
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
File: SI-waXxEaWD_2iZD5rybRLo9HKw.mft (raw, json)
Hash identifier: JB6vE3TsMHFt9Kd3tbrCpR38K6MvpvqftXMnUGNe7OE=
Subject key identifier: 52:37:EA:6F:BB:B0:64:C1:8D:96:0F:70:34:FF:E9:D2:62:D2:E5:BA
Authority key identifier: 48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC
Certificate issuer: /CN=A91CFA8E/serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
Manifest number: 7E
Signing time: Thu 23 Jul 2026 03:28:24 +0000
Manifest this update: Thu 23 Jul 2026 03:28:24 +0000
Manifest next update: Thu 30 Jul 2026 03:28:24 +0000
Files and hashes: 1: SI-waXxEaWD_2iZD5rybRLo9HKw.crl (hash: KJQtn9FWGNLXEsPZX8ltYZHIewqOUNxOYe00We/f/hw=)
2: 160AF8E8CE8D11F0BE6FB51EC4F9AE02.roa (hash: 3OV5G0MzOx3A7cffbPL2mxy1J9i86/E4uGYCDCcUs/I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl
rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFA8E, serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC
Validity
Not Before: Jul 23 03:28:24 2026 GMT
Not After : Jul 30 03:28:24 2026 GMT
Subject: CN=6a618a58-8c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fb:a7:b7:65:65:1f:85:3b:d8:03:d8:01:cd:
c7:94:45:da:40:50:a2:31:d2:84:53:1c:de:c0:a6:
3e:e4:32:99:05:d4:49:f4:f7:8b:8b:49:cb:7b:3b:
d0:17:05:b8:a1:3e:ad:55:ad:f2:4c:f7:f8:c3:40:
30:78:47:96:c1:86:b8:37:3d:32:06:ee:9b:90:c4:
ee:9c:90:53:02:e6:ba:89:95:da:63:88:2b:11:bc:
e8:c9:16:c4:f5:da:a0:1e:56:64:a5:95:fe:63:c8:
f1:38:93:44:b0:a4:70:c6:cf:d4:47:d0:d6:db:18:
43:e5:51:71:de:f5:3c:b7:72:78:91:00:ea:63:39:
5f:19:73:b6:38:59:2a:0a:ca:70:c8:36:a1:c5:9e:
35:b1:34:e8:33:d6:46:0a:97:31:db:2c:6e:13:11:
09:99:0e:55:2a:84:03:15:89:d0:46:61:29:55:ca:
70:d3:ae:97:46:75:fe:77:ff:b8:00:f0:ad:a8:56:
d0:92:22:f0:02:33:21:83:98:4d:8b:94:93:36:9f:
c6:2b:b1:a6:af:17:ac:a0:80:7f:79:67:dc:8e:ff:
eb:e2:13:18:0d:4f:71:d2:a7:64:cc:70:87:f1:2f:
9b:54:1e:4e:a5:18:6c:8b:52:2a:46:49:df:1d:30:
1a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:37:EA:6F:BB:B0:64:C1:8D:96:0F:70:34:FF:E9:D2:62:D2:E5:BA
X509v3 Authority Key Identifier:
keyid:48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:54:e7:09:8b:6f:0b:58:f1:9f:23:ed:db:bd:c8:a3:5e:49:
aa:28:f2:74:ac:18:99:07:ce:f8:93:75:a9:9e:cc:ad:43:ea:
c1:c3:17:cf:a3:8b:5b:7c:7b:e5:90:58:4a:d6:39:a0:bd:71:
b5:8d:cb:63:56:7d:75:3f:da:4c:a3:a5:8c:1c:63:71:b7:0b:
a3:82:07:bc:00:44:c3:41:2b:7d:86:36:0d:c6:b3:09:9d:3e:
f2:da:47:4f:d0:27:21:95:f7:ef:16:e9:23:f3:d9:60:84:49:
29:55:35:b5:73:7a:30:7d:d1:70:a8:7c:ef:1a:8b:48:42:42:
47:e5:57:17:81:14:88:fc:89:1d:ce:fd:11:e5:4b:42:7b:2f:
3a:ac:d0:2f:d0:85:48:3f:38:3a:10:53:47:54:71:c6:30:8c:
01:57:63:fa:47:5a:66:bf:c7:66:c8:db:7b:7b:1b:4d:7f:42:
88:2b:1c:d4:f7:9e:17:ed:d2:e8:82:52:6a:a1:8b:a5:af:29:
18:05:08:bb:69:c0:c6:2e:45:d9:3d:29:cd:6c:4f:6a:7c:4c:
50:3b:3c:50:9d:4d:22:da:23:d2:59:e6:52:83:a3:de:83:4d:
36:18:4e:81:44:66:9c:30:5a:f0:8d:3f:de:9c:11:30:ae:a7:
1a:a7:6c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:43:53 2026 by rpki-client