$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft File: VHoRD_LjpNQgjqW3w-hympsP1Jw.mft (raw, json) Hash identifier: cOK42WxGX2e+rzqFmvg2/JaFU3Tewl492CkJrUm1W2c= Subject key identifier: A4:FC:5D:57:FC:7A:1C:9D:89:1D:FA:92:1B:0B:B8:5A:F0:FE:DC:43 Authority key identifier: 54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C Certificate issuer: /CN=A9153303/serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft Manifest number: BE Signing time: Sat 19 Jul 2025 06:03:21 +0000 Manifest this update: Sat 19 Jul 2025 06:03:20 +0000 Manifest next update: Sat 26 Jul 2025 06:03:20 +0000 Files and hashes: 1: VHoRD_LjpNQgjqW3w-hympsP1Jw.crl (hash: JqOFz6L02mYgKJiOIGOJaHKIkT8+cG1Tb85S+4k4pHw=) 2: 2916DB783FE111EFB5A50814C4F9AE02.roa (hash: z8nIuMVscKg4ddacrN0wsJlufM+eXsIydjqCMnTO5kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153303, serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C Validity Not Before: Jul 19 06:03:20 2025 GMT Not After : Jul 26 06:03:20 2025 GMT Subject: CN=687b3528-7c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:98:94:e8:58:70:2e:dd:05:9a:0a:80:03:ab: 41:88:a3:16:97:a6:0f:17:8b:91:f9:19:fe:84:5f: 46:7f:32:fb:21:f0:d7:12:1b:02:c3:52:a8:4d:ea: 38:4e:f9:22:84:ef:1d:38:05:ee:83:4b:f4:33:c9: 16:82:61:da:04:a6:6f:6e:80:60:5b:ac:b4:06:f3: 88:d7:e1:ca:b4:ad:5a:59:75:be:c5:a7:ff:1f:de: 59:8a:9e:ef:51:87:6d:53:ad:42:1c:86:89:2e:20: 79:a5:54:d0:21:a3:b3:98:65:bd:59:b4:17:8e:27: 9e:ae:67:4f:28:f5:25:3a:4c:80:cc:c7:d8:d8:b4: 25:b2:0a:3d:9b:62:8b:0b:c4:0a:c2:85:da:f8:86: 6c:f2:5a:3d:b9:63:e7:92:f7:eb:9c:03:39:5b:84: f1:49:fc:a3:48:82:41:49:02:38:df:96:b5:a9:ec: 3c:94:9b:48:1a:4d:99:78:9f:81:bc:82:9c:7d:32: 07:1b:56:ea:74:25:70:48:b5:cc:dd:c9:43:17:7a: 18:ae:52:31:ec:0a:66:e5:a4:89:3a:6c:54:e1:d5: 68:b3:77:55:04:9a:0d:6e:c3:8f:99:da:c2:0d:70: f8:69:56:24:ca:94:20:dd:e0:19:6c:7e:ff:87:b6: b2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FC:5D:57:FC:7A:1C:9D:89:1D:FA:92:1B:0B:B8:5A:F0:FE:DC:43 X509v3 Authority Key Identifier: keyid:54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:41:64:59:1f:53:cb:99:dd:28:ac:4a:81:f1:d3:fc:74:49: 64:6c:cc:76:d7:18:86:d4:51:78:2e:0d:a2:15:de:0c:f6:6c: 39:9f:c4:8c:b4:0f:78:a1:7c:f0:03:20:2b:6c:c1:a7:f2:86: d6:5a:69:ed:9d:17:67:db:03:7b:77:d0:d7:b0:13:a2:ef:3a: 5d:64:4d:26:d4:51:42:61:58:cd:7e:26:55:1b:f7:91:b5:27: 76:52:33:03:3a:ce:db:a5:9e:c6:02:e7:f6:b3:12:28:3c:ca: f4:4d:8e:14:8e:92:dd:0a:24:1f:21:68:de:d8:b7:36:25:0f: ff:b6:7e:d5:4b:b5:95:b7:1d:91:e6:30:8b:48:ab:34:60:47: d2:db:a1:99:b3:aa:a0:41:ef:cf:ae:79:be:d8:25:23:23:bf: 95:4d:7a:d0:e2:a3:18:4f:2b:88:51:b1:6b:0b:0e:9e:fe:da: 1c:5c:14:2a:bf:8b:2f:e6:b7:c7:57:fe:bb:cb:f3:a5:0a:65: a6:16:19:30:2b:3f:ff:34:09:d9:17:91:7d:15:4b:14:cc:83: fe:1c:39:fc:9e:1f:44:ca:6e:a1:fc:c3:5f:0c:e0:d3:9f:64: 1b:d7:ac:e4:9a:28:07:c4:fc:65:53:70:dc:fa:8a:00:85:49: c6:ab:d5:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMzMDMxMTAvBgNVBAUTKDU0N0ExMTBGRjJFM0E0RDQyMDhFQTVCN0MzRTg3MjlB OUIwRkQ0OUMwHhcNMjUwNzE5MDYwMzIwWhcNMjUwNzI2MDYwMzIwWjAYMRYwFAYD VQQDEw02ODdiMzUyOC03YzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZiU6FhwLt0FmgqAA6tBiKMWl6YPF4uR+Rn+hF9GfzL7IfDXEhsCw1KoTeo4 TvkihO8dOAXug0v0M8kWgmHaBKZvboBgW6y0BvOI1+HKtK1aWXW+xaf/H95Zip7v UYdtU61CHIaJLiB5pVTQIaOzmGW9WbQXjieermdPKPUlOkyAzMfY2LQlsgo9m2KL C8QKwoXa+IZs8lo9uWPnkvfrnAM5W4TxSfyjSIJBSQI435a1qew8lJtIGk2ZeJ+B vIKcfTIHG1bqdCVwSLXM3clDF3oYrlIx7Apm5aSJOmxU4dVos3dVBJoNbsOPmdrC DXD4aVYkypQg3eAZbH7/h7ay9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKT8XVf8 ehydiR36khsLuFrw/txDMB8GA1UdIwQYMBaAFFR6EQ/y46TUII6lt8PocpqbD9Sc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzMwMy83OEE4MUQxMDNG RTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9WSG9SRF9ManBOUWdqcVczdy1oeW1wc1Ax SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZIb1JEX0xqcE5RZ2pxVzN3LWh5bXBzUDFKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzMwMy83OEE4MUQxMDNGRTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9WSG9SRF9ManBO UWdqcVczdy1oeW1wc1AxSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1QWRZH1PLmd0orEqB8dP8dElkbMx21xiG1FF4Lg2iFd4M9mw5n8SM tA94oXzwAyArbMGn8obWWmntnRdn2wN7d9DXsBOi7zpdZE0m1FFCYVjNfiZVG/eR tSd2UjMDOs7bpZ7GAuf2sxIoPMr0TY4UjpLdCiQfIWje2Lc2JQ//tn7VS7WVtx2R 5jCLSKs0YEfS26GZs6qgQe/Prnm+2CUjI7+VTXrQ4qMYTyuIUbFrCw6e/tocXBQq v4sv5rfHV/67y/OlCmWmFhkwKz//NAnZF5F9FUsUzIP+HDn8nh9Eym6h/MNfDODT n2Qb16zkmigHxPxlU3Dc+ooAhUnGq9Wq -----END CERTIFICATE-----Generated at Sun Jul 20 19:07:14 2025 by rpki-client