
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
File: WM2A__9oRR1A_ALHDduR-tjsMT0.mft (raw, json)
Hash identifier: DS9PwZYGu7lQgxvM0VqSTm84N3jnZrAdMy4qC1nWbcA=
Subject key identifier: F3:AA:A6:22:B0:B9:FD:7B:80:70:44:35:A5:01:3B:19:50:63:2A:93
Authority key identifier: 58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D
Certificate issuer: /CN=A916D17C/serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D
Certificate serial: 0511
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
Manifest number: 050C
Signing time: Sun 01 Mar 2026 00:14:10 +0000
Manifest this update: Sun 01 Mar 2026 00:14:09 +0000
Manifest next update: Sun 08 Mar 2026 00:14:09 +0000
Files and hashes: 1: WM2A__9oRR1A_ALHDduR-tjsMT0.crl (hash: XrL64XE+G0ldlcCiT0rELk6YubbZVCn17A6TOhBXiWE=)
2: 980C961041CB11EC9262BD80C4F9AE02.roa (hash: flGZY0OZ/isSxgXY6JSmW0PQxMoPLoOfi+JFDAY+z3c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl
rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:14:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1297 (0x511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D17C, serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D
Validity
Not Before: Mar 1 00:14:09 2026 GMT
Not After : Mar 8 00:14:09 2026 GMT
Subject: CN=69a384d2-9807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:3f:64:1d:54:ae:79:13:5e:33:03:c3:6c:
ef:81:d2:de:a7:d9:b1:0f:b1:05:64:4b:57:87:19:
60:57:5d:ff:e9:fc:ab:48:fd:f0:8d:a9:f8:b9:e6:
c5:a1:ef:b8:79:35:cf:4a:2a:4c:d5:36:e8:e8:b3:
79:fb:16:c6:a6:29:cc:63:8d:4a:fb:c4:58:8f:a8:
c0:0f:70:8d:fa:e3:3d:8f:68:3f:89:d6:46:1b:32:
3f:59:ad:dc:83:4c:42:38:c4:f6:6a:a7:1b:67:f4:
c6:5b:84:a7:34:2c:e7:bb:fe:56:86:69:0d:73:84:
71:07:37:f8:39:8f:2f:25:ec:42:f0:97:50:97:2f:
33:44:21:a9:cc:e2:c8:55:fc:0d:cb:48:28:18:8c:
1f:c3:94:ff:bc:87:19:c8:e8:18:ec:46:8a:59:45:
18:24:48:57:48:5a:cb:18:90:07:b7:24:8a:42:32:
09:ef:f6:39:b0:d6:db:af:54:7a:87:1e:76:88:93:
68:e8:00:d7:d7:5a:7e:f7:f3:f9:c6:c8:cc:2d:2d:
8d:e0:d3:d9:ac:58:bb:5a:6f:86:68:e1:76:87:72:
11:81:0a:b3:10:71:2c:5e:94:1d:e8:f6:60:52:ba:
b7:dd:ed:77:27:c1:aa:31:23:a8:42:c2:6a:40:ff:
ca:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AA:A6:22:B0:B9:FD:7B:80:70:44:35:A5:01:3B:19:50:63:2A:93
X509v3 Authority Key Identifier:
keyid:58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:bf:2f:83:0d:1b:12:c0:2d:d4:99:70:a7:dc:d3:98:b3:70:
25:f5:54:50:70:f7:ee:43:1d:62:88:f8:8c:68:ee:5f:7d:ed:
a2:a7:ce:a1:8e:56:61:e7:db:39:29:e8:70:04:9d:e5:5d:d0:
45:78:c9:88:af:bc:c0:9a:ea:38:31:d9:7d:53:f9:86:38:ac:
9e:72:18:31:48:a2:54:b7:a6:3a:15:55:72:17:d5:70:bb:c4:
64:c9:d6:6b:04:0d:63:43:27:e5:06:65:4c:52:39:f0:fd:00:
55:35:f6:73:79:f8:8e:b4:79:62:74:40:d1:7c:95:a5:7b:d6:
9e:ed:35:48:92:1c:34:2d:96:f9:7d:e0:20:d7:37:73:11:95:
b6:02:39:ca:0e:30:4a:c4:ce:e5:f1:41:68:28:0d:61:73:b5:
cf:81:f5:d1:78:df:af:a3:bb:25:27:6a:8a:e1:f0:69:14:ed:
94:a5:f0:41:b9:31:ea:41:30:37:96:3c:4b:4a:3a:7b:a9:e7:
97:4e:f8:31:2e:40:bd:eb:31:fb:92:6f:84:50:15:0d:f9:fb:
22:5b:cc:04:8c:a7:e5:3a:71:47:63:7a:35:ad:c3:d6:c8:eb:
22:62:2a:03:63:85:96:c4:fd:8e:db:d6:96:ba:9b:52:b8:82:
4e:de:61:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQxN0MxMTAvBgNVBAUTKDU4Q0Q4MEZGRkY2ODQ1MUQ0MEZDMDJDNzBEREI5MUZB
RDhFQzMxM0QwHhcNMjYwMzAxMDAxNDA5WhcNMjYwMzA4MDAxNDA5WjAYMRYwFAYD
VQQDDA02OWEzODRkMi05ODA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyGc/ZB1UrnkTXjMDw2zvgdLep9mxD7EFZEtXhxlgV13/6fyrSP3wjan4uebF
oe+4eTXPSipM1Tbo6LN5+xbGpinMY41K+8RYj6jAD3CN+uM9j2g/idZGGzI/Wa3c
g0xCOMT2aqcbZ/TGW4SnNCznu/5WhmkNc4RxBzf4OY8vJexC8JdQly8zRCGpzOLI
VfwNy0goGIwfw5T/vIcZyOgY7EaKWUUYJEhXSFrLGJAHtySKQjIJ7/Y5sNbbr1R6
hx52iJNo6ADX11p+9/P5xsjMLS2N4NPZrFi7Wm+GaOF2h3IRgQqzEHEsXpQd6PZg
Urq33e13J8GqMSOoQsJqQP/KrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPOqpiKw
uf17gHBENaUBOxlQYyqTMB8GA1UdIwQYMBaAFFjNgP//aEUdQPwCxw3bkfrY7DE9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDE3Qy8xODM5NzgwODQx
QzIxMUVDODVGNDI4NjhDNEY5QUUwMi9XTTJBX185b1JSMUFfQUxIRGR1Ui10anNN
VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dNMkFfXzlvUlIxQV9BTEhEZHVSLXRqc01UMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDE3Qy8xODM5NzgwODQxQzIxMUVDODVGNDI4NjhDNEY5QUUwMi9XTTJBX185b1JS
MUFfQUxIRGR1Ui10anNNVDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgb8vgw0bEsAt1Jlwp9zTmLNwJfVUUHD37kMdYoj4jGjuX33toqfOoY5WYefb
OSnocASd5V3QRXjJiK+8wJrqODHZfVP5hjisnnIYMUiiVLemOhVVchfVcLvEZMnW
awQNY0Mn5QZlTFI58P0AVTX2c3n4jrR5YnRA0XyVpXvWnu01SJIcNC2W+X3gINc3
cxGVtgI5yg4wSsTO5fFBaCgNYXO1z4H10Xjfr6O7JSdqiuHwaRTtlKXwQbkx6kEw
N5Y8S0o6e6nnl074MS5Avesx+5JvhFAVDfn7IlvMBIyn5TpxR2N6Na3D1sjrImIq
A2OFlsT9jtvWlrqbUriCTt5h9w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:30 2026 by rpki-client