$ rpki-client -vvf rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft File: WatjEmbskGVhP9Z3y9tP8TvvZEE.mft (raw, json) Hash identifier: h/CDLXjmI/cVPgnbn2OqM3lVkvQ4G8pRi+JbKC09eBU= Subject key identifier: 43:27:84:C1:8C:4F:81:B2:97:6C:E5:01:BD:9F:21:6D:D0:E4:07:84 Authority key identifier: 59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41 Certificate issuer: /CN=A9191010/serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441 Certificate serial: 1F37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft Manifest number: 1F37 Signing time: Fri 22 Aug 2025 16:04:14 +0000 Manifest this update: Fri 22 Aug 2025 16:04:13 +0000 Manifest next update: Fri 29 Aug 2025 16:04:13 +0000 Files and hashes: 1: WatjEmbskGVhP9Z3y9tP8TvvZEE.crl (hash: vnXj/5l1aDt5RQ5+ADRD5n19z5zuWkkl8WNQfnD5eCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7991 (0x1f37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191010, serialNumber=59AB631266EC9065613FD677CBDB4FF13BEF6441 Validity Not Before: Aug 22 16:04:13 2025 GMT Not After : Aug 29 16:04:13 2025 GMT Subject: CN=68a894fe-61a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:52:46:42:ed:7e:0e:a6:f8:e5:1c:a0:87:4b: f4:d6:36:76:37:d0:7f:ff:e3:e0:c8:d0:fc:fe:c3: 62:78:c9:c9:f3:7b:0b:2c:3a:f9:12:b4:ed:21:82: 14:22:77:72:35:36:0c:c8:77:5e:fe:b4:9c:99:b3: 8e:eb:8e:ce:45:97:84:4a:f0:dc:c7:79:25:c7:56: b1:37:04:6d:c5:08:13:94:2c:82:67:25:2a:d5:d6: 47:51:08:1b:0b:c2:b5:a2:59:d3:1a:f3:45:d7:fd: 27:03:cf:41:86:0b:a9:86:0c:89:16:b8:04:e6:41: b3:8a:3c:65:c5:8f:73:34:70:0f:b2:90:a6:76:2c: 4a:87:fb:0d:91:ae:8c:bd:b7:7b:83:3a:8b:f8:6f: a7:c4:c1:df:9d:48:7b:11:d5:28:6b:68:f0:44:ac: 04:be:60:2b:e4:72:17:17:c5:b5:8a:f0:08:db:b3: 00:a5:f0:ef:c6:d8:3f:c8:70:9b:a0:f3:d4:98:d3: eb:24:64:19:b9:29:ed:49:df:8b:4c:fb:c8:aa:e5: 12:11:ac:25:73:48:46:74:5f:1c:8d:56:e9:c1:48: 3a:8d:2a:19:e9:2c:7e:de:a8:15:43:b4:1e:28:dd: 9a:6c:03:25:f4:ac:40:fe:1a:aa:7e:b7:c6:84:74: e7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:27:84:C1:8C:4F:81:B2:97:6C:E5:01:BD:9F:21:6D:D0:E4:07:84 X509v3 Authority Key Identifier: keyid:59:AB:63:12:66:EC:90:65:61:3F:D6:77:CB:DB:4F:F1:3B:EF:64:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WatjEmbskGVhP9Z3y9tP8TvvZEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191010/09E57744556811E6B3329855C4F9AE02/WatjEmbskGVhP9Z3y9tP8TvvZEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:8a:93:e6:0a:ac:e4:9c:c7:cf:af:10:cb:d1:e3:0f:56:65: 