
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
File: SI-waXxEaWD_2iZD5rybRLo9HKw.mft (raw, json)
Hash identifier: z4u4Yqs3wijtub6bZtXYmIq6TtpZzqgaXu6c5ODmZ40=
Subject key identifier: E7:1F:12:81:12:70:DA:6B:EB:56:2A:29:6D:C6:89:7D:5D:5C:BF:AB
Authority key identifier: 48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC
Certificate issuer: /CN=A91CFA8E/serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC
Certificate serial: 98
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
Manifest number: 95
Signing time: Sat 05 Sep 2026 01:55:45 +0000
Manifest this update: Sat 05 Sep 2026 01:55:45 +0000
Manifest next update: Sat 12 Sep 2026 01:55:45 +0000
Files and hashes: 1: SI-waXxEaWD_2iZD5rybRLo9HKw.crl (hash: n9s3qJJydbF8sgxadgVmzYRKQX0tgUdK4dHbNw26CkU=)
2: 160AF8E8CE8D11F0BE6FB51EC4F9AE02.roa (hash: 3OV5G0MzOx3A7cffbPL2mxy1J9i86/E4uGYCDCcUs/I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl
rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 01:55:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFA8E, serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC
Validity
Not Before: Sep 5 01:55:45 2026 GMT
Not After : Sep 12 01:55:45 2026 GMT
Subject: CN=6a9b76a1-598a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:b1:b5:92:3e:1d:e6:fd:a2:b2:43:82:57:
93:d5:17:a9:78:1b:77:e2:5a:49:81:03:4d:9e:e1:
1f:f0:44:2d:7c:5c:ad:09:ad:0a:3f:fa:fe:1c:e0:
2c:e6:fa:ca:a2:51:19:3e:25:f6:58:98:f4:1c:61:
c0:7a:88:24:99:bd:97:11:03:22:c7:33:b5:94:e9:
5f:eb:b4:d9:b9:63:6a:18:f4:57:bd:36:94:2f:4d:
f1:05:be:14:21:20:23:9f:5a:8b:84:f3:f5:30:4a:
a2:b2:d2:d5:22:52:5e:a1:78:95:be:4a:99:20:77:
6e:5c:c9:8f:b0:cd:52:5b:e5:bb:6e:ea:17:b2:71:
aa:63:90:83:f8:dd:4d:fe:ce:a4:d6:a8:47:c0:7c:
f3:04:27:af:07:ff:de:08:98:14:27:84:9a:fa:56:
71:14:a6:0e:3a:9d:27:63:33:7b:fd:2c:1e:09:f2:
76:e2:c7:7c:d2:df:49:0c:30:2f:98:84:88:2d:d0:
1d:cc:be:54:81:54:e7:66:ec:eb:53:1b:4d:03:d9:
58:2f:18:b3:9e:68:af:bc:e5:88:a7:58:ef:c9:48:
8a:e6:6c:eb:3c:85:e3:29:06:92:01:3e:13:fb:53:
c2:04:de:12:96:65:60:a8:5c:f7:91:82:d4:20:ce:
a5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1F:12:81:12:70:DA:6B:EB:56:2A:29:6D:C6:89:7D:5D:5C:BF:AB
X509v3 Authority Key Identifier:
keyid:48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:d2:31:27:f0:44:a4:1f:ef:eb:d3:ea:ca:13:b4:83:cf:9e:
16:2b:d8:8b:0e:1c:e5:3e:a5:16:58:51:26:60:cb:39:8d:b1:
79:44:c0:b4:f6:96:77:f1:b8:22:0e:68:d2:b4:ed:09:f3:ab:
0f:33:78:b0:42:99:e6:c4:f2:8f:7e:81:bf:f3:b7:63:1a:ba:
b5:f7:84:b4:b9:f4:1c:43:f9:06:34:0d:d2:3f:f0:2d:4c:3b:
3c:5c:3d:1a:0b:b5:99:d7:2c:e7:be:5b:75:88:db:7d:e8:f7:
76:d4:96:e0:69:21:33:1a:38:60:8d:e1:f9:c7:92:aa:d3:58:
48:f0:f8:5a:08:07:9a:d3:71:2b:1e:51:14:0c:8b:e8:e1:d6:
78:d1:a8:42:41:2a:ed:c4:c2:57:61:00:44:95:ca:8f:4c:d8:
b2:50:40:40:4e:00:43:68:38:8b:e0:23:fd:34:5a:85:cb:90:
3b:78:17:d0:79:a7:55:33:4c:db:4e:31:97:e4:d5:3d:74:d9:
26:5f:77:40:59:0a:a2:6e:04:31:2b:eb:8e:55:d4:97:59:8c:
e2:65:a4:6f:e2:e1:d3:ab:d9:4b:82:86:ce:d8:1f:58:61:0f:
2a:e6:74:2b:5c:a5:1c:c2:1c:30:d0:f5:6c:1c:d3:a0:a3:b1:
99:8f:57:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:15:45 2026 by rpki-client