$ rpki-client -vvf rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft File: VG-WOuptbna5EQBSY8aKUfuJJ7c.mft (raw, json) Hash identifier: UWy9HuK2V4pns+PfeDebiLxwUQ8eKvmuFlW/bPBV08M= Subject key identifier: 1D:25:AB:6D:A8:D0:40:50:2D:33:3A:86:09:60:57:7F:9E:04:FB:21 Authority key identifier: 54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7 Certificate issuer: /CN=A91148C8/serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7 Certificate serial: 0BBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft Manifest number: 0BAB Signing time: Sat 28 Mar 2026 18:54:19 +0000 Manifest this update: Sat 28 Mar 2026 18:54:18 +0000 Manifest next update: Sat 04 Apr 2026 18:54:18 +0000 Files and hashes: 1: VG-WOuptbna5EQBSY8aKUfuJJ7c.crl (hash: Bfz2sHnGMwX6Xer0REOGIeA0b0lyzsbV7+TuEXxnNt0=) 2: 7717CED6419911EA9B9A146BC4F9AE02.roa (hash: p4SuiZV4FF7G+YYk9OTeLPmJDW12xyv5yQ9JwoxzWgA=) 3: 77A99FC8419911EA9B9A146BC4F9AE02.roa (hash: XcQJhF8QgQICOlSMTswo9Y8/RvytRROyJ+DjMTQGgi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 18:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3006 (0xbbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91148C8, serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7 Validity Not Before: Mar 28 18:54:18 2026 GMT Not After : Apr 4 18:54:18 2026 GMT Subject: CN=69c823da-bd87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:da:74:be:69:2a:ad:a5:18:25:c0:ad:c2:dd: a9:45:4d:9c:68:4a:02:bb:a4:81:cf:8d:15:16:a8: d2:f5:f1:1f:df:ca:88:de:77:60:1c:10:a8:18:8e: 56:8f:87:fb:a3:b5:01:2d:b2:6d:59:45:f6:60:9f: 8c:8b:a5:c1:51:43:76:81:73:08:be:0c:bc:66:61: 70:40:29:44:a2:2d:14:c9:6e:8c:2a:2d:61:31:ae: e9:46:34:ec:77:07:c4:4b:e1:7a:26:d2:5f:3c:c3: 04:40:fd:a1:2c:84:fd:b5:57:ab:d7:93:85:c9:c3: bf:ba:25:d0:26:d6:49:35:3a:b5:13:03:5c:2a:00: ac:4b:42:3a:cb:b3:46:4b:0f:23:2e:3a:3d:62:56: 83:74:5d:43:9d:af:19:70:37:97:38:1d:7f:29:c4: ca:36:cd:7d:07:c3:eb:b8:7f:ef:e1:ab:c5:59:ab: 0b:12:45:6d:f8:28:5d:47:30:24:98:fd:7a:fd:3e: db:99:60:a8:d5:3e:79:88:e3:66:42:a2:46:77:01: be:5c:3b:55:28:43:9e:bf:bb:56:e7:1b:32:e0:68: bd:27:0f:60:13:b5:c7:79:de:ff:6b:96:15:3d:76: de:36:c4:b0:9c:06:28:3c:9a:b7:51:de:26:78:cb: e1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:25:AB:6D:A8:D0:40:50:2D:33:3A:86:09:60:57:7F:9E:04:FB:21 X509v3 Authority Key Identifier: