$ rpki-client -vvvf rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft File: WATZMgJnrePvrVaVURWF9sMl5wQ.mft (raw, json) Hash identifier: JBqGQxtY9B/lgyCSq+M83hcQwBU3X7GzarD5Z/x180M= Subject key identifier: DB:E5:73:CD:21:BE:0B:E2:E3:2F:E3:FD:9F:38:43:62:99:29:5B:67 Authority key identifier: 58:04:D9:32:02:67:AD:E3:EF:AD:56:95:51:15:85:F6:C3:25:E7:04 Certificate issuer: /CN=A91811D8/serialNumber=5804D9320267ADE3EFAD5695511585F6C325E704 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WATZMgJnrePvrVaVURWF9sMl5wQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft Manifest number: 8A Signing time: Thu 29 Oct 2026 08:22:32 +0000 Manifest this update: Thu 29 Oct 2026 08:22:31 +0000 Manifest next update: Thu 05 Nov 2026 08:22:31 +0000 Files and hashes: 1: WATZMgJnrePvrVaVURWF9sMl5wQ.crl (hash: +qQxLjw9fbTgtvUXPiIjDLem/xtBLWv2fChfhTbSK/A=) 2: 35672430030A11F19BB01507153D8C67.roa (hash: ZqkwJDczIP3SqWXgDmi1JIlpUn8khhS031ocDNHD7iI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.crl rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WATZMgJnrePvrVaVURWF9sMl5wQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 08:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91811D8, serialNumber=5804D9320267ADE3EFAD5695511585F6C325E704 Validity Not Before: Oct 29 08:22:31 2026 GMT Not After : Nov 5 08:22:31 2026 GMT Subject: CN=6ae30247-cd40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3b:c2:4f:96:71:89:06:ed:fc:5a:74:2b:0e: 78:74:16:ad:81:d4:8e:5f:6e:f1:3b:02:70:18:3d: ca:73:05:8c:65:ea:08:cb:dc:f2:41:1e:31:0d:46: e5:e3:b5:b4:91:75:c4:60:ea:c6:b1:22:ea:30:78: 5a:c4:0d:85:b9:94:7b:83:2d:9c:db:c5:03:cd:0b: 3c:0a:4f:a7:53:57:cb:5e:b8:09:42:e3:65:e0:3d: b0:e3:c7:ef:2a:16:ce:a4:be:86:fa:87:cd:21:46: f3:b5:f0:14:cd:40:26:3d:2a:3a:35:91:72:e9:ec: e2:71:ae:a6:09:fd:02:12:aa:ee:dd:2e:7e:89:f2: 4d:24:00:14:71:df:7d:c4:25:52:b9:38:f3:e2:30: 6c:cc:e8:8e:c2:99:50:de:e6:16:80:f0:d3:7d:85: 4e:83:c2:64:ae:28:2f:3c:d0:ce:ac:0b:97:92:02: 6e:b8:2f:c1:74:d6:ea:ff:68:9a:3b:dd:b7:be:6f: c5:fa:43:d9:7f:01:7c:35:95:9f:c2:80:6a:20:6c: 09:80:52:e8:4e:70:c9:1c:a0:9f:39:05:db:85:7c: ed:f0:03:b9:54:74:19:95:f3:de:14:e5:ed:0d:4a: 68:a5:e2:ad:63:25:7b:ac:63:08:00:9d:0c:e7:a1: 4b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E5:73:CD:21:BE:0B:E2:E3:2F:E3:FD:9F:38:43:62:99:29:5B:67 X509v3 Authority Key Identifier: