$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft File: VHoRD_LjpNQgjqW3w-hympsP1Jw.mft (raw, json) Hash identifier: kv62iliDPfk9JZhzQRJOIEebpCDyaeq34LldTILIfCk= Subject key identifier: 68:B2:71:89:55:39:CE:1D:7D:AD:4A:9C:AE:5E:5E:C2:BE:D7:2B:F5 Authority key identifier: 54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C Certificate issuer: /CN=A9153303/serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft Manifest number: D9 Signing time: Fri 05 Sep 2025 05:57:52 +0000 Manifest this update: Fri 05 Sep 2025 05:57:51 +0000 Manifest next update: Fri 12 Sep 2025 05:57:51 +0000 Files and hashes: 1: VHoRD_LjpNQgjqW3w-hympsP1Jw.crl (hash: KSXFTIGbYFgXNYZXdZGSBYzuarr/OzUVYaW9j7ghMww=) 2: 2916DB783FE111EFB5A50814C4F9AE02.roa (hash: XqPR58WFjxW/r7vrXermk8/pxwRAohdmERUavDiArx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:57:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153303, serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C Validity Not Before: Sep 5 05:57:51 2025 GMT Not After : Sep 12 05:57:51 2025 GMT Subject: CN=68ba7bdf-f65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f9:82:9c:6a:0f:77:d6:33:d6:f9:ec:f9:56: 84:c6:ab:b1:4e:16:65:a5:ce:39:d7:36:48:a7:f8: 5e:94:47:00:ef:81:98:28:dc:0e:91:47:01:23:8d: c4:59:3c:0f:c5:5c:fc:e6:af:bd:ae:3c:aa:a0:90: 82:f4:e8:06:ee:f3:f0:ff:be:36:c5:d2:07:9a:83: f0:d1:42:3d:2c:f0:aa:c9:98:90:2c:b1:34:4e:dd: 1a:64:3b:4b:15:5f:fe:50:a1:35:39:2d:bb:1c:cb: 52:9a:c9:9e:f8:50:4e:6d:c9:4e:f9:6b:4f:d4:9e: cc:29:35:23:de:3d:a5:b9:51:5f:11:ae:02:72:4c: 26:f9:f1:d4:cd:35:91:de:07:9b:af:49:3b:eb:7e: e4:1f:87:d6:60:ab:7c:f1:c0:c7:c6:cf:90:37:d0: 73:0e:5b:8d:de:fa:95:06:58:a1:96:1b:e9:14:7e: fb:fc:a6:ca:79:e2:b4:db:c8:54:b3:b2:74:85:48: 95:73:a8:e9:dc:d8:4f:03:22:5d:97:10:80:c9:1e: 84:77:a1:53:67:83:8a:8b:c6:8d:61:60:84:e8:66: 34:64:05:2b:da:35:4a:e2:66:37:a2:03:c9:7d:e3: 64:49:32:15:60:93:d4:c9:4a:e4:19:c3:4c:16:1b: fa:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B2:71:89:55:39:CE:1D:7D:AD:4A:9C:AE:5E:5E:C2:BE:D7:2B:F5 X509v3 Authority Key Identifier: keyid:54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:c1:a2:8a:a5:4d:41:64:b8:84:43:c3:4e:ce:95:36:1c:cf: b5:63:e4:34:51:b6:4a:0c:b1:44:be:e5:b5:15:0d:64:bb:2d: 3b:79:63:16:f1:71:4b:39:21:7d:e8:27:bb:3e:7f:31:b1:95: ad:ca:e2:bc:7a:c7:00:75:e5:84:85:7d:94:da:f9:44:48:92: 74:1f:05:36:74:a4:52:01:da:c5:62:be:81:00:0f:62:f0:20: f8:19:4b:b6:2c:0f:2b:ce:b5:46:63:9a:75:f1:1b:d4:72:2d: b4:0b:39:03:4b:b3:92:ce:53:4a:95:a5:a2:9f:fa:75:51:1a: 92:59:a7:57:d4:34:f7:71:1b:32:66:80:b1:e9:36:5a:5e:46: 99:44:57:ff:a2:41:f4:2c:1e:9c:c8:77:d3:1b:df:12:03:90: 81:34:92:50:ef:f2:57:d0:3a:2a:b7:39:f8:10:ad:83:e2:cc: a4:0b:05:4d:2d:e0:97:17:71:5f:ee:7b:1c:01:72:97:c2:25: 06:d6:73:6b:d3:7a:89:b7:ed:37:34:14:de:42:4d:0f:50:24: 42:c6:c8:3c:19:2e:52:24:ca:0f:52:52:cc:d8:dc:39:18:a0: 6c:d2:e0:af:80:99:d4:a9:98:9d:46:72:d6:27:bc:52:8b:42: 0a:29:02:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMzMDMxMTAvBgNVBAUTKDU0N0ExMTBGRjJFM0E0RDQyMDhFQTVCN0MzRTg3MjlB OUIwRkQ0OUMwHhcNMjUwOTA1MDU1NzUxWhcNMjUwOTEyMDU1NzUxWjAYMRYwFAYD VQQDEw02OGJhN2JkZi1mNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvmCnGoPd9Yz1vns+VaExquxThZlpc451zZIp/helEcA74GYKNwOkUcBI43E WTwPxVz85q+9rjyqoJCC9OgG7vPw/742xdIHmoPw0UI9LPCqyZiQLLE0Tt0aZDtL FV/+UKE1OS27HMtSmsme+FBObclO+WtP1J7MKTUj3j2luVFfEa4Cckwm+fHUzTWR 3gebr0k7637kH4fWYKt88cDHxs+QN9BzDluN3vqVBlihlhvpFH77/KbKeeK028hU s7J0hUiVc6jp3NhPAyJdlxCAyR6Ed6FTZ4OKi8aNYWCE6GY0ZAUr2jVK4mY3ogPJ feNkSTIVYJPUyUrkGcNMFhv6HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiycYlV Oc4dfa1KnK5eXsK+1yv1MB8GA1UdIwQYMBaAFFR6EQ/y46TUII6lt8PocpqbD9Sc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzMwMy83OEE4MUQxMDNG RTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9WSG9SRF9ManBOUWdqcVczdy1oeW1wc1Ax SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZIb1JEX0xqcE5RZ2pxVzN3LWh5bXBzUDFKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzMwMy83OEE4MUQxMDNGRTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9WSG9SRF9ManBO UWdqcVczdy1oeW1wc1AxSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkwaKKpU1BZLiEQ8NOzpU2HM+1Y+Q0UbZKDLFEvuW1FQ1kuy07eWMW 8XFLOSF96Ce7Pn8xsZWtyuK8escAdeWEhX2U2vlESJJ0HwU2dKRSAdrFYr6BAA9i 8CD4GUu2LA8rzrVGY5p18RvUci20CzkDS7OSzlNKlaWin/p1URqSWadX1DT3cRsy ZoCx6TZaXkaZRFf/okH0LB6cyHfTG98SA5CBNJJQ7/JX0Doqtzn4EK2D4sykCwVN LeCXF3Ff7nscAXKXwiUG1nNr03qJt+03NBTeQk0PUCRCxsg8GS5SJMoPUlLM2Nw5 GKBs0uCvgJnUqZidRnLWJ7xSi0IKKQJ2 -----END CERTIFICATE-----Generated at Sat Sep 6 21:11:00 2025 by rpki-client