
$ rpki-client -vvf rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
File: VG-WOuptbna5EQBSY8aKUfuJJ7c.mft (raw, json)
Hash identifier: ahJqyIYC2cgYcfJQPVpx+5HgwTtMyzU4St/to1ZYfvc=
Subject key identifier: 74:2C:2B:11:F3:D3:4E:F8:7B:B7:49:55:0B:A3:2E:E8:E0:D2:05:0A
Authority key identifier: 54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7
Certificate issuer: /CN=A91148C8/serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7
Certificate serial: 0BCC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
Manifest number: 0BB7
Signing time: Fri 17 Apr 2026 05:38:56 +0000
Manifest this update: Fri 17 Apr 2026 05:38:56 +0000
Manifest next update: Fri 24 Apr 2026 05:38:56 +0000
Files and hashes: 1: VG-WOuptbna5EQBSY8aKUfuJJ7c.crl (hash: wwG3sxjx65XAMCbLTxS2YOQkGIdp/m5M1ktjIr9KdfE=)
2: DA5748F6393511F1B7D838E9BE833773.roa (hash: Iq4f8OQxMLGxz0FmHgimBiY6DKxUXu2csndV5N4K/1k=)
3: 77A99FC8419911EA9B9A146BC4F9AE02.roa (hash: XcQJhF8QgQICOlSMTswo9Y8/RvytRROyJ+DjMTQGgi0=)
4: 7717CED6419911EA9B9A146BC4F9AE02.roa (hash: p4SuiZV4FF7G+YYk9OTeLPmJDW12xyv5yQ9JwoxzWgA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl
rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3020 (0xbcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91148C8, serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7
Validity
Not Before: Apr 17 05:38:56 2026 GMT
Not After : Apr 24 05:38:56 2026 GMT
Subject: CN=69e1c770-02d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:e9:2a:08:38:e7:e0:57:d9:fe:c3:07:4d:
d1:7b:43:7c:bf:41:a2:41:bb:05:c9:f8:19:ba:8b:
3b:93:c0:6d:59:ec:aa:ec:f5:10:5e:6f:81:9b:55:
2b:f9:03:1b:5a:3d:9b:5b:89:71:45:f8:f4:25:5e:
9e:ac:35:c0:71:41:31:49:46:01:b1:c8:3a:52:9c:
41:1c:31:5c:4f:de:7a:f0:58:d1:e1:0c:e2:9e:37:
fa:29:3b:f8:f2:e7:d4:47:9d:7b:5d:c8:1e:29:00:
b3:8a:1f:38:75:21:49:20:aa:cf:83:34:dd:69:d0:
7f:7a:d1:07:e7:50:08:d9:78:02:7f:d6:af:77:61:
36:dc:2e:b3:ff:27:8c:69:2c:02:a7:94:6d:60:ad:
da:5c:43:8b:55:0b:a1:c4:38:50:2d:00:c3:6b:6b:
28:f3:b4:25:ac:e9:71:fa:e6:3f:8a:95:5c:1e:a5:
08:78:ac:5a:1a:ff:bc:68:c0:6a:a5:30:d5:13:a6:
4c:39:c5:f4:17:3f:4b:29:1d:bf:42:7a:f8:33:01:
e0:66:93:6c:2a:79:0e:ac:b8:04:5a:7b:94:cb:b5:
22:49:94:76:84:34:66:3a:63:97:d1:77:ec:b2:2c:
37:b8:3c:81:94:91:c8:ed:3a:bb:d8:53:22:51:58:
a4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2C:2B:11:F3:D3:4E:F8:7B:B7:49:55:0B:A3:2E:E8:E0:D2:05:0A
X509v3 Authority Key Identifier:
