
$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
File: sehPrPrLwLeDhWHvIeKPL6z13-w.mft (raw, json)
Hash identifier: /oISjaVA/IIvydBncKi0nFfLugLuKrhLpN4d/uN0rXo=
Subject key identifier: D4:02:9C:F1:C0:64:24:2F:77:7C:4A:AC:BD:ED:27:91:66:A0:C8:9F
Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
Certificate issuer: /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Certificate serial: 0B1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
Manifest number: 0AB5
Signing time: Mon 02 Mar 2026 19:32:25 +0000
Manifest this update: Mon 02 Mar 2026 19:32:24 +0000
Manifest next update: Mon 09 Mar 2026 19:32:24 +0000
Files and hashes: 1: sehPrPrLwLeDhWHvIeKPL6z13-w.crl (hash: mkNsj1aVDUd0YmyzdManOvVyb71R8ZFWoD2h73OhGgs=)
2: 146B772C82DC11EA9B13000CC4F9AE02.roa (hash: /F/F2gcWI41fUgxjbXz0fFgreZGYqAitM//lesabkeQ=)
3: B364F656C0AD11EEACCA627AC4F9AE02.roa (hash: ABIzRnS9XvFxLIehdn3s265872TfVCUlGLIf7r900hs=)
4: 36C13562946211F0A915C35EC4F9AE02.roa (hash: 1NX+V4nMdU0uu4W41gO+PJfYAkOiCjrRa6G9ZsWqv5c=)
5: 2FDA4F26E20711EF9B64614EC4F9AE02.roa (hash: YORNS40ObCMRCfS65pJfVFUYvG63mt43oEQIm4FnLwI=)
6: 1855E96CABBD11EA9A38D358C4F9AE02.roa (hash: C4qtiieLbHSavnjWGc8HqMNc0o5hdHd+rkM4wQ92qNE=)
7: B3E738FAB0F811EA895AE231C4F9AE02.roa (hash: 13Cs6llbmHpC85Gbd7YS//QxM6ULLm2BvcaEMsw7bf0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 19:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2845 (0xb1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917576D, serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Validity
Not Before: Mar 2 19:32:24 2026 GMT
Not After : Mar 9 19:32:24 2026 GMT
Subject: CN=69a5e5c9-4131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:00:6d:14:df:dc:5f:43:80:69:74:86:47:
d7:db:7f:39:7e:d1:67:f7:20:43:ed:fe:10:1f:25:
cc:de:f4:9f:8a:1e:d2:18:90:4a:1d:41:0d:94:51:
a9:49:5c:8b:4e:35:4c:68:a3:ca:7d:fa:de:5a:ee:
ea:ad:29:63:6b:36:48:26:d5:f1:55:a3:6d:ea:97:
ee:00:71:1e:50:a6:f8:3f:d2:57:9f:ce:d8:8b:f2:
ff:03:0a:3b:b0:2b:37:de:a6:97:f5:4d:57:4f:86:
3e:ff:81:8c:31:cd:fb:b2:1d:d5:b1:be:e4:6f:90:
a9:84:c8:c2:8b:8b:db:69:e2:b4:f7:64:e9:be:d1:
07:ce:85:4f:30:89:a6:bf:90:13:52:ba:29:56:c9:
64:ac:a5:65:8f:64:d0:71:b8:a6:7b:2c:56:57:ac:
27:e2:e1:d0:6a:e5:4a:e9:97:ce:32:f8:50:ec:ba:
a6:3a:6c:de:05:1c:b4:8e:2d:77:bd:a6:02:2f:bc:
ce:26:a7:42:88:a0:14:33:3a:a8:81:61:b3:75:78:
c5:80:df:7b:45:95:d7:0e:ea:f4:14:24:61:5c:69:
06:c7:03:37:c6:0c:d2:90:af:cc:6c:bb:db:cc:25:
f9:d1:50:9b:a7:93:f4:72:41:ce:9c:f0:a5:10:d5:
1c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:02:9C:F1:C0:64:24:2F:77:7C:4A:AC:BD:ED:27:91:66:A0:C8:9F
X509v3 Authority Key Identifier:
keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:dc:a7:05:0d:5c:f7:ab:21:3f:37:7c:d1:80:36:9c:33:3f:
b2:7f:cb:2b:6a:61:0b:b8:e4:9f:bc:9e:fc:a3:8a:54:db:a9:
b2:1a:54:ea:8b:44:58:f3:f5:59:c2:eb:8b:b4:b8:ce:3c:72:
f7:6f:fc:91:c7:27:e2:f8:bc:f5:ed:60:fc:f2:11:ec:f8:a7:
eb:17:21:ff:1e:f3:05:3f:69:05:62:cd:ea:82:68:d9:1a:a1:
c4:4e:ea:32:94:15:db:06:e2:d1:c5:01:45:7a:0d:cc:9e:5a:
46:2a:d8:3c:0a:d7:db:40:c5:92:f9:af:f0:55:af:b0:cd:57:
97:1d:a1:c1:fe:52:33:fe:33:96:b1:12:e4:a7:a3:c1:d4:14:
ee:dc:85:ca:67:ec:f1:29:55:a1:5a:1a:36:0f:e1:66:0d:78:
dd:ba:2b:b8:0f:80:cc:79:09:0e:f8:cb:45:69:9f:ef:e0:db:
fb:df:ae:6b:60:08:92:be:29:2f:35:9e:71:9b:08:07:97:f4:
0a:a2:00:89:59:2f:2c:74:7e:f1:02:e6:3e:d3:97:9c:a5:fd:
b1:7d:20:f6:ef:eb:84:59:fa:cb:99:a0:76:04:28:08:5d:d8:
dc:ba:dd:c2:41:b6:4a:b9:37:38:01:b6:41:0e:8c:b3:a8:eb:
a0:f0:1e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:49:14 2026 by rpki-client