$ rpki-client -vvf rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft File: WATZMgJnrePvrVaVURWF9sMl5wQ.mft (raw, json) Hash identifier: TVR/YKcrf6P97Mg3AXqMiQEWhcxlykWHdCc0fNfbgxU= Subject key identifier: C4:CE:F2:98:6E:CA:E7:29:C6:7A:D2:60:5F:06:C1:DA:E0:A5:F9:6D Authority key identifier: 58:04:D9:32:02:67:AD:E3:EF:AD:56:95:51:15:85:F6:C3:25:E7:04 Certificate issuer: /CN=A91811D8/serialNumber=5804D9320267ADE3EFAD5695511585F6C325E704 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WATZMgJnrePvrVaVURWF9sMl5wQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft Manifest number: 1C Signing time: Wed 25 Mar 2026 08:08:44 +0000 Manifest this update: Wed 25 Mar 2026 08:08:44 +0000 Manifest next update: Wed 01 Apr 2026 08:08:44 +0000 Files and hashes: 1: WATZMgJnrePvrVaVURWF9sMl5wQ.crl (hash: a9O7f+F4spDH/rHqwNFGXzHes4ojnJV5s7Xhgg9dHf0=) 2: 35672430030A11F19BB01507153D8C67.roa (hash: ZqkwJDczIP3SqWXgDmi1JIlpUn8khhS031ocDNHD7iI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.crl rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WATZMgJnrePvrVaVURWF9sMl5wQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91811D8, serialNumber=5804D9320267ADE3EFAD5695511585F6C325E704 Validity Not Before: Mar 25 08:08:44 2026 GMT Not After : Apr 1 08:08:44 2026 GMT Subject: CN=69c3980c-836c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:63:1c:5c:f4:31:1f:0a:5b:fd:fd:68:89:62: 08:66:c4:c3:eb:a8:2f:be:62:d9:10:de:81:20:57: 29:e5:9d:72:03:c7:07:95:3d:f4:c8:a6:e7:f1:b9: 9f:42:6c:02:8d:8e:44:31:71:2f:df:37:d3:05:09: 7c:0a:fd:07:63:66:8d:28:af:bd:3e:73:7f:2f:61: bb:b2:e4:76:bc:66:38:5c:92:f0:de:eb:ba:85:25: d1:54:b7:37:11:96:ce:a1:d9:73:e6:9c:d2:f0:45: e5:e2:c4:c3:a5:b2:a0:eb:d0:7d:4e:81:b5:94:20: 9c:de:34:42:16:cb:61:5e:2e:72:9a:68:48:63:5b: e3:29:b5:43:3b:d8:fc:df:b1:d0:90:cf:54:20:f4: f8:9b:05:61:a6:22:52:70:b2:df:f4:95:a6:da:1a: 1c:99:e6:a3:28:1f:df:b4:6b:6a:50:16:0a:1b:fc: 15:64:62:2c:ba:af:2c:fa:f3:5f:82:8f:ab:c4:83: 31:92:37:58:ce:7d:4b:0d:8b:51:0f:c0:d4:29:25: 27:0d:56:2c:72:4b:5e:28:1b:8b:cc:cf:09:d0:8c: dd:95:fd:f7:9f:f8:39:da:98:6c:be:73:ae:39:0d: 92:f2:86:01:42:28:b8:76:c5:02:fd:47:9b:71:47: 46:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CE:F2:98:6E:CA:E7:29:C6:7A:D2:60:5F:06:C1:DA:E0:A5:F9:6D X509v3 Authority Key Identifier: keyid:58:04:D9:32:02:67:AD:E3:EF:AD:56:95:51:15:85:F6:C3:25:E7:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WATZMgJnrePvrVaVURWF9sMl5wQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:bd:3c:b4:a3:16:19:8c:94:df:4a:91:5b:c7:ff:8d:46:14: