
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
File: vgp-rCoKt52-BO5kAC1UgnWkzKY.mft (raw, json)
Hash identifier: lo9RrywKgYfwIhHMYVZhidGGrW98aurfF178RN4RPm0=
Subject key identifier: 0B:81:C8:05:FA:A6:99:40:46:64:53:A9:6A:4C:CA:9A:90:C3:B5:8C
Authority key identifier: BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6
Certificate issuer: /CN=A91C769F/serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6
Certificate serial: 024F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
Manifest number: 0248
Signing time: Thu 23 Jul 2026 04:29:08 +0000
Manifest this update: Thu 23 Jul 2026 04:29:07 +0000
Manifest next update: Thu 30 Jul 2026 04:29:07 +0000
Files and hashes: 1: vgp-rCoKt52-BO5kAC1UgnWkzKY.crl (hash: DImow5vnuzO1k77kGE5DgbqrFFY2ZchGfKzGl6WD4/E=)
2: 0A469648099611EEB1AA195CC4F9AE02.roa (hash: dcw4Wm2bZgVRpvr6Lwi2a65x5RG3gylN+Htcau7u+vY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl
rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C769F, serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6
Validity
Not Before: Jul 23 04:29:07 2026 GMT
Not After : Jul 30 04:29:07 2026 GMT
Subject: CN=6a619894-1eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:a2:e1:0b:f8:52:1d:17:be:2f:da:83:8c:
19:e3:28:0d:cb:69:99:41:4b:64:42:13:de:8c:ac:
d3:ed:76:2f:4b:99:15:32:4b:2d:b0:bf:b4:e6:fc:
e0:05:05:e9:76:d1:60:81:56:28:63:6c:18:4e:84:
12:2d:1c:0c:fc:04:87:81:96:53:2c:a5:93:c5:17:
f0:92:b5:15:e5:79:6d:0e:0a:57:0b:53:a5:7b:19:
03:f7:06:d2:58:03:d8:e9:d3:6e:42:78:4b:b9:4e:
1b:68:86:26:b7:70:1e:0e:69:2c:21:03:08:78:6d:
fa:f3:c8:8d:e2:26:70:fe:22:4f:7a:3b:e4:05:d5:
22:76:48:75:88:81:db:36:f8:f6:a7:2c:1b:4d:bc:
0b:25:81:b0:68:da:99:78:46:a3:a0:11:ac:c8:8a:
37:13:1c:47:f8:2f:aa:80:16:96:12:bb:ce:07:66:
a3:c9:cb:f1:31:5a:d5:7f:41:97:ba:94:0e:ec:d9:
cf:ad:4d:08:f5:51:77:6c:95:8a:0f:9f:f7:e4:d8:
27:59:fa:1f:eb:f7:24:2b:1b:fe:64:59:3e:e6:e1:
36:ea:3f:2f:87:5f:bf:58:af:98:b2:e0:78:d9:81:
3a:d8:88:da:98:81:b6:ac:b8:c8:a9:95:87:94:ef:
93:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:81:C8:05:FA:A6:99:40:46:64:53:A9:6A:4C:CA:9A:90:C3:B5:8C
X509v3 Authority Key Identifier:
keyid:BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:38:80:d6:0d:8a:83:73:96:9a:57:cf:75:da:93:05:e7:46:
ea:d4:51:86:7a:8b:dd:ff:97:36:ac:5b:74:27:55:c5:b8:1c:
43:88:87:bb:66:54:2e:95:f5:b0:22:62:eb:99:88:f5:68:c0:
26:5b:e6:0a:db:ae:d3:4c:e1:f2:a3:84:f9:72:5c:d4:ec:cf:
3b:9d:8b:51:0f:31:ce:26:ae:eb:9b:0e:42:13:b0:30:10:57:
d4:0d:a6:aa:0f:85:eb:93:2b:42:bf:6f:78:9b:4f:1c:26:9b:
27:22:b1:e1:f5:18:ce:ab:fd:9b:aa:21:7f:80:26:2f:44:c3:
5b:8d:e9:c7:fc:dc:81:08:0a:89:4a:2a:c5:d3:9d:4b:8a:9f:
0e:4c:e5:ce:89:6a:01:6f:db:93:6f:21:65:7f:e7:94:55:3b:
1d:10:15:06:72:75:87:73:2f:a2:c3:56:c0:55:85:7d:c2:83:
4e:11:ca:d8:a4:87:45:d2:f9:86:e4:a2:68:15:2f:5c:ec:95:
d6:78:6a:3d:a4:76:cd:64:8a:9c:31:e9:f8:b9:f5:c9:6d:76:
7f:9d:66:f4:bd:4d:5b:7d:d8:ce:f8:79:5f:86:bc:65:b8:75:
d3:41:11:99:39:56:ac:da:33:e7:9b:a1:29:7c:22:8e:85:7a:
76:0d:35:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:28:30 2026 by rpki-client