
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft
File: WatjEmbskGVhP9Z3y9tP8TvvZEE.mft (raw, json)
Hash identifier: AX9Dxx+q+JAjGdhAX4C0Feju29WlcJ8nLR3E+TJQKVI=
Subject key identifier: 31:3F:35:3D:F2:01:2F:C3:17:23:11:62:2F:9E:E5:48:0F:1D:00:CC
Authority key identifier: 59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41
Certificate issuer: /CN=A9191010/serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441
Certificate serial: 1FA9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft
Manifest number: 1FA9
Signing time: Tue 24 Mar 2026 15:55:14 +0000
Manifest this update: Tue 24 Mar 2026 15:55:13 +0000
Manifest next update: Tue 31 Mar 2026 15:55:13 +0000
Files and hashes: 1: WatjEmbskGVhP9Z3y9tP8TvvZEE.crl (hash: uRlrmPa/P6uTPwuGuLLYSA51VWhF6VnJMZOMWp1l4NE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl
rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:55:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8105 (0x1fa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191010, serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441
Validity
Not Before: Mar 24 15:55:13 2026 GMT
Not After : Mar 31 15:55:13 2026 GMT
Subject: CN=69c2b3e2-dcf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:3a:f4:3a:cc:c6:b8:1d:66:04:71:47:6d:
f6:6b:98:d7:f6:0a:29:30:39:9b:a6:93:03:6d:42:
e6:ef:7f:35:b6:19:7b:4d:66:34:da:f4:13:0c:fd:
b3:11:a4:e0:e3:a3:a4:2a:ce:04:06:bf:08:00:c2:
48:ec:e4:84:6e:9d:b8:31:06:36:cd:af:18:e7:ec:
1d:55:9b:9e:0a:fa:4e:81:7a:36:bf:4c:1a:56:40:
39:5f:74:63:5c:83:20:e5:0f:68:77:89:c0:1d:f6:
b8:71:bb:a1:e0:fd:82:f8:41:40:f5:62:99:63:03:
c7:3c:d7:42:aa:2d:a2:dc:a0:0d:f0:63:17:2d:bf:
40:af:5c:aa:d3:fb:fa:16:dc:ef:f9:88:10:5c:47:
f7:33:ef:9a:a5:31:8c:eb:1e:c3:a5:6e:7c:1f:5e:
60:74:c7:64:27:26:01:5c:a4:36:6b:1e:7a:ec:46:
9f:de:66:99:55:e0:27:e8:d3:63:59:e7:2e:b7:1f:
f4:34:11:81:ae:6b:12:7c:c3:4d:db:95:85:ba:7b:
ab:96:c2:54:e4:2f:c0:4d:8e:23:fd:07:bc:e4:17:
98:b8:4d:13:aa:85:bd:6d:a5:a7:8f:87:a6:9b:b2:
ab:12:f2:b1:ae:d4:6d:8d:75:35:12:f5:17:28:b0:
1b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3F:35:3D:F2:01:2F:C3:17:23:11:62:2F:9E:E5:48:0F:1D:00:CC
X509v3 Authority Key Identifier:
keyid:59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:36:d6:3b:bf:59:2f:ea:16:d7:19:32:a1:98:46:09:b7:12:
36:f4:9b:8b:35:69:5a:cf:8e:38:17:39:cd:eb:b0:0d:6e:eb:
43:f2:dc:ad:08:84:55:fe:dc:16:d1:d3:92:a6:c4:ad:2b:f3:
cc:1a:dc:80:68:1e:07:02:60:5a:91:66:83:5e:34:e0:c2:95:
ba:fd:4b:31:da:65:88:b4:bc:e1:34:45:11:3c:be:50:fa:3d:
fc:c7:29:4d:5b:6f:76:6c:7c:68:df:4a:07:53:9c:17:99:5e:
4d:00:b0:a3:11:87:5d:a0:45:1f:74:86:57:82:de:9f:e8:7f:
f1:c1:aa:7e:38:79:11:22:23:bd:5e:90:c2:20:93:26:c0:e4:
98:d7:5e:1a:69:2e:36:88:d9:8a:d7:d2:08:ce:86:95:7f:dc:
27:59:5d:33:54:71:fa:19:26:e1:42:9e:c3:bc:c4:82:76:eb:
2b:ca:70:40:14:ca:df:00:6d:f8:21:68:78:a7:e2:cb:27:87:
81:9a:62:80:59:5b:7e:2e:13:a4:46:3b:ad:91:c5:03:97:59:
33:10:0a:f2:c3:5e:2e:bc:0f:93:29:8f:a1:33:cb:15:67:99:
33:5a:22:a5:5c:69:1c:90:58:30:34:48:37:55:23:13:c5:83:
3f:b7:ae:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:28 2026 by rpki-client