
$ rpki-client -vvf rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
File: VG-WOuptbna5EQBSY8aKUfuJJ7c.mft (raw, json)
Hash identifier: bqNqaAGhKB0AnEIffHpG6V5pxRRZ/KmpYPHLl2W4Hug=
Subject key identifier: 09:37:2D:6C:A7:AC:2B:48:FC:A1:88:BD:4F:DC:6C:EC:C3:FE:0E:84
Authority key identifier: 54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7
Certificate issuer: /CN=A91148C8/serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7
Certificate serial: 0BB0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
Manifest number: 0B9D
Signing time: Mon 02 Mar 2026 01:45:11 +0000
Manifest this update: Mon 02 Mar 2026 01:45:07 +0000
Manifest next update: Mon 09 Mar 2026 01:45:07 +0000
Files and hashes: 1: VG-WOuptbna5EQBSY8aKUfuJJ7c.crl (hash: ROYuhAcmCvt3dAofUq9DwKVPO0LX/V6XP+wlCs3eNSs=)
2: 7717CED6419911EA9B9A146BC4F9AE02.roa (hash: p4SuiZV4FF7G+YYk9OTeLPmJDW12xyv5yQ9JwoxzWgA=)
3: 77A99FC8419911EA9B9A146BC4F9AE02.roa (hash: XcQJhF8QgQICOlSMTswo9Y8/RvytRROyJ+DjMTQGgi0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl
rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2992 (0xbb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91148C8, serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7
Validity
Not Before: Mar 2 01:45:07 2026 GMT
Not After : Mar 9 01:45:07 2026 GMT
Subject: CN=69a4eba6-448f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:7b:ed:cb:ee:28:7e:a0:69:ec:67:32:75:
ff:9b:ea:5b:2b:3c:8c:34:3a:9c:76:ea:a4:ce:1d:
d8:f6:9c:5d:15:19:a7:47:6b:73:27:63:8c:dd:ae:
6c:c8:0b:19:fe:e6:24:00:7b:26:19:9f:54:ce:be:
f5:30:c6:60:77:8c:57:02:98:fe:6c:be:37:37:33:
9d:56:1e:ce:5f:7f:54:28:d3:ea:76:8c:d9:1d:e6:
53:02:4e:ec:d0:b7:57:45:95:22:b2:51:68:b4:2c:
8c:47:ae:2a:58:9d:0a:ce:b3:25:22:22:03:73:45:
85:47:4b:f3:45:f2:5b:5f:9e:33:ea:5f:28:26:e7:
13:47:7e:bf:69:7c:f7:78:1c:3f:86:0e:ca:2e:a8:
14:07:a0:73:b9:9b:58:87:a2:6f:68:67:4e:1e:f0:
ff:1d:e3:61:cb:78:14:61:ef:28:d3:c6:54:53:47:
91:87:dc:6a:bf:af:80:b3:05:80:e9:fa:74:a1:97:
4e:13:7f:70:e1:bb:77:b8:8f:f6:fe:46:b2:22:b3:
ec:94:6a:cb:cc:a2:b5:9f:d3:60:14:cb:ac:1a:66:
9c:3d:47:bc:55:6b:3b:2b:bc:6c:53:f9:c3:08:67:
30:78:9c:bf:0b:7b:0a:0c:20:c6:13:76:6b:26:ae:
03:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:37:2D:6C:A7:AC:2B:48:FC:A1:88:BD:4F:DC:6C:EC:C3:FE:0E:84
X509v3 Authority Key Identifier:
keyid:54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:cb:17:52:56:1c:7d:f5:25:08:59:79:61:0d:62:4d:2f:7d:
33:d4:8d:cc:55:99:d2:2c:a4:64:29:55:86:a1:55:4d:5f:29:
14:50:fc:60:68:39:0c:81:8f:2d:2b:6a:5d:31:21:fc:3b:54:
1b:74:df:2b:cf:fb:67:d7:6b:43:ca:95:c5:a7:8f:40:ad:05:
40:30:1f:f6:59:fa:da:fd:b2:96:70:46:ff:42:0b:0f:12:7a:
30:9b:96:24:f3:47:02:18:45:6f:36:c9:07:86:eb:87:36:14:
ee:03:f6:85:25:d5:a1:e8:63:f7:c5:46:6e:4c:92:61:19:5f:
15:c2:d5:6d:06:e1:f2:db:f1:ac:ac:9d:ea:af:6c:ea:78:2d:
d6:e4:b8:a4:06:d8:5a:ee:b5:fb:20:c2:08:50:0c:ec:e1:40:
92:71:60:fa:bd:e1:18:2a:b6:03:28:be:74:8f:0e:ff:f2:b9:
21:34:5e:79:ff:d3:a0:9e:fd:ea:4e:38:92:93:63:81:98:e1:
20:07:9f:7e:01:eb:c4:0d:05:da:69:00:8f:35:9d:0a:63:c0:
b5:47:64:70:ac:cb:82:8d:75:31:8e:cb:cb:74:88:8e:c7:3c:
40:51:fa:9a:b8:74:b5:3d:ba:34:9b:42:39:8c:5f:3c:12:a3:
30:b2:d6:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQ4QzgxMTAvBgNVBAUTKDU0NkY5NjNBRUE2RDZFNzZCOTExMDA1MjYzQzY4QTUx
RkI4OTI3QjcwHhcNMjYwMzAyMDE0NTA3WhcNMjYwMzA5MDE0NTA3WjAYMRYwFAYD
VQQDEw02OWE0ZWJhNi00NDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAowV77cvuKH6gaexnMnX/m+pbKzyMNDqcduqkzh3Y9pxdFRmnR2tzJ2OM3a5s
yAsZ/uYkAHsmGZ9Uzr71MMZgd4xXApj+bL43NzOdVh7OX39UKNPqdozZHeZTAk7s
0LdXRZUislFotCyMR64qWJ0KzrMlIiIDc0WFR0vzRfJbX54z6l8oJucTR36/aXz3
eBw/hg7KLqgUB6BzuZtYh6JvaGdOHvD/HeNhy3gUYe8o08ZUU0eRh9xqv6+AswWA
6fp0oZdOE39w4bt3uI/2/kayIrPslGrLzKK1n9NgFMusGmacPUe8VWs7K7xsU/nD
CGcweJy/C3sKDCDGE3ZrJq4DzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAk3LWyn
rCtI/KGIvU/cbOzD/g6EMB8GA1UdIwQYMBaAFFRvljrqbW52uREAUmPGilH7iSe3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDhDOC8zMzY0RDMxNjQw
Q0ExMUVBODk5MkI4NURDNEY5QUUwMi9WRy1XT3VwdGJuYTVFUUJTWThhS1VmdUpK
N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZHLVdPdXB0Ym5hNUVRQlNZOGFLVWZ1Sko3Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDhDOC8zMzY0RDMxNjQwQ0ExMUVBODk5MkI4NURDNEY5QUUwMi9WRy1XT3VwdGJu
YTVFUUJTWThhS1VmdUpKN2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyssXUlYcffUlCFl5YQ1iTS99M9SNzFWZ0iykZClVhqFVTV8pFFD8YGg5DIGP
LStqXTEh/DtUG3TfK8/7Z9drQ8qVxaePQK0FQDAf9ln62v2ylnBG/0ILDxJ6MJuW
JPNHAhhFbzbJB4brhzYU7gP2hSXVoehj98VGbkySYRlfFcLVbQbh8tvxrKyd6q9s
6ngt1uS4pAbYWu61+yDCCFAM7OFAknFg+r3hGCq2Ayi+dI8O//K5ITReef/ToJ79
6k44kpNjgZjhIAeffgHrxA0F2mkAjzWdCmPAtUdkcKzLgo11MY7Ly3SIjsc8QFH6
mrh0tT26NJtCOYxfPBKjMLLWqA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:48:32 2026 by rpki-client