
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft
File: WatjEmbskGVhP9Z3y9tP8TvvZEE.mft (raw, json)
Hash identifier: 9fFeOTy384I4YR5tjo4nZH2o+rEaklzkcA2+KtfipdU=
Subject key identifier: 8E:6E:5B:1F:7C:78:32:09:B6:A1:EC:3D:7D:3C:52:1B:CA:F5:DB:FE
Authority key identifier: 59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41
Certificate issuer: /CN=A9191010/serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441
Certificate serial: 1FB5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft
Manifest number: 1FB5
Signing time: Thu 16 Apr 2026 15:56:50 +0000
Manifest this update: Thu 16 Apr 2026 15:56:49 +0000
Manifest next update: Thu 23 Apr 2026 15:56:49 +0000
Files and hashes: 1: WatjEmbskGVhP9Z3y9tP8TvvZEE.crl (hash: NK/v+E/b8VH/yzJ/+ziabwSSKQzkWjk+kpxaiZfNLmk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl
rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8117 (0x1fb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191010, serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441
Validity
Not Before: Apr 16 15:56:49 2026 GMT
Not After : Apr 23 15:56:49 2026 GMT
Subject: CN=69e106c1-641b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:1c:c2:0c:82:01:dc:16:a7:40:29:9d:91:
87:55:66:cb:c0:ae:eb:3f:cf:b8:ea:d8:9f:f1:8e:
2a:c3:dc:0a:bd:16:6e:17:47:d8:c0:0f:19:bc:71:
62:a9:ac:d2:ae:6a:4a:48:17:76:e1:27:6a:35:f5:
7e:a4:bd:66:8d:59:6c:86:0d:3f:a6:c7:ca:7d:69:
7f:5c:60:ea:e1:c6:de:9b:3d:e2:a8:35:8b:44:80:
42:da:f8:61:c3:d8:ca:84:39:db:9e:59:bb:6e:1e:
ba:ca:0a:d4:30:e0:f5:24:b5:20:f3:dc:8a:48:58:
94:d9:2a:2f:5e:7a:2d:54:c9:8f:34:0e:b0:f2:55:
ef:cf:0f:11:82:c9:91:69:a9:b6:c4:34:1a:b9:08:
4b:c0:f9:16:32:b0:77:0b:d4:77:18:59:e9:b0:73:
3b:9f:6d:2f:87:98:2c:24:0a:fb:cb:03:33:4a:3e:
a5:92:53:75:37:b4:6f:32:a5:2b:0b:db:70:62:ab:
7a:1f:1c:49:c2:41:00:36:58:b6:b6:0a:73:d2:b5:
c8:ac:a5:b8:3f:d4:f5:63:b3:40:09:9c:82:06:ab:
0b:3d:32:43:20:69:b6:63:31:a2:0f:c5:1d:c6:c6:
07:69:dc:41:32:f7:0c:3c:4e:9a:01:89:04:c6:33:
7d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6E:5B:1F:7C:78:32:09:B6:A1:EC:3D:7D:3C:52:1B:CA:F5:DB:FE
X509v3 Authority Key Identifier:
keyid:59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:ab:1f:39:aa:0a:ec:0c:a9:6f:68:49:01:10:f1:83:f1:41:
43:01:bc:1c:aa:5c:c7:00:13:d7:22:fa:90:d7:04:d1:5d:73:
59:34:f3:59:bc:a6:37:c4:39:c8:af:d7:4e:5b:2b:8e:ec:ea:
2f:cb:56:21:d7:63:6f:1d:ba:00:a0:ed:84:26:01:21:b1:e9:
c3:48:34:f2:a3:83:44:e3:fd:0e:c9:9e:fd:8c:fd:46:49:18:
57:86:14:8f:c3:fa:e2:78:0b:70:82:d8:c6:47:ec:c0:79:88:
58:4f:a5:47:05:fa:00:d5:10:4e:47:bb:dd:da:ae:09:61:31:
86:56:c2:aa:17:42:60:5e:a8:f0:b8:09:20:07:3d:a3:1a:49:
6e:cd:cb:ff:8c:7f:fb:e9:e9:e1:13:21:bc:11:35:15:82:6a:
09:6a:f3:f2:cd:80:78:b3:1f:65:84:36:85:1c:aa:cf:8d:1d:
7a:34:c7:aa:98:eb:c7:d0:8d:7d:f8:9d:bb:8a:ee:45:4d:dd:
08:23:2e:d3:00:c2:3c:3b:5e:2d:e2:1a:c8:8d:6c:f2:36:c8:
49:62:fe:aa:b1:89:83:27:04:7a:23:7a:4f:b3:7d:e8:a0:35:
3c:f3:a3:2f:09:f2:6f:86:dc:60:a9:39:5d:36:0c:89:9d:e2:
9b:33:60:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:47 2026 by rpki-client