keyid:54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:c4:c6:0d:d9:f5:a2:f6:3a:0d:54:14:a7:46:fd:df:3a:05:
96:e0:98:27:68:5f:84:2b:c8:4b:83:b6:a8:db:ab:47:00:ba:
46:ce:d7:a5:f1:7a:ee:2e:22:1a:dc:5b:0f:52:15:4d:a1:7d:
cb:29:ca:8d:4f:ac:0b:67:3e:b0:c3:14:37:3f:5f:9b:ac:2f:
d6:a2:47:33:f2:45:4f:d6:21:06:8b:c9:b0:82:af:4e:ff:a5:
7d:ec:30:b1:27:25:37:23:95:d2:e4:16:d4:37:bb:21:27:4a:
10:38:8e:63:59:05:21:4a:c5:95:ae:ae:c7:16:8f:83:d7:1a:
36:61:ab:92:ce:5b:93:cc:34:ca:52:d6:ac:79:a2:c1:7c:46:
99:04:81:e1:d9:71:26:c9:ee:d6:f2:9c:e6:73:b2:13:cb:35:
16:8f:ff:44:56:10:bd:30:70:42:53:8b:05:bc:c9:63:de:01:
61:6f:46:48:82:bc:99:64:fb:d8:f4:fe:92:5f:f9:05:f8:1d:
49:0c:11:c5:5f:55:94:94:6c:47:14:a2:84:33:24:1a:29:8a:
7d:33:ba:a0:b2:5b:f3:e8:89:cb:7e:ed:cd:02:64:30:c2:91:
0b:ca:c5:35:6b:8c:3a:e2:56:4c:2d:dc:4f:b4:38:a5:5c:4e:
a6:9b:18:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQ4QzgxMTAvBgNVBAUTKDU0NkY5NjNBRUE2RDZFNzZCOTExMDA1MjYzQzY4QTUx
RkI4OTI3QjcwHhcNMjYwNDE3MDUzODU2WhcNMjYwNDI0MDUzODU2WjAYMRYwFAYD
VQQDEw02OWUxYzc3MC0wMmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmqzpKgg45+BX2f7DB03Re0N8v0GiQbsFyfgZuos7k8BtWeyq7PUQXm+Bm1Ur
+QMbWj2bW4lxRfj0JV6erDXAcUExSUYBscg6UpxBHDFcT9568FjR4Qzinjf6KTv4
8ufUR517XcgeKQCzih84dSFJIKrPgzTdadB/etEH51AI2XgCf9avd2E23C6z/yeM
aSwCp5RtYK3aXEOLVQuhxDhQLQDDa2so87QlrOlx+uY/ipVcHqUIeKxaGv+8aMBq
pTDVE6ZMOcX0Fz9LKR2/Qnr4MwHgZpNsKnkOrLgEWnuUy7UiSZR2hDRmOmOX0Xfs
siw3uDyBlJHI7Tq72FMiUVikgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHQsKxHz
0074e7dJVQujLujg0gUKMB8GA1UdIwQYMBaAFFRvljrqbW52uREAUmPGilH7iSe3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDhDOC8zMzY0RDMxNjQw
Q0ExMUVBODk5MkI4NURDNEY5QUUwMi9WRy1XT3VwdGJuYTVFUUJTWThhS1VmdUpK
N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZHLVdPdXB0Ym5hNUVRQlNZOGFLVWZ1Sko3Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDhDOC8zMzY0RDMxNjQwQ0ExMUVBODk5MkI4NURDNEY5QUUwMi9WRy1XT3VwdGJu
YTVFUUJTWThhS1VmdUpKN2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhsTGDdn1ovY6DVQUp0b93zoFluCYJ2hfhCvIS4O2qNurRwC6Rs7XpfF67i4i
GtxbD1IVTaF9yynKjU+sC2c+sMMUNz9fm6wv1qJHM/JFT9YhBovJsIKvTv+lfeww
sSclNyOV0uQW1De7ISdKEDiOY1kFIUrFla6uxxaPg9caNmGrks5bk8w0ylLWrHmi
wXxGmQSB4dlxJsnu1vKc5nOyE8s1Fo//RFYQvTBwQlOLBbzJY94BYW9GSIK8mWT7
2PT+kl/5BfgdSQwRxV9VlJRsRxSihDMkGimKfTO6oLJb8+iJy37tzQJkMMKRC8rF
NWuMOuJWTC3cT7Q4pVxOppsYvQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:31:44 2026 by rpki-client