
$ rpki-client -vvf rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
File: VG-WOuptbna5EQBSY8aKUfuJJ7c.mft (raw, json)
Hash identifier: J/6W+WsghHUIUD2FlWi4YzxSGgdtrW4FV/LQeGVDr38=
Subject key identifier: 4F:D4:FC:1E:AB:42:D0:F7:F5:35:0E:2A:04:32:9C:3F:6F:9B:FC:43
Authority key identifier: 54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7
Certificate issuer: /CN=A91148C8/serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7
Certificate serial: 0BD9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
Manifest number: 0BC4
Signing time: Tue 12 May 2026 18:59:44 +0000
Manifest this update: Tue 12 May 2026 18:59:43 +0000
Manifest next update: Tue 19 May 2026 18:59:43 +0000
Files and hashes: 1: VG-WOuptbna5EQBSY8aKUfuJJ7c.crl (hash: RwMJJ6osolAk/9iXe7i3eJUq7XwpmUEV1xMeGg9E5ek=)
2: DA5748F6393511F1B7D838E9BE833773.roa (hash: Iq4f8OQxMLGxz0FmHgimBiY6DKxUXu2csndV5N4K/1k=)
3: 7717CED6419911EA9B9A146BC4F9AE02.roa (hash: p4SuiZV4FF7G+YYk9OTeLPmJDW12xyv5yQ9JwoxzWgA=)
4: 77A99FC8419911EA9B9A146BC4F9AE02.roa (hash: XcQJhF8QgQICOlSMTswo9Y8/RvytRROyJ+DjMTQGgi0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl
rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:59:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3033 (0xbd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91148C8, serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7
Validity
Not Before: May 12 18:59:43 2026 GMT
Not After : May 19 18:59:43 2026 GMT
Subject: CN=6a03789f-09b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:76:e2:98:e5:8c:0d:7e:40:85:03:50:6f:39:
71:51:12:62:2a:79:99:b4:c3:b8:76:80:71:a1:11:
14:26:28:e2:f4:fe:ba:05:b1:02:fe:a8:a7:ed:b6:
bf:4e:9c:06:3f:00:46:5d:ea:41:3b:55:34:69:ee:
92:02:ea:bb:cd:a2:36:5e:34:26:18:36:18:b4:da:
0c:cf:d8:99:aa:17:0d:0b:44:1a:96:7d:51:19:84:
1e:69:30:a1:6c:74:12:6d:7d:b5:77:b4:d8:d6:b2:
63:2a:0d:bf:9e:b4:d0:85:44:33:a3:bd:8b:9d:b3:
63:c6:02:92:d9:2c:7f:a3:77:18:c4:67:0d:f1:1e:
8d:1c:b8:b9:c8:b3:a4:99:a0:e7:1d:bd:04:77:8e:
8a:7d:64:09:89:b0:db:26:96:6c:47:bf:81:4f:27:
92:d2:9b:3c:08:ed:65:13:b7:af:83:31:63:a2:0e:
ff:60:d9:40:ca:be:bc:7f:4a:30:bc:e8:99:9d:0b:
28:f7:50:c4:9b:5b:5e:c6:40:cb:29:89:95:77:c7:
5b:fa:f0:ba:52:c8:bb:2b:3b:c0:c6:20:ad:5a:9d:
0d:61:09:d1:55:4f:0e:77:96:eb:35:74:3b:eb:00:
10:3e:4d:18:67:da:65:3f:40:87:fe:09:c5:6a:7e:
12:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D4:FC:1E:AB:42:D0:F7:F5:35:0E:2A:04:32:9C:3F:6F:9B:FC:43
X509v3 Authority Key Identifier:
keyid:54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:8c:c6:a3:73:72:59:85:d6:bf:85:6d:1d:22:5f:47:f1:d9:
ee:5f:8d:38:64:54:f4:f2:71:65:09:3d:27:00:fb:9c:fb:5c:
43:f5:6c:14:0a:7e:4e:d4:5d:1f:98:49:48:a4:48:70:7d:31:
8d:b3:77:b4:a7:c6:f2:68:f6:d3:82:2a:42:67:d9:80:21:fc:
37:88:54:ff:d2:d8:2e:6f:e9:d8:5f:6b:ac:77:89:93:c4:64:
1c:3f:89:81:dd:4e:d4:45:64:59:c0:d9:c9:ec:d6:5d:0f:ab:
65:0c:aa:75:b4:4d:d6:0a:4d:30:7a:e8:14:bb:eb:84:78:e1:
91:7e:3a:66:b4:4b:fd:a8:71:b6:82:6d:dd:6b:a4:71:d9:ad:
5c:35:39:7b:dd:0f:c3:e4:1d:43:64:61:cd:e3:62:8d:d9:76:
f2:b8:8a:33:a7:02:0d:21:93:17:51:58:68:8c:ea:5f:19:96:
78:4b:86:8d:20:89:00:ec:af:1a:2a:9e:54:4b:19:16:a1:e0:
64:1c:9d:9d:36:96:bf:8b:91:d4:a6:67:06:fd:19:cf:97:84:
79:76:bd:12:c9:16:19:2d:a2:c9:d3:01:9b:fa:2a:aa:e7:c3:
de:ec:17:ea:3f:cc:fb:d1:09:79:d5:40:c3:0c:5c:e8:28:33:
b6:71:c2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:05:45 2026 by rpki-client