$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft File: VHoRD_LjpNQgjqW3w-hympsP1Jw.mft (raw, json) Hash identifier: gPo+CKtCgEyOi7XyV9ArNjprSVJTA04KfNA4eaRn9Bo= Subject key identifier: 6C:14:1A:81:7D:DA:59:71:5F:23:B0:85:2E:8B:EA:EC:7F:C9:56:23 Authority key identifier: 54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C Certificate issuer: /CN=A9153303/serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft Manifest number: CB Signing time: Sat 09 Aug 2025 06:08:06 +0000 Manifest this update: Sat 09 Aug 2025 06:08:05 +0000 Manifest next update: Sat 16 Aug 2025 06:08:05 +0000 Files and hashes: 1: VHoRD_LjpNQgjqW3w-hympsP1Jw.crl (hash: MTEXC4oIZcAeIwpGcY08xKn3qhPvVlgCKixLy/GtIfI=) 2: 2916DB783FE111EFB5A50814C4F9AE02.roa (hash: XqPR58WFjxW/r7vrXermk8/pxwRAohdmERUavDiArx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153303, serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C Validity Not Before: Aug 9 06:08:05 2025 GMT Not After : Aug 16 06:08:05 2025 GMT Subject: CN=6896e5c5-b636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ef:52:43:e3:a4:3c:35:b9:e3:bd:68:27:a0: fb:ea:10:ab:7e:29:4c:9d:c4:66:6d:d6:41:da:3b: 08:55:b5:ff:86:91:00:cb:4c:56:eb:6f:84:fd:41: 57:98:63:77:22:9b:76:d2:bf:e2:de:b5:3e:53:0b: 3c:65:49:a7:93:47:e5:68:69:b9:39:05:47:76:68: 51:f1:bb:ff:75:08:c9:6b:25:db:ab:80:87:b6:7c: 1e:e8:11:fa:66:15:41:6c:56:fa:21:25:b5:fa:34: 53:f6:31:45:91:d0:37:e5:80:60:1a:d2:84:c2:51: e9:7c:66:42:9c:20:43:15:f9:fd:2a:ed:f7:29:0b: 0a:cc:16:76:74:ef:5f:8b:e7:1c:ae:f2:04:14:c2: c5:81:5e:44:e4:0e:a3:10:a8:55:68:2c:aa:dd:84: 2c:9c:03:ca:87:75:4d:2a:bd:3a:73:68:34:32:8e: 07:e0:68:88:ec:5f:a6:a3:76:b4:b9:75:56:f3:9e: 86:3b:fb:53:24:57:8e:93:0d:e8:3a:25:b4:2f:cf: f3:5e:57:24:94:8e:9d:9f:27:d8:c3:bf:c1:26:d9: 8a:f4:bc:6c:c3:44:d6:13:9e:b6:81:91:43:f9:83: 6f:93:fc:7f:64:de:a8:d2:42:62:ea:9f:8c:55:3d: 32:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:14:1A:81:7D:DA:59:71:5F:23:B0:85:2E:8B:EA:EC:7F:C9:56:23 X509v3 Authority Key Identifier: keyid:54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f2:5d:9c:e3:86:3a:67:44:9b:52:7a:74:e0:56:55:ae:de: 5c:6d:cd:e0:e2:74:56:ee:4b:00:4b:e5:45:0d:cb:1d:5f:63: 46:f9:5b:96:78:fd:77:ee:e5:0f:93:30:39:04:67:c9:af:20: 01:9b:6d:18:b5:6f:86:40:47:66:5d:81:30:88:c7:7c:d5:ce: 6d:32:20:ab:39:02:4b:7a:ed:7d:60:a3:1f:30:dd:ed:bc:dc: d2:d8:3a:31:ae:ca:cc:bc:98:53:a9:c5:56:38:75:8b:34:76: 99:6b:77:70:39:27:60:7c:64:66:34:2c:2e:ae:a2:02:5e:ad: 12:4b:5a:09:61:f5:09:e4:73:83:00:43:c9:47:24:99:d7:32: c0:f9:04:ff:66:23:f9:c3:fc:5b:c8:79:ad:71:74:6c:b0:dd: 8a:2e:cb:51:f4:88:7a:c2:a0:8b:8b:0b:c4:ca:6d:c8:26:ad: 71:ec:ef:f3:70:6f:ca:1d:b6:7f:ce:14:dd:41:04:85:a8:4f: bb:d5:91:55:cc:ec:50:ce:cf:b9:df:bf:37:f4:d9:dd:0d:86: 7e:a4:bb:cc:d0:11:58:64:19:e7:4d:08:75:38:02:2c:63:e4: 6e:a2:62:9d:d3:d4:0d:4f:b6:43:ef:17:75:60:99:c4:8d:fa: fc:7e:03:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMzMDMxMTAvBgNVBAUTKDU0N0ExMTBGRjJFM0E0RDQyMDhFQTVCN0MzRTg3MjlB OUIwRkQ0OUMwHhcNMjUwODA5MDYwODA1WhcNMjUwODE2MDYwODA1WjAYMRYwFAYD VQQDEw02ODk2ZTVjNS1iNjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAve9SQ+OkPDW5471oJ6D76hCrfilMncRmbdZB2jsIVbX/hpEAy0xW62+E/UFX mGN3Ipt20r/i3rU+Uws8ZUmnk0flaGm5OQVHdmhR8bv/dQjJayXbq4CHtnwe6BH6 ZhVBbFb6ISW1+jRT9jFFkdA35YBgGtKEwlHpfGZCnCBDFfn9Ku33KQsKzBZ2dO9f i+ccrvIEFMLFgV5E5A6jEKhVaCyq3YQsnAPKh3VNKr06c2g0Mo4H4GiI7F+mo3a0 uXVW856GO/tTJFeOkw3oOiW0L8/zXlcklI6dnyfYw7/BJtmK9Lxsw0TWE562gZFD +YNvk/x/ZN6o0kJi6p+MVT0yawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwUGoF9 2llxXyOwhS6L6ux/yVYjMB8GA1UdIwQYMBaAFFR6EQ/y46TUII6lt8PocpqbD9Sc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzMwMy83OEE4MUQxMDNG RTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9WSG9SRF9ManBOUWdqcVczdy1oeW1wc1Ax SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZIb1JEX0xqcE5RZ2pxVzN3LWh5bXBzUDFKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzMwMy83OEE4MUQxMDNGRTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9WSG9SRF9ManBO UWdqcVczdy1oeW1wc1AxSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL8l2c44Y6Z0SbUnp04FZVrt5cbc3g4nRW7ksAS+VFDcsdX2NG+VuW eP137uUPkzA5BGfJryABm20YtW+GQEdmXYEwiMd81c5tMiCrOQJLeu19YKMfMN3t vNzS2DoxrsrMvJhTqcVWOHWLNHaZa3dwOSdgfGRmNCwurqICXq0SS1oJYfUJ5HOD AEPJRySZ1zLA+QT/ZiP5w/xbyHmtcXRssN2KLstR9Ih6wqCLiwvEym3IJq1x7O/z cG/KHbZ/zhTdQQSFqE+71ZFVzOxQzs+537839NndDYZ+pLvM0BFYZBnnTQh1OAIs Y+RuomKd09QNT7ZD7xd1YJnEjfr8fgPw -----END CERTIFICATE-----Generated at Sun Aug 10 19:57:32 2025 by rpki-client