
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
File: VG-WOuptbna5EQBSY8aKUfuJJ7c.mft (raw, json)
Hash identifier: Vfyl78EF3d8igkfA5+KFoZnX2TCxyC9EncWXdwSOmdI=
Subject key identifier: 68:02:C6:0B:77:9B:19:14:1F:94:AC:63:54:9A:57:72:5F:76:43:E8
Authority key identifier: 54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7
Certificate issuer: /CN=A91148C8/serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7
Certificate serial: 0C24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
Manifest number: 0C0F
Signing time: Tue 06 Oct 2026 18:56:43 +0000
Manifest this update: Tue 06 Oct 2026 18:56:43 +0000
Manifest next update: Tue 13 Oct 2026 18:56:43 +0000
Files and hashes: 1: VG-WOuptbna5EQBSY8aKUfuJJ7c.crl (hash: UPId2elbYCM5pQidZkHFWIX2oRZ6a8U+P47VT/YsFlA=)
2: 7717CED6419911EA9B9A146BC4F9AE02.roa (hash: p4SuiZV4FF7G+YYk9OTeLPmJDW12xyv5yQ9JwoxzWgA=)
3: 77A99FC8419911EA9B9A146BC4F9AE02.roa (hash: XcQJhF8QgQICOlSMTswo9Y8/RvytRROyJ+DjMTQGgi0=)
4: DA5748F6393511F1B7D838E9BE833773.roa (hash: Iq4f8OQxMLGxz0FmHgimBiY6DKxUXu2csndV5N4K/1k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl
rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3108 (0xc24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91148C8, serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7
Validity
Not Before: Oct 6 18:56:43 2026 GMT
Not After : Oct 13 18:56:43 2026 GMT
Subject: CN=6ac5446b-5932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e2:8d:13:d5:84:f0:d3:33:d2:7a:37:47:a5:
0e:0d:98:f6:b2:fd:c3:57:df:1b:b6:e5:d3:3a:11:
72:01:d8:0c:8e:55:91:42:8e:99:fe:8b:02:f7:e4:
5a:7d:1a:88:12:ea:12:9c:05:f1:41:6a:7f:9e:22:
3a:95:95:f4:77:6b:a4:70:2c:90:d8:ca:5b:02:ab:
de:72:cb:f9:6c:13:08:0e:30:be:a2:c9:4d:02:1f:
a2:4b:ee:1c:77:3a:aa:42:3a:e7:e1:9e:08:53:1f:
81:ac:25:bf:d0:5f:25:b2:9e:22:93:17:9f:bc:4d:
0a:94:77:7b:f1:1d:ab:38:f5:fe:74:73:70:ae:85:
a4:d6:95:fb:7a:05:39:ad:b1:c7:ea:0d:7b:45:0b:
4e:65:53:80:b8:b8:72:8c:cd:fa:e4:99:7b:36:f2:
28:9c:02:9f:68:3e:ec:07:8f:8f:8c:f3:c5:39:45:
2c:4e:b9:5e:42:56:4c:ef:1c:c4:26:34:41:50:42:
b1:41:89:3d:eb:f2:0d:58:b0:00:ce:a6:c2:d7:b2:
9c:84:4d:eb:6d:3c:9b:d2:2a:22:9f:7e:43:b2:15:
06:fa:8d:06:1a:a1:6a:65:4b:4d:c1:61:53:c5:04:
6b:53:c7:73:ca:10:af:56:c4:3b:fd:9f:86:8a:b8:
ee:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:02:C6:0B:77:9B:19:14:1F:94:AC:63:54:9A:57:72:5F:76:43:E8
X509v3 Authority Key Identifier:
