$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft File: SI-waXxEaWD_2iZD5rybRLo9HKw.mft (raw, json) Hash identifier: HHx1u/hoP0vTrmTx5hOe80lEPKFTl3ulfaa02JwCnRw= Subject key identifier: D0:C5:8C:59:C9:50:05:65:43:D3:F5:86:50:C2:DE:C7:7E:E6:87:EB Authority key identifier: 48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC Certificate issuer: /CN=A91CFA8E/serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft Manifest number: 31 Signing time: Sun 01 Mar 2026 03:46:18 +0000 Manifest this update: Sun 01 Mar 2026 03:46:18 +0000 Manifest next update: Sun 08 Mar 2026 03:46:18 +0000 Files and hashes: 1: SI-waXxEaWD_2iZD5rybRLo9HKw.crl (hash: lLeExL87fOF6o9W9JoGutWJwAqZtc4QOdYlLdNLEvr4=) 2: 160AF8E8CE8D11F0BE6FB51EC4F9AE02.roa (hash: 6w+qBhaQP14zy72YyydEIPq0/gA1jmSu65E6u7NcIZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC Validity Not Before: Mar 1 03:46:18 2026 GMT Not After : Mar 8 03:46:18 2026 GMT Subject: CN=69a3b68a-7623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3b:b2:d6:03:c5:7b:2e:92:7d:3a:75:f7:ea: b9:fa:26:e9:3b:fc:50:6e:bd:6a:ad:e9:89:62:d6: 07:72:93:c2:6c:1a:51:36:fe:7d:ff:2e:2f:0b:96: 3a:3d:70:da:33:fb:55:4a:11:4c:d8:3d:1b:5c:66: 25:20:1f:fc:79:bc:b4:c8:a2:c6:a6:ce:69:65:2c: 15:96:8c:ab:46:46:64:1a:67:75:f8:da:5f:ea:14: 92:e5:f2:11:c8:a2:1a:69:ab:86:f5:58:80:50:1d: a1:b9:0c:71:1b:66:43:e9:21:96:bc:cf:67:12:13: fb:8f:44:23:95:61:a6:23:7f:04:a7:a8:3a:91:6a: 3d:be:d8:26:3f:14:51:0e:65:e1:be:38:ea:4c:9d: 68:c1:a6:a1:8d:df:45:94:c4:17:a6:62:7c:37:89: 70:54:65:8d:37:4e:53:32:05:ea:86:34:5a:fc:b7: 8f:db:1c:42:bd:2c:1d:8e:f7:2d:7b:6e:d2:25:d3: f7:76:24:46:2f:e2:0e:f3:3a:6b:88:b9:57:6d:5b: eb:bc:a8:c5:f9:2a:8f:5f:1b:09:5f:75:89:45:49: a7:c0:da:bf:df:64:22:8a:ea:77:be:07:00:30:89: 45:83:88:77:ae:d7:f5:c1:99:12:aa:3f:1d:08:78: b1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C5:8C:59:C9:50:05:65:43:D3:F5:86:50:C2:DE:C7:7E:E6:87:EB X509v3 Authority Key Identifier: keyid:48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:15:96:15:e7:bf:6f:8a:4b:b5:f9:7d:fd:f2:9e:2a:40:1b: 9c:0c:e3:72:d5:c4:fa:74:f3:ed:6a:9b:31:7e:39:bb:b8:c8: 6f:cc:b6:75:e9:26:8a:49:1a:c2:54:9a:79:21:9e:d7:37:e8: 55:8d:25:1b:73:cf:22:31:c0:cf:f0:10:fb:21:a4:d1:da:e3: 77:c9:16:77:63:d8:ac:20:9e:da:f7:cf:c3:2f:ec:3a:69:74: 08:63:7f:09:46:6e:82:1d:b6:97:5e:de:0d:0e:f5:fc:db:90: 0d:d2:46:6a:a8:f6:65:cb:40:f3:02:b1:bf:59:50:4c:9a:51: 78:ae:e6:96:81:a5:45:88:d4:12:53:d0:d5:c3:d0:8b:f5:23: 95:36:dc:0b:89:b9:61:ce:86:89:16:d5:8b:5f:de:71:0b:c9: d8:10:46:de:40:38:18:32:7e:ce:e0:f9:d9:1f:5f:9c:b5:70: a2:f1:03:d8:b4:38:9d:c2:44:b7:86:d1:58:30:9d:9d:76:ec: fe:d0:69:4c:8e:e3:75:8b:1f:b1:fe:76:ca:23:67:c9:f5:af: 4a:aa:37:5e:98:19:e0:d5:c6:32:6b:e4:80:f3:00:50:a9:77: 29:58:c8:b3:76:29:1d:03:d1:4a:7a:be:60:59:db:1b:ae:05: df:90:90:50 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkE4RTExMC8GA1UEBRMoNDg4RkIwNjk3QzQ0Njk2MEZGREEyNjQzRTZCQzlCNDRC QTNEMUNBQzAeFw0yNjAzMDEwMzQ2MThaFw0yNjAzMDgwMzQ2MThaMBgxFjAUBgNV BAMMDTY5YTNiNjhhLTc2MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyO7LWA8V7LpJ9OnX36rn6Juk7/FBuvWqt6Yli1gdyk8JsGlE2/n3/Li8Lljo9 cNoz+1VKEUzYPRtcZiUgH/x5vLTIosamzmllLBWWjKtGRmQaZ3X42l/qFJLl8hHI ohppq4b1WIBQHaG5DHEbZkPpIZa8z2cSE/uPRCOVYaYjfwSnqDqRaj2+2CY/FFEO ZeG+OOpMnWjBpqGN30WUxBemYnw3iXBUZY03TlMyBeqGNFr8t4/bHEK9LB2O9y17 btIl0/d2JEYv4g7zOmuIuVdtW+u8qMX5Ko9fGwlfdYlFSafA2r/fZCKK6ne+BwAw iUWDiHeu1/XBmRKqPx0IeLGbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0MWMWclQ BWVD0/WGUMLex37mh+swHwYDVR0jBBgwFoAUSI+waXxEaWD/2iZD5rybRLo9HKww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGQThFLzZCOUEyMzM4Q0U2 RjExRjBBMzIzREY1NUM0RjlBRTAyL1NJLXdhWHhFYVdEXzJpWkQ1cnliUkxvOUhL dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU0ktd2FYeEVhV0RfMmlaRDVyeWJSTG85SEt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG QThFLzZCOUEyMzM4Q0U2RjExRjBBMzIzREY1NUM0RjlBRTAyL1NJLXdhWHhFYVdE XzJpWkQ1cnliUkxvOUhLdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBSFZYV579viku1+X398p4qQBucDONy1cT6dPPtapsxfjm7uMhvzLZ16SaKSRrC VJp5IZ7XN+hVjSUbc88iMcDP8BD7IaTR2uN3yRZ3Y9isIJ7a98/DL+w6aXQIY38J Rm6CHbaXXt4NDvX825AN0kZqqPZly0DzArG/WVBMmlF4ruaWgaVFiNQSU9DVw9CL 9SOVNtwLiblhzoaJFtWLX95xC8nYEEbeQDgYMn7O4PnZH1+ctXCi8QPYtDidwkS3 htFYMJ2dduz+0GlMjuN1ix+x/nbKI2fJ9a9KqjdemBng1cYya+SA8wBQqXcpWMiz dikdA9FKer5gWdsbrgXfkJBQ -----END CERTIFICATE-----Generated at Sun Mar 1 22:52:08 2026 by rpki-client