
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft
File: WATZMgJnrePvrVaVURWF9sMl5wQ.mft (raw, json)
Hash identifier: X8BZOPDnY3Iz2N3pYCsAtKFpGzWFh6XvAhk2UU9FyLU=
Subject key identifier: E0:36:32:CA:19:BD:4E:98:7D:47:14:22:99:D9:58:A2:8A:B6:80:FE
Authority key identifier: 58:04:D9:32:02:67:AD:E3:EF:AD:56:95:51:15:85:F6:C3:25:E7:04
Certificate issuer: /CN=A91811D8/serialNumber=5804D9320267ADE3EFAD5695511585F6C325E704
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WATZMgJnrePvrVaVURWF9sMl5wQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft
Manifest number: 72
Signing time: Fri 11 Sep 2026 07:58:47 +0000
Manifest this update: Fri 11 Sep 2026 07:58:46 +0000
Manifest next update: Fri 18 Sep 2026 07:58:46 +0000
Files and hashes: 1: WATZMgJnrePvrVaVURWF9sMl5wQ.crl (hash: zpQ4ai9b0CeaAlN4kIOjuOaHFWWOTN3NAEyFaMDWh3U=)
2: 35672430030A11F19BB01507153D8C67.roa (hash: ZqkwJDczIP3SqWXgDmi1JIlpUn8khhS031ocDNHD7iI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.crl
rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WATZMgJnrePvrVaVURWF9sMl5wQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 06:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91811D8, serialNumber=5804D9320267ADE3EFAD5695511585F6C325E704
Validity
Not Before: Sep 11 07:58:46 2026 GMT
Not After : Sep 18 07:58:46 2026 GMT
Subject: CN=6aa3b4b7-77aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1e:fd:a4:60:13:cb:ef:62:97:94:df:0b:3c:
ed:ff:81:5e:4b:6e:2c:da:4f:a6:21:fb:80:ee:d3:
6e:d4:59:63:6e:46:2e:4a:db:bc:a4:bb:6d:04:32:
ce:22:45:4c:01:6f:5d:33:83:86:27:57:3b:7e:36:
81:4a:b8:27:03:4f:9d:de:1d:03:ef:ea:d5:a4:7a:
19:f8:8b:5a:97:e5:21:53:4c:00:97:e0:7b:82:57:
93:d1:51:aa:1a:81:9e:2c:a4:a8:cd:5d:cc:54:32:
b5:32:8c:32:be:df:29:8d:b8:1e:4a:80:4d:0e:9e:
1d:8d:14:15:ab:bd:d5:61:58:c9:b3:8d:c5:fd:e2:
cf:05:30:a0:b8:f6:c3:ff:a7:fa:f2:9f:a4:73:b5:
cf:7e:b6:ad:d8:0f:c4:72:d2:0e:3a:55:d1:2c:6f:
ac:fa:1c:4c:2e:3a:ca:c4:27:04:85:2a:7b:45:2f:
e8:64:20:78:54:d0:ae:42:4a:45:7e:c0:f5:12:43:
51:2c:df:d2:9a:b1:bf:59:f2:6c:e9:11:df:be:d5:
d4:a5:69:05:a4:71:24:42:67:6a:35:f4:27:af:d8:
b1:fa:7f:fb:3b:f1:71:1b:97:9d:7f:98:8e:16:84:
4f:6b:95:a3:e9:99:59:bc:b9:fb:ef:a3:c7:e3:9f:
59:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:36:32:CA:19:BD:4E:98:7D:47:14:22:99:D9:58:A2:8A:B6:80:FE
X509v3 Authority Key Identifier:
keyid:58:04:D9:32:02:67:AD:E3:EF:AD:56:95:51:15:85:F6:C3:25:E7:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WATZMgJnrePvrVaVURWF9sMl5wQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:48:21:fb:b4:28:96:98:55:1a:80:70:18:23:fd:0f:ea:97:
d7:6e:51:13:b8:45:86:b0:f0:cc:7f:9d:29:7a:3c:b2:ef:d6:
b8:e1:7b:33:38:1d:cf:bc:9b:62:18:80:48:21:b3:32:f0:82:
e0:5b:07:a1:2a:e9:fd:82:31:61:eb:16:18:24:6e:4b:00:2c:
25:c6:39:7f:dd:8f:52:ac:da:66:62:e6:f8:b5:00:bb:52:08:
fb:a2:05:25:5c:37:4a:d0:75:ba:15:d5:2b:94:1e:f5:26:55:
3d:5f:3f:bb:00:d7:59:1f:f5:c4:bb:d8:31:9d:5d:19:70:94:
d0:1d:da:91:87:77:ca:0f:cd:26:ef:1d:68:f4:88:0a:67:0a:
bf:72:41:a7:af:fd:3c:d9:20:8d:09:9e:7f:ef:c9:fb:db:c4:
59:bd:3f:c8:9a:ae:30:ef:ca:7c:cc:1e:49:af:5c:a2:bb:a0:
db:6d:44:e3:c5:c2:06:e6:71:a3:05:55:48:2d:77:6f:48:13:
64:e0:16:46:b4:73:cb:c9:9c:94:e3:02:c8:c2:c0:6d:21:27:
5d:80:3f:be:f4:94:18:29:77:d9:ab:e9:33:85:3a:cd:9f:49:
01:bf:f8:c0:01:33:f9:ad:da:78:17:9d:f3:dc:79:a3:09:b4:
7e:ca:74:1d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MTFEODExMC8GA1UEBRMoNTgwNEQ5MzIwMjY3QURFM0VGQUQ1Njk1NTExNTg1RjZD
MzI1RTcwNDAeFw0yNjA5MTEwNzU4NDZaFw0yNjA5MTgwNzU4NDZaMBgxFjAUBgNV
BAMTDTZhYTNiNGI3LTc3YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDzHv2kYBPL72KXlN8LPO3/gV5LbizaT6Yh+4Du027UWWNuRi5K27yku20EMs4i
RUwBb10zg4YnVzt+NoFKuCcDT53eHQPv6tWkehn4i1qX5SFTTACX4HuCV5PRUaoa
gZ4spKjNXcxUMrUyjDK+3ymNuB5KgE0Onh2NFBWrvdVhWMmzjcX94s8FMKC49sP/
p/ryn6Rztc9+tq3YD8Ry0g46VdEsb6z6HEwuOsrEJwSFKntFL+hkIHhU0K5CSkV+
wPUSQ1Es39Kasb9Z8mzpEd++1dSlaQWkcSRCZ2o19Cev2LH6f/s78XEbl51/mI4W
hE9rlaPpmVm8ufvvo8fjn1lZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4DYyyhm9
Tph9RxQimdlYooq2gP4wHwYDVR0jBBgwFoAUWATZMgJnrePvrVaVURWF9sMl5wQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxMUQ4L0RDRTdCREUyMDMw
OTExRjE5Mjg5OTZEMzEzM0Q4QzY3L1dBVFpNZ0pucmVQdnJWYVZVUldGOXNNbDV3
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvV0FUWk1nSm5yZVB2clZhVlVSV0Y5c01sNXdRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx
MUQ4L0RDRTdCREUyMDMwOTExRjE5Mjg5OTZEMzEzM0Q4QzY3L1dBVFpNZ0pucmVQ
dnJWYVZVUldGOXNNbDV3US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBZSCH7tCiWmFUagHAYI/0P6pfXblETuEWGsPDMf50pejyy79a44XszOB3PvJti
GIBIIbMy8ILgWwehKun9gjFh6xYYJG5LACwlxjl/3Y9SrNpmYub4tQC7Ugj7ogUl
XDdK0HW6FdUrlB71JlU9Xz+7ANdZH/XEu9gxnV0ZcJTQHdqRh3fKD80m7x1o9IgK
Zwq/ckGnr/082SCNCZ5/78n728RZvT/Imq4w78p8zB5Jr1yiu6DbbUTjxcIG5nGj
BVVILXdvSBNk4BZGtHPLyZyU4wLIwsBtISddgD++9JQYKXfZq+kzhTrNn0kBv/jA
ATP5rdp4F53z3HmjCbR+ynQd
-----END CERTIFICATE-----
Generated at Fri Sep 11 15:22:03 2026 by rpki-client