keyid:54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:d7:54:07:05:9b:2d:db:f8:c9:d5:e1:b0:a3:e1:fb:0e:4c: ea:3b:77:df:2a:cb:5f:da:65:96:ec:b2:f7:7b:d7:86:95:eb: 88:82:31:cc:92:f2:2f:d6:3e:80:63:22:11:00:7e:99:3e:48: 8d:e1:73:66:7c:78:9c:95:18:7f:16:78:17:e4:53:58:0e:c3: 7d:01:0b:bd:bf:03:a9:2f:d4:43:61:01:8a:bd:79:ba:c3:84: 8a:ad:61:a3:65:83:3c:37:ed:0b:50:e4:a9:8d:d3:d6:d6:59: f0:01:a3:b6:74:67:51:1b:aa:db:d0:c2:a4:e2:2a:c3:db:cc: 82:1f:f1:d5:86:9b:67:7a:da:5e:4d:a9:b8:13:c7:36:e9:d5: 73:87:41:da:23:b5:bb:97:38:06:77:d1:cd:35:ee:ee:3f:04: 8a:42:18:1e:fa:c8:7f:9e:cd:13:cc:e2:51:da:40:56:93:73: fc:08:d4:d0:80:b1:e2:76:30:d4:38:21:69:71:77:bc:3f:bd: 6f:65:97:2d:9d:35:a3:ab:39:f8:24:79:18:94:37:9d:d0:e6: fc:8f:9e:0a:b5:02:41:8e:55:74:fa:75:88:ca:a5:25:5f:58: 28:de:ea:1a:34:dc:f9:aa:ac:b6:69:76:22:27:d1:9d:57:49: 9c:3d:2d:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4QzgxMTAvBgNVBAUTKDU0NkY5NjNBRUE2RDZFNzZCOTExMDA1MjYzQzY4QTUx RkI4OTI3QjcwHhcNMjYwMzI4MTg1NDE4WhcNMjYwNDA0MTg1NDE4WjAYMRYwFAYD VQQDEw02OWM4MjNkYS1iZDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNp0vmkqraUYJcCtwt2pRU2caEoCu6SBz40VFqjS9fEf38qI3ndgHBCoGI5W j4f7o7UBLbJtWUX2YJ+Mi6XBUUN2gXMIvgy8ZmFwQClEoi0UyW6MKi1hMa7pRjTs dwfES+F6JtJfPMMEQP2hLIT9tVer15OFycO/uiXQJtZJNTq1EwNcKgCsS0I6y7NG Sw8jLjo9YlaDdF1Dna8ZcDeXOB1/KcTKNs19B8PruH/v4avFWasLEkVt+ChdRzAk mP16/T7bmWCo1T55iONmQqJGdwG+XDtVKEOev7tW5xsy4Gi9Jw9gE7XHed7/a5YV PXbeNsSwnAYoPJq3Ud4meMvhmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB0lq22o 0EBQLTM6hglgV3+eBPshMB8GA1UdIwQYMBaAFFRvljrqbW52uREAUmPGilH7iSe3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDhDOC8zMzY0RDMxNjQw Q0ExMUVBODk5MkI4NURDNEY5QUUwMi9WRy1XT3VwdGJuYTVFUUJTWThhS1VmdUpK N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZHLVdPdXB0Ym5hNUVRQlNZOGFLVWZ1Sko3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDhDOC8zMzY0RDMxNjQwQ0ExMUVBODk5MkI4NURDNEY5QUUwMi9WRy1XT3VwdGJu YTVFUUJTWThhS1VmdUpKN2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY9dUBwWbLdv4ydXhsKPh+w5M6jt33yrLX9plluyy93vXhpXriIIxzJLyL9Y+ gGMiEQB+mT5IjeFzZnx4nJUYfxZ4F+RTWA7DfQELvb8DqS/UQ2EBir15usOEiq1h o2WDPDftC1DkqY3T1tZZ8AGjtnRnURuq29DCpOIqw9vMgh/x1YabZ3raXk2puBPH NunVc4dB2iO1u5c4BnfRzTXu7j8EikIYHvrIf57NE8ziUdpAVpNz/AjU0ICx4nYw 1DghaXF3vD+9b2WXLZ01o6s5+CR5GJQ3ndDm/I+eCrUCQY5VdPp1iMqlJV9YKN7q GjTc+aqstml2IifRnVdJnD0tOA== -----END CERTIFICATE-----Generated at Sun Mar 29 23:44:05 2026 by rpki-client