$ rpki-client -vvf rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft File: WatjEmbskGVhP9Z3y9tP8TvvZEE.mft (raw, json) Hash identifier: zAPz/Q5h2P2wdqjKl9dQdVuP7fRcgIC41TgYdQlcq90= Subject key identifier: E3:2B:32:77:0A:0E:A7:C9:79:31:15:A0:84:D3:B8:36:FB:A8:10:37 Authority key identifier: 59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41 Certificate issuer: /CN=A9191010/serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441 Certificate serial: 1F38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft Manifest number: 1F38 Signing time: Sun 24 Aug 2025 15:59:33 +0000 Manifest this update: Sun 24 Aug 2025 15:59:33 +0000 Manifest next update: Sun 31 Aug 2025 15:59:33 +0000 Files and hashes: 1: WatjEmbskGVhP9Z3y9tP8TvvZEE.crl (hash: qZbquaN0H+mfrQghtNnAofR3iZ6RYnSoteV0jCfIuNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7992 (0x1f38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191010, serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441 Validity Not Before: Aug 24 15:59:33 2025 GMT Not After : Aug 31 15:59:33 2025 GMT Subject: CN=68ab36e5-3b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fa:df:7b:82:62:ec:be:be:b4:55:43:9d:33: 46:58:12:b3:b6:37:6d:63:05:23:70:23:40:e0:02: ff:88:ee:95:cd:f6:4f:12:3d:1f:9a:79:26:da:cf: 93:5f:82:9e:34:68:c9:8a:2f:c3:ad:de:66:80:f3: 1f:00:52:5c:26:6a:48:66:17:bc:b9:61:ca:3f:4c: e1:e4:34:23:79:fe:2c:dc:f6:ab:52:51:88:b8:a0: e0:cb:7e:5e:cd:74:a1:d4:fe:27:a5:6d:22:58:fb: 79:7d:dc:7c:b1:23:db:e7:27:af:3e:ae:2d:62:20: 48:ba:4e:60:e3:03:ac:0c:e4:df:96:bd:7d:c4:4a: 8c:d0:b3:ed:08:ea:0b:c3:64:0f:15:e0:18:c7:78: bd:de:a0:8f:b0:c7:df:b0:64:98:9b:87:61:df:01: 75:59:ef:ce:c2:bf:15:17:1e:9a:4a:8e:63:97:d6: 37:68:72:e2:7c:61:78:32:85:ec:d7:4e:35:e0:0f: 4c:e2:a4:12:35:a4:46:b6:22:35:c6:88:f2:ff:60: c5:bf:06:3f:41:2b:2b:47:83:6b:7b:d1:e5:de:fd: a5:a6:27:93:1c:14:bd:dd:1e:48:45:00:61:aa:8f: c2:5e:6e:f9:7a:0f:3c:30:eb:17:75:f2:1f:88:b3: 61:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2B:32:77:0A:0E:A7:C9:79:31:15:A0:84:D3:B8:36:FB:A8:10:37 X509v3 Authority Key Identifier: keyid:59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:c3:8a:58:79:9d:9a:d8:ab:4f:3b:77:e9:40:eb:49:0f:3c: 3d:74:81:c0:32:f6:92:ea:d3:d9:ee:8b:1e:db:8b:b2:87:6c: 7c:5f:51:7e:e8:ba:6a:c0:ec:db:61:78:1f:46:3d:8b:77:dc: 33:0a:b5:fa:1f:af:d9:d2:b0:8c:5c:c4:85:2b:66:47:9d:b4: 95:5e:5f:16:0a:18:35:2d:79:74:32:44:92:52:a2:d1:d0:dc: bf:62:4f:c9:f0:29:c0:60:5b:55:cc:26:40:d4:da:05:97:ea: b7:49:d2:06:60:6e:d6:a8:ce:25:cd:08:83:db:90:84:c1:9f: ee:29:00:3c:82:2b:7f:43:5a:30:0c:59:10:ee:dc:b6:44:ae: 6c:65:c9:3f:02:b9:a4:75:29:36:1b:ee:43:f6:56:60:cc:6e: 81:4c:8c:bc:98:b4:6e:d3:8c:55:b3:c7:b2:11:79:ce:11:24: a3:ca:1b:b5:ad:81:3b:ba:d0:f9:79:df:6d:49:f5:51:56:f6: 1e:10:4a:67:74:6b:6e:6c:db:86:b3:63:6d:2f:24:c4:f7:d6: d9:ad:96:cc:51:b7:69:bf:e9:f1:c6:cf:b4:a7:10:a3:0c:af: 3c:10:2e:2e:75:38:02:34:2f:49:72:71:f7:fa:6b:5f:37:a4: f4:79:78:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwMTAxMTAvBgNVBAUTKDU5QUI2MzEyNjZFQzkwNjU2MTNGRDY3N0NCREI0RkYx M0JFRjY0NDEwHhcNMjUwODI0MTU1OTMzWhcNMjUwODMxMTU1OTMzWjAYMRYwFAYD VQQDEw02OGFiMzZlNS0zYjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/rfe4Ji7L6+tFVDnTNGWBKztjdtYwUjcCNA4AL/iO6VzfZPEj0fmnkm2s+T X4KeNGjJii/Drd5mgPMfAFJcJmpIZhe8uWHKP0zh5DQjef4s3ParUlGIuKDgy35e zXSh1P4npW0iWPt5fdx8sSPb5yevPq4tYiBIuk5g4wOsDOTflr19xEqM0LPtCOoL w2QPFeAYx3i93qCPsMffsGSYm4dh3wF1We/Owr8VFx6aSo5jl9Y3aHLifGF4MoXs 10414A9M4qQSNaRGtiI1xojy/2DFvwY/QSsrR4Nre9Hl3v2lpieTHBS93R5IRQBh qo/CXm75eg88MOsXdfIfiLNhtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMrMncK DqfJeTEVoITTuDb7qBA3MB8GA1UdIwQYMBaAFFmrYxJm7JBlYT/Wd8vbT/E772RB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAxMC8wOUU1Nzc0NDU1 NjgxMUU2QjMzMjk4NTVDNEY5QUUwMi9XYXRqRW1ic2tHVmhQOVozeTl0UDhUdnZa RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhdGpFbWJza0dWaFA5WjN5OXRQOFR2dlpFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTAxMC8wOUU1Nzc0NDU1NjgxMUU2QjMzMjk4NTVDNEY5QUUwMi9XYXRqRW1ic2tH VmhQOVozeTl0UDhUdnZaRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXw4pYeZ2a2KtPO3fpQOtJDzw9dIHAMvaS6tPZ7ose24uyh2x8X1F+ 6LpqwOzbYXgfRj2Ld9wzCrX6H6/Z0rCMXMSFK2ZHnbSVXl8WChg1LXl0MkSSUqLR 0Ny/Yk/J8CnAYFtVzCZA1NoFl+q3SdIGYG7WqM4lzQiD25CEwZ/uKQA8git/Q1ow DFkQ7ty2RK5sZck/ArmkdSk2G+5D9lZgzG6BTIy8mLRu04xVs8eyEXnOESSjyhu1 rYE7utD5ed9tSfVRVvYeEEpndGtubNuGs2NtLyTE99bZrZbMUbdpv+nxxs+0pxCj DK88EC4udTgCNC9JcnH3+mtfN6T0eXiQ -----END CERTIFICATE-----Generated at Sun Aug 24 21:40:50 2025 by rpki-client