
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
File: SI-waXxEaWD_2iZD5rybRLo9HKw.mft (raw, json)
Hash identifier: FZTFf5LTCIdaPe+ZPm0NiAxdxUa/Fv/MAGLBEvx2c2Q=
Subject key identifier: A6:58:63:D1:9F:13:0D:48:49:A1:63:BB:86:8E:DD:72:E8:F6:F1:08
Authority key identifier: 48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC
Certificate issuer: /CN=A91CFA8E/serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
Manifest number: 7B
Signing time: Fri 17 Jul 2026 03:10:33 +0000
Manifest this update: Fri 17 Jul 2026 03:10:33 +0000
Manifest next update: Fri 24 Jul 2026 03:10:33 +0000
Files and hashes: 1: SI-waXxEaWD_2iZD5rybRLo9HKw.crl (hash: uRov8+s+x794FaLrpza1kn4Tby8l+0IH5pt01S1Ofz0=)
2: 160AF8E8CE8D11F0BE6FB51EC4F9AE02.roa (hash: 3OV5G0MzOx3A7cffbPL2mxy1J9i86/E4uGYCDCcUs/I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl
rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 03:10:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFA8E, serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC
Validity
Not Before: Jul 17 03:10:33 2026 GMT
Not After : Jul 24 03:10:33 2026 GMT
Subject: CN=6a599d29-ffde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:1a:0c:cf:04:41:dd:69:fb:91:40:a7:e6:
af:8e:f0:8f:8a:84:1b:6e:5c:c0:63:08:e0:6a:ca:
10:ce:e5:02:5f:fe:48:74:bb:87:28:4a:41:64:61:
0d:0a:7f:d2:9a:e0:15:c5:ab:fd:c8:cc:02:29:64:
1e:89:16:eb:9e:13:c2:e0:76:24:6d:e1:f8:e1:9e:
f3:bc:59:4c:45:56:a8:e4:fe:bf:a0:85:8e:c5:a8:
60:1f:87:18:de:06:7f:44:b9:c5:22:fa:2f:7c:65:
14:ca:b9:1b:b6:6f:d2:5b:1a:0e:86:0c:10:42:fd:
e4:ca:b1:63:e3:55:e2:81:c5:a1:45:31:de:21:a7:
77:cc:ec:7d:a4:c0:29:3e:b9:1d:17:4a:fe:5e:74:
48:60:68:c4:05:78:1d:92:2e:e2:a7:2e:25:56:bc:
75:9d:9e:68:88:e0:88:dd:be:91:50:5d:d4:ae:c5:
27:6e:59:d4:32:b9:87:d7:59:d3:83:14:9d:f3:73:
54:70:1f:f3:90:1d:bd:39:e9:c7:71:aa:7e:2e:5f:
f6:33:23:59:50:17:ec:3b:76:2a:0d:7f:d6:4c:a8:
3b:13:1b:cb:15:40:a6:d1:f5:cc:85:fa:40:4b:dd:
04:e2:7a:c6:70:88:0e:85:68:01:72:c6:ab:bf:0e:
0b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:58:63:D1:9F:13:0D:48:49:A1:63:BB:86:8E:DD:72:E8:F6:F1:08
X509v3 Authority Key Identifier:
keyid:48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:c4:80:50:f1:3e:7f:81:d5:da:78:86:57:a5:99:2b:99:54:
5c:6d:b2:68:1d:9d:d1:43:36:e0:40:a5:90:57:cc:70:63:ce:
7d:08:30:07:98:d3:98:d6:20:7e:ee:b8:ac:fb:9c:e1:25:a0:
cc:81:7a:52:7d:47:92:73:1f:fa:d8:a4:11:1f:78:22:39:c5:
7a:ef:0e:af:4e:2e:f5:87:74:15:55:1a:0f:ad:c1:3a:1f:cb:
41:46:33:79:dd:bd:8f:84:b4:f0:27:ae:70:e7:e0:7c:3c:f5:
15:3d:58:eb:18:e9:9f:21:72:41:3e:b1:ba:8a:c3:ee:8d:40:
77:73:2b:17:b0:34:eb:d7:85:98:18:55:db:02:31:f4:97:34:
6f:a7:b7:52:45:ee:2c:39:b2:05:87:bc:d1:92:8a:87:f1:90:
11:6c:d6:b2:97:66:81:22:f6:a0:5a:d8:dd:f3:c8:1c:44:82:
9e:c6:32:7c:8b:0f:22:01:50:cb:2a:03:f0:12:b9:02:76:b5:
eb:ae:cf:4f:3d:d3:9d:d1:d7:de:fc:a7:e1:2f:da:d8:ae:f8:
48:47:22:fb:8a:ff:b2:b2:28:03:d6:7d:d1:a0:4f:26:1d:6b:
1d:3e:48:67:7d:4b:3a:ce:17:22:10:79:22:e8:a7:27:b8:8d:
c8:a3:19:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:23 2026 by rpki-client