
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
File: WM2A__9oRR1A_ALHDduR-tjsMT0.mft (raw, json)
Hash identifier: zQVaHRTrjHji6lRTiZShcgaVDb8/XAUth1PccAlme/4=
Subject key identifier: C3:31:0A:26:D8:19:08:8A:4A:3F:28:DC:EA:B7:1E:DD:F4:6C:E4:7E
Authority key identifier: 58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D
Certificate issuer: /CN=A916D17C/serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D
Certificate serial: 0563
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
Manifest number: 0558
Signing time: Thu 23 Jul 2026 00:11:22 +0000
Manifest this update: Thu 23 Jul 2026 00:11:22 +0000
Manifest next update: Thu 30 Jul 2026 00:11:22 +0000
Files and hashes: 1: WM2A__9oRR1A_ALHDduR-tjsMT0.crl (hash: c3zY6M69tj5yY8WGVDa7+XUsRMhQV157AQnqMELdIus=)
2: 980C961041CB11EC9262BD80C4F9AE02.roa (hash: TDC7C28FUPlkmyETAyWNhr+eEu2Z5SUrbJOInYZuEiM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl
rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1379 (0x563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D17C, serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D
Validity
Not Before: Jul 23 00:11:22 2026 GMT
Not After : Jul 30 00:11:22 2026 GMT
Subject: CN=6a615c2a-6ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fe:a8:c7:8f:0b:0b:fb:a1:d7:59:49:ef:af:
1d:85:c6:91:96:16:b9:83:03:08:47:8f:ec:67:73:
59:c1:4c:ef:f8:4c:2a:36:cf:92:0b:8c:7a:4f:97:
e0:56:09:22:e4:d6:f0:fb:28:96:ce:18:42:5e:72:
17:fb:83:2c:2d:71:7e:42:94:38:b3:05:42:6a:15:
0a:79:dd:e6:1d:82:9b:ca:cd:da:5e:73:6d:68:24:
9b:26:a1:f2:5c:4a:5e:ed:f4:e3:a4:b9:89:ba:c7:
e5:76:2a:07:1d:18:12:43:93:72:14:75:a5:86:8b:
12:ad:61:de:40:31:ea:b7:84:22:9f:96:1e:85:7b:
2a:00:3b:f5:f5:31:cc:73:22:80:83:44:5c:78:bd:
9b:e7:1d:d5:7a:f3:c0:3d:9b:c0:35:1e:17:9e:27:
b3:db:a3:f3:88:23:9e:e7:a9:c0:50:a6:25:8f:b8:
9d:65:d5:2a:18:2b:df:ec:94:f8:49:84:0b:47:6b:
05:a3:bf:f2:9c:63:05:8f:c1:45:13:cb:17:4b:4b:
b1:ca:d8:a9:cb:70:87:df:49:b3:53:19:69:96:64:
c8:7b:d9:02:e7:23:90:27:9e:e5:0b:98:ae:9b:14:
34:83:7f:22:c8:1c:76:74:f2:78:c6:5d:9b:a4:2b:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:31:0A:26:D8:19:08:8A:4A:3F:28:DC:EA:B7:1E:DD:F4:6C:E4:7E
X509v3 Authority Key Identifier:
keyid:58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:8e:b9:10:db:22:01:f7:c4:ce:95:f8:b0:3f:18:b9:cd:bf:
d8:c0:3d:bb:b0:6d:9a:24:08:d6:37:a3:cd:83:b0:42:e1:a7:
79:b5:ea:45:63:32:8d:ac:45:ac:bc:37:4c:bd:61:17:d0:02:
08:19:4f:ee:54:35:1b:b3:27:6d:17:83:fb:42:2c:cc:e8:8d:
86:dd:3d:18:a6:76:e6:a3:21:07:6b:17:0b:5c:f2:16:cb:b2:
b6:ea:2e:6f:6f:4c:55:d5:d7:fc:ea:5b:ae:65:d6:48:c4:5d:
01:16:3b:70:4e:2c:7e:3e:46:50:99:b8:05:57:09:a4:62:ba:
e5:06:09:76:55:9e:8d:f0:cf:50:22:81:6b:ee:04:8d:c3:13:
f9:82:db:f2:db:c6:1e:61:89:cf:0d:5e:fd:ce:65:17:47:ca:
ef:26:31:14:e5:8f:b8:91:62:8d:37:ac:b1:85:5e:94:42:3b:
cd:5a:be:19:a3:a8:c8:c8:52:a0:ca:06:b6:66:cb:48:b1:d1:
ab:79:f5:27:00:e5:33:68:56:d8:60:6a:af:ee:74:4f:ee:ac:
f9:9c:95:eb:f5:fd:77:9c:42:d1:74:fa:5d:90:5e:82:e6:0c:
e0:80:ba:71:c1:e6:74:3b:c0:c9:e9:88:59:5e:42:75:e9:12:
7a:19:01:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:54 2026 by rpki-client