
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
File: WM2A__9oRR1A_ALHDduR-tjsMT0.mft (raw, json)
Hash identifier: 4m9XL/zbupV3+DBvLfBBHpdGdjo6DIXCdBMJkSNt0DE=
Subject key identifier: 42:A1:FE:C5:5F:66:89:D0:3B:FD:01:B9:27:70:DD:E1:48:D8:BC:26
Authority key identifier: 58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D
Certificate issuer: /CN=A916D17C/serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D
Certificate serial: 058B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
Manifest number: 057F
Signing time: Fri 02 Oct 2026 23:35:14 +0000
Manifest this update: Fri 02 Oct 2026 23:35:13 +0000
Manifest next update: Fri 09 Oct 2026 23:35:13 +0000
Files and hashes: 1: WM2A__9oRR1A_ALHDduR-tjsMT0.crl (hash: fFd0HEJrP3i76w1ifQM2FQoknQlePIYWQ03WBTG8oVI=)
2: 980C961041CB11EC9262BD80C4F9AE02.roa (hash: EDjbUunRyTFwSrNsa17b9DZCqv/DYed8oHEOydOAs9A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl
rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 23:35:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1419 (0x58b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D17C, serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D
Validity
Not Before: Oct 2 23:35:13 2026 GMT
Not After : Oct 9 23:35:13 2026 GMT
Subject: CN=6ac03fb1-1325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:9d:1f:1e:69:66:ff:31:ca:e8:88:80:27:
56:76:f5:a5:3a:d6:3e:cb:38:24:9d:a0:23:4c:ff:
b8:92:3d:d4:a4:28:16:eb:4a:97:51:99:42:9b:25:
0d:6c:ad:10:37:74:fd:8c:bc:11:95:b8:09:fb:c0:
e2:0b:49:83:f9:3b:ae:bc:71:f5:84:3c:b5:65:07:
e5:90:d6:75:a1:9d:4b:2c:96:70:b0:ce:f1:b2:85:
90:bf:51:6a:20:2e:20:6c:4f:d7:44:df:0d:b2:f9:
d4:a1:f1:26:db:e0:fd:e3:c2:fe:72:2b:98:42:ec:
c2:9a:1c:44:03:24:49:37:45:cb:d9:aa:22:36:c2:
31:c8:ff:e0:45:ee:dd:81:2e:1c:09:75:f3:55:17:
a6:04:62:31:7c:4f:29:70:c6:5f:95:5f:ff:9a:dc:
a6:a4:e8:af:bc:59:23:73:55:59:dd:aa:b5:7f:d8:
a3:a5:61:58:47:66:80:a3:82:21:8d:ea:e5:d4:de:
3e:5e:6b:4a:c1:a5:20:42:47:ff:03:61:ed:de:05:
dc:60:be:60:d4:7b:f8:89:0b:20:ab:26:34:c2:d7:
bc:a7:54:b1:d4:2d:98:88:c1:58:e2:09:57:fb:12:
d4:90:01:15:97:dd:cb:c6:05:e6:f8:b4:40:df:fd:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A1:FE:C5:5F:66:89:D0:3B:FD:01:B9:27:70:DD:E1:48:D8:BC:26
X509v3 Authority Key Identifier:
keyid:58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:48:af:ed:41:a3:a7:1e:79:33:d8:5b:bf:d3:44:ec:62:0e:
