$ rpki-client -vvf rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft File: WatjEmbskGVhP9Z3y9tP8TvvZEE.mft (raw, json) Hash identifier: Ph2miLQ28KZ0wbZHicb3hBKyPbErb+hH1dumsfIO84I= Subject key identifier: 8D:0C:8A:9F:13:25:A7:60:7F:20:3E:57:37:CC:68:0F:5E:81:3A:B5 Authority key identifier: 59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41 Certificate issuer: /CN=A9191010/serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441 Certificate serial: 1F15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft Manifest number: 1F15 Signing time: Mon 16 Jun 2025 16:05:34 +0000 Manifest this update: Mon 16 Jun 2025 16:05:34 +0000 Manifest next update: Mon 23 Jun 2025 16:05:34 +0000 Files and hashes: 1: WatjEmbskGVhP9Z3y9tP8TvvZEE.crl (hash: ZWUdRHXQgIoFxB/ewoq32uhfrCn98zlcTy/NX3d7aqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 16:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7957 (0x1f15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191010, serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441 Validity Not Before: Jun 16 16:05:34 2025 GMT Not After : Jun 23 16:05:34 2025 GMT Subject: CN=685040ce-48aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e1:46:84:b7:e3:13:ad:00:32:a4:10:3e:9d: 14:a6:74:67:d2:64:48:57:58:8e:36:32:50:4e:dc: af:74:04:c0:83:34:e9:e7:ab:d1:8b:d8:28:66:57: ff:db:65:1d:a4:0c:80:48:0d:6f:95:7a:5c:1e:f1: 43:1f:68:40:8c:bd:f3:fb:98:9f:c8:0d:77:32:f7: 4d:e5:e1:22:81:51:a6:8a:9a:1b:05:ea:15:d0:13: 49:6d:a6:5c:d5:e2:f5:55:68:1e:30:e1:1a:fc:70: fc:33:78:dd:a1:91:e6:5c:99:c5:11:88:44:70:0c: dc:79:6f:e4:67:20:f5:65:53:89:b9:18:9d:8f:ee: 89:07:25:a2:e0:11:6f:8d:1b:bf:b2:de:26:89:81: 8e:bb:79:06:aa:d8:de:aa:de:0d:6b:c0:ad:17:18: 57:08:dd:a5:0f:28:58:3c:b3:4e:a3:32:3f:14:cd: 5c:82:e4:74:f4:5f:73:0d:ff:43:d2:a9:c7:22:e0: 7f:27:9c:43:2b:74:e1:82:3e:4c:6b:da:d2:0b:79: 1a:18:5d:bb:56:d4:b4:63:70:f1:0c:e1:df:84:8d: 0b:7d:36:a6:8c:59:d5:cb:3f:24:9c:5f:d6:83:d7: b2:f4:e4:6b:d9:88:1d:32:f7:5b:57:fc:79:99:b8: 88:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0C:8A:9F:13:25:A7:60:7F:20:3E:57:37:CC:68:0F:5E:81:3A:B5 X509v3 Authority Key Identifier: keyid:59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:9b:0e:5b:66:91:a4:c1:d0:6e:2c:af:7b:34:06:93:ca:3d: f2:42:93:7d:32:0f:1f:95:09:73:48:24:54:4d:f7:ce:82:11: 14:45:23:fd:d1:00:a8:af:dd:b9:46:3f:28:c3:48:21:7b:aa: 0c:fe:d9:ac:23:1f:3c:28:a1:47:d0:2a:e5:35:d1:bf:20:3e: 71:97:e0:71:87:26:bf:11:88:f5:a1:29:b5:5c:88:bf:3a:95: 3e:94:34:21:4d:6e:ca:78:49:e5:47:57:db:39:05:52:0e:07: ab:d7:1e:b5:72:10:71:5e:90:7d:ab:c0:31:bf:34:e2:d1:ff: 91:50:ee:e0:b1:bf:09:68:28:0c:bc:f9:88:29:0f:c5:73:a8: f6:03:85:8a:2b:00:e8:76:ea:b7:a3:57:84:be:81:7b:7c:15: ad:28:19:f2:67:0a:85:4a:d9:41:3b:fb:79:d3:6f:94:dd:c9: cb:1f:7e:57:0c:ff:71:74:fc:a9:8b:c2:e4:32:fd:98:e8:5b: a6:90:5b:d3:8c:36:ca:c9:00:76:7d:4b:a9:85:62:80:4c:0d: 49:7c:d9:a6:37:4c:7f:e8:2c:f3:41:66:6f:8e:32:bd:f9:eb: 34:24:81:3a:5a:2f:39:e0:51:2f:d4:58:63:3d:2a:25:bc:4e: 30:ec:fe:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwMTAxMTAvBgNVBAUTKDU5QUI2MzEyNjZFQzkwNjU2MTNGRDY3N0NCREI0RkYx M0JFRjY0NDEwHhcNMjUwNjE2MTYwNTM0WhcNMjUwNjIzMTYwNTM0WjAYMRYwFAYD VQQDEw02ODUwNDBjZS00OGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuFGhLfjE60AMqQQPp0UpnRn0mRIV1iONjJQTtyvdATAgzTp56vRi9goZlf/ 22UdpAyASA1vlXpcHvFDH2hAjL3z+5ifyA13MvdN5eEigVGmipobBeoV0BNJbaZc 1eL1VWgeMOEa/HD8M3jdoZHmXJnFEYhEcAzceW/kZyD1ZVOJuRidj+6JByWi4BFv jRu/st4miYGOu3kGqtjeqt4Na8CtFxhXCN2lDyhYPLNOozI/FM1cguR09F9zDf9D 0qnHIuB/J5xDK3Thgj5Ma9rSC3kaGF27VtS0Y3DxDOHfhI0LfTamjFnVyz8knF/W g9ey9ORr2YgdMvdbV/x5mbiICQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0Mip8T JadgfyA+VzfMaA9egTq1MB8GA1UdIwQYMBaAFFmrYxJm7JBlYT/Wd8vbT/E772RB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAxMC8wOUU1Nzc0NDU1 NjgxMUU2QjMzMjk4NTVDNEY5QUUwMi9XYXRqRW1ic2tHVmhQOVozeTl0UDhUdnZa RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhdGpFbWJza0dWaFA5WjN5OXRQOFR2dlpFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTAxMC8wOUU1Nzc0NDU1NjgxMUU2QjMzMjk4NTVDNEY5QUUwMi9XYXRqRW1ic2tH VmhQOVozeTl0UDhUdnZaRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDmw5bZpGkwdBuLK97NAaTyj3yQpN9Mg8flQlzSCRUTffOghEURSP9 0QCor925Rj8ow0ghe6oM/tmsIx88KKFH0CrlNdG/ID5xl+Bxhya/EYj1oSm1XIi/ OpU+lDQhTW7KeEnlR1fbOQVSDger1x61chBxXpB9q8AxvzTi0f+RUO7gsb8JaCgM vPmIKQ/Fc6j2A4WKKwDoduq3o1eEvoF7fBWtKBnyZwqFStlBO/t502+U3cnLH35X DP9xdPypi8LkMv2Y6FumkFvTjDbKyQB2fUuphWKATA1JfNmmN0x/6CzzQWZvjjK9 +es0JIE6Wi854FEv1FhjPSolvE4w7P7O -----END CERTIFICATE-----Generated at Tue Jun 17 20:14:58 2025 by rpki-client