$ rpki-client -vvf rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft File: WATZMgJnrePvrVaVURWF9sMl5wQ.mft (raw, json) Hash identifier: xM5u5rKq0OHrbDtxEe0TgtxJgErobh7YIwUN3G/zpKw= Subject key identifier: 16:98:E1:6B:16:90:B7:4B:A4:E0:7C:71:23:FF:77:DB:C5:39:D8:13 Authority key identifier: 58:04:D9:32:02:67:AD:E3:EF:AD:56:95:51:15:85:F6:C3:25:E7:04 Certificate issuer: /CN=A91811D8/serialNumber=5804D9320267ADE3EFAD5695511585F6C325E704 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WATZMgJnrePvrVaVURWF9sMl5wQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft Manifest number: 35 Signing time: Wed 13 May 2026 08:47:47 +0000 Manifest this update: Wed 13 May 2026 08:47:46 +0000 Manifest next update: Wed 20 May 2026 08:47:46 +0000 Files and hashes: 1: WATZMgJnrePvrVaVURWF9sMl5wQ.crl (hash: cVST22nDzzhS8YTadgJzdoluS01+9exXxUk+sRVWbQM=) 2: 35672430030A11F19BB01507153D8C67.roa (hash: ZqkwJDczIP3SqWXgDmi1JIlpUn8khhS031ocDNHD7iI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.crl rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WATZMgJnrePvrVaVURWF9sMl5wQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 06:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91811D8, serialNumber=5804D9320267ADE3EFAD5695511585F6C325E704 Validity Not Before: May 13 08:47:46 2026 GMT Not After : May 20 08:47:46 2026 GMT Subject: CN=6a043ab2-3558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d5:12:c6:29:12:44:f4:3d:b0:0f:81:3a:10: 80:39:b1:f0:1e:0c:cf:6a:68:0e:b1:6f:63:37:cf: 72:76:df:60:d6:b3:dc:84:c1:1d:34:27:63:d4:bf: ae:c8:cd:dd:77:f4:ca:4d:73:0b:ef:de:15:a9:a5: 0f:ab:fc:b7:4d:71:8e:f0:03:f7:b7:6b:21:cc:eb: 6c:ba:d7:12:b0:58:b5:6f:5c:2e:e5:34:70:68:37: 0e:e8:d0:c0:bb:62:c9:cd:dc:00:10:8b:41:eb:ab: d3:ee:18:c4:3e:0c:48:1a:b2:4f:52:fd:dc:d5:fd: 4c:2e:d1:01:ac:e8:cf:b7:14:5b:ae:b6:90:2f:45: d6:19:37:77:60:a0:32:5f:1b:31:85:c6:26:ef:e2: 23:c3:bf:a9:4f:b8:72:f3:c3:bf:32:2f:f6:04:a9: d3:36:91:84:2c:d7:49:25:5c:fb:34:f6:d3:74:0b: c2:e2:0d:5b:bf:81:07:aa:29:69:42:6a:f2:84:b8: 36:16:82:00:12:c5:01:d3:59:3f:68:6d:0d:bb:bc: ba:97:4d:10:52:1a:73:34:4c:f8:a7:ab:8d:c6:e8: c7:d9:6a:82:db:88:3e:55:36:8c:90:6f:cb:ae:3f: 70:37:c6:d4:0a:dd:b0:25:8f:9e:4c:d6:3e:ae:40: 2b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:98:E1:6B:16:90:B7:4B:A4:E0:7C:71:23:FF:77:DB:C5:39:D8:13 X509v3 Authority Key Identifier: