3: 146B772C82DC11EA9B13000CC4F9AE02.roa (hash: /F/F2gcWI41fUgxjbXz0fFgreZGYqAitM//lesabkeQ=)
4: 1855E96CABBD11EA9A38D358C4F9AE02.roa (hash: C4qtiieLbHSavnjWGc8HqMNc0o5hdHd+rkM4wQ92qNE=)
5: 2FDA4F26E20711EF9B64614EC4F9AE02.roa (hash: YORNS40ObCMRCfS65pJfVFUYvG63mt43oEQIm4FnLwI=)
6: B364F656C0AD11EEACCA627AC4F9AE02.roa (hash: ABIzRnS9XvFxLIehdn3s265872TfVCUlGLIf7r900hs=)
7: B3E738FAB0F811EA895AE231C4F9AE02.roa (hash: CofpMSTxelj5ncNROljQp0Hn2WRWVglhFObgIZB8lxE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:24:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2953 (0xb89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917576D, serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Validity
Not Before: Sep 20 19:24:16 2026 GMT
Not After : Sep 27 19:24:16 2026 GMT
Subject: CN=6ab032e0-eb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8c:6b:80:7c:b9:79:e8:fa:d5:0e:04:ac:06:
2e:fd:1d:f5:97:1d:4d:e1:48:45:5c:96:6d:5c:a8:
4c:f3:c4:ce:d4:b0:66:07:2f:97:83:3d:e0:d7:38:
2b:06:8f:fa:dc:fa:2e:4c:ca:df:3a:80:d0:80:b9:
18:72:d5:15:cd:ad:c3:63:9c:fa:01:f7:d7:ab:ad:
f9:74:0e:d3:e9:64:0f:07:7f:49:7c:e6:2c:36:14:
7d:31:61:99:c0:01:59:e5:95:be:4d:d4:d0:f9:c4:
4f:14:13:18:2a:5f:50:27:d0:74:9d:39:0f:49:4b:
d4:8c:61:e7:83:63:b0:3f:88:0c:16:b9:81:e6:3e:
f3:ab:82:8a:a9:8d:97:8b:34:ee:e7:59:e3:6f:fa:
7b:28:af:03:dd:2f:65:b3:b2:49:9b:f2:57:10:3f:
e5:8a:e6:19:11:fc:b5:52:31:3b:5d:85:2d:28:87:
f7:ab:77:76:1f:e9:2f:1a:b9:52:28:06:d3:7f:8f:
b1:95:06:99:b3:6c:b0:2d:9e:90:52:e5:ff:1f:fa:
ad:82:51:12:9a:41:c1:33:a3:32:93:a9:bf:89:eb:
63:a1:d8:7b:f7:a4:83:65:08:12:26:48:df:3c:a8:
2f:ea:1d:9a:9f:6d:20:6d:c2:01:35:6a:7b:4e:e4:
01:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:99:E7:74:A0:16:B8:0E:C4:65:9A:DE:51:16:51:C7:CA:96:38:B2
X509v3 Authority Key Identifier:
keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1a:7f:1e:a5:6a:3c:d3:af:8b:2f:46:d6:b8:c8:d1:71:42:
d9:e3:b7:1a:4a:60:8a:aa:59:cc:54:03:1d:0c:75:d0:bf:1f:
03:fc:7e:7a:61:89:7d:f5:d9:ac:26:6d:df:15:01:bb:ed:11:
68:9e:c0:2c:51:3c:be:68:2b:ea:54:fe:4e:2c:b5:a6:55:ba:
11:5b:ae:32:38:2a:3c:85:16:3c:08:05:c9:54:15:d7:2a:1a:
91:2c:2b:c4:1b:32:18:8f:75:6c:1c:c5:61:20:d9:a7:01:94:
95:6e:79:45:0e:d2:b7:a1:95:55:22:b5:47:b8:65:33:06:79:
7b:e7:af:3f:9d:6b:0b:66:80:cf:ae:ca:4b:4d:1e:29:12:69:
94:9b:9d:b4:0c:8c:ac:fa:f1:54:28:1f:41:9d:8e:f0:b9:46:
52:db:52:90:80:24:9c:07:59:b5:34:3e:40:d2:36:70:52:1a:
c3:4a:e9:9a:53:8a:5d:45:ae:c6:6b:0b:c0:cf:4b:12:35:ac:
02:b1:66:b2:4e:98:f3:21:6a:a1:5e:1d:de:a8:97:a1:7c:3c:
42:ef:36:9a:3f:c1:e3:0a:3c:3a:f7:de:be:e2:b4:24:03:cc:
30:d8:44:e5:40:bd:7e:cf:d3:ab:41:cb:18:d8:3f:d5:bb:c1:
b5:b1:c2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:53:45 2026 by rpki-client