
$ rpki-client -vvf rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft
File: WATZMgJnrePvrVaVURWF9sMl5wQ.mft (raw, json)
Hash identifier: mTWBZXkgGKc15F1bhZtX1z8y6g8GFyY4E24vxA7nwYY=
Subject key identifier: 37:02:B5:AD:ED:2B:67:57:FA:B8:13:FF:C6:7B:CA:8E:C2:CA:C4:71
Authority key identifier: 58:04:D9:32:02:67:AD:E3:EF:AD:56:95:51:15:85:F6:C3:25:E7:04
Certificate issuer: /CN=A91811D8/serialNumber=5804D9320267ADE3EFAD5695511585F6C325E704
Certificate serial: 5A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WATZMgJnrePvrVaVURWF9sMl5wQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft
Manifest number: 58
Signing time: Thu 23 Jul 2026 10:12:32 +0000
Manifest this update: Thu 23 Jul 2026 10:12:31 +0000
Manifest next update: Thu 30 Jul 2026 10:12:31 +0000
Files and hashes: 1: WATZMgJnrePvrVaVURWF9sMl5wQ.crl (hash: Yj7pNQPmgsGXsHBLn5MMI4K6gCH4dgsR+T9smutyz1o=)
2: 35672430030A11F19BB01507153D8C67.roa (hash: ZqkwJDczIP3SqWXgDmi1JIlpUn8khhS031ocDNHD7iI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.crl
rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WATZMgJnrePvrVaVURWF9sMl5wQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:12:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91811D8, serialNumber=5804D9320267ADE3EFAD5695511585F6C325E704
Validity
Not Before: Jul 23 10:12:31 2026 GMT
Not After : Jul 30 10:12:31 2026 GMT
Subject: CN=6a61e910-e4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:ba:e1:9d:9a:0e:f0:fb:50:e4:36:55:a9:
4d:b1:86:ed:9f:57:6f:04:49:56:14:9c:00:1d:1f:
b3:ce:cf:55:12:4e:e7:ab:d4:41:f8:e1:93:06:35:
66:43:f2:d9:58:64:31:af:72:03:6e:ae:dd:f0:55:
be:71:0b:f6:0b:5e:d2:6e:da:81:f1:34:d6:f5:b2:
85:c8:eb:a0:9a:2c:6f:b2:a6:df:a7:00:30:67:28:
f8:80:89:ac:1c:63:fc:a6:4c:d5:41:58:61:53:4c:
7d:2f:56:a0:e6:46:ed:a8:1c:b4:09:33:0a:ee:2c:
1b:e3:91:cc:ae:10:47:fc:51:34:e2:72:0c:68:8e:
8c:9d:48:19:3f:0c:68:02:55:88:57:98:7a:2f:b7:
30:28:f4:0f:01:0e:95:67:63:b3:8f:01:f2:bf:c1:
26:77:be:82:ee:11:2b:67:7c:82:3d:c1:89:09:3d:
e9:77:41:5d:e2:97:3c:bf:28:88:e3:33:f4:35:0e:
83:fa:bb:f9:af:dd:0e:d8:02:da:76:9e:c5:cd:3f:
b6:01:d9:1d:e5:68:55:f9:b4:11:aa:94:8c:a0:af:
47:6d:a7:b7:4a:f8:ca:59:e4:3f:2f:3a:a6:6c:9e:
34:ef:9c:b8:46:5b:64:a3:f1:57:d3:c1:b3:24:c2:
41:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:02:B5:AD:ED:2B:67:57:FA:B8:13:FF:C6:7B:CA:8E:C2:CA:C4:71
X509v3 Authority Key Identifier:
keyid:58:04:D9:32:02:67:AD:E3:EF:AD:56:95:51:15:85:F6:C3:25:E7:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WATZMgJnrePvrVaVURWF9sMl5wQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91811D8/DCE7BDE2030911F1928996D3133D8C67/WATZMgJnrePvrVaVURWF9sMl5wQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:47:c7:7e:9c:4c:41:49:32:44:c8:a0:3b:86:42:89:1c:b9:
3b:e0:b0:28:a2:55:0f:b6:1f:4f:54:a6:3e:1a:11:d2:2c:47:
3b:42:39:d8:4a:ee:87:7e:6d:33:bd:4d:c7:fb:d6:7e:1e:fb:
09:a3:84:81:e1:83:0b:c0:48:63:e3:d2:ba:24:87:93:1f:c2:
57:89:3e:0b:aa:c1:06:46:24:07:23:14:d1:47:46:af:f2:63:
30:b3:1c:3d:f6:67:75:ff:c2:b9:af:06:57:b1:80:1d:60:40:
8f:15:9f:5f:af:a1:14:3b:54:71:93:e9:46:e2:8f:2d:6a:59:
8e:54:01:93:83:47:7e:38:59:0c:79:8f:d9:32:fe:06:21:60:
7c:44:e3:00:78:0b:82:34:b5:50:be:9e:1b:66:e0:fa:8e:bb:
20:af:b8:50:41:e0:9e:f2:41:e7:5c:b8:58:f6:ed:37:f7:af:
61:5b:55:57:66:30:0e:7c:e7:06:ff:e6:b2:3b:13:b0:44:fb:
2d:26:78:b9:0d:53:2d:99:19:2d:79:ea:92:c6:5c:2f:36:b2:
58:a0:71:fc:53:38:64:b1:77:85:af:f8:12:78:4d:f1:e8:0f:
19:d7:50:7b:42:03:f5:8e:ec:f0:4f:35:5c:f2:f7:fe:10:17:
e3:1c:ab:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:30:17 2026 by rpki-client