
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
File: VHoRD_LjpNQgjqW3w-hympsP1Jw.mft (raw, json)
Hash identifier: zvTJu5E6OVDEZo6f2muk4+j4mpZf/3su9m559cXPFuo=
Subject key identifier: EB:44:17:C7:88:F1:36:6C:36:C2:91:1C:81:54:F2:D1:16:5C:BA:AA
Authority key identifier: 54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
Certificate issuer: /CN=A9153303/serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
Certificate serial: 01A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
Manifest number: 01A0
Signing time: Sun 27 Sep 2026 04:39:09 +0000
Manifest this update: Sun 27 Sep 2026 04:39:08 +0000
Manifest next update: Sun 04 Oct 2026 04:39:08 +0000
Files and hashes: 1: VHoRD_LjpNQgjqW3w-hympsP1Jw.crl (hash: U29vsYleFgctfrmlpUbyefYT1DSbJgoMVotYQB6wGdE=)
2: 2916DB783FE111EFB5A50814C4F9AE02.roa (hash: muO8hscutEdUEzFP9J9R60pTCvQgu3X3Wu/XQGB5oPc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl
rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:39:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153303, serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
Validity
Not Before: Sep 27 04:39:08 2026 GMT
Not After : Oct 4 04:39:08 2026 GMT
Subject: CN=6ab89ded-dadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:58:09:d3:68:00:50:7f:cf:b6:9f:20:a3:8f:
cc:09:c2:b9:d0:84:13:d8:85:f3:8e:0a:fb:46:f7:
a4:51:7b:cd:13:e5:3b:b0:bb:b0:90:ba:a1:e7:25:
8f:82:01:d9:0e:17:94:22:dd:2b:14:b3:88:12:ae:
92:ef:7f:a4:72:32:b8:00:6a:7d:2b:9a:90:86:c5:
47:e2:0e:00:e6:c0:61:2f:c0:21:