
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
File: WM2A__9oRR1A_ALHDduR-tjsMT0.mft (raw, json)
Hash identifier: znHM3fJ8MZCJXd1dRh4WT4D0eeiYrMB6/2r5Z/kDOu8=
Subject key identifier: B6:C7:86:2C:8E:7F:34:D0:13:D6:C1:E2:03:13:F0:88:58:95:D2:7F
Authority key identifier: 58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D
Certificate issuer: /CN=A916D17C/serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D
Certificate serial: 052C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
Manifest number: 0521
Signing time: Sat 04 Apr 2026 23:21:09 +0000
Manifest this update: Sat 04 Apr 2026 23:21:08 +0000
Manifest next update: Sat 11 Apr 2026 23:21:08 +0000
Files and hashes: 1: WM2A__9oRR1A_ALHDduR-tjsMT0.crl (hash: Fi8MYYLIwCMs4sui4Pwt3gAoNg0gmMjfl2CD8v59zCM=)
2: 980C961041CB11EC9262BD80C4F9AE02.roa (hash: TDC7C28FUPlkmyETAyWNhr+eEu2Z5SUrbJOInYZuEiM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl
rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1324 (0x52c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D17C, serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D
Validity
Not Before: Apr 4 23:21:08 2026 GMT
Not After : Apr 11 23:21:08 2026 GMT
Subject: CN=69d19ce5-9026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:f6:c1:55:f3:e5:7d:9d:dc:54:13:8f:ba:
ce:95:ff:8d:64:be:45:00:0e:41:57:54:75:05:36:
aa:9b:b0:7f:39:7c:05:fd:3b:e3:7c:36:2e:5a:2e:
b7:16:c3:61:7f:cb:d9:b4:f3:85:44:05:f1:86:ab:
b3:f2:b7:a6:40:5c:20:c1:58:c2:a8:59:d6:0f:dc:
5b:17:e9:02:90:fc:da:d6:38:ca:23:f6:7a:e3:d2:
71:1e:57:fa:71:5f:59:dd:8d:89:1d:df:78:4c:51:
d8:a1:49:49:5d:4c:8e:16:63:f3:35:bc:c1:cd:4f:
1c:60:62:d6:52:ed:20:c4:38:65:be:af:71:87:97:
2e:79:c4:76:13:bf:99:0a:2e:30:10:35:a8:f8:fa:
06:52:ab:c0:cc:3b:e8:48:23:15:66:55:9d:ce:5f:
ad:e3:43:db:54:a3:cb:ff:a6:da:9d:d6:e2:19:c1:
56:c2:81:d9:8d:4a:ff:58:d9:b3:da:91:da:25:ea:
f9:20:dc:bf:63:fa:1e:10:0e:5d:ac:7a:6c:f8:75:
77:6a:26:e0:6e:ae:22:48:02:34:39:72:ad:da:ea:
4a:10:cd:5b:4a:d2:b8:45:dd:29:13:c9:7f:16:aa:
8f:5d:67:87:2f:f5:63:6a:90:b4:73:51:72:90:0d:
15:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C7:86:2C:8E:7F:34:D0:13:D6:C1:E2:03:13:F0:88:58:95:D2:7F
X509v3 Authority Key Identifier:
keyid:58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a7:60:fd:3e:e9:42:cb:4d:06:0e:28:f5:0b:c0:d9:32:79:
4c:85:62:2e:90:f4:d1:c5:90:95:b3:a0:e5:17:7c:1f:91:bf:
20:b6:e3:68:6c:71:41:c2:41:92:fa:02:c7:9e:29:a9:e7:c3:
92:5e:24:ac:53:8e:ed:c3:45:34:b7:3e:ec:4a:6a:43:a2:77:
4b:f7:59:82:74:4d:82:1c:bb:f5:d8:98:6d:61:b9:3c:bf:84:
f3:19:a9:71:04:a9:c5:fc:0b:ba:81:2a:6b:38:79:41:5f:b5:
62:32:02:1d:df:09:65:06:45:ab:3e:ef:b3:75:3a:b2:8f:39:
c1:e2:b0:dc:c5:c8:54:e0:2d:1e:8b:f8:d6:74:34:4f:46:e5:
52:13:ac:77:2c:75:95:10:67:4e:89:0a:d1:cb:a5:70:44:42:
a0:ec:1c:b7:88:46:60:26:97:15:76:ec:d5:bc:61:97:6d:6c:
f5:c7:b6:78:84:f7:9f:9c:8b:d6:d5:c9:0f:18:8e:b7:79:15:
81:80:d2:ac:26:1c:0f:5d:86:28:7c:c6:21:13:ec:5f:44:69:
d4:70:92:1e:ea:66:e8:d4:44:ee:24:4c:fd:cb:ed:9f:89:f2:
58:db:dd:b1:0b:2e:34:9c:8b:ed:10:a9:39:7e:5c:07:7d:3f:
b6:60:ca:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:13:03 2026 by rpki-client