b5:55:a4:83:65:22:92:3a:56:76:68:03:0c:14:d9:cf:72:44: c7:7d:9e:67:8d:37:a4:5b:75:e3:d5:4b:22:40:66:61:81:fc: c0:b3:ea:d1:b2:40:19:38:ec:12:58:12:9f:30:04:83:6b:77: 39:aa:44:bd:58:3c:ae:2f:9e:33:11:90:e9:8d:f7:56:a4:c6: d9:3f:4e:11:0f:3d:b6:00:38:1d:a1:a9:35:c3:cb:1b:36:d4: 02:7d:6c:94:64:8b:65:92:af:5a:72:6e:db:e8:7f:90:f5:7d: 00:d1:23:01:ed:78:12:06:ae:01:63:ed:c4:fd:e9:1a:09:bc: 65:e8:d9:de:ed:79:65:5d:d3:94:00:88:78:90:f1:f0:a1:6e: ea:ad:f1:75:4b:81:c1:6f:25:0e:8e:d7:e6:cd:ad:46:e9:b1: 2f:cd:d0:15:75:87:a3:33:91:00:33:88:62:a7:f3:70:ce:e8: 17:f8:78:8e:5f:70:9f:a5:f3:40:e6:53:29:98:6b:89:c3:73: 73:a9:1f:c0:95:4f:57:fd:bf:50:19:d3:8b:00:68:70:cd:a0: d4:c9:2c:43:cb:c9:3d:56:08:c5:45:48:bb:11:26:ea:dc:5f: a3:12:bb:7c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MTFEODExMC8GA1UEBRMoNTgwNEQ5MzIwMjY3QURFM0VGQUQ1Njk1NTExNTg1RjZD MzI1RTcwNDAeFw0yNjAzMjUwODA4NDRaFw0yNjA0MDEwODA4NDRaMBgxFjAUBgNV BAMTDTY5YzM5ODBjLTgzNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPYxxc9DEfClv9/WiJYghmxMPrqC++YtkQ3oEgVynlnXIDxweVPfTIpufxuZ9C bAKNjkQxcS/fN9MFCXwK/QdjZo0or70+c38vYbuy5Ha8ZjhckvDe67qFJdFUtzcR ls6h2XPmnNLwReXixMOlsqDr0H1OgbWUIJzeNEIWy2FeLnKaaEhjW+MptUM72Pzf sdCQz1Qg9PibBWGmIlJwst/0labaGhyZ5qMoH9+0a2pQFgob/BVkYiy6ryz681+C j6vEgzGSN1jOfUsNi1EPwNQpJScNVixyS14oG4vMzwnQjN2V/fef+DnamGy+c645 DZLyhgFCKLh2xQL9R5txR0a5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxM7ymG7K 5ynGetJgXwbB2uCl+W0wHwYDVR0jBBgwFoAUWATZMgJnrePvrVaVURWF9sMl5wQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxMUQ4L0RDRTdCREUyMDMw OTExRjE5Mjg5OTZEMzEzM0Q4QzY3L1dBVFpNZ0pucmVQdnJWYVZVUldGOXNNbDV3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV0FUWk1nSm5yZVB2clZhVlVSV0Y5c01sNXdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx MUQ4L0RDRTdCREUyMDMwOTExRjE5Mjg5OTZEMzEzM0Q4QzY3L1dBVFpNZ0pucmVQ dnJWYVZVUldGOXNNbDV3US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAbvTy0oxYZjJTfSpFbx/+NRhS1VaSDZSKSOlZ2aAMMFNnPckTHfZ5njTekW3Xj 1UsiQGZhgfzAs+rRskAZOOwSWBKfMASDa3c5qkS9WDyuL54zEZDpjfdWpMbZP04R Dz22ADgdoak1w8sbNtQCfWyUZItlkq9acm7b6H+Q9X0A0SMB7XgSBq4BY+3E/eka Cbxl6Nne7XllXdOUAIh4kPHwoW7qrfF1S4HBbyUOjtfmza1G6bEvzdAVdYejM5EA M4hip/NwzugX+HiOX3CfpfNA5lMpmGuJw3NzqR/AlU9X/b9QGdOLAGhwzaDUySxD y8k9VgjFRUi7ESbq3F+jErt8 -----END CERTIFICATE-----Generated at Fri Mar 27 00:16:18 2026 by rpki-client