$ rpki-client -vvf rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft File: WatjEmbskGVhP9Z3y9tP8TvvZEE.mft (raw, json) Hash identifier: Zob0AcY8juzwSWaEZmg4BIoISaYLcUC/gp4RD3sVU5g= Subject key identifier: C2:C1:F9:93:99:FD:02:1C:80:3D:EF:5B:A6:82:D9:8F:3B:BC:1F:13 Authority key identifier: 59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41 Certificate issuer: /CN=A9191010/serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441 Certificate serial: 1F5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft Manifest number: 1F5D Signing time: Sun 02 Nov 2025 16:01:10 +0000 Manifest this update: Sun 02 Nov 2025 16:01:10 +0000 Manifest next update: Sun 09 Nov 2025 16:01:10 +0000 Files and hashes: 1: WatjEmbskGVhP9Z3y9tP8TvvZEE.crl (hash: fM86gxP71ghMmXVhCnVTSgq3K3Z/nnRANbQirXu2Ok8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8029 (0x1f5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191010, serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441 Validity Not Before: Nov 2 16:01:10 2025 GMT Not After : Nov 9 16:01:10 2025 GMT Subject: CN=69078046-2dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ed:ec:c4:16:ad:1d:44:2f:aa:29:55:ce:38: 4a:73:d7:07:b9:96:91:2b:0d:71:c0:4c:f9:de:33: cc:90:1c:a8:2b:bf:3d:c5:38:04:33:88:90:15:a7: 7c:62:d0:ef:13:d2:61:59:e3:a5:4a:c3:ab:84:64: 91:5c:60:6e:03:9e:b0:b9:9d:bd:97:74:12:12:a5: 76:9a:d4:59:a3:e9:fe:47:44:91:9e:66:d9:b5:fc: d5:1c:94:40:ae:17:f2:9b:b8:0c:61:22:f6:0c:80: b2:7e:21:5b:72:9e:82:7d:d0:33:2a:51:74:29:54: 41:9e:b4:f5:72:72:d6:ad:d2:08:52:dd:d6:ac:67: 5f:6b:98:a8:27:fb:00:5e:1c:18:53:d5:da:c0:bc: 19:f3:7b:07:cb:df:61:3a:47:94:f0:28:f3:71:2d: e1:06:d9:73:2f:94:57:3b:b9:37:d2:66:5c:1d:1a: 75:46:38:5a:b3:f3:a2:1f:0c:0e:b5:56:5e:79:20: a8:3f:bf:1f:78:fc:52:cc:7b:39:ed:ab:12:2b:a1: 70:f0:cc:da:3b:9d:f5:b6:05:93:ce:a5:cc:1c:be: 28:9f:b8:96:d6:67:eb:1b:82:60:ee:46:3c:2d:e9: 7a:82:9d:cb:3f:37:6f:11:2f:5e:49:a6:17:ad:a6: e6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C1:F9:93:99:FD:02:1C:80:3D:EF:5B:A6:82:D9:8F:3B:BC:1F:13 X509v3 Authority Key Identifier: keyid:59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:3d:60:86:92:2d:da:d1:01:e0:35:8b:25:a9:39:bd:a3:5f: 95:95:ad:da:79:aa:7f:62:15:c0:c2:e8:a0:a4:6b:83:b4:c6: 9a:f5:79:4d:37:a6:02:7e:e2:e1:c1:fe:3b:13:e6:77:ab:e9: 3a:24:81:30:b0:99:08:a9:c7:44:fa:69:f2:3e:75:0e:a4:7f: 52:2e:7c:00:db:c4:33:96:e8:40:3e:58:70:11:28:13:8e:1b: 60:92:9d:98:d3:d0:21:df:c7:35:63:8e:1d:b8:74:46:2a:36: 32:a1:41:10:e7:ab:f2:5f:cb:0c:a3:9f:f4:60:51:49:72:12: c8:c7:df:e8:33:9e:79:a6:fb:76:5e:16:8b:5b:c3:13:73:8c: e3:c9:c4:20:25:61:e9:15:7c:14:1d:b6:4e:f6:a1:27:07:02: ca:d5:9b:58:07:db:78:1e:0a:2f:39:38:2d:8a:b0:f3:ea:c0: cf:27:d3:cb:cc:9b:88:f0:70:47:63:7c:70:18:40:43:2a:b5: 6d:c9:43:ed:0d:df:7f:a3:8a:9c:e8:f6:aa:be:39:35:73:9d: a3:91:5f:bd:a2:75:47:71:21:da:8b:c7:7f:34:3f:20:3f:28: 02:c9:f9:c9:38:d2:59:5d:19:12:25:be:64:3d:d9:8f:da:48: c1:dd:1f:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwMTAxMTAvBgNVBAUTKDU5QUI2MzEyNjZFQzkwNjU2MTNGRDY3N0NCREI0RkYx M0JFRjY0NDEwHhcNMjUxMTAyMTYwMTEwWhcNMjUxMTA5MTYwMTEwWjAYMRYwFAYD VQQDEw02OTA3ODA0Ni0yZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0O3sxBatHUQvqilVzjhKc9cHuZaRKw1xwEz53jPMkByoK789xTgEM4iQFad8 YtDvE9JhWeOlSsOrhGSRXGBuA56wuZ29l3QSEqV2mtRZo+n+R0SRnmbZtfzVHJRA rhfym7gMYSL2DICyfiFbcp6CfdAzKlF0KVRBnrT1cnLWrdIIUt3WrGdfa5ioJ/sA XhwYU9XawLwZ83sHy99hOkeU8CjzcS3hBtlzL5RXO7k30mZcHRp1Rjhas/OiHwwO tVZeeSCoP78fePxSzHs57asSK6Fw8MzaO531tgWTzqXMHL4on7iW1mfrG4Jg7kY8 Lel6gp3LPzdvES9eSaYXrabmtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLB+ZOZ /QIcgD3vW6aC2Y87vB8TMB8GA1UdIwQYMBaAFFmrYxJm7JBlYT/Wd8vbT/E772RB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAxMC8wOUU1Nzc0NDU1 NjgxMUU2QjMzMjk4NTVDNEY5QUUwMi9XYXRqRW1ic2tHVmhQOVozeTl0UDhUdnZa RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhdGpFbWJza0dWaFA5WjN5OXRQOFR2dlpFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTAxMC8wOUU1Nzc0NDU1NjgxMUU2QjMzMjk4NTVDNEY5QUUwMi9XYXRqRW1ic2tH VmhQOVozeTl0UDhUdnZaRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoPWCGki3a0QHgNYslqTm9o1+Vla3aeap/YhXAwuigpGuDtMaa9XlN N6YCfuLhwf47E+Z3q+k6JIEwsJkIqcdE+mnyPnUOpH9SLnwA28QzluhAPlhwESgT jhtgkp2Y09Ah38c1Y44duHRGKjYyoUEQ56vyX8sMo5/0YFFJchLIx9/oM555pvt2 XhaLW8MTc4zjycQgJWHpFXwUHbZO9qEnBwLK1ZtYB9t4HgovOTgtirDz6sDPJ9PL zJuI8HBHY3xwGEBDKrVtyUPtDd9/o4qc6Paqvjk1c52jkV+9onVHcSHai8d/ND8g PygCyfnJONJZXRkSJb5kPdmP2kjB3R9Z -----END CERTIFICATE-----Generated at Tue Nov 4 16:32:42 2025 by rpki-client