Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
File: VHoRD_LjpNQgjqW3w-hympsP1Jw.mft (raw, json)
Hash identifier: H6KBKXdlbSpgR22Gwu2GpavVFsaXqaHBshEtT4U2DrA=
Subject key identifier: 11:A7:AC:EA:2A:B0:46:FA:AD:6D:03:1B:2D:38:79:1F:E9:63:4C:45
Authority key identifier: 54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
Certificate issuer: /CN=A9153303/serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
Certificate serial: 8F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
Manifest number: 8E
Signing time: Sun 13 Apr 2025 05:12:09 +0000
Manifest this update: Sun 13 Apr 2025 05:12:08 +0000
Manifest next update: Sun 20 Apr 2025 05:12:08 +0000
Files and hashes: 1: VHoRD_LjpNQgjqW3w-hympsP1Jw.crl (hash: u/04JrrlBaAizsU4WvW1uvZ97yTajrTqmIoGVaIBd7k=)
2: 2916DB783FE111EFB5A50814C4F9AE02.roa (hash: z8nIuMVscKg4ddacrN0wsJlufM+eXsIydjqCMnTO5kg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl
rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 05:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153303, serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
Validity
Not Before: Apr 13 05:12:08 2025 GMT
Not After : Apr 20 05:12:08 2025 GMT
Subject: CN=67fb47a9-0877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:a2:92:a7:c8:e1:0a:0c:46:6c:21:1d:e5:
66:cb:ca:23:48:db:05:72:3f:56:6e:11:dd:ee:65:
b9:39:6e:b9:62:3b:53:b3:2f:03:81:07:b5:fa:f2:
83:ac:52:1e:1f:b8:19:8e:1b:f1:42:cf:d8:ff:45:
bd:6d:6d:03:7c:27:8e:b8:67:fe:95:ff:d1:e6:b3:
04:9b:68:9b:b5:46:19:78:ea:6c:c2:fd:af:3d:29:
2e:2e:ab:ad:b7:13:7f:3b:40:dd:e5:7e:cc:11:50:
5b:ac:40:ce:68:4a:68:95:0b:41:f6:82:c7:2e:cc:
28:3e:7a:1d:52:d4:6e:ca:eb:46:b8:fa:7c:c4:63:
c0:58:2d:81:b6:a0:71:97:2a:46:8b:9e:b0:69:6b:
5a:b8:d7:8b:0c:ac:e4:04:d1:80:da:36:cf:e5:d1:
eb:8e:e8:b2:80:43:09:a6:8d:12:75:c6:50:c3:51:
76:5d:12:26:2b:b3:14:bd:97:8e:fd:6f:72:46:cd:
f3:d9:ce:19:00:8d:08:ce:17:7e:f1:53:2a:e0:86:
d8:96:b4:4e:56:e0:5b:2e:63:b7:86:4c:f0:77:92:
b3:76:f3:27:09:0a:b1:de:05:27:ab:0b:e6:06:28:
a3:4b:5e:5f:c3:dc:bd:f6:30:a7:0b:36:44:f4:c3:
82:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A7:AC:EA:2A:B0:46:FA:AD:6D:03:1B:2D:38:79:1F:E9:63:4C:45
X509v3 Authority Key Identifier:
keyid:54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:cd:5e:95:4b:b7:c8:76:44:11:53:56:77:eb:24:18:18:75:
17:89:7e:03:26:a1:c4:b5:2d:69:57:5f:f7:b3:3b:75:8a:ca:
3b:b6:f1:9b:ae:a1:31:ee:7f:e3:42:eb:14:b5:2a:af:5f:11:
5a:09:e2:cb:0b:93:12:b0:ad:d5:94:57:3c:51:7f:11:f7:af:
4a:fb:6f:06:46:f8:20:7a:36:a9:16:9f:57:9f:2e:d2:91:8a:
ad:5c:4c:79:cf:be:01:ef:dc:16:0d:f6:de:cf:d6:ef:a7:fa:
79:6f:7a:34:1f:48:18:fb:36:1b:58:55:7c:b8:32:b5:45:96:
82:6d:61:fc:03:17:c2:10:45:de:ac:f1:fe:76:95:a7:d6:ea:
84:ee:56:76:e6:28:f8:79:3f:4a:28:e5:34:5e:d5:11:42:5c:
62:b6:93:5d:08:72:01:9e:37:9f:a6:e5:56:81:bb:6c:e7:4c:
b5:84:06:b0:e9:93:b9:3e:94:c6:a4:d6:82:29:b2:9b:d5:78:
2d:b7:81:a3:f0:b8:d9:53:dd:2f:3a:32:2d:31:bf:02:e6:90:
2e:81:78:02:2d:fd:02:b2:c6:5b:a4:3c:8e:79:fc:97:26:66:
d7:d4:fa:b0:9e:63:75:26:12:f1:e7:c0:21:55:fc:72:b1:a5:
a0:05:e3:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTMzMDMxMTAvBgNVBAUTKDU0N0ExMTBGRjJFM0E0RDQyMDhFQTVCN0MzRTg3MjlB
OUIwRkQ0OUMwHhcNMjUwNDEzMDUxMjA4WhcNMjUwNDIwMDUxMjA4WjAYMRYwFAYD
VQQDEw02N2ZiNDdhOS0wODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnTyikqfI4QoMRmwhHeVmy8ojSNsFcj9WbhHd7mW5OW65YjtTsy8DgQe1+vKD
rFIeH7gZjhvxQs/Y/0W9bW0DfCeOuGf+lf/R5rMEm2ibtUYZeOpswv2vPSkuLqut
txN/O0Dd5X7MEVBbrEDOaEpolQtB9oLHLswoPnodUtRuyutGuPp8xGPAWC2BtqBx
lypGi56waWtauNeLDKzkBNGA2jbP5dHrjuiygEMJpo0SdcZQw1F2XRImK7MUvZeO
/W9yRs3z2c4ZAI0Izhd+8VMq4IbYlrROVuBbLmO3hkzwd5KzdvMnCQqx3gUnqwvm
BiijS15fw9y99jCnCzZE9MOCWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGnrOoq
sEb6rW0DGy04eR/pY0xFMB8GA1UdIwQYMBaAFFR6EQ/y46TUII6lt8PocpqbD9Sc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzMwMy83OEE4MUQxMDNG
RTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9WSG9SRF9ManBOUWdqcVczdy1oeW1wc1Ax
SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZIb1JEX0xqcE5RZ2pxVzN3LWh5bXBzUDFKdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzMwMy83OEE4MUQxMDNGRTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9WSG9SRF9ManBO
UWdqcVczdy1oeW1wc1AxSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAyzV6VS7fIdkQRU1Z36yQYGHUXiX4DJqHEtS1pV1/3szt1iso7tvGb
rqEx7n/jQusUtSqvXxFaCeLLC5MSsK3VlFc8UX8R969K+28GRvggejapFp9Xny7S
kYqtXEx5z74B79wWDfbez9bvp/p5b3o0H0gY+zYbWFV8uDK1RZaCbWH8AxfCEEXe
rPH+dpWn1uqE7lZ25ij4eT9KKOU0XtURQlxitpNdCHIBnjefpuVWgbts50y1hAaw
6ZO5PpTGpNaCKbKb1Xgtt4Gj8LjZU90vOjItMb8C5pAugXgCLf0CssZbpDyOefyX
JmbX1PqwnmN1JhLx58AhVfxysaWgBeM7
-----END CERTIFICATE-----
Generated at Mon Apr 14 08:59:26 2025 by rpki-client