
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
File: VGTkn1YOwQ1JdvbilhE7ryKoz18.mft (raw, json)
Hash identifier: uNcT/aam7fGpyOsS8RRkpZrqUFnPjYJ6x50M/p9ICmo=
Subject key identifier: 77:0F:32:86:D8:96:07:7C:EA:C5:DF:1D:78:19:54:19:04:D1:52:3E
Authority key identifier: 54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F
Certificate issuer: /CN=A91E3F3C/serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F
Certificate serial: 01CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
Manifest number: 01C8
Signing time: Sun 01 Mar 2026 04:30:04 +0000
Manifest this update: Sun 01 Mar 2026 04:30:03 +0000
Manifest next update: Sun 08 Mar 2026 04:30:03 +0000
Files and hashes: 1: VGTkn1YOwQ1JdvbilhE7ryKoz18.crl (hash: h+tQqZhXsIvpFliwgxBxNGyEOTZYKBeZyMHVQwDVfRM=)
2: 7148438E5DC211EE954BE21DC4F9AE02.roa (hash: y4oU/tmfDIcfKqPlw3m/SWCw2QZiYO8Vo2XRM+uGFBo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl
rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460 (0x1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3F3C, serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F
Validity
Not Before: Mar 1 04:30:03 2026 GMT
Not After : Mar 8 04:30:03 2026 GMT
Subject: CN=69a3c0cb-39f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f6:a4:85:d0:cf:6d:d1:ae:75:8a:f4:c3:6c:
7f:88:a8:16:21:18:5c:cc:42:3f:3f:99:22:f8:45:
bf:f0:dc:12:bd:99:f8:1f:15:35:bc:e7:a6:e5:c6:
97:73:46:66:04:90:bc:f6:4e:e9:ff:23:03:f4:93:
ac:83:36:10:e7:15:18:2e:bb:65:d7:3b:73:1d:e8:
1b:ad:80:ee:ff:2e:66:68:4a:ed:3d:d2:f4:c6:dd:
7d:25:5e:b8:3e:4a:8e:ad:8e:47:fc:19:53:0e:64:
e2:01:9f:09:eb:16:65:94:96:62:02:db:45:c5:20:
18:ca:9f:ac:0c:c1:ba:85:aa:17:39:c2:97:97:be:
27:63:6c:7d:6d:c0:3c:f4:6d:b9:16:f7:2c:55:ce:
34:e4:fc:bb:a3:b9:35:b0:11:fa:ea:bd:db:00:ab:
55:ad:34:65:51:6f:e3:d6:dd:2f:a0:3e:e8:45:84:
2b:70:2f:c9:2f:1d:73:36:10:4e:51:e0:50:41:51:
62:d5:c4:f3:21:0e:4d:47:f1:cc:df:20:86:a8:8e:
46:b7:a5:2a:cb:65:3a:ab:34:20:50:21:7d:62:a5:
4d:9a:81:db:c4:ee:8c:31:62:58:30:29:c1:e9:b9:
52:85:20:00:42:44:c3:a6:fd:8f:50:29:04:dd:69:
a2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0F:32:86:D8:96:07:7C:EA:C5:DF:1D:78:19:54:19:04:D1:52:3E
X509v3 Authority Key Identifier:
keyid:54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:f0:51:de:0c:66:19:0f:a1:7f:ad:47:64:9d:eb:75:29:a9:
ea:35:8c:49:85:c4:91:02:24:05:97:1f:d5:a4:bd:d4:b9:69:
c7:71:64:2c:24:9a:08:8f:31:e6:07:c1:15:b9:7e:6b:23:4d:
16:1e:1d:aa:c1:94:b8:b4:eb:2f:05:a2:40:09:6c:5b:4f:8c:
96:a2:a7:22:f7:3e:3a:34:10:25:34:1c:fc:5b:b0:32:dc:ec:
95:32:59:de:78:3e:10:c5:b1:5f:23:8a:c8:0d:05:6a:13:d4:
16:71:56:dd:e5:06:ec:bc:c7:b4:71:84:43:9a:89:08:22:32:
a0:68:85:a9:93:90:f9:a7:f0:aa:36:03:37:0b:0f:ab:f8:be:
f0:16:1b:db:14:b2:6f:08:7c:09:b3:f2:57:fd:0c:8f:99:74:
a3:78:fd:61:64:82:46:39:23:87:03:7c:8a:81:e0:93:f7:76:
17:9c:32:7c:c8:3d:72:ee:74:19:22:50:61:e3:86:6b:a4:78:
7a:97:e3:88:56:eb:64:5f:85:fc:a9:a1:81:90:3a:01:ee:7a:
79:30:14:52:8f:0e:f6:e3:9d:33:58:cf:cc:d7:63:76:9c:06:
2d:e3:1f:51:77:20:7b:84:99:f1:c0:92:1c:09:ed:69:33:be:
31:c5:29:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTNGM0MxMTAvBgNVBAUTKDU0NjRFNDlGNTYwRUMxMEQ0OTc2RjZFMjk2MTEzQkFG
MjJBOENGNUYwHhcNMjYwMzAxMDQzMDAzWhcNMjYwMzA4MDQzMDAzWjAYMRYwFAYD
VQQDDA02OWEzYzBjYi0zOWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnvakhdDPbdGudYr0w2x/iKgWIRhczEI/P5ki+EW/8NwSvZn4HxU1vOem5caX
c0ZmBJC89k7p/yMD9JOsgzYQ5xUYLrtl1ztzHegbrYDu/y5maErtPdL0xt19JV64
PkqOrY5H/BlTDmTiAZ8J6xZllJZiAttFxSAYyp+sDMG6haoXOcKXl74nY2x9bcA8
9G25FvcsVc405Py7o7k1sBH66r3bAKtVrTRlUW/j1t0voD7oRYQrcC/JLx1zNhBO
UeBQQVFi1cTzIQ5NR/HM3yCGqI5Gt6Uqy2U6qzQgUCF9YqVNmoHbxO6MMWJYMCnB
6blShSAAQkTDpv2PUCkE3WmifQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHcPMobY
lgd86sXfHXgZVBkE0VI+MB8GA1UdIwQYMBaAFFRk5J9WDsENSXb24pYRO68iqM9f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0YzQy85NTUxM0JBNjVE
QzExMUVFOTg5NDk5MUNDNEY5QUUwMi9WR1RrbjFZT3dRMUpkdmJpbGhFN3J5S296
MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZHVGtuMVlPd1ExSmR2YmlsaEU3cnlLb3oxOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
M0YzQy85NTUxM0JBNjVEQzExMUVFOTg5NDk5MUNDNEY5QUUwMi9WR1RrbjFZT3dR
MUpkdmJpbGhFN3J5S296MTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKPBR3gxmGQ+hf61HZJ3rdSmp6jWMSYXEkQIkBZcf1aS91Llpx3FkLCSaCI8x
5gfBFbl+ayNNFh4dqsGUuLTrLwWiQAlsW0+MlqKnIvc+OjQQJTQc/FuwMtzslTJZ
3ng+EMWxXyOKyA0FahPUFnFW3eUG7LzHtHGEQ5qJCCIyoGiFqZOQ+afwqjYDNwsP
q/i+8BYb2xSybwh8CbPyV/0Mj5l0o3j9YWSCRjkjhwN8ioHgk/d2F5wyfMg9cu50
GSJQYeOGa6R4epfjiFbrZF+F/KmhgZA6Ae56eTAUUo8O9uOdM1jPzNdjdpwGLeMf
UXcge4SZ8cCSHAntaTO+McUp5w==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:37:30 2026 by rpki-client