$ rpki-client -vvf rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft File: WATZMgJnrePvrVaVURWF9sMl5wQ.mft (raw, json) Hash identifier: up3KYebfzY0/XJ2WmfDmlgr4vffqClzcSWPYS6rKook= Subject key identifier: 29:BC:28:D9:5E:7D:47:69:9F:0A:29:5D:D2:A2:66:E2:B1:42:F1:C7 Authority key identifier: 58:04:D9:32:02:67:AD:E3:EF:AD:56:95:51:15:85:F6:C3:25:E7:04 Certificate issuer: /CN=A91811D8/serialNumber=5804D9320267ADE3EFAD5695511585F6C325E704 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WATZMgJnrePvrVaVURWF9sMl5wQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft Manifest number: 10 Signing time: Sun 01 Mar 2026 10:36:54 +0000 Manifest this update: Sun 01 Mar 2026 10:36:54 +0000 Manifest next update: Sun 08 Mar 2026 10:36:54 +0000 Files and hashes: 1: WATZMgJnrePvrVaVURWF9sMl5wQ.crl (hash: 8bCAHRIgmiN6RRpoaoOJkY480Xe//UIqhdNx3Lok+d8=) 2: 35672430030A11F19BB01507153D8C67.roa (hash: ZqkwJDczIP3SqWXgDmi1JIlpUn8khhS031ocDNHD7iI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.crl rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WATZMgJnrePvrVaVURWF9sMl5wQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91811D8, serialNumber=5804D9320267ADE3EFAD5695511585F6C325E704 Validity Not Before: Mar 1 10:36:54 2026 GMT Not After : Mar 8 10:36:54 2026 GMT Subject: CN=69a416c6-7335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:20:93:95:55:93:01:bc:c4:e8:bb:3b:b0:c6: 5d:37:83:25:25:31:fe:21:fe:6b:26:64:a7:7d:3f: a0:4c:90:e5:e1:9b:7e:ad:2f:df:27:72:4f:10:1a: 10:9f:1c:66:bd:38:08:80:22:77:fd:4e:0d:c9:05: e7:41:87:c5:68:0d:7a:b5:b1:42:39:23:ff:68:cb: af:b7:6b:bd:ff:2c:83:38:e0:08:a8:10:c7:1f:11: 5a:f3:d4:fe:c2:06:49:53:0a:f3:ca:60:0d:f0:54: 92:b1:66:a0:db:f0:45:36:ab:a2:d1:81:1d:a5:b3: 43:53:a1:ed:a2:3f:89:f3:b9:ee:54:93:15:a6:1c: 53:f1:28:a2:af:41:2f:38:d3:01:bd:57:67:75:00: 95:be:fc:62:8f:aa:f9:ad:eb:ce:85:87:98:28:80: d7:3b:d3:66:ea:41:cc:eb:a1:e3:fe:b0:c1:47:e3: 83:53:a7:51:7a:56:e2:7e:26:d1:43:4f:ce:02:68: 7f:38:ed:93:4f:2c:ac:fb:af:42:29:cf:9c:bc:f4: 3e:ca:75:98:73:fe:c8:4c:de:da:59:a9:bb:1c:c3: 58:6d:4a:77:a6:48:fe:8f:5a:7f:17:5b:db:aa:ab: d0:50:00:b3:39:4d:46:55:23:e0:30:0c:6a:b1:78: bd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BC:28:D9:5E:7D:47:69:9F:0A:29:5D:D2:A2:66:E2:B1:42:F1:C7 X509v3 Authority Key Identifier: keyid:58:04:D9:32:02:67:AD:E3:EF:AD:56:95:51:15:85:F6:C3:25:E7:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WATZMgJnrePvrVaVURWF9sMl5wQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:3f:33:56:0e:2c:43:a2:b4:a4:fa:3d:f4:25:16:c8:1c:03: a7:09:ad:26:40:a0:f6:29:fb:d1:d9:b5:fb:b7:22:ec:f7:30: 1a:44:a6:27:dc:32:58:ea:56:26:20:5c:f9:b9:34:20:8c:c7: 1f:d4:82:d2:08:02:34:77:f8:77:fe:2c:b5:46:d7:07:ac:b2: eb:b8:68:e7:18:6e:54:6f:85:dd:ec:06:fc:a4:f7:a3:5f:a7: cc:14:c2:2a:12:0c:45:5a:7d:de:2d:1f:3b:18:f6:1b:03:43: e9:b2:6e:40:41:aa:10:c2:19:ac:5c:0f:6c:71:27:b8:f1:ca: 03:62:f4:d3:0c:cc:64:93:9b:2a:59:4a:a3:17:de:1b:ee:84: ec:b2:fe:d0:b2:06:e0:51:56:53:55:f3:c5:08:17:db:21:8d: f4:4b:84:64:7d:64:a7:2c:2e:a7:c9:4b:3b:ff:28:41:bb:05: e2:4d:21:19:ec:b3:39:46:f7:fd:b6:65:4a:86:ff:be:95:49: 20:3c:d9:dc:17:09:fb:73:e5:34:80:9d:1b:c2:33:a3:37:75: 3c:38:c5:be:cf:63:13:f2:f2:65:49:27:7a:11:ff:32:8c:45: f4:32:10:6c:35:28:5e:f4:55:77:21:bb:f4:42:3f:26:36:d2: 68:c9:ef:27 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MTFEODExMC8GA1UEBRMoNTgwNEQ5MzIwMjY3QURFM0VGQUQ1Njk1NTExNTg1RjZD MzI1RTcwNDAeFw0yNjAzMDExMDM2NTRaFw0yNjAzMDgxMDM2NTRaMBgxFjAUBgNV BAMTDTY5YTQxNmM2LTczMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIIJOVVZMBvMTouzuwxl03gyUlMf4h/msmZKd9P6BMkOXhm36tL98nck8QGhCf HGa9OAiAInf9Tg3JBedBh8VoDXq1sUI5I/9oy6+3a73/LIM44AioEMcfEVrz1P7C BklTCvPKYA3wVJKxZqDb8EU2q6LRgR2ls0NToe2iP4nzue5UkxWmHFPxKKKvQS84 0wG9V2d1AJW+/GKPqvmt686Fh5gogNc702bqQczroeP+sMFH44NTp1F6VuJ+JtFD T84CaH847ZNPLKz7r0Ipz5y89D7KdZhz/shM3tpZqbscw1htSnemSP6PWn8XW9uq q9BQALM5TUZVI+AwDGqxeL1hAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKbwo2V59 R2mfCild0qJm4rFC8ccwHwYDVR0jBBgwFoAUWATZMgJnrePvrVaVURWF9sMl5wQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxMUQ4L0RDRTdCREUyMDMw OTExRjE5Mjg5OTZEMzEzM0Q4QzY3L1dBVFpNZ0pucmVQdnJWYVZVUldGOXNNbDV3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV0FUWk1nSm5yZVB2clZhVlVSV0Y5c01sNXdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx MUQ4L0RDRTdCREUyMDMwOTExRjE5Mjg5OTZEMzEzM0Q4QzY3L1dBVFpNZ0pucmVQ dnJWYVZVUldGOXNNbDV3US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQANPzNWDixDorSk+j30JRbIHAOnCa0mQKD2KfvR2bX7tyLs9zAaRKYn3DJY6lYm IFz5uTQgjMcf1ILSCAI0d/h3/iy1RtcHrLLruGjnGG5Ub4Xd7Ab8pPejX6fMFMIq EgxFWn3eLR87GPYbA0Ppsm5AQaoQwhmsXA9scSe48coDYvTTDMxkk5sqWUqjF94b 7oTssv7QsgbgUVZTVfPFCBfbIY30S4RkfWSnLC6nyUs7/yhBuwXiTSEZ7LM5Rvf9 tmVKhv++lUkgPNncFwn7c+U0gJ0bwjOjN3U8OMW+z2MT8vJlSSd6Ef8yjEX0MhBs NShe9FV3Ibv0Qj8mNtJoye8n -----END CERTIFICATE-----Generated at Mon Mar 2 16:39:49 2026 by rpki-client