
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
File: VHoRD_LjpNQgjqW3w-hympsP1Jw.mft (raw, json)
Hash identifier: jrSJkxAyxPURKExLX+AkCgrwcV69wkddJQunA66VvFM=
Subject key identifier: 0D:1F:65:B7:75:A9:C6:47:10:7B:90:89:BE:30:91:C9:57:1B:AF:5F
Authority key identifier: 54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
Certificate issuer: /CN=A9153303/serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
Certificate serial: 0134
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
Manifest number: 0132
Signing time: Sun 01 Mar 2026 06:28:53 +0000
Manifest this update: Sun 01 Mar 2026 06:28:53 +0000
Manifest next update: Sun 08 Mar 2026 06:28:53 +0000
Files and hashes: 1: VHoRD_LjpNQgjqW3w-hympsP1Jw.crl (hash: XDMWLxsEy1Y77lmEj9phvN6ksGAasHYyclzsCwbamQ8=)
2: 2916DB783FE111EFB5A50814C4F9AE02.roa (hash: XqPR58WFjxW/r7vrXermk8/pxwRAohdmERUavDiArx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl
rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153303, serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
Validity
Not Before: Mar 1 06:28:53 2026 GMT
Not After : Mar 8 06:28:53 2026 GMT
Subject: CN=69a3dca5-4306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:31:3a:a5:59:95:39:27:72:ee:af:e2:33:
93:e7:7e:b6:f2:02:6f:36:8b:e3:aa:b1:69:b4:bc:
53:ca:ae:3d:62:fc:ab:a1:da:63:c1:42:a1:9d:5c:
26:71:5b:58:5e:03:7b:9f:44:2e:93:6d:c6:76:cd:
48:c6:0d:50:20:c5:58:0c:2d:86:78:f2:2f:31:77:
dd:76:95:63:dd:1d:2b:75:f6:b0:3b:01:b5:e9:18:
44:c1:d9:43:74:d0:3b:5c:3f:70:21:03:63:79:61:
67:88:a5:da:55:24:6f:84:17:61:74:ad:04:7c:a8:
02:d7:fd:28:07:41:6c:29:59:60:00:be:83:66:04:
a2:ad:cf:11:6d:fd:24:f1:4d:fa:4a:2b:05:4e:3e:
06:5f:a0:5c:b3:86:49:f7:b5:02:e6:bf:02:85:8c:
73:d2:81:1c:b8:4a:3b:e8:7e:9c:c1:be:09:14:4d:
b6:eb:f6:4b:b7:7f:6e:78:f7:80:7c:49:68:46:8a:
4e:ad:d4:26:46:f1:c5:31:bb:2a:4e:20:99:1f:b2:
7e:96:75:f9:42:a1:7a:25:e8:df:4c:4c:21:4f:cc:
e4:c0:48:ac:ae:02:66:db:ec:94:f5:44:1f:68:be:
a8:9b:5c:88:48:72:ad:13:13:be:90:91:f5:78:2d:
a5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1F:65:B7:75:A9:C6:47:10:7B:90:89:BE:30:91:C9:57:1B:AF:5F
X509v3 Authority Key Identifier:
keyid:54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:62:a9:d4:c4:62:81:ec:9a:54:78:7e:df:70:1d:5f:f0:71:
41:a3:92:d3:0a:a7:c6:67:42:a4:92:24:84:43:ae:ec:38:60:
97:76:0d:54:70:ee:e9:02:04:ea:05:c8:28:44:62:b3:aa:cc:
d5:13:14:30:26:61:62:db:9e:2e:4a:ff:02:8f:a2:15:f8:0d:
56:63:74:96:3a:a5:49:b8:ee:bf:e1:09:3c:f7:e9:b3:13:91:
ac:97:04:fa:83:3d:c2:da:8b:4c:b1:f4:8b:7a:bc:da:a5:f7:
dd:5a:4a:cc:d9:04:87:06:4c:c0:af:81:0b:ad:84:99:2b:cf:
ec:2c:fc:00:c1:26:f6:87:2f:ed:bb:0f:11:94:e5:5f:5c:21:
40:a9:94:5b:d6:85:a5:80:f5:47:c5:7f:cf:71:df:3d:c1:ab:
4f:b2:45:6c:05:f5:21:e9:3d:74:db:6b:b0:4b:64:e0:7e:f4:
55:a6:06:9d:fd:9c:8a:64:14:75:ea:7e:c5:9c:f4:92:da:38:
19:78:64:45:d8:92:e3:7a:d7:7e:b7:ce:fe:8c:2f:0a:da:62:
f6:0e:2f:de:6e:d5:b7:78:a4:c9:9e:cd:c9:2c:bf:21:41:1d:
db:5a:d9:28:11:a6:30:cc:81:49:36:59:87:34:23:36:53:60:
b0:32:c8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:19:45 2026 by rpki-client