
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
File: VG-WOuptbna5EQBSY8aKUfuJJ7c.mft (raw, json)
Hash identifier: ipIVKNfIDhfzHBG8AyibrMBpe5GdtaL5XVSGSB54F/8=
Subject key identifier: E9:89:4C:C3:D8:F6:F9:78:47:99:BE:05:9B:28:18:05:62:11:0B:5C
Authority key identifier: 54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7
Certificate issuer: /CN=A91148C8/serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7
Certificate serial: 0C1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
Manifest number: 0C07
Signing time: Sun 20 Sep 2026 18:47:58 +0000
Manifest this update: Sun 20 Sep 2026 18:47:58 +0000
Manifest next update: Sun 27 Sep 2026 18:47:58 +0000
Files and hashes: 1: VG-WOuptbna5EQBSY8aKUfuJJ7c.crl (hash: AShdsorRt1aKA78E53WT1x5TbWCeewaLpeNe8ovSqT0=)
2: 7717CED6419911EA9B9A146BC4F9AE02.roa (hash: p4SuiZV4FF7G+YYk9OTeLPmJDW12xyv5yQ9JwoxzWgA=)
3: DA5748F6393511F1B7D838E9BE833773.roa (hash: Iq4f8OQxMLGxz0FmHgimBiY6DKxUXu2csndV5N4K/1k=)
4: 77A99FC8419911EA9B9A146BC4F9AE02.roa (hash: XcQJhF8QgQICOlSMTswo9Y8/RvytRROyJ+DjMTQGgi0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl
rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3100 (0xc1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91148C8, serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7
Validity
Not Before: Sep 20 18:47:58 2026 GMT
Not After : Sep 27 18:47:58 2026 GMT
Subject: CN=6ab02a5e-2e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:5a:84:0d:c1:db:f5:20:8d:c6:5f:3a:25:
56:6c:44:a4:7d:8f:26:d2:c8:3b:3d:f6:74:9f:80:
de:7f:ba:22:df:85:ac:e2:9b:91:c8:9d:85:f9:40:
23:dc:d7:4f:5e:90:97:9f:29:59:0a:5b:7c:ea:52:
4d:79:ae:4f:4c:40:c8:9a:29:e3:22:9a:7c:b3:a0:
b2:f5:4c:cd:a0:aa:03:68:cd:e4:ac:32:28:ff:86:
c4:bb:39:54:e9:f4:2e:dc:f1:75:6e:85:94:b8:08:
7d:6e:31:63:15:ae:e5:27:47:33:67:bd:1e:ca:6f:
f4:92:01:8a:67:88:53:55:b5:e7:6e:06:38:47:70:
d8:a0:ca:ba:47:74:ff:2d:4f:fb:ab:3a:25:9e:c2:
a0:02:f2:ea:a3:5d:5e:f5:89:3d:4a:3f:22:57:46:
65:eb:5f:4e:46:3d:ae:cf:35:8b:77:55:72:9e:b0:
97:ae:91:33:0d:fb:3c:ee:a4:3b:2f:8a:0c:43:48:
7f:82:aa:e2:55:07:aa:a7:49:7a:ef:1b:9b:d6:80:
8e:75:2e:c0:d5:a8:a1:7a:d6:81:45:cb:71:fc:b1:
6f:7d:29:41:27:2d:8b:d0:3c:ed:63:b4:78:a2:03:
4f:6e:a5:62:c8:dc:0f:7c:89:bd:48:e8:48:6b:ab:
a2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:89:4C:C3:D8:F6:F9:78:47:99:BE:05:9B:28:18:05:62:11:0B:5C
X509v3 Authority Key Identifier:
keyid:54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:73:da:70:94:bb:78:64:f3:33:ec:5c:ce:9f:89:e8:cd:82:
fb:46:72:04:4e:43:c2:5a:7f:21:51:38:b7:c3:9e:0d:1e:f2:
ea:a4:a8:01:80:3b:a0:e2:ed:a1:e6:59:01:8f:a2:d6:75:b5:
df:bf:48:5f:b4:74:34:5d:32:9e:70:f6:28:6f:21:f3:b8:1b:
16:74:68:15:a4:e1:77:1f:ec:68:0c:98:d2:9c:d6:e2:78:48:
7e:45:a3:d6:13:20:ea:34:19:68:fb:5b:03:95:29:f9:b4:a9:
79:e0:42:ab:0c:64:dc:ef:ee:d0:45:98:1d:d9:ff:44:65:f6:
84:b5:6c:d3:e8:59:ca:a8:28:21:70:35:23:c4:a7:66:8f:a2:
59:ab:20:ba:a3:ef:b3:2d:f1:2c:b6:99:ae:32:88:e4:96:0c:
b0:83:47:ee:38:a7:4b:48:23:f6:1d:a3:3a:5f:9b:bc:d6:57:
b0:9c:13:a8:a5:12:8f:22:49:aa:51:04:1e:da:db:e9:a3:85:
6f:d0:52:69:e8:a3:c1:40:ca:76:3f:7a:58:f6:35:fd:91:b8:
62:d1:de:dc:a8:9b:09:b3:17:83:4f:9a:1e:69:4a:bf:1e:06:
c8:85:c2:6a:66:36:62:a1:ce:c7:fa:32:c8:9b:43:1a:ea:d3:
05:1b:b7:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQ4QzgxMTAvBgNVBAUTKDU0NkY5NjNBRUE2RDZFNzZCOTExMDA1MjYzQzY4QTUx
RkI4OTI3QjcwHhcNMjYwOTIwMTg0NzU4WhcNMjYwOTI3MTg0NzU4WjAYMRYwFAYD
VQQDEw02YWIwMmE1ZS0yZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn75ahA3B2/UgjcZfOiVWbESkfY8m0sg7PfZ0n4Def7oi34Ws4puRyJ2F+UAj
3NdPXpCXnylZClt86lJNea5PTEDIminjIpp8s6Cy9UzNoKoDaM3krDIo/4bEuzlU
6fQu3PF1boWUuAh9bjFjFa7lJ0czZ70eym/0kgGKZ4hTVbXnbgY4R3DYoMq6R3T/
LU/7qzolnsKgAvLqo11e9Yk9Sj8iV0Zl619ORj2uzzWLd1VynrCXrpEzDfs87qQ7
L4oMQ0h/gqriVQeqp0l67xub1oCOdS7A1aihetaBRctx/LFvfSlBJy2L0DztY7R4
ogNPbqViyNwPfIm9SOhIa6uiEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOmJTMPY
9vl4R5m+BZsoGAViEQtcMB8GA1UdIwQYMBaAFFRvljrqbW52uREAUmPGilH7iSe3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDhDOC8zMzY0RDMxNjQw
Q0ExMUVBODk5MkI4NURDNEY5QUUwMi9WRy1XT3VwdGJuYTVFUUJTWThhS1VmdUpK
N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZHLVdPdXB0Ym5hNUVRQlNZOGFLVWZ1Sko3Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDhDOC8zMzY0RDMxNjQwQ0ExMUVBODk5MkI4NURDNEY5QUUwMi9WRy1XT3VwdGJu
YTVFUUJTWThhS1VmdUpKN2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALHPacJS7eGTzM+xczp+J6M2C+0ZyBE5Dwlp/IVE4t8OeDR7y6qSoAYA7oOLt
oeZZAY+i1nW1379IX7R0NF0ynnD2KG8h87gbFnRoFaThdx/saAyY0pzW4nhIfkWj
1hMg6jQZaPtbA5Up+bSpeeBCqwxk3O/u0EWYHdn/RGX2hLVs0+hZyqgoIXA1I8Sn
Zo+iWasguqPvsy3xLLaZrjKI5JYMsINH7jinS0gj9h2jOl+bvNZXsJwTqKUSjyJJ
qlEEHtrb6aOFb9BSaeijwUDKdj96WPY1/ZG4YtHe3KibCbMXg0+aHmlKvx4GyIXC
amY2YqHOx/oyyJtDGurTBRu3Jg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:06:48 2026 by rpki-client