
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
File: WM2A__9oRR1A_ALHDduR-tjsMT0.mft (raw, json)
Hash identifier: 93hUw+cHMqEQ0/4kXlHY3Sd8QcGU5Bb+5tpKP3+Jz2Q=
Subject key identifier: D2:22:0B:84:1D:64:BA:88:3F:9F:AD:76:F2:25:FE:F5:6F:FF:B1:5B
Authority key identifier: 58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D
Certificate issuer: /CN=A916D17C/serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D
Certificate serial: 0571
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
Manifest number: 0566
Signing time: Tue 18 Aug 2026 23:42:43 +0000
Manifest this update: Tue 18 Aug 2026 23:42:42 +0000
Manifest next update: Tue 25 Aug 2026 23:42:42 +0000
Files and hashes: 1: WM2A__9oRR1A_ALHDduR-tjsMT0.crl (hash: NDJBk5u1u+cWV0Jd3pJjlS6uBNUlkWCtqJS244Gi+FI=)
2: 980C961041CB11EC9262BD80C4F9AE02.roa (hash: TDC7C28FUPlkmyETAyWNhr+eEu2Z5SUrbJOInYZuEiM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl
rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:42:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1393 (0x571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D17C, serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D
Validity
Not Before: Aug 18 23:42:42 2026 GMT
Not After : Aug 25 23:42:42 2026 GMT
Subject: CN=6a84edf3-2f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:95:50:f9:1e:fb:29:32:e8:59:4b:78:4f:16:
34:4b:fc:81:5f:95:55:a2:f9:a6:fd:c7:e3:aa:3b:
b6:4e:25:a3:93:3e:1d:80:9f:34:fe:e7:55:63:66:
5f:49:19:2b:5f:df:20:09:95:26:e3:e4:11:a5:5c:
fb:0d:76:fa:ec:23:08:24:3d:16:59:32:15:3d:02:
64:49:af:d2:12:88:ab:d0:fa:a1:fc:1b:ec:73:f1:
1e:a8:40:b1:2c:d7:d9:3b:ef:a7:07:21:62:cd:af:
ef:56:4d:93:f4:38:e3:3b:57:5c:4b:57:79:32:d3:
7d:2c:46:2e:e6:eb:88:b9:c8:b7:53:65:69:61:68:
c4:29:a2:7f:5f:09:ff:dc:66:47:81:a9:09:c3:46:
e3:e2:8c:f4:90:92:0e:25:2e:30:b2:c7:4c:c2:d1:
64:0c:00:4d:e3:d1:d8:d0:8b:99:02:aa:03:1d:50:
3b:fa:bb:21:67:ae:eb:7b:16:ae:67:2f:c5:e5:1b:
d0:f2:56:cb:dd:6a:b3:0f:47:64:ad:b9:3d:d6:dd:
ca:cd:9b:65:7e:d8:79:0e:cf:b9:36:09:fc:0d:ed:
ef:9f:39:b9:d1:5a:58:81:86:fe:96:d3:e1:db:97:
1a:f1:fc:a4:10:c1:72:86:c5:29:fd:a2:d0:ab:a3:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:22:0B:84:1D:64:BA:88:3F:9F:AD:76:F2:25:FE:F5:6F:FF:B1:5B
X509v3 Authority Key Identifier:
keyid:58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:7f:e7:b6:cb:d9:c4:99:df:2c:19:8d:68:1c:1f:8c:7e:52:
4c:75:c9:81:cc:5f:b1:10:5b:d9:44:74:d9:0a:3e:11:fa:c2:
89:0a:e2:ac:cf:73:be:15:a9:b5:7d:02:47:28:47:3d:11:24:
e3:ee:d4:bb:e5:42:35:c2:c9:bd:7e:f8:c9:01:0b:77:55:a8:
99:de:89:d6:70:7a:aa:d3:38:f6:88:5b:3c:07:d1:37:83:8d:
ed:f1:ab:19:20:53:70:52:a3:ca:ff:64:35:00:48:71:0e:18:
5e:95:be:ca:13:16:70:93:cc:fa:13:88:0d:36:b5:c7:2b:64:
c6:a4:22:a2:eb:78:93:bf:28:ec:11:e0:b8:3d:77:cb:55:2d:
88:95:fe:12:f3:90:82:58:a7:d8:07:be:6f:3a:96:c3:cd:8a:
5f:8a:7e:d9:e0:3e:e3:b1:2c:37:c3:e4:2d:54:ab:21:16:ec:
ee:f5:e9:38:63:46:aa:22:53:b4:2c:61:c7:b0:d6:14:f5:8d:
fb:89:0e:ba:7b:88:b4:e7:fe:2e:1a:20:dd:17:e6:89:a4:b8:
cb:94:d8:30:d4:9c:f3:3c:9e:b5:40:2a:0e:6a:d7:42:1d:70:
7f:3c:52:86:5e:55:4b:1a:86:98:c5:04:55:0e:9f:91:ff:20:
60:71:58:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:14:37 2026 by rpki-client