$ rpki-client -vvf rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft File: WatjEmbskGVhP9Z3y9tP8TvvZEE.mft (raw, json) Hash identifier: jWmdJhCnj3bzeVPnc6TRgvJD9uwM7lhYSJNsh+lAB0M= Subject key identifier: 21:91:9E:F1:1B:6B:0B:4A:93:8B:3B:BF:D5:A6:0F:42:63:87:E5:9F Authority key identifier: 59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41 Certificate issuer: /CN=A9191010/serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441 Certificate serial: 1FAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft Manifest number: 1FAF Signing time: Sat 04 Apr 2026 15:55:06 +0000 Manifest this update: Sat 04 Apr 2026 15:55:06 +0000 Manifest next update: Sat 11 Apr 2026 15:55:06 +0000 Files and hashes: 1: WatjEmbskGVhP9Z3y9tP8TvvZEE.crl (hash: HNAQg9qBAU325tNofK0MGH/O5rqRO1QtxEfGhCBvT8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8111 (0x1faf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191010, serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441 Validity Not Before: Apr 4 15:55:06 2026 GMT Not After : Apr 11 15:55:06 2026 GMT Subject: CN=69d1345a-fe95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:23:c8:c1:78:8c:fd:1a:5f:98:fd:7a:8b:20: 09:95:a1:38:35:31:36:7e:ce:e9:0e:6f:25:80:11: d2:3e:26:3e:74:c0:ef:31:49:75:b0:05:5e:74:31: e4:c4:a3:8f:72:a7:0a:7a:6b:24:59:95:72:f6:bb: 9e:a4:bb:a5:9b:96:9c:0d:13:f6:26:96:0b:d6:a6: bb:2c:95:c3:84:ef:81:30:47:75:15:44:93:9b:5f: ef:22:7d:b4:f6:3e:20:5a:63:fa:df:bd:24:a0:02: 9f:d4:50:02:b8:34:24:71:d4:ce:aa:3c:97:7d:99: 01:5f:56:a2:f9:05:92:c3:d9:68:84:7b:25:39:5c: 55:31:f4:ed:80:1b:c8:eb:bb:27:af:b6:2d:a6:fe: 85:81:97:8e:c4:51:d1:90:41:b9:33:ea:df:2f:89: 82:4d:38:d0:48:99:f1:e8:95:67:a4:75:3f:9c:f5: ca:f2:14:ff:8b:a5:e9:b7:ce:c1:11:13:82:18:d0: 88:05:33:20:a5:4e:52:1a:f6:61:14:26:42:d5:68: aa:18:da:ab:0d:ca:6c:d2:b3:b2:ba:4c:3f:49:54: 14:5e:dd:1a:ca:f2:1a:e1:e4:ef:86:77:be:3e:c7: 73:55:0f:75:22:80:e9:f5:54:e1:13:31:a6:3f:cf: cd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:91:9E:F1:1B:6B:0B:4A:93:8B:3B:BF:D5:A6:0F:42:63:87:E5:9F X509v3 Authority Key Identifier: keyid:59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:e1:15:6b:1b:f2:ef:ed:86:c6:0e:73:5b:dd:f5:1e:e3:85: f2:c5:08:5f:c2:49:5d:03:26:0b:f5:19:ac:31:81:37:60:12: a1:45:59:b9:4f:13:cf:d2:1b:35:db:6d:57:87:d4:ac:00:80: 89:2b:8c:5d:05:a9:16:f4:e3:32:fe:ff:ec:97:7b:57:fe:b9: 23:b3:df:97:0b:f3:ce:11:ab:3d:61:bd:de:05:63:15:b0:98: 5b:73:a7:6a:45:c0:dc:d7:4b:3a:08:39:31:e0:18:cc:ec:d2: 56:18:80:d7:07:15:4e:e1:c5:3f:3c:fc:b0:d5:07:92:2b:ff: 5f:cf:c6:0d:9f:bd:d1:44:5f:7f:ee:73:26:70:8f:58:ff:7c: 86:51:72:4f:f3:5d:96:24:c2:7f:ae:f8:ad:28:87:fc:2f:99: b2:de:d0:da:99:71:4c:47:e5:10:62:de:f8:07:8b:56:6f:3c: fb:8c:10:ba:c7:ab:01:f3:32:7d:73:10:55:2a:19:2d:5c:75: c5:6e:53:72:b7:75:dd:81:01:d9:76:0a:5e:cf:01:3b:24:0f: ce:0e:57:48:f8:6b:3f:d6:c3:ed:8a:c1:c2:46:ee:9f:81:b4: f3:cb:66:26:d0:04:5a:c4:a3:e9:a5:a6:e8:1c:5b:35:99:fb: 7f:df:69:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwMTAxMTAvBgNVBAUTKDU5QUI2MzEyNjZFQzkwNjU2MTNGRDY3N0NCREI0RkYx M0JFRjY0NDEwHhcNMjYwNDA0MTU1NTA2WhcNMjYwNDExMTU1NTA2WjAYMRYwFAYD VQQDEw02OWQxMzQ1YS1mZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SPIwXiM/RpfmP16iyAJlaE4NTE2fs7pDm8lgBHSPiY+dMDvMUl1sAVedDHk xKOPcqcKemskWZVy9ruepLulm5acDRP2JpYL1qa7LJXDhO+BMEd1FUSTm1/vIn20 9j4gWmP6370koAKf1FACuDQkcdTOqjyXfZkBX1ai+QWSw9lohHslOVxVMfTtgBvI 67snr7Ytpv6FgZeOxFHRkEG5M+rfL4mCTTjQSJnx6JVnpHU/nPXK8hT/i6Xpt87B EROCGNCIBTMgpU5SGvZhFCZC1WiqGNqrDcps0rOyukw/SVQUXt0ayvIa4eTvhne+ PsdzVQ91IoDp9VThEzGmP8/NRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCGRnvEb awtKk4s7v9WmD0Jjh+WfMB8GA1UdIwQYMBaAFFmrYxJm7JBlYT/Wd8vbT/E772RB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAxMC8wOUU1Nzc0NDU1 NjgxMUU2QjMzMjk4NTVDNEY5QUUwMi9XYXRqRW1ic2tHVmhQOVozeTl0UDhUdnZa RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhdGpFbWJza0dWaFA5WjN5OXRQOFR2dlpFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTAxMC8wOUU1Nzc0NDU1NjgxMUU2QjMzMjk4NTVDNEY5QUUwMi9XYXRqRW1ic2tH VmhQOVozeTl0UDhUdnZaRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn+EVaxvy7+2Gxg5zW931HuOF8sUIX8JJXQMmC/UZrDGBN2ASoUVZuU8Tz9Ib NdttV4fUrACAiSuMXQWpFvTjMv7/7Jd7V/65I7PflwvzzhGrPWG93gVjFbCYW3On akXA3NdLOgg5MeAYzOzSVhiA1wcVTuHFPzz8sNUHkiv/X8/GDZ+90URff+5zJnCP WP98hlFyT/NdliTCf674rSiH/C+Zst7Q2plxTEflEGLe+AeLVm88+4wQuserAfMy fXMQVSoZLVx1xW5Tcrd13YEB2XYKXs8BOyQPzg5XSPhrP9bD7YrBwkbun4G088tm JtAEWsSj6aWm6BxbNZn7f99plA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:03 2026 by rpki-client