
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
File: sehPrPrLwLeDhWHvIeKPL6z13-w.mft (raw, json)
Hash identifier: jkNLo+gGjWWAJo0Y717nYpffBOR2CNQAz82roraX0O8=
Subject key identifier: 81:D8:6F:6E:BE:B8:5D:42:AC:10:42:7B:C1:F6:FD:6D:30:04:CA:88
Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
Certificate issuer: /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Certificate serial: 0B7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
Manifest number: 0B12
Signing time: Mon 31 Aug 2026 19:28:39 +0000
Manifest this update: Mon 31 Aug 2026 19:28:38 +0000
Manifest next update: Mon 07 Sep 2026 19:28:38 +0000
Files and hashes: 1: sehPrPrLwLeDhWHvIeKPL6z13-w.crl (hash: x2fA5j7i+WmgwTfLJfijqnoB/xv98ueFEMBSW2HrpXg=)
2: 146B772C82DC11EA9B13000CC4F9AE02.roa (hash: /F/F2gcWI41fUgxjbXz0fFgreZGYqAitM//lesabkeQ=)
3: 1855E96CABBD11EA9A38D358C4F9AE02.roa (hash: C4qtiieLbHSavnjWGc8HqMNc0o5hdHd+rkM4wQ92qNE=)
4: 2FDA4F26E20711EF9B64614EC4F9AE02.roa (hash: YORNS40ObCMRCfS65pJfVFUYvG63mt43oEQIm4FnLwI=)
5: B3E738FAB0F811EA895AE231C4F9AE02.roa (hash: 13Cs6llbmHpC85Gbd7YS//QxM6ULLm2BvcaEMsw7bf0=)
6: B364F656C0AD11EEACCA627AC4F9AE02.roa (hash: ABIzRnS9XvFxLIehdn3s265872TfVCUlGLIf7r900hs=)
7: 36C13562946211F0A915C35EC4F9AE02.roa (hash: 1NX+V4nMdU0uu4W41gO+PJfYAkOiCjrRa6G9ZsWqv5c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 19:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2938 (0xb7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917576D, serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Validity
Not Before: Aug 31 19:28:38 2026 GMT
Not After : Sep 7 19:28:38 2026 GMT
Subject: CN=6a95d5e6-a5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ab:70:96:b2:a3:6e:36:75:49:d0:88:3c:02:
90:58:8f:4b:5d:4f:52:53:75:2c:1a:5b:3c:57:fd:
7d:21:0e:f5:02:0e:e2:30:dc:7b:e1:6a:bd:8b:22:
18:39:11:d1:f4:bb:fb:ad:64:d8:00:d8:07:93:cc:
eb:24:d4:c8:d5:96:57:62:32:e5:33:51:8c:79:a6:
7c:40:84:d7:2b:ba:58:53:96:9e:4e:6e:f8:7f:16:
fa:51:81:e5:f2:25:b3:ed:97:ed:ca:22:48:79:97:
c7:0d:94:8e:1e:1b:17:5c:b3:4a:c3:89:0f:55:48:
76:43:f0:b1:2d:7f:0a:b3:04:02:7a:49:ac:40:04:
f5:bc:ed:b6:0a:34:9f:6f:72:39:c9:db:94:34:51:
97:0b:9b:36:c0:14:ab:85:cf:fd:be:b7:5d:16:6b:
8c:b3:3b:ab:05:e8:70:87:08:a4:70:bc:2a:8e:ed:
d1:d1:b8:4c:a5:48:37:58:5e:ee:1d:1b:75:46:0a:
a5:e4:7a:9a:76:01:12:5f:c7:de:fe:fa:75:43:c4:
1c:03:d7:b7:d7:e1:e3:97:9a:55:3f:c9:ea:b4:47:
15:9d:b6:7c:dd:41:6a:46:20:68:71:97:6c:c9:ec:
1e:a7:cc:4e:d8:62:07:1c:a0:00:d6:6f:6d:58:e3:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D8:6F:6E:BE:B8:5D:42:AC:10:42:7B:C1:F6:FD:6D:30:04:CA:88
X509v3 Authority Key Identifier:
keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:6f:3c:40:b3:db:2a:09:73:b2:76:70:58:ab:37:21:0a:5e:
ba:e7:20:46:9d:d1:7a:eb:ad:09:9f:71:07:26:2f:97:ae:48:
d3:4a:b9:8d:e3:76:fa:9b:f9:70:88:c2:e6:05:3b:4d:3b:76:
74:b6:5b:bc:34:7e:b2:cc:ea:dc:96:d2:18:fe:44:f0:8e:7c:
5f:62:27:20:36:18:e0:c0:4f:53:73:16:7f:4c:fe:b3:f6:43:
ad:80:2e:37:df:d0:fc:58:4a:bc:56:39:92:0c:b6:eb:fc:a8:
1f:d6:62:26:1e:55:94:6e:6a:e0:25:ab:26:87:26:81:1e:50:
73:98:4e:d8:95:c9:7f:dd:ab:46:f8:81:a3:55:ac:b8:10:aa:
a5:c3:e2:2a:af:8e:43:74:a1:f4:b5:42:1a:36:d3:0c:a2:60:
9c:dc:cd:55:db:e4:1b:ea:3d:ca:a6:96:75:28:48:50:98:81:
c3:7d:d6:a7:c4:b0:01:74:55:ac:36:dc:2b:f3:19:3a:8f:ea:
89:a4:1b:20:d9:62:93:87:33:ec:d6:53:24:56:17:73:5b:75:
88:65:c2:b7:c2:be:1c:54:59:bd:8e:bd:25:ec:0b:81:9e:62:
1d:dd:a0:49:89:05:c6:41:54:2f:e8:c6:6d:4f:73:04:a0:7f:
c0:94:e7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:41:28 2026 by rpki-client