8c:14:11:72:9a:5d:54:12:00:b4:78:22:f8:fe:76:03:99:ba:
15:2c:7e:86:9e:e0:0a:02:d0:50:82:70:91:dc:c8:ff:82:33:
d7:c5:44:52:8d:95:9a:57:70:c0:cb:93:51:d5:49:a3:32:89:
22:de:a9:0c:89:fd:73:5c:a9:56:a7:a9:85:11:4a:cd:ed:9e:
20:f0:56:9f:f6:2d:a5:6a:b4:84:ea:87:24:48:0b:9c:0c:2e:
b9:39:ed:f3:3c:e9:bf:7e:9d:16:3f:f3:41:a6:c7:a1:99:ca:
21:28:16:a4:be:98:56:51:45:f5:3c:8a:1c:cf:99:45:49:51:
89:ce:52:fd:f5:e0:b9:13:17:6a:ec:2b:2e:fc:c2:4b:e5:0c:
72:bd:04:05:08:6b:03:07:52:8d:2d:2e:ea:7f:4d:06:db:78:
3a:c2:e8:50:ca:7f:6a:7f:61:ee:88:8d:85:07:29:2c:4c:e4:
7a:d0:5a:00:ea:ac:8d:90:24:d4:74:db:6f:a1:ad:28:21:75:
c6:10:3e:3e:30:d6:4b:c8:3f:55:e0:91:b3:b1:b2:32:7d:18:
c5:af:38:52:93:4e:5a:ee:0e:6e:5a:1a:f9:f5:12:24:2e:0e:
79:ea:19:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQxN0MxMTAvBgNVBAUTKDU4Q0Q4MEZGRkY2ODQ1MUQ0MEZDMDJDNzBEREI5MUZB
RDhFQzMxM0QwHhcNMjYxMDAyMjMzNTEzWhcNMjYxMDA5MjMzNTEzWjAYMRYwFAYD
VQQDEw02YWMwM2ZiMS0xMzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArwydHx5pZv8xyuiIgCdWdvWlOtY+yzgknaAjTP+4kj3UpCgW60qXUZlCmyUN
bK0QN3T9jLwRlbgJ+8DiC0mD+TuuvHH1hDy1ZQflkNZ1oZ1LLJZwsM7xsoWQv1Fq
IC4gbE/XRN8NsvnUofEm2+D948L+ciuYQuzCmhxEAyRJN0XL2aoiNsIxyP/gRe7d
gS4cCXXzVRemBGIxfE8pcMZflV//mtympOivvFkjc1VZ3aq1f9ijpWFYR2aAo4Ih
jerl1N4+XmtKwaUgQkf/A2Ht3gXcYL5g1Hv4iQsgqyY0wte8p1Sx1C2YiMFY4glX
+xLUkAEVl93LxgXm+LRA3/3vvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEKh/sVf
ZonQO/0BuSdw3eFI2LwmMB8GA1UdIwQYMBaAFFjNgP//aEUdQPwCxw3bkfrY7DE9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDE3Qy8xODM5NzgwODQx
QzIxMUVDODVGNDI4NjhDNEY5QUUwMi9XTTJBX185b1JSMUFfQUxIRGR1Ui10anNN
VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dNMkFfXzlvUlIxQV9BTEhEZHVSLXRqc01UMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDE3Qy8xODM5NzgwODQxQzIxMUVDODVGNDI4NjhDNEY5QUUwMi9XTTJBX185b1JS
MUFfQUxIRGR1Ui10anNNVDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC0iv7UGjpx55M9hbv9NE7GIOjBQRcppdVBIAtHgi+P52A5m6FSx+hp7gCgLQ
UIJwkdzI/4Iz18VEUo2VmldwwMuTUdVJozKJIt6pDIn9c1ypVqephRFKze2eIPBW
n/YtpWq0hOqHJEgLnAwuuTnt8zzpv36dFj/zQabHoZnKISgWpL6YVlFF9TyKHM+Z
RUlRic5S/fXguRMXauwrLvzCS+UMcr0EBQhrAwdSjS0u6n9NBtt4OsLoUMp/an9h
7oiNhQcpLEzketBaAOqsjZAk1HTbb6GtKCF1xhA+PjDWS8g/VeCRs7GyMn0Yxa84
UpNOWu4Obloa+fUSJC4OeeoZ3w==
-----END CERTIFICATE-----
Generated at Sun Oct 4 13:35:44 2026 by rpki-client