$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft File: VHoRD_LjpNQgjqW3w-hympsP1Jw.mft (raw, json) Hash identifier: Fv2Dy05liWv5XiLs0Yv7FSzGft2lfCAgtnpVa4KVpoY= Subject key identifier: 03:90:FE:EA:7C:0E:E1:B6:77:32:88:18:E0:9A:78:B9:D5:63:F9:01 Authority key identifier: 54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C Certificate issuer: /CN=A9153303/serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft Manifest number: A6 Signing time: Sun 01 Jun 2025 05:51:01 +0000 Manifest this update: Sun 01 Jun 2025 05:51:00 +0000 Manifest next update: Sun 08 Jun 2025 05:51:00 +0000 Files and hashes: 1: VHoRD_LjpNQgjqW3w-hympsP1Jw.crl (hash: 6k41lWkpDDU6X5aHR1jnuHQ+Uv0AtsPoJkoY7wCu5Ro=) 2: 2916DB783FE111EFB5A50814C4F9AE02.roa (hash: z8nIuMVscKg4ddacrN0wsJlufM+eXsIydjqCMnTO5kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153303, serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C Validity Not Before: Jun 1 05:51:00 2025 GMT Not After : Jun 8 05:51:00 2025 GMT Subject: CN=683bea44-31b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d2:8f:31:b2:db:58:9a:8c:1c:7f:37:54:39: 1b:c0:d1:a4:54:25:72:ce:05:96:a1:96:d7:c2:67: 38:4d:55:7c:06:8b:5b:df:98:f4:a2:7b:5d:d4:89: 0e:f9:39:8f:89:af:2c:ba:bf:a3:05:d0:3b:53:a5: ad:fa:3b:c0:ef:81:81:dd:ed:54:c9:32:27:3b:b1: 73:01:ef:16:05:e5:31:e1:b8:6f:1e:f4:80:13:7a: 25:5f:cb:61:23:6c:9d:d1:03:31:3f:4d:dd:dd:dc: 73:0a:91:82:5f:15:0d:1b:90:99:4a:07:b8:57:b6: 23:be:1d:6a:75:bb:9a:f8:a6:cb:08:08:24:f1:c3: 30:b7:f5:7d:1c:8f:de:2d:40:d2:c3:aa:e0:af:e2: 75:39:61:da:a2:58:9d:7c:60:41:83:d2:7b:96:fd: 86:79:6f:9f:f3:3a:6e:a5:04:8d:d2:28:99:a1:89: 19:7a:a5:d4:cf:a3:4e:d7:a4:c4:67:fd:61:33:25: ab:97:7e:04:27:50:e3:d1:19:4f:24:20:61:ce:b2: 62:6f:11:47:df:15:f2:7b:b6:cb:9a:54:5f:bf:28: 6f:a5:e0:a9:52:8a:bf:c4:fd:6b:02:a0:cf:e5:a4: f3:a7:d5:e3:3e:70:de:d8:35:76:3e:11:50:b9:ea: e5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:90:FE:EA:7C:0E:E1:B6:77:32:88:18:E0:9A:78:B9:D5:63:F9:01 X509v3 Authority Key Identifier: keyid:54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:be:36:61:09:d0:b9:53:32:8e:5f:33:a5:20:a5:d5:57:0a: dd:59:c3:04:a4:59:86:a1:f7:94:5f:84:52:16:19:22:f8:7a: d4:04:cb:55:38:4c:ab:db:67:e7:de:de:41:3f:5b:49:ff:68: 6b:8d:d1:e1:ff:16:c8:76:03:d7:bd:e7:93:b6:94:d6:ca:8d: 71:f7:74:f9:d7:5d:03:c4:67:f7:d5:85:5c:59:e9:d1:d1:3f: dc:b7:a5:91:bc:f0:57:37:63:f6:bd:50:5d:ed:8c:39:67:d4: 1e:ec:0f:b7:96:bd:e2:72:15:a4:9e:f0:4a:23:88:c8:89:96: 7f:b0:6f:47:99:68:62:fd:39:0c:f3:1c:a4:6e:be:a2:66:7f: 08:9f:5c:78:42:81:74:c0:8d:73:bf:3b:81:06:e0:76:db:20: 68:78:07:55:ec:26:b1:c1:ae:7a:56:37:52:b0:5c:80:ab:7b: e2:ef:0d:17:b3:05:63:f6:43:e5:39:f9:35:a1:72:1c:84:04: 9c:77:d6:a1:64:ae:93:51:d2:e6:0a:6f:de:a3:fc:db:04:42: e7:da:9d:59:4f:bf:10:e3:d7:46:ce:3e:e0:2b:a6:8e:7e:a7: f9:3d:19:b9:87:55:ec:0e:bd:72:01:8a:28:49:a1:8d:61:37: 01:47:32:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMzMDMxMTAvBgNVBAUTKDU0N0ExMTBGRjJFM0E0RDQyMDhFQTVCN0MzRTg3MjlB OUIwRkQ0OUMwHhcNMjUwNjAxMDU1MTAwWhcNMjUwNjA4MDU1MTAwWjAYMRYwFAYD VQQDEw02ODNiZWE0NC0zMWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9KPMbLbWJqMHH83VDkbwNGkVCVyzgWWoZbXwmc4TVV8Botb35j0ontd1IkO +TmPia8sur+jBdA7U6Wt+jvA74GB3e1UyTInO7FzAe8WBeUx4bhvHvSAE3olX8th I2yd0QMxP03d3dxzCpGCXxUNG5CZSge4V7Yjvh1qdbua+KbLCAgk8cMwt/V9HI/e LUDSw6rgr+J1OWHaolidfGBBg9J7lv2GeW+f8zpupQSN0iiZoYkZeqXUz6NO16TE Z/1hMyWrl34EJ1Dj0RlPJCBhzrJibxFH3xXye7bLmlRfvyhvpeCpUoq/xP1rAqDP 5aTzp9XjPnDe2DV2PhFQuerl6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOQ/up8 DuG2dzKIGOCaeLnVY/kBMB8GA1UdIwQYMBaAFFR6EQ/y46TUII6lt8PocpqbD9Sc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzMwMy83OEE4MUQxMDNG RTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9WSG9SRF9ManBOUWdqcVczdy1oeW1wc1Ax SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZIb1JEX0xqcE5RZ2pxVzN3LWh5bXBzUDFKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzMwMy83OEE4MUQxMDNGRTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9WSG9SRF9ManBO UWdqcVczdy1oeW1wc1AxSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6vjZhCdC5UzKOXzOlIKXVVwrdWcMEpFmGofeUX4RSFhki+HrUBMtV OEyr22fn3t5BP1tJ/2hrjdHh/xbIdgPXveeTtpTWyo1x93T5110DxGf31YVcWenR 0T/ct6WRvPBXN2P2vVBd7Yw5Z9Qe7A+3lr3ichWknvBKI4jIiZZ/sG9HmWhi/TkM 8xykbr6iZn8In1x4QoF0wI1zvzuBBuB22yBoeAdV7Caxwa56VjdSsFyAq3vi7w0X swVj9kPlOfk1oXIchAScd9ahZK6TUdLmCm/eo/zbBELn2p1ZT78Q49dGzj7gK6aO fqf5PRm5h1XsDr1yAYooSaGNYTcBRzKo -----END CERTIFICATE-----Generated at Mon Jun 2 21:06:17 2025 by rpki-client