
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
File: WM2A__9oRR1A_ALHDduR-tjsMT0.mft (raw, json)
Hash identifier: tPu6/9/wabX9lb1liLqqHXaMBKUicsT530AqGPfBITY=
Subject key identifier: 56:DD:11:4C:67:04:AF:CF:8E:E1:8E:5E:B8:97:C7:F3:42:7A:E6:EA
Authority key identifier: 58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D
Certificate issuer: /CN=A916D17C/serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D
Certificate serial: 0526
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
Manifest number: 051B
Signing time: Tue 24 Mar 2026 23:16:19 +0000
Manifest this update: Tue 24 Mar 2026 23:16:19 +0000
Manifest next update: Tue 31 Mar 2026 23:16:19 +0000
Files and hashes: 1: WM2A__9oRR1A_ALHDduR-tjsMT0.crl (hash: RiFpYYezDHh1qqbOEWv9J9putKdmX///bKMCCbeMuvc=)
2: 980C961041CB11EC9262BD80C4F9AE02.roa (hash: TDC7C28FUPlkmyETAyWNhr+eEu2Z5SUrbJOInYZuEiM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl
rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:16:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1318 (0x526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D17C, serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D
Validity
Not Before: Mar 24 23:16:19 2026 GMT
Not After : Mar 31 23:16:19 2026 GMT
Subject: CN=69c31b43-b243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:db:4a:22:1f:98:6b:38:82:62:cc:e0:52:
b2:26:0b:e9:da:f2:e1:ee:49:88:1c:03:c2:66:92:
98:08:ed:89:7a:a1:f5:be:f7:30:2e:4f:47:18:eb:
24:70:d6:b4:c0:51:14:5d:f6:c0:4c:1a:34:fc:88:
9b:f4:64:7e:bd:f6:90:fa:a2:b1:b8:31:e7:5c:03:
b7:80:d4:12:3a:2a:72:06:6e:b9:06:f1:78:08:53:
ff:8a:d7:d4:bc:8f:fb:81:c5:14:df:97:be:0d:62:
5b:a4:b6:60:f7:4c:77:1e:6f:42:68:59:f2:49:69:
69:66:cd:53:a0:19:d6:35:f8:d5:15:7a:f1:5d:da:
64:e6:29:79:f2:67:a0:91:5d:e7:3d:16:68:0a:7a:
5f:14:cb:58:eb:d9:a1:dc:21:f2:ad:b9:e5:ba:b6:
a9:49:ae:4b:6d:e8:a7:be:db:70:18:ef:a0:da:81:
bc:a9:5f:bd:16:3e:74:74:73:b9:ac:b6:c7:1d:73:
6b:05:80:e0:f8:a9:28:a4:95:4e:7d:21:98:a9:e3:
9a:2d:8f:be:dc:99:3e:3e:be:13:94:2f:a2:29:d9:
96:50:b6:45:fc:55:74:51:2b:31:12:92:45:e9:81:
98:43:52:94:e1:f7:26:72:7d:a1:b8:28:dc:60:77:
5d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DD:11:4C:67:04:AF:CF:8E:E1:8E:5E:B8:97:C7:F3:42:7A:E6:EA
X509v3 Authority Key Identifier:
keyid:58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:54:ef:32:71:6c:de:ee:eb:a9:74:3e:9c:a6:a6:c0:80:95:
cb:4c:48:d6:31:d4:30:c4:f2:bd:e5:ee:d5:df:a5:c2:bc:c3:
93:28:66:ea:ac:77:a1:92:9f:d2:d8:7c:be:c6:a3:ea:87:e9:
d9:32:11:41:3d:10:30:db:d1:2f:cd:1b:b2:21:20:c2:ed:e9:
4a:3c:f2:b0:79:92:83:4a:3a:a1:0a:64:d9:d0:8f:d9:2a:59:
c0:30:19:be:6a:1d:ff:50:80:ca:f3:1a:67:72:3c:2c:ed:d1:
ee:81:93:33:6d:33:e4:34:f3:34:87:ee:ec:4f:33:f7:de:f3:
54:a8:79:b7:06:1c:9b:27:83:fc:29:2b:29:a0:b4:5d:72:48:
78:11:f1:f7:dc:49:95:2c:d1:5c:42:8d:b9:c9:1c:4d:e1:35:
78:fd:cc:d8:19:41:9c:97:19:eb:76:3f:94:4b:95:d6:51:f7:
fb:e0:33:3a:11:3d:d6:cc:78:16:32:7f:fb:e8:98:85:d8:bb:
5b:0c:53:a5:4a:f5:34:32:63:67:88:bd:9a:1f:e9:cb:a1:aa:
d1:fb:cd:29:c6:6b:2a:5b:aa:5a:29:0d:7a:71:c6:9f:13:22:
f4:79:8b:b5:c6:66:a7:36:97:7a:ec:27:a9:bc:b4:87:17:0b:
42:11:46:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:04 2026 by rpki-client