$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft File: SI-waXxEaWD_2iZD5rybRLo9HKw.mft (raw, json) Hash identifier: IpWzhFqloha8JjeF2tMjjU8b9TCOTwO3vS48Tr8YofY= Subject key identifier: 98:3F:F4:69:90:2E:45:3E:22:4D:FA:4B:39:72:E3:07:EF:66:1B:C6 Authority key identifier: 48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC Certificate issuer: /CN=A91CFA8E/serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft Manifest number: 3F Signing time: Wed 25 Mar 2026 02:14:32 +0000 Manifest this update: Wed 25 Mar 2026 02:14:32 +0000 Manifest next update: Wed 01 Apr 2026 02:14:32 +0000 Files and hashes: 1: SI-waXxEaWD_2iZD5rybRLo9HKw.crl (hash: xhbykz62Bvj9X9wwEDGdUnDI3UURUeyiF2JKczCdJRA=) 2: 160AF8E8CE8D11F0BE6FB51EC4F9AE02.roa (hash: w2I93tWFGO9r1ycsLwYKSHur6VSKhkkXWi+U4yYabwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC Validity Not Before: Mar 25 02:14:32 2026 GMT Not After : Apr 1 02:14:32 2026 GMT Subject: CN=69c34508-1793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:eb:30:04:34:76:11:e0:e6:21:9c:26:3f:88: 56:4f:87:59:8f:9c:47:25:50:8f:a4:03:a9:31:86: 77:59:e2:48:d0:c5:cf:30:53:5a:83:a5:88:8f:15: 75:04:81:b3:34:95:bc:c4:fe:19:e4:08:9c:ac:48: 2d:3d:1d:8a:16:18:21:17:48:d7:f4:e5:58:15:c5: f2:68:ab:89:b0:2c:fc:83:f6:39:ef:2c:d6:65:74: 84:c6:8e:d0:6a:f5:87:91:fd:8a:2c:8d:e3:8f:b6: 8a:14:30:f0:5d:b9:66:72:4f:6b:4b:b6:94:e7:21: 28:fe:75:b2:7e:86:19:51:62:b5:17:99:0d:fa:08: 07:42:15:ef:2d:c1:ea:9b:9c:97:3e:11:63:2f:34: 06:ad:51:a5:d3:f0:33:fc:b0:0c:56:6a:c0:fb:f0: 7b:c9:0e:de:f1:b6:55:9d:11:0b:1c:16:c7:7b:75: 26:ae:3c:d3:b1:e8:63:c8:a3:ac:ff:aa:c7:c8:94: b3:b1:55:5f:32:71:6b:7f:ed:00:38:a8:ea:7f:86: 34:00:75:43:82:31:ac:95:7b:e0:0b:c8:f6:f4:04: 51:b6:a5:50:58:86:f5:37:57:28:5d:00:e4:28:b7: 5a:85:7d:3d:53:10:0c:6c:9d:89:3d:97:42:b7:d9: 55:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3F:F4:69:90:2E:45:3E:22:4D:FA:4B:39:72:E3:07:EF:66:1B:C6 X509v3 Authority Key Identifier: keyid:48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:6d:7f:75:1b:63:61:d9:aa:8a:50:f0:62:aa:53:82:56:98: 89:26:28:20:2f:3a:9c:fc:e7:a7:57:4c:aa:17:af:2f:21:bd: 5e:72:8c:56:07:4d:1e:ba:97:c3:0e:3b:56:77:a0:24:03:c8: ed:c0:2b:88:a3:0a:10:4b:45:93:df:f1:84:85:79:89:35:8f: b9:cf:2e:b0:bb:82:fb:bc:56:67:b6:2c:12:de:bc:d9:a2:df: a5:8a:5b:de:d6:6a:87:20:18:17:7f:42:35:c4:36:d4:28:81: fb:08:e4:13:66:50:28:93:65:e1:3a:4c:63:36:e1:44:3a:29: d4:e2:8f:ab:f9:65:85:5d:97:78:63:5e:f7:b6:8c:6d:50:e7: 6d:3c:2f:62:02:ab:44:52:d8:a4:be:c9:43:66:7f:2a:22:e4: 14:3b:10:0e:94:0e:5d:a6:8a:0b:f3:1e:4e:46:9c:0f:e7:4e: 96:a3:cd:01:35:b5:10:c0:25:b9:2b:d3:65:05:c2:13:8e:e4: 52:06:e5:fb:99:58:a2:77:5d:2f:65:43:f1:13:75:7f:87:34: d9:3c:38:b7:bf:c0:56:60:0e:b3:f6:b1:4c:1b:01:67:22:ab: b5:ac:89:8c:97:25:3f:f7:a1:6f:91:b4:60:3d:e3:d5:8c:05: 2c:84:d7:b3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkE4RTExMC8GA1UEBRMoNDg4RkIwNjk3QzQ0Njk2MEZGREEyNjQzRTZCQzlCNDRC QTNEMUNBQzAeFw0yNjAzMjUwMjE0MzJaFw0yNjA0MDEwMjE0MzJaMBgxFjAUBgNV BAMTDTY5YzM0NTA4LTE3OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCv6zAENHYR4OYhnCY/iFZPh1mPnEclUI+kA6kxhndZ4kjQxc8wU1qDpYiPFXUE gbM0lbzE/hnkCJysSC09HYoWGCEXSNf05VgVxfJoq4mwLPyD9jnvLNZldITGjtBq 9YeR/YosjeOPtooUMPBduWZyT2tLtpTnISj+dbJ+hhlRYrUXmQ36CAdCFe8tweqb nJc+EWMvNAatUaXT8DP8sAxWasD78HvJDt7xtlWdEQscFsd7dSauPNOx6GPIo6z/ qsfIlLOxVV8ycWt/7QA4qOp/hjQAdUOCMayVe+ALyPb0BFG2pVBYhvU3VyhdAOQo t1qFfT1TEAxsnYk9l0K32VUpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmD/0aZAu RT4iTfpLOXLjB+9mG8YwHwYDVR0jBBgwFoAUSI+waXxEaWD/2iZD5rybRLo9HKww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQThFLzZCOUEyMzM4Q0U2 RjExRjBBMzIzREY1NUM0RjlBRTAyL1NJLXdhWHhFYVdEXzJpWkQ1cnliUkxvOUhL dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU0ktd2FYeEVhV0RfMmlaRDVyeWJSTG85SEt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG QThFLzZCOUEyMzM4Q0U2RjExRjBBMzIzREY1NUM0RjlBRTAyL1NJLXdhWHhFYVdE XzJpWkQ1cnliUkxvOUhLdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBrbX91G2Nh2aqKUPBiqlOCVpiJJiggLzqc/OenV0yqF68vIb1ecoxWB00eupfD DjtWd6AkA8jtwCuIowoQS0WT3/GEhXmJNY+5zy6wu4L7vFZntiwS3rzZot+lilve 1mqHIBgXf0I1xDbUKIH7COQTZlAok2XhOkxjNuFEOinU4o+r+WWFXZd4Y173toxt UOdtPC9iAqtEUtikvslDZn8qIuQUOxAOlA5dpooL8x5ORpwP506Wo80BNbUQwCW5 K9NlBcITjuRSBuX7mViid10vZUPxE3V/hzTZPDi3v8BWYA6z9rFMGwFnIqu1rImM lyU/96FvkbRgPePVjAUshNez -----END CERTIFICATE-----Generated at Thu Mar 26 10:09:56 2026 by rpki-client