
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
File: VG-WOuptbna5EQBSY8aKUfuJJ7c.mft (raw, json)
Hash identifier: o/hUYtAqFpDo58ojsKzsqKx/9Jzf9tNPuUrOZ6lGJRU=
Subject key identifier: 69:BB:A2:CD:7E:E3:F7:26:37:B1:19:9E:8E:89:60:7A:F2:2C:AE:02
Authority key identifier: 54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7
Certificate issuer: /CN=A91148C8/serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7
Certificate serial: 0C1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
Manifest number: 0C09
Signing time: Thu 24 Sep 2026 18:47:25 +0000
Manifest this update: Thu 24 Sep 2026 18:47:24 +0000
Manifest next update: Thu 01 Oct 2026 18:47:24 +0000
Files and hashes: 1: VG-WOuptbna5EQBSY8aKUfuJJ7c.crl (hash: mg8iWnvCBUA0sksDcno3h9N9csD6ppfRpotIOq0yhDQ=)
2: 77A99FC8419911EA9B9A146BC4F9AE02.roa (hash: XcQJhF8QgQICOlSMTswo9Y8/RvytRROyJ+DjMTQGgi0=)
3: DA5748F6393511F1B7D838E9BE833773.roa (hash: Iq4f8OQxMLGxz0FmHgimBiY6DKxUXu2csndV5N4K/1k=)
4: 7717CED6419911EA9B9A146BC4F9AE02.roa (hash: p4SuiZV4FF7G+YYk9OTeLPmJDW12xyv5yQ9JwoxzWgA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl
rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:47:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3102 (0xc1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91148C8, serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7
Validity
Not Before: Sep 24 18:47:24 2026 GMT
Not After : Oct 1 18:47:24 2026 GMT
Subject: CN=6ab5703c-146d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:83:a7:32:09:c7:e1:92:13:d1:51:57:e9:27:
e7:56:a4:e4:20:1a:21:19:72:df:18:a0:5d:a9:41:
66:ed:d4:1e:82:1d:b3:81:5a:c5:ea:18:a5:89:0a:
73:79:32:83:26:f9:a1:48:5b:cc:3f:1f:4f:1e:21:
23:ef:f5:0a:2c:c4:a2:62:8c:05:c0:b7:dd:cb:41:
ab:de:cb:18:5c:d9:58:2a:7d:e2:6e:31:32:2f:46:
c6:b4:22:44:51:d5:2e:7d:87:5e:ec:29:42:1a:4b:
6f:b7:be:3c:90:74:d5:a3:95:1c:c9:9f:c5:bd:12:
58:6b:51:bc:55:c2:5a:8e:11:50:60:72:36:00:4b:
20:91:c9:69:9d:6d:91:6f:22:fc:83:de:26:37:57:
a7:a7:71:cb:05:98:db:b4:13:49:29:09:1e:3d:f0:
92:ca:e9:0e:6c:6a:db:8a:54:57:7f:b7:3e:f6:76:
4f:e4:3b:4b:66:5f:81:ed:c1:ae:3e:04:47:9a:4f:
4e:63:8c:d9:ef:67:47:72:52:a6:54:70:25:ab:bf:
5a:e1:9c:8b:b1:e2:6a:86:61:82:24:46:7d:ba:88:
f5:90:04:a3:2e:ec:33:a9:51:64:44:8b:33:31:e1:
16:d7:49:5e:0e:38:7f:1a:a0:ca:91:f4:5e:9f:88:
26:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BB:A2:CD:7E:E3:F7:26:37:B1:19:9E:8E:89:60:7A:F2:2C:AE:02
X509v3 Authority Key Identifier:
keyid:54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:55:b9:0a:08:95:d2:5d:45:96:35:1c:05:0a:ff:7d:b4:7d:
26:c2:48:b0:2e:b4:6f:ad:35:f8:59:1d:ea:18:19:2c:83:e9:
00:4c:45:c4:c8:9a:55:7b:9c:3b:8a:9a:d4:0f:de:ff:89:f8:
8b:6e:7e:21:1e:3c:ca:b3:57:4c:1d:f9:64:00:95:b7:0e:54:
00:a0:b2:11:d0:17:4a:5d:a3:77:68:4a:56:86:02:6c:27:0b:
bb:89:e0:bc:db:88:21:71:ff:9b:7a:10:78:19:d5:e0:20:c8:
3d:86:d8:0b:e3:e5:c1:91:b0:d1:74:42:8f:2a:7a:a3:d8:f4:
bf:ba:6a:1b:d2:37:a3:33:cb:f8:8c:58:23:3b:92:58:22:d2:
cb:22:e7:f1:fa:60:02:bd:3f:83:85:dd:d9:ef:c6:74:75:3f:
b2:a6:00:02:df:e4:3c:f7:e9:a2:d0:af:e8:46:f2:bb:7d:ba:
41:64:a1:1e:c3:44:26:85:fd:77:43:e4:a8:8a:da:57:e5:bd:
15:35:61:65:cc:55:b6:b6:ef:04:f1:1f:a0:5a:21:f9:6a:ef:
a0:5a:b3:cf:6b:ea:1a:b8:3d:ae:38:e0:ef:6e:5a:c0:0f:32:
38:6f:bc:f6:7a:bb:29:08:03:f1:87:7a:1a:62:bd:a6:1c:29:
a6:5b:c9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:22:04 2026 by rpki-client