keyid:54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:b8:e1:42:fa:b6:4d:2e:db:d3:1d:cd:80:fc:f5:07:6f:6f:
56:fc:73:5b:96:d3:28:92:be:16:4c:bd:80:11:98:d5:a5:c6:
da:e1:24:1f:14:2b:e3:6a:17:e6:51:e5:0e:04:73:da:bb:07:
ef:ac:ec:c8:e8:61:84:f5:ab:d6:03:9b:98:bb:b2:53:d2:f1:
2c:c3:97:9a:12:e7:56:c9:42:13:6f:30:6d:e0:c0:fd:f5:3f:
ad:2c:e5:b9:1b:b2:e3:a2:d8:78:d8:aa:d7:79:90:8d:26:87:
c7:1a:dc:84:73:a1:a5:c2:a6:14:85:81:55:9c:41:64:30:74:
16:59:e3:e2:6d:5d:58:80:ab:10:da:bd:98:fb:8f:76:98:47:
dc:37:54:1e:92:c4:68:55:d3:36:e8:5d:31:06:c5:e6:34:57:
63:7e:03:42:fe:95:ce:12:6b:48:5b:6c:44:9b:75:9d:a7:13:
36:86:83:06:68:06:a4:b0:5a:c8:4c:af:f8:64:ff:be:53:01:
3f:ac:50:89:5f:ae:72:e8:67:8c:73:29:a4:39:09:ed:fc:62:
1c:49:83:d1:60:38:42:28:c6:58:83:ce:c1:eb:54:87:47:6a:
e8:7d:ae:cf:3b:87:1e:60:05:a0:a6:72:f1:f8:1e:b6:96:b6:
b5:7c:0c:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQ4QzgxMTAvBgNVBAUTKDU0NkY5NjNBRUE2RDZFNzZCOTExMDA1MjYzQzY4QTUx
RkI4OTI3QjcwHhcNMjYxMDA2MTg1NjQzWhcNMjYxMDEzMTg1NjQzWjAYMRYwFAYD
VQQDEw02YWM1NDQ2Yi01OTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvuKNE9WE8NMz0no3R6UODZj2sv3DV98btuXTOhFyAdgMjlWRQo6Z/osC9+Ra
fRqIEuoSnAXxQWp/niI6lZX0d2ukcCyQ2MpbAqvecsv5bBMIDjC+oslNAh+iS+4c
dzqqQjrn4Z4IUx+BrCW/0F8lsp4ikxefvE0KlHd78R2rOPX+dHNwroWk1pX7egU5
rbHH6g17RQtOZVOAuLhyjM365Jl7NvIonAKfaD7sB4+PjPPFOUUsTrleQlZM7xzE
JjRBUEKxQYk96/INWLAAzqbC17KchE3rbTyb0ioin35DshUG+o0GGqFqZUtNwWFT
xQRrU8dzyhCvVsQ7/Z+GirjuCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGgCxgt3
mxkUH5SsY1SaV3JfdkPoMB8GA1UdIwQYMBaAFFRvljrqbW52uREAUmPGilH7iSe3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDhDOC8zMzY0RDMxNjQw
Q0ExMUVBODk5MkI4NURDNEY5QUUwMi9WRy1XT3VwdGJuYTVFUUJTWThhS1VmdUpK
N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZHLVdPdXB0Ym5hNUVRQlNZOGFLVWZ1Sko3Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDhDOC8zMzY0RDMxNjQwQ0ExMUVBODk5MkI4NURDNEY5QUUwMi9WRy1XT3VwdGJu
YTVFUUJTWThhS1VmdUpKN2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiLjhQvq2TS7b0x3NgPz1B29vVvxzW5bTKJK+Fky9gBGY1aXG2uEkHxQr42oX
5lHlDgRz2rsH76zsyOhhhPWr1gObmLuyU9LxLMOXmhLnVslCE28wbeDA/fU/rSzl
uRuy46LYeNiq13mQjSaHxxrchHOhpcKmFIWBVZxBZDB0Flnj4m1dWICrENq9mPuP
dphH3DdUHpLEaFXTNuhdMQbF5jRXY34DQv6VzhJrSFtsRJt1nacTNoaDBmgGpLBa
yEyv+GT/vlMBP6xQiV+ucuhnjHMppDkJ7fxiHEmD0WA4QijGWIPOwetUh0dq6H2u
zzuHHmAFoKZy8fgetpa2tXwMjg==
-----END CERTIFICATE-----
Generated at Wed Oct 7 02:21:06 2026 by rpki-client