
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
File: SI-waXxEaWD_2iZD5rybRLo9HKw.mft (raw, json)
Hash identifier: pILG5Vk6vuhDaQfaprvFYa7J0OsbpEhNdX3G5orwj9c=
Subject key identifier: 7F:62:EC:E4:90:24:23:9F:69:97:66:3E:44:45:3B:21:77:32:02:31
Authority key identifier: 48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC
Certificate issuer: /CN=A91CFA8E/serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC
Certificate serial: B1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
Manifest number: AE
Signing time: Fri 23 Oct 2026 02:17:26 +0000
Manifest this update: Fri 23 Oct 2026 02:17:26 +0000
Manifest next update: Fri 30 Oct 2026 02:17:26 +0000
Files and hashes: 1: SI-waXxEaWD_2iZD5rybRLo9HKw.crl (hash: V3vsBinG+PMgmg2h7yXwuXb3OE1hmQmd7DvycFrANlk=)
2: 160AF8E8CE8D11F0BE6FB51EC4F9AE02.roa (hash: 3OV5G0MzOx3A7cffbPL2mxy1J9i86/E4uGYCDCcUs/I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl
rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 02:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFA8E, serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC
Validity
Not Before: Oct 23 02:17:26 2026 GMT
Not After : Oct 30 02:17:26 2026 GMT
Subject: CN=6adac3b6-a142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:28:7e:fe:b0:c2:e2:bd:50:fe:6e:78:94:
52:46:5e:a9:14:9b:10:17:52:6b:bf:50:fa:a0:f5:
79:3f:0f:57:4e:d2:49:e1:cb:0a:37:5c:42:40:85:
c3:6f:d3:58:9a:16:e6:82:21:0b:88:76:04:3d:99:
ef:7a:a9:6e:d0:c1:21:ff:19:13:67:ce:ca:c2:e7:
7b:93:5a:c3:2b:0c:4d:e9:66:a9:ed:d5:5f:dd:7d:
17:2d:d7:06:df:fe:5e:3e:fa:c3:a3:8e:4b:2a:b6:
44:6d:bc:5b:e8:59:26:88:a3:e5:3c:a8:39:89:c2:
fa:4d:d9:bc:32:ce:0d:11:0e:e3:42:86:9d:4e:07:
0d:e3:3d:eb:6e:6f:ed:80:2c:92:b7:b6:d3:52:67:
0b:92:eb:73:62:05:9d:0d:ac:a2:3a:64:17:58:f5:
78:ce:cc:d4:45:f0:c2:e0:d0:ef:f0:51:07:29:4f:
99:49:19:55:de:d3:03:8d:02:8e:b6:34:f2:9f:d3:
11:77:45:56:85:0d:17:e6:d9:2c:f9:52:6b:7c:88:
b9:b7:ae:b2:4e:11:60:dd:76:1e:a7:c7:ca:34:a4:
65:85:62:1c:42:b0:d9:8a:40:19:dd:65:4c:65:b6:
fb:c9:d6:20:b6:7f:5c:b4:72:b8:44:40:b1:2a:e0:
74:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:62:EC:E4:90:24:23:9F:69:97:66:3E:44:45:3B:21:77:32:02:31
X509v3 Authority Key Identifier:
keyid:48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:2b:1f:9c:36:e8:6f:e5:2d:9a:84:ed:1e:22:82:78:be:e3:
18:63:58:f5:eb:fe:a2:69:7a:07:e4:a3:a4:c7:bb:d6:66:01:
74:57:db:8f:0f:a6:86:f7:77:bf:1e:4e:69:35:fb:0d:3d:24:
16:29:0c:b9:99:9e:d2:1d:50:0f:d1:ff:83:f9:aa:8b:eb:e7:
ba:08:ff:1f:13:fb:38:8b:df:1b:57:40:da:18:51:54:72:af:
a9:b8:1d:15:a7:0e:12:a0:25:c4:43:a3:23:88:82:05:82:48:
ce:e6:04:e4:de:da:ff:25:54:dc:f5:62:57:a8:dd:5f:58:01:
56:dc:38:ec:84:e9:1f:99:ff:f7:85:b7:b7:b5:56:46:0f:26:
5e:af:a4:b9:d0:61:d5:02:6b:a4:ea:84:df:37:f9:71:3c:45:
ba:1c:90:84:c7:34:66:a3:d4:79:25:ef:fa:83:df:13:07:ba:
40:ed:f5:9d:1c:58:3a:83:b1:21:7a:f8:69:f3:0f:d0:3f:b9:
70:4d:de:46:ad:9c:9e:dd:7f:81:03:9c:74:25:7e:93:cb:8d:
cc:3a:a2:3d:68:5b:9c:e7:c9:78:f4:74:43:d9:51:42:34:97:
b2:da:27:fb:fc:12:8b:e1:05:b5:a6:11:1d:7b:82:c0:ad:e0:
92:dd:4a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:44:57 2026 by rpki-client