
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
File: WM2A__9oRR1A_ALHDduR-tjsMT0.mft (raw, json)
Hash identifier: g6Ijz0LD490rovowuOzku8/C6mr95G3SvDJj2DIEVko=
Subject key identifier: 99:A4:37:3B:1C:99:B7:68:FA:DA:37:DF:36:01:C1:29:44:A8:F7:22
Authority key identifier: 58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D
Certificate issuer: /CN=A916D17C/serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D
Certificate serial: 0532
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
Manifest number: 0527
Signing time: Thu 16 Apr 2026 23:27:42 +0000
Manifest this update: Thu 16 Apr 2026 23:27:42 +0000
Manifest next update: Thu 23 Apr 2026 23:27:42 +0000
Files and hashes: 1: WM2A__9oRR1A_ALHDduR-tjsMT0.crl (hash: 7hcpbnkAm00LwrqDC/db87Vc4sMHCbTuG6KP4YJNRbs=)
2: 980C961041CB11EC9262BD80C4F9AE02.roa (hash: TDC7C28FUPlkmyETAyWNhr+eEu2Z5SUrbJOInYZuEiM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl
rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:27:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1330 (0x532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D17C, serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D
Validity
Not Before: Apr 16 23:27:42 2026 GMT
Not After : Apr 23 23:27:42 2026 GMT
Subject: CN=69e1706e-1094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3c:90:ae:84:0a:b2:f0:a5:34:c4:aa:6c:02:
80:92:dc:8d:f7:03:bb:01:5a:42:9a:6a:0a:72:2c:
4b:04:4d:49:46:a5:45:e1:5e:f9:b7:e0:f4:b5:b2:
ab:5a:df:d0:41:21:b3:c0:ff:3a:ec:99:59:e8:36:
f7:33:fe:c4:aa:a3:21:ba:06:f6:fd:14:cb:a5:8b:
c7:03:f6:79:5d:20:05:45:68:71:b0:51:71:3e:b6:
8a:0d:2b:7c:08:68:f5:cc:ef:e7:01:b6:a7:85:03:
af:18:39:75:af:55:a4:2b:db:83:2b:7e:de:f0:6f:
ea:b8:3a:74:0d:78:c0:5a:bd:4f:cd:b0:c1:51:3d:
1f:d9:ba:dd:7f:f9:d1:8b:6b:90:25:7a:23:f6:b4:
cc:ac:a0:c2:a5:62:b8:78:a5:5e:39:75:19:5d:f3:
ec:b3:e1:38:f1:95:fa:72:84:d1:8a:17:b6:7c:f9:
45:3b:70:7f:5c:92:b6:bb:d4:8b:61:e0:96:63:cb:
4e:aa:6b:6b:b1:74:ac:ad:92:2a:a7:64:52:15:1a:
0e:30:53:6f:5c:11:10:6d:4a:2e:4a:36:1c:61:07:
d0:75:cf:89:18:ce:ca:5f:6b:3b:62:19:ef:23:23:
e2:e6:83:6e:8e:e1:ed:38:29:2c:15:e6:a9:3e:df:
7d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A4:37:3B:1C:99:B7:68:FA:DA:37:DF:36:01:C1:29:44:A8:F7:22
X509v3 Authority Key Identifier:
keyid:58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:77:2e:ec:59:c5:18:c5:51:41:29:db:66:6d:d2:7f:4a:9d:
ce:27:26:dd:70:49:7f:ba:71:92:bb:70:77:72:48:b0:4d:a4:
29:92:17:24:b7:de:32:80:6d:e3:16:e6:ef:de:dd:33:b2:0e:
37:bc:ff:1a:3d:11:9b:21:19:50:85:e2:65:ed:95:29:d4:ce:
cd:4a:ae:6f:37:d0:49:95:7e:cc:d0:e2:ca:c5:08:96:17:9b:
12:a3:ce:0a:b2:a9:8d:dd:be:0d:2a:32:d4:53:24:ee:4b:9c:
69:4f:31:ec:f8:af:77:16:80:0c:dd:3b:76:fa:3d:32:cd:c7:
30:4d:22:a3:de:c7:f6:9b:98:2f:77:93:95:97:ce:03:58:ea:
2a:ad:e0:7c:c1:17:17:14:cd:6b:d1:6f:16:cf:27:f4:45:ca:
a8:30:61:81:69:87:9e:bd:cc:04:9f:ef:1e:db:d5:cb:f0:3b:
b0:0d:c4:e0:21:76:0f:05:c4:ff:41:89:20:3f:39:6b:cc:b2:
d2:fc:d4:71:db:4b:9d:47:fe:77:36:af:fa:cc:4f:bd:ae:cf:
e5:d5:72:64:47:0f:76:77:2d:67:6d:36:c0:20:22:d6:dc:35:
58:93:a0:f7:f9:c8:8b:98:1c:d9:73:5f:6e:87:3f:bc:71:82:
9b:2b:07:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:26 2026 by rpki-client