keyid:58:04:D9:32:02:67:AD:E3:EF:AD:56:95:51:15:85:F6:C3:25:E7:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WATZMgJnrePvrVaVURWF9sMl5wQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f2:b2:e8:b4:3b:f3:b0:5f:5d:67:a1:a4:c2:63:7a:a5:a0: 61:75:11:c4:69:ee:f5:d3:b4:91:28:d8:37:5b:15:8b:a3:63: fd:36:65:4a:eb:de:79:fe:c4:c7:82:f4:cd:d0:ec:17:82:d8: ef:06:e3:ae:bd:97:6b:65:a4:42:2c:2d:7c:60:55:8b:b2:36: e7:5d:32:02:bd:ad:90:7a:a4:39:e6:7c:e1:2a:e5:70:5a:55: b7:c5:a8:a5:e5:22:77:b4:6f:77:04:0e:91:15:67:9d:49:51: 72:72:4d:c7:86:49:da:e6:d1:00:ec:89:a8:e4:e4:ad:ea:97: 38:5c:fa:dc:92:e5:89:7b:fb:ce:d4:e0:f8:c3:b8:6a:70:4d: d3:97:10:5a:fd:d6:a0:08:9d:ec:c6:84:03:a6:59:08:1f:3d: 60:d6:d8:76:e1:8c:28:f6:aa:b3:77:a3:6c:76:cc:a3:ac:98: f9:b0:3e:1a:7d:f3:ac:e5:fd:78:54:a6:31:37:75:30:0b:36: 51:28:26:47:90:14:53:7b:69:da:d2:2b:f0:7a:5e:b8:dc:d5: 6d:1a:fe:52:9c:42:19:64:9d:96:7f:25:39:92:e9:7a:f7:1c: 92:4f:e3:33:48:bf:eb:92:4b:8c:74:34:ca:c5:b1:c7:ca:1d: 0a:2a:e8:ff -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MTFEODExMC8GA1UEBRMoNTgwNEQ5MzIwMjY3QURFM0VGQUQ1Njk1NTExNTg1RjZD MzI1RTcwNDAeFw0yNjA1MTMwODQ3NDZaFw0yNjA1MjAwODQ3NDZaMBgxFjAUBgNV BAMTDTZhMDQzYWIyLTM1NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu1RLGKRJE9D2wD4E6EIA5sfAeDM9qaA6xb2M3z3J232DWs9yEwR00J2PUv67I zd139MpNcwvv3hWppQ+r/LdNcY7wA/e3ayHM62y61xKwWLVvXC7lNHBoNw7o0MC7 YsnN3AAQi0Hrq9PuGMQ+DEgask9S/dzV/Uwu0QGs6M+3FFuutpAvRdYZN3dgoDJf GzGFxibv4iPDv6lPuHLzw78yL/YEqdM2kYQs10klXPs09tN0C8LiDVu/gQeqKWlC avKEuDYWggASxQHTWT9obQ27vLqXTRBSGnM0TPinq43G6MfZaoLbiD5VNoyQb8uu P3A3xtQK3bAlj55M1j6uQCvdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFpjhaxaQ t0uk4HxxI/9328U52BMwHwYDVR0jBBgwFoAUWATZMgJnrePvrVaVURWF9sMl5wQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxMUQ4L0RDRTdCREUyMDMw OTExRjE5Mjg5OTZEMzEzM0Q4QzY3L1dBVFpNZ0pucmVQdnJWYVZVUldGOXNNbDV3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV0FUWk1nSm5yZVB2clZhVlVSV0Y5c01sNXdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx MUQ4L0RDRTdCREUyMDMwOTExRjE5Mjg5OTZEMzEzM0Q4QzY3L1dBVFpNZ0pucmVQ dnJWYVZVUldGOXNNbDV3US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCK8rLotDvzsF9dZ6GkwmN6paBhdRHEae7107SRKNg3WxWLo2P9NmVK6955/sTH gvTN0OwXgtjvBuOuvZdrZaRCLC18YFWLsjbnXTICva2QeqQ55nzhKuVwWlW3xail 5SJ3tG93BA6RFWedSVFyck3Hhkna5tEA7Imo5OSt6pc4XPrckuWJe/vO1OD4w7hq cE3TlxBa/dagCJ3sxoQDplkIHz1g1th24Ywo9qqzd6NsdsyjrJj5sD4affOs5f14 VKYxN3UwCzZRKCZHkBRTe2na0ivwel643NVtGv5SnEIZZJ2WfyU5kul69xyST+Mz SL/rkkuMdDTKxbHHyh0KKuj/ -----END CERTIFICATE-----Generated at Wed May 13 14:29:06 2026 by rpki-client