keyid:58:04:D9:32:02:67:AD:E3:EF:AD:56:95:51:15:85:F6:C3:25:E7:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WATZMgJnrePvrVaVURWF9sMl5wQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:eb:54:ac:b9:33:bc:8b:aa:9d:3c:ed:85:66:03:bb:df:a6: 8b:63:ec:f4:e4:d3:6b:49:f1:c3:1d:24:e9:54:d8:ba:ba:a2: 2f:b5:d3:4d:74:f0:a8:9f:d4:c3:2c:da:76:94:f5:d8:aa:4c: ae:75:91:2e:b0:2c:13:76:da:1a:3e:7d:7c:5e:08:ed:f9:fd: 0e:a7:15:f1:97:f1:4d:ed:c5:d9:3e:2f:e0:c9:52:b2:22:f6: 3b:a2:88:4a:6c:2c:4e:31:b1:46:ac:34:b0:4a:b5:4f:3f:f3: 62:84:a1:1d:c4:32:e2:3c:ac:cb:50:e2:ea:7f:bc:63:3c:4a: 74:56:d3:24:6d:aa:25:8a:8d:63:01:dc:84:12:53:39:39:87: f3:ad:50:6c:70:57:58:03:fd:d0:82:3d:0a:9d:6d:b5:7c:b0: 50:6e:8c:1d:76:50:4f:96:09:5c:6d:2f:83:26:3b:9f:4e:d4: a2:61:9d:ed:70:42:d9:94:83:4a:48:26:14:fc:88:ad:87:9c: d1:9d:7b:7e:bd:96:90:6a:3d:29:44:80:d4:1e:e9:37:4f:c5: dc:ea:0e:9b:65:e9:4c:fd:84:95:2f:f0:ce:7f:b3:c2:f0:62: a9:e5:f7:17:d9:c5:6f:cd:d8:02:de:08:aa:fd:17:60:96:5f: f9:55:32:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODExRDgxMTAvBgNVBAUTKDU4MDREOTMyMDI2N0FERTNFRkFENTY5NTUxMTU4NUY2 QzMyNUU3MDQwHhcNMjYxMDI5MDgyMjMxWhcNMjYxMTA1MDgyMjMxWjAYMRYwFAYD VQQDEw02YWUzMDI0Ny1jZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiDvCT5ZxiQbt/Fp0Kw54dBatgdSOX27xOwJwGD3KcwWMZeoIy9zyQR4xDUbl 47W0kXXEYOrGsSLqMHhaxA2FuZR7gy2c28UDzQs8Ck+nU1fLXrgJQuNl4D2w48fv KhbOpL6G+ofNIUbztfAUzUAmPSo6NZFy6ezica6mCf0CEqru3S5+ifJNJAAUcd99 xCVSuTjz4jBszOiOwplQ3uYWgPDTfYVOg8JkrigvPNDOrAuXkgJuuC/BdNbq/2ia O923vm/F+kPZfwF8NZWfwoBqIGwJgFLoTnDJHKCfOQXbhXzt8AO5VHQZlfPeFOXt DUpopeKtYyV7rGMIAJ0M56FLhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNvlc80h vgvi4y/j/Z84Q2KZKVtnMB8GA1UdIwQYMBaAFFgE2TICZ63j761WlVEVhfbDJecE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTFEOC9EQ0U3QkRFMjAz MDkxMUYxOTI4OTk2RDMxMzNEOEM2Ny9XQVRaTWdKbnJlUHZyVmFWVVJXRjlzTWw1 d1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dBVFpNZ0pucmVQdnJWYVZVUldGOXNNbDV3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTFEOC9EQ0U3QkRFMjAzMDkxMUYxOTI4OTk2RDMxMzNEOEM2Ny9XQVRaTWdKbnJl UHZyVmFWVVJXRjlzTWw1d1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT+tUrLkzvIuqnTzthWYDu9+mi2Ps9OTTa0nxwx0k6VTYurqiL7XTTXTwqJ/U wyzadpT12KpMrnWRLrAsE3baGj59fF4I7fn9DqcV8ZfxTe3F2T4v4MlSsiL2O6KI SmwsTjGxRqw0sEq1Tz/zYoShHcQy4jysy1Di6n+8YzxKdFbTJG2qJYqNYwHchBJT OTmH861QbHBXWAP90II9Cp1ttXywUG6MHXZQT5YJXG0vgyY7n07UomGd7XBC2ZSD SkgmFPyIrYec0Z17fr2WkGo9KUSA1B7pN0/F3OoOm2XpTP2ElS/wzn+zwvBiqeX3 F9nFb83YAt4Iqv0XYJZf+VUybQ== -----END CERTIFICATE-----Generated at Fri Oct 30 21:25:16 2026 by rpki-client