$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft File: SI-waXxEaWD_2iZD5rybRLo9HKw.mft (raw, json) Hash identifier: mIAmH9OzVIUU/TAj21AujUTBNe7xX2yQRRwP9O6JpdU= Subject key identifier: C9:2C:0E:8B:49:02:0B:DB:A2:37:BC:0E:D2:32:9C:F7:80:71:2A:BB Authority key identifier: 48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC Certificate issuer: /CN=A91CFA8E/serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft Manifest number: A0 Signing time: Fri 25 Sep 2026 02:02:12 +0000 Manifest this update: Fri 25 Sep 2026 02:02:11 +0000 Manifest next update: Fri 02 Oct 2026 02:02:11 +0000 Files and hashes: 1: SI-waXxEaWD_2iZD5rybRLo9HKw.crl (hash: +2wbHtwXGuYlJNOZ52fakkP6ubIynYk80J41xd3Stf4=) 2: 160AF8E8CE8D11F0BE6FB51EC4F9AE02.roa (hash: 3OV5G0MzOx3A7cffbPL2mxy1J9i86/E4uGYCDCcUs/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 02:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC Validity Not Before: Sep 25 02:02:11 2026 GMT Not After : Oct 2 02:02:11 2026 GMT Subject: CN=6ab5d623-d5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:fb:b1:32:97:2e:0d:df:a2:3e:e3:25:fc: 35:90:52:d9:bc:ad:69:bf:b2:e3:47:f6:24:f4:41: 43:90:af:d6:50:1b:37:b8:39:c7:46:38:2f:47:12: 8b:27:45:be:97:78:07:d4:09:29:f3:c0:37:26:40: 60:9f:cd:fc:9e:56:d6:5c:a7:a2:9d:6b:36:59:5e: 15:db:8d:03:2a:eb:5b:b8:a8:ef:85:1f:c7:90:26: 4f:ee:e5:f1:16:3f:0a:b0:ba:1c:25:f6:4f:a5:97: 52:f1:a1:3f:20:aa:fc:7c:d8:04:1a:3b:f7:27:88: cd:40:f8:f1:e6:58:a1:3b:3c:92:0d:1e:c9:e3:94: 12:21:50:44:9e:9f:06:ec:f7:fa:30:b7:e4:ea:b9: 9f:3d:d6:58:ca:da:1d:f2:33:82:a2:b1:6e:9a:7c: e6:eb:38:52:68:73:3f:4e:6c:c9:fd:44:d4:05:39: 5a:7c:7e:42:1c:f3:78:72:bf:4f:3d:9a:cf:0d:0f: 31:f3:bd:28:b0:02:af:09:b0:63:55:0c:9d:38:3b: 63:8c:92:ca:3f:e1:a6:53:08:5a:40:13:c7:34:85: 00:00:e3:b3:e7:ea:35:a6:78:81:22:1d:a4:2d:09: 5f:03:0b:95:b2:ae:33:3c:ef:08:8e:e5:09:b3:a8: 7e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2C:0E:8B:49:02:0B:DB:A2:37:BC:0E:D2:32:9C:F7:80:71:2A:BB X509v3 Authority Key Identifier: keyid:48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:e5:5d:a4:7a:a2:0e:f7:c6:ab:99:39:7b:e3:88:7b:d9:b1: 73:6f:ba:8c:bc:ff:2f:f5:c7:ca:22:04:3a:ce:5d:7b:81:96: 37:b3:b4:3b:82:ae:ea:c9:0c:49:e2:49:9e:11:9d:7a:4e:93: 71:69:6e:52:4d:43:b1:c2:ed:90:e9:68:ba:de:05:47:a8:c7: ed:1c:6b:44:f9:cd:5d:2b:b6:45:84:85:4d:f0:5c:3c:92:b2: 37:96:0c:05:38:da:27:d6:ba:31:4f:86:0c:2e:f5:ba:54:dc: 74:f8:05:30:a1:39:4a:80:75:89:34:ac:ee:35:23:c1:96:56: 4f:c8:bc:dc:79:44:2c:65:b8:1a:4e:6c:53:9f:cb:63:3a:6e: 83:81:6f:08:5a:cd:bd:34:3a:68:95:f2:67:28:7c:e0:36:81: 8f:cc:24:b4:20:86:88:b8:bd:79:57:18:29:94:4c:ae:e6:aa: da:ba:23:32:32:6c:9c:fe:c5:e0:87:e8:15:d8:0d:4f:ba:cf: 52:28:01:56:2a:ec:92:ad:12:73:e0:1b:74:56:0b:a2:24:3a: 91:94:c0:b5:93:b5:7a:bd:17:54:34:be:c0:e7:07:d1:d3:e1: 90:46:92:e9:c0:9e:f6:fb:82:6a:3c:96:fe:ca:95:59:75:c1: 5c:34:60:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEUxMTAvBgNVBAUTKDQ4OEZCMDY5N0M0NDY5NjBGRkRBMjY0M0U2QkM5QjQ0 QkEzRDFDQUMwHhcNMjYwOTI1MDIwMjExWhcNMjYxMDAyMDIwMjExWjAYMRYwFAYD VQQDEw02YWI1ZDYyMy1kNWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqD7sTKXLg3foj7jJfw1kFLZvK1pv7LjR/Yk9EFDkK/WUBs3uDnHRjgvRxKL J0W+l3gH1Akp88A3JkBgn838nlbWXKeinWs2WV4V240DKutbuKjvhR/HkCZP7uXx Fj8KsLocJfZPpZdS8aE/IKr8fNgEGjv3J4jNQPjx5lihOzySDR7J45QSIVBEnp8G 7Pf6MLfk6rmfPdZYytod8jOCorFumnzm6zhSaHM/TmzJ/UTUBTlafH5CHPN4cr9P PZrPDQ8x870osAKvCbBjVQydODtjjJLKP+GmUwhaQBPHNIUAAOOz5+o1pniBIh2k LQlfAwuVsq4zPO8IjuUJs6h+ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMksDotJ Agvboje8DtIynPeAcSq7MB8GA1UdIwQYMBaAFEiPsGl8RGlg/9omQ+a8m0S6PRys MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RS82QjlBMjMzOENF NkYxMUYwQTMyM0RGNTVDNEY5QUUwMi9TSS13YVh4RWFXRF8yaVpENXJ5YlJMbzlI S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1NJLXdhWHhFYVdEXzJpWkQ1cnliUkxvOUhLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkE4RS82QjlBMjMzOENFNkYxMUYwQTMyM0RGNTVDNEY5QUUwMi9TSS13YVh4RWFX RF8yaVpENXJ5YlJMbzlIS3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd+VdpHqiDvfGq5k5e+OIe9mxc2+6jLz/L/XHyiIEOs5de4GWN7O0O4Ku6skM SeJJnhGdek6TcWluUk1DscLtkOlout4FR6jH7RxrRPnNXSu2RYSFTfBcPJKyN5YM BTjaJ9a6MU+GDC71ulTcdPgFMKE5SoB1iTSs7jUjwZZWT8i83HlELGW4Gk5sU5/L Yzpug4FvCFrNvTQ6aJXyZyh84DaBj8wktCCGiLi9eVcYKZRMruaq2rojMjJsnP7F 4IfoFdgNT7rPUigBVirskq0Sc+AbdFYLoiQ6kZTAtZO1er0XVDS+wOcH0dPhkEaS 6cCe9vuCajyW/sqVWXXBXDRgpQ== -----END CERTIFICATE-----Generated at Sat Sep 26 09:05:23 2026 by rpki-client