Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
File:                     VHoRD_LjpNQgjqW3w-hympsP1Jw.mft (raw, json)
Hash identifier:          vgxS2dPyNW4/qyqLafpZjqlFLIGD0ngUV1lqVOD/jSw=
Subject key identifier:   65:5F:23:84:2E:A7:25:B7:A1:DE:1A:8E:AD:A0:73:1F:EC:38:AF:C6
Authority key identifier: 54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
Certificate issuer:       /CN=A9153303/serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
Manifest number:          B0
Signing time:             Sat 21 Jun 2025 05:05:57 +0000
Manifest this update:     Sat 21 Jun 2025 05:05:56 +0000
Manifest next update:     Sat 28 Jun 2025 05:05:56 +0000
Files and hashes:         1: VHoRD_LjpNQgjqW3w-hympsP1Jw.crl (hash: Pjpxk2dZOtM70yCxnfbwL8ZdrDbFkMkCUA6sEv3vm+Q=)
                          2: 2916DB783FE111EFB5A50814C4F9AE02.roa (hash: z8nIuMVscKg4ddacrN0wsJlufM+eXsIydjqCMnTO5kg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl
                          rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 05:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153303, serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
        Validity
            Not Before: Jun 21 05:05:56 2025 GMT
            Not After : Jun 28 05:05:56 2025 GMT
        Subject: CN=68563db4-2e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cb:8c:e5:a3:06:55:04:4d:52:af:12:99:3f:
                    20:b4:e7:fa:82:97:43:08:6f:96:d9:65:db:df:f8:
                    80:a8:b8:97:a7:bb:9f:69:7b:d7:3c:6e:46:5e:58:
                    f3:30:50:01:53:c1:ab:6d:b6:55:b3:cd:dd:c7:99:
                    1f:7c:bb:8b:a7:36:dc:e0:61:60:b5:68:2e:2b:0f:
                    0f:ef:f6:7b:ef:04:e2:43:18:e3:b1:d6:7e:f6:74:
                    36:94:97:c4:b4:fd:7a:d3:12:17:4a:8e:21:fe:1e:
                    f5:1b:08:d1:ed:f8:7a:c7:2f:3e:e8:e9:c1:94:f7:
                    b3:d1:e2:dc:75:5e:7a:bc:f6:a5:1c:fc:cd:be:fe:
                    82:99:2b:70:91:ac:06:9c:46:83:33:4a:0c:0a:31:
                    3f:31:08:49:13:3a:1e:a2:eb:64:25:d8:cb:ef:94:
                    d6:ad:b4:86:96:a7:15:bf:37:eb:91:36:ec:be:fd:
                    b2:4c:33:2d:8d:3b:52:1a:3b:17:a2:2c:b2:5e:a5:
                    98:32:80:57:97:4b:4f:41:72:49:7a:01:b5:df:34:
                    77:f7:a5:d9:3d:f5:6f:18:02:2b:6f:bb:2b:f4:c1:
                    96:a3:f7:86:ce:8a:42:da:64:80:e5:7a:95:a5:04:
                    cc:80:da:c3:bc:5d:b7:e5:9d:ad:ec:fe:24:e0:d7:
                    1f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5F:23:84:2E:A7:25:B7:A1:DE:1A:8E:AD:A0:73:1F:EC:38:AF:C6
            X509v3 Authority Key Identifier:
                keyid:54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d3:0e:71:5c:e7:28:f9:c4:68:7a:79:a8:86:b4:3c:69:57:
         ca:de:b0:17:95:b9:1f:10:64:f3:39:09:f6:9b:15:3b:35:c5:
         0d:de:38:ec:16:b9:d7:95:6a:aa:54:90:62:93:3f:26:e4:f3:
         52:7a:e4:7e:c9:07:1c:e8:3a:12:b4:99:ad:da:b9:f3:a8:e0:
         2e:54:d3:15:68:84:9c:b3:f7:3c:a1:3e:ab:03:24:bf:fb:62:
         3e:36:dc:de:3f:50:f7:98:cd:81:5a:e7:5a:9b:71:c2:27:cb:
         b1:35:04:9b:ef:7b:6e:58:8b:69:df:49:49:4b:73:e4:80:52:
         2a:e0:be:ba:27:01:2f:59:ef:0b:15:8a:53:fe:d4:27:56:8d:
         37:aa:ab:79:4c:57:86:e8:15:b5:08:e7:69:50:ac:a9:d8:2e:
         a8:b6:3b:a9:43:1b:f0:41:5b:62:20:30:41:42:2d:a4:f5:be:
         eb:5f:72:0d:61:e9:ac:8a:9c:e6:d2:65:89:bc:93:75:f4:ac:
         70:f3:70:0d:13:85:b9:c8:e6:d7:63:20:d6:e5:ce:41:45:8c:
         36:3e:38:3e:8d:3c:78:ab:08:63:db:52:d3:06:4a:97:9a:ca:
         9a:71:33:6c:d0:5a:8d:93:cb:cc:a7:c1:3e:22:ab:37:88:94:
         29:ce:1f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 10:28:21 2025 by rpki-client