
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
File: VHoRD_LjpNQgjqW3w-hympsP1Jw.mft (raw, json)
Hash identifier: Pnz5FlXP0Vjt2UbfixMi2CfvK4ZXjbDxuHn0H0HJQkQ=
Subject key identifier: 9E:73:DF:43:C8:E4:70:35:71:47:12:C6:E4:00:33:A2:80:3B:27:A3
Authority key identifier: 54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
Certificate issuer: /CN=A9153303/serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
Manifest number: 014C
Signing time: Fri 17 Apr 2026 04:51:21 +0000
Manifest this update: Fri 17 Apr 2026 04:51:20 +0000
Manifest next update: Fri 24 Apr 2026 04:51:20 +0000
Files and hashes: 1: VHoRD_LjpNQgjqW3w-hympsP1Jw.crl (hash: O4YTrqkSK4ZPL67Oi45rJ6qSFJg90An3nHFG7mNRgEM=)
2: 2916DB783FE111EFB5A50814C4F9AE02.roa (hash: epV5odcoH9JjdJu9CHvqxBAp0zjrfWXz2/0dQLE8qjI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl
rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:51:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153303, serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
Validity
Not Before: Apr 17 04:51:20 2026 GMT
Not After : Apr 24 04:51:20 2026 GMT
Subject: CN=69e1bc49-61cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2e:c7:14:c2:ff:f4:ec:8e:49:ce:02:56:1c:
76:57:f7:e5:61:01:14:8e:5c:11:fc:3d:f6:37:cf:
3f:e0:f3:ac:75:ef:c8:43:6a:05:21:45:9a:68:a9:
fb:f0:f2:8b:88:63:d5:40:8d:6e:c5:54:ad:6b:0b:
2c:d3:1d:d8:68:ca:de:b9:14:87:0a:b6:19:6c:fe:
bf:50:70:0b:76:68:20:c3:6c:e3:60:e1:ec:44:cb:
d0:99:b4:5c:d2:2e:81:58:78:b5:8d:cc:79:3a:c9:
0f:c9:47:5f:3d:23:33:f4:9b:8c:4e:2e:81:33:c3:
86:b9:63:a2:c4:79:48:53:c0:70:d6:b5:ea:da:9b:
3d:c7:58:08:ea:8e:4f:0a:a5:b5:b9:0b:1d:1a:98:
ca:5b:63:77:59:e7:ac:29:0b:00:36:54:f2:5e:27:
70:88:18:fa:95:93:5c:7d:72:65:10:a3:33:74:1e:
b1:76:8a:21:55:3e:3f:79:90:ae:d7:1f:aa:af:fd:
9d:af:4c:73:19:69:96:dc:8d:b6:b1:d7:bd:f2:15:
60:82:42:4f:16:aa:db:b2:e1:ab:f8:82:dd:dd:9f:
e5:d2:be:00:bf:af:6b:f0:aa:81:a8:c2:b9:27:c2:
4c:26:2b:3f:44:e8:5f:5e:d1:96:a6:ea:cf:40:98:
23:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:73:DF:43:C8:E4:70:35:71:47:12:C6:E4:00:33:A2:80:3B:27:A3
X509v3 Authority Key Identifier:
keyid:54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:aa:0b:38:a4:56:ed:a3:af:e1:91:7d:62:e9:34:1a:36:a3:
27:81:b0:23:34:81:a5:b7:d4:46:09:79:28:70:63:66:28:f1:
84:6d:e5:c3:58:37:22:d3:05:de:ea:36:62:3e:45:fa:b2:c0:
8b:2e:8c:17:a4:a2:a4:3e:f1:1e:1c:8f:72:84:bc:fe:aa:c6:
d1:8e:08:4e:05:31:25:c0:85:47:f2:83:27:dd:f8:ad:25:82:
8b:6c:22:7f:8a:7a:5c:5d:2e:4e:54:4a:9f:7a:79:f5:6d:69:
e2:a8:9a:a7:c5:fa:b0:9c:df:32:97:cf:4e:40:cc:cb:15:ae:
19:4d:73:ba:35:d1:6e:b7:29:28:45:9b:61:54:93:a2:aa:90:
d9:22:a1:fc:23:9d:6e:b1:4b:2c:59:a7:b3:8d:d7:b6:b3:0b:
f4:2a:a6:77:bc:8e:9a:ef:f1:a3:6b:0a:e0:7f:2f:a8:d1:65:
f5:d6:6a:e5:5a:c5:d1:f4:e9:f7:ed:5a:38:ef:f1:b8:fe:18:
02:ef:05:b4:7d:08:fc:01:50:a2:97:e6:5e:74:7f:63:03:c5:
f9:73:24:e3:07:60:ca:84:61:1d:5d:9c:16:11:3f:68:a4:19:
8f:8f:41:4e:9d:23:b3:0f:cb:48:a9:3b:9b:25:98:18:95:dd:
40:e9:c6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:52:48 2026 by rpki-client