Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
File:                     VHoRD_LjpNQgjqW3w-hympsP1Jw.mft (raw, json)
Hash identifier:          Y2AdwlNrGCBb/LMa/r5bBZL1ZCDxPqyJA6LyyZMJyX4=
Subject key identifier:   DA:AD:F4:E6:FF:C4:2B:7D:AD:D2:2A:B8:A9:5A:4E:AF:75:BF:13:F8
Authority key identifier: 54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
Certificate issuer:       /CN=A9153303/serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
Certificate serial:       D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
Manifest number:          D2
Signing time:             Sat 23 Aug 2025 05:47:43 +0000
Manifest this update:     Sat 23 Aug 2025 05:47:43 +0000
Manifest next update:     Sat 30 Aug 2025 05:47:43 +0000
Files and hashes:         1: VHoRD_LjpNQgjqW3w-hympsP1Jw.crl (hash: CV1wc4lMIViDEC2TrpfveIOof5rVjhuOBOQ+Gouhg0A=)
                          2: 2916DB783FE111EFB5A50814C4F9AE02.roa (hash: XqPR58WFjxW/r7vrXermk8/pxwRAohdmERUavDiArx0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl
                          rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:47:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153303, serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
        Validity
            Not Before: Aug 23 05:47:43 2025 GMT
            Not After : Aug 30 05:47:43 2025 GMT
        Subject: CN=68a955ff-af12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:63:c7:1f:f7:11:a8:f1:67:55:3a:2c:3f:5b:
                    22:7e:e4:bd:4c:ed:72:14:ad:2a:5a:af:d2:1a:4a:
                    8a:fd:64:cb:2f:de:f8:47:ba:9f:a5:24:b8:bc:75:
                    6f:39:34:0a:80:7e:d4:66:e7:47:3a:8f:82:6e:8f:
                    25:9c:b5:c8:93:34:30:21:2d:1e:1b:49:c3:a8:14:
                    cd:0a:af:d4:ed:0a:fb:6a:71:4e:13:b3:8c:d2:a1:
                    9a:a9:3e:18:5b:dc:69:d6:2b:30:4d:39:4f:b8:dd:
                    c9:39:a3:88:64:b3:ec:1f:11:f4:3d:54:3e:ec:57:
                    09:9b:b0:6b:26:77:f0:5b:57:43:7a:8c:8a:b6:7f:
                    d9:ef:5b:5d:6c:53:a1:74:d3:9c:56:14:50:6f:3f:
                    83:56:28:6d:87:4e:98:dc:2b:15:f1:9d:20:78:bf:
                    58:cf:99:f6:73:e8:b4:2f:01:47:6a:17:28:cc:7f:
                    70:cf:b2:6a:61:a9:4f:cc:d3:77:b6:18:af:c4:4b:
                    77:01:99:d7:03:44:08:97:f3:87:32:bd:6f:ce:40:
                    72:3a:b3:8c:f3:70:75:85:59:d1:9a:5b:fc:87:f7:
                    a8:bd:dd:8d:6c:43:3e:db:ce:11:70:af:92:d0:da:
                    da:1a:6d:a0:41:5b:35:2a:df:60:a9:02:a3:ca:e9:
                    75:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AD:F4:E6:FF:C4:2B:7D:AD:D2:2A:B8:A9:5A:4E:AF:75:BF:13:F8
            X509v3 Authority Key Identifier:
                keyid:54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:7c:0d:9c:a0:20:42:7b:fa:6f:98:94:a0:63:13:c5:e9:03:
         cb:d1:0a:86:f8:aa:3a:04:cb:26:07:77:2e:42:8b:0d:74:93:
         03:2f:83:eb:a3:69:06:74:fa:0d:42:d0:ae:0a:d1:94:51:f7:
         eb:8b:ce:4a:81:db:ec:31:56:8b:20:ed:ca:16:18:e3:ac:7a:
         42:6d:2c:99:66:fb:0e:7c:0d:75:02:a4:e9:e5:b4:c4:68:2c:
         b0:50:11:96:60:1b:d2:23:25:93:11:16:a7:4b:31:b1:54:3f:
         a8:84:81:0c:e6:e6:67:b2:a5:1e:67:b2:fc:e8:54:f1:d3:0e:
         c8:7d:78:19:7d:c9:99:a4:af:a9:d0:75:3c:ff:58:33:30:e1:
         13:3d:48:2c:76:c5:b1:13:d3:9c:5f:0c:0f:7d:4f:39:a4:6d:
         4f:d4:d6:6a:88:66:09:e3:99:63:a8:5f:79:b6:0f:49:5b:e0:
         09:7b:a6:7b:51:de:d2:e3:c1:03:6e:62:a2:49:11:11:94:69:
         25:73:a9:d7:11:31:e4:24:a1:e2:43:4e:be:93:47:2f:d5:8d:
         e3:ed:7c:2e:02:ad:01:4c:b9:9b:30:81:a3:5f:1c:86:de:f8:
         97:b5:e5:7a:1f:40:7a:9d:37:e1:70:02:24:ae:46:0e:75:b3:
         c9:66:9e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:49:41 2025 by rpki-client