71:80:1c:47:b7:ce:20:9f:74:3f:73:6b:23:21:73:1c:a0:df: d8:77:c0:00:8f:75:f2:62:59:ae:2e:ee:43:8a:b7:d6:42:7a: 0c:56:8d:b9:b8:44:d5:e2:2b:76:96:e8:95:68:4e:8a:69:02: bc:e9:57:61:21:1e:96:91:64:be:5b:b1:cf:71:29:91:b1:2a: ad:2b:7e:84:c0:a4:ab:a9:4a:79:e5:a5:56:a3:2e:8c:d0:76: e7:c3:67:e5:7d:c1:80:67:47:fb:bc:78:d7:ac:cf:f7:c5:39: 55:a0:97:4d:ae:de:2b:17:74:98:79:30:81:02:51:b3:4b:ba: e2:53:0e:0f:82:f5:04:ea:f1:fb:8a:45:7e:bf:ec:c8:07:21: e5:88:48:e7:6d:e8:4e:66:c5:eb:34:1e:b4:c7:06:a5:e1:1e: 99:8f:3b:80:de:74:63:5f:13:8f:03:a3:3c:4d:a3:5a:ce:17: fe:39:14:a0:c2:3d:65:b6:c8:f7:6d:53:af:09:ff:02:66:65: cc:6a:9d:f6:de:39:e7:9a:a1:84:0b:3e:96:52:9d:87:48:b3: 3b:3b:f5:af:ea:d0:e3:48:91:cd:e4:46:2e:33:3b:2e:05:18: 25:eb:ac:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwMTAxMTAvBgNVBAUTKDU5QUI2MzEyNjZFQzkwNjU2MTNGRDY3N0NCREI0RkYx M0JFRjY0NDEwHhcNMjUwODIyMTYwNDEzWhcNMjUwODI5MTYwNDEzWjAYMRYwFAYD VQQDEw02OGE4OTRmZS02MWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVJGQu1+Dqb45Rygh0v01jZ2N9B//+PgyND8/sNieMnJ83sLLDr5ErTtIYIU IndyNTYMyHde/rScmbOO647ORZeESvDcx3klx1axNwRtxQgTlCyCZyUq1dZHUQgb C8K1olnTGvNF1/0nA89BhguphgyJFrgE5kGzijxlxY9zNHAPspCmdixKh/sNka6M vbd7gzqL+G+nxMHfnUh7EdUoa2jwRKwEvmAr5HIXF8W1ivAI27MApfDvxtg/yHCb oPPUmNPrJGQZuSntSd+LTPvIquUSEawlc0hGdF8cjVbpwUg6jSoZ6Sx+3qgVQ7Qe KN2abAMl9KxA/hqqfrfGhHTntQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMnhMGM T4Gyl2zlAb2fIW3Q5AeEMB8GA1UdIwQYMBaAFFmrYxJm7JBlYT/Wd8vbT/E772RB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAxMC8wOUU1Nzc0NDU1 NjgxMUU2QjMzMjk4NTVDNEY5QUUwMi9XYXRqRW1ic2tHVmhQOVozeTl0UDhUdnZa RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhdGpFbWJza0dWaFA5WjN5OXRQOFR2dlpFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTAxMC8wOUU1Nzc0NDU1NjgxMUU2QjMzMjk4NTVDNEY5QUUwMi9XYXRqRW1ic2tH VmhQOVozeTl0UDhUdnZaRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlipPmCqzknMfPrxDL0eMPVmVxgBxHt84gn3Q/c2sjIXMcoN/Yd8AA j3XyYlmuLu5DirfWQnoMVo25uETV4it2luiVaE6KaQK86VdhIR6WkWS+W7HPcSmR sSqtK36EwKSrqUp55aVWoy6M0Hbnw2flfcGAZ0f7vHjXrM/3xTlVoJdNrt4rF3SY eTCBAlGzS7riUw4PgvUE6vH7ikV+v+zIByHliEjnbehOZsXrNB60xwal4R6ZjzuA 3nRjXxOPA6M8TaNazhf+ORSgwj1ltsj3bVOvCf8CZmXMap323jnnmqGECz6WUp2H SLM7O/Wv6tDjSJHN5EYuMzsuBRgl66xm -----END CERTIFICATE-----Generated at Sat Aug 23 16:42:35 2025 by rpki-client