
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
File: SI-waXxEaWD_2iZD5rybRLo9HKw.mft (raw, json)
Hash identifier: mUnddyPiCdW472tuF7wnwCXN0JEjwbY3UBgNClc7SDc=
Subject key identifier: C5:DC:64:96:B7:F4:E4:5B:A1:C7:2A:7F:05:E4:AA:A1:00:CF:8A:AB
Authority key identifier: 48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC
Certificate issuer: /CN=A91CFA8E/serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
Manifest number: 4B
Signing time: Fri 17 Apr 2026 02:30:37 +0000
Manifest this update: Fri 17 Apr 2026 02:30:37 +0000
Manifest next update: Fri 24 Apr 2026 02:30:37 +0000
Files and hashes: 1: SI-waXxEaWD_2iZD5rybRLo9HKw.crl (hash: vXNII9UYl9/ySRznzRdjqOzfjP0Wwin0c5F0nJhJQXg=)
2: 160AF8E8CE8D11F0BE6FB51EC4F9AE02.roa (hash: w2I93tWFGO9r1ycsLwYKSHur6VSKhkkXWi+U4yYabwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl
rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFA8E, serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC
Validity
Not Before: Apr 17 02:30:37 2026 GMT
Not After : Apr 24 02:30:37 2026 GMT
Subject: CN=69e19b4d-b345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bb:0d:a9:55:a9:a8:88:dc:23:35:16:57:b9:
ae:1d:8f:b3:e4:18:c7:8d:43:f3:a7:6d:8c:7d:b0:
6a:04:68:73:7f:5c:8c:49:1c:55:38:fa:00:f4:5f:
51:a1:1a:88:90:b1:98:4b:f4:f4:51:84:3d:14:0c:
87:01:58:da:25:b2:15:b4:f5:15:3c:f4:b1:09:12:
39:ac:c0:6c:5d:65:6e:f5:fe:07:e1:cf:6b:1f:d0:
0f:fd:ff:89:d7:0d:75:da:9c:4f:dc:35:dc:ad:99:
8d:de:57:10:3f:3e:a5:be:bf:a6:98:ef:62:09:42:
8e:70:ac:4f:43:0d:de:6c:73:d3:89:90:f8:50:5c:
2b:77:b2:cc:9c:b1:5d:09:a6:f1:44:46:fc:8c:18:
e6:43:24:11:bd:99:c5:0b:13:4e:8c:2e:4d:51:dd:
db:0a:d6:d3:22:a1:6c:8d:90:d0:48:d5:0b:b3:ad:
cd:2e:14:a7:7a:26:fa:a9:30:e2:1d:50:09:91:63:
fb:d8:b4:3b:47:d7:78:1f:64:84:95:d8:8b:f4:62:
79:3c:4c:22:76:16:1e:f5:6c:47:bd:8b:19:11:6d:
63:c1:f9:8f:44:2b:81:8a:8c:4b:13:f1:cc:d4:67:
f0:99:6e:07:5a:6c:92:d5:59:a9:c1:77:1f:36:af:
3f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DC:64:96:B7:F4:E4:5B:A1:C7:2A:7F:05:E4:AA:A1:00:CF:8A:AB
X509v3 Authority Key Identifier:
keyid:48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:db:f5:f7:56:e1:fd:a4:a8:bb:87:03:22:47:09:4f:9a:3f:
b0:8d:1e:00:b9:e1:0d:3d:5f:f9:16:cd:16:27:7c:93:d5:27:
21:81:ca:e7:56:7a:00:0d:76:39:c2:24:eb:52:9f:20:68:5f:
b2:4b:67:7e:f8:07:30:a2:ef:25:2f:d1:4e:5c:27:c3:fd:3a:
74:ea:39:7b:ac:06:4b:af:5e:6e:5f:e7:39:96:02:d5:92:d7:
a5:2a:c5:28:12:c3:cb:64:30:eb:e9:cd:cb:8f:ac:a7:7c:c7:
57:e6:03:f4:d5:6e:9a:90:2d:5e:ac:1e:ea:c9:0e:f8:a5:0b:
06:c8:47:31:57:cb:86:66:c7:4e:3b:6d:10:09:1a:d1:5d:67:
99:1a:c4:5c:96:07:b1:22:11:af:91:60:25:a9:06:8a:49:be:
9a:0b:f3:cb:48:e4:a0:a6:26:44:57:18:39:5e:b8:b7:c5:8f:
57:c3:86:c0:ed:4b:30:92:73:13:75:12:3e:66:92:24:88:82:
12:ba:15:59:ab:23:21:81:2b:47:10:80:77:22:3e:bf:4d:1b:
e5:3a:07:11:d6:45:3a:33:db:e5:db:b6:71:6f:5e:03:67:fd:
bd:8a:d0:84:1d:aa:49:26:cb:43:6a:91:06:ba:39:9f:b1:59:
f5:4e:b0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:42 2026 by rpki-client