$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft File: VHoRD_LjpNQgjqW3w-hympsP1Jw.mft (raw, json) Hash identifier: a5eNeOxBzkTzMtdKwLRRFEi+q+XhCK+R5mu/dbsRwKQ= Subject key identifier: 7B:C3:73:5A:93:8D:7D:BC:43:9C:D7:89:AC:E5:2F:96:8C:AE:5D:95 Authority key identifier: 54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C Certificate issuer: /CN=A9153303/serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft Manifest number: 99 Signing time: Mon 05 May 2025 05:07:58 +0000 Manifest this update: Mon 05 May 2025 05:07:57 +0000 Manifest next update: Mon 12 May 2025 05:07:57 +0000 Files and hashes: 1: VHoRD_LjpNQgjqW3w-hympsP1Jw.crl (hash: nAo17fqQR8AX7z3k2MEKUWhQtoU6w7+b7Iaz/6iCAiY=) 2: 2916DB783FE111EFB5A50814C4F9AE02.roa (hash: z8nIuMVscKg4ddacrN0wsJlufM+eXsIydjqCMnTO5kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 05:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153303, serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C Validity Not Before: May 5 05:07:57 2025 GMT Not After : May 12 05:07:57 2025 GMT Subject: CN=681847ae-28bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c8:a5:be:fe:dc:95:b4:e8:b6:fa:9f:25:9b: 48:30:5f:3a:fd:9f:e9:26:73:2c:1b:91:5d:d1:fe: d4:3a:e6:19:8a:d0:3a:5f:44:4d:8b:3f:f1:9a:17: 2f:ed:08:b3:47:b9:50:7f:80:e0:ba:fa:46:56:07: b4:28:9b:ff:25:92:6f:d5:e0:50:3f:e6:8b:45:28: 52:ce:78:fe:9f:c0:f0:81:9b:ca:17:00:9e:f9:b4: 2c:90:b7:8f:5b:4e:c0:63:b3:70:70:03:cc:26:c1: 20:16:b8:5a:33:5f:c4:6b:ad:3a:42:10:f7:d2:c3: 7b:1f:00:b1:d0:82:25:7c:46:99:e5:b0:24:44:a1: 21:55:cc:22:7b:ea:ce:f3:5c:11:8c:5b:bb:cd:d1: 50:80:0c:ad:39:cf:da:63:f8:12:f3:94:ce:b7:78: a2:2e:e2:6e:75:6f:09:8f:52:32:6d:76:3f:64:c5: d9:b8:51:2e:60:ba:9a:05:d7:33:83:24:36:4a:29: cc:19:42:2a:b5:aa:94:d7:15:5c:4f:61:89:17:ff: 22:d0:b7:1d:6d:25:60:fe:3a:e9:fa:76:83:59:54: c8:6e:59:3a:78:3d:cd:57:7f:b7:f9:0a:d1:47:e7: 14:18:e3:f4:19:f0:2d:87:43:0c:c5:62:3e:a0:76: da:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C3:73:5A:93:8D:7D:BC:43:9C:D7:89:AC:E5:2F:96:8C:AE:5D:95 X509v3 Authority Key Identifier: keyid:54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:08:5d:8f:27:52:fa:05:a7:47:ba:e6:e3:05:91:66:02:d6: 79:aa:85:e0:e5:52:34:99:48:e1:0d:76:b1:aa:49:3d:8b:ac: 25:28:98:ee:92:d9:0c:50:e2:3e:18:05:32:e7:0f:7c:45:e1: 0f:90:0d:64:9b:70:8f:dd:26:95:d4:4f:2b:46:71:29:c9:38: ee:76:df:b6:55:40:99:43:ee:87:99:c5:aa:8a:d7:cb:d9:05: 8d:3e:f2:8c:19:1f:e4:53:2f:6c:a6:03:ea:32:64:e4:02:76: da:7f:2b:2b:f9:7a:6d:c3:66:fa:4e:30:7c:2c:d1:13:64:9b: 9d:73:6d:d5:27:1d:41:c7:86:f3:21:d5:9e:a7:bf:67:38:e2: 03:87:15:10:9e:62:19:be:d5:19:9d:1c:0d:1d:8b:8b:b2:35: ce:bb:8f:7a:45:66:58:0a:88:38:f4:42:68:e1:ba:d8:d8:55: 3c:e3:a5:44:1d:2c:28:e5:c0:97:66:c1:62:61:5e:5a:5b:c2: 33:02:ff:9e:1a:f5:7f:47:97:9c:3b:c2:d7:f9:9f:9a:65:8b: 16:c9:d4:e0:49:b8:fd:c9:8e:0a:ec:19:54:e8:d0:89:f0:ff: 77:84:b4:ed:ba:cb:b5:5c:8d:d3:d5:1b:89:e4:9c:db:be:a6: c6:08:27:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMzMDMxMTAvBgNVBAUTKDU0N0ExMTBGRjJFM0E0RDQyMDhFQTVCN0MzRTg3MjlB OUIwRkQ0OUMwHhcNMjUwNTA1MDUwNzU3WhcNMjUwNTEyMDUwNzU3WjAYMRYwFAYD VQQDEw02ODE4NDdhZS0yOGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk8ilvv7clbTotvqfJZtIMF86/Z/pJnMsG5Fd0f7UOuYZitA6X0RNiz/xmhcv 7QizR7lQf4DguvpGVge0KJv/JZJv1eBQP+aLRShSznj+n8DwgZvKFwCe+bQskLeP W07AY7NwcAPMJsEgFrhaM1/Ea606QhD30sN7HwCx0IIlfEaZ5bAkRKEhVcwie+rO 81wRjFu7zdFQgAytOc/aY/gS85TOt3iiLuJudW8Jj1IybXY/ZMXZuFEuYLqaBdcz gyQ2SinMGUIqtaqU1xVcT2GJF/8i0LcdbSVg/jrp+naDWVTIblk6eD3NV3+3+QrR R+cUGOP0GfAth0MMxWI+oHbavwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvDc1qT jX28Q5zXiazlL5aMrl2VMB8GA1UdIwQYMBaAFFR6EQ/y46TUII6lt8PocpqbD9Sc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzMwMy83OEE4MUQxMDNG RTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9WSG9SRF9ManBOUWdqcVczdy1oeW1wc1Ax SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZIb1JEX0xqcE5RZ2pxVzN3LWh5bXBzUDFKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzMwMy83OEE4MUQxMDNGRTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9WSG9SRF9ManBO UWdqcVczdy1oeW1wc1AxSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeCF2PJ1L6BadHuubjBZFmAtZ5qoXg5VI0mUjhDXaxqkk9i6wlKJju ktkMUOI+GAUy5w98ReEPkA1km3CP3SaV1E8rRnEpyTjudt+2VUCZQ+6HmcWqitfL 2QWNPvKMGR/kUy9spgPqMmTkAnbafysr+Xptw2b6TjB8LNETZJudc23VJx1Bx4bz IdWep79nOOIDhxUQnmIZvtUZnRwNHYuLsjXOu496RWZYCog49EJo4brY2FU846VE HSwo5cCXZsFiYV5aW8IzAv+eGvV/R5ecO8LX+Z+aZYsWydTgSbj9yY4K7BlU6NCJ 8P93hLTtusu1XI3T1RuJ5JzbvqbGCCcg -----END CERTIFICATE-----Generated at Mon May 5 17:13:29 2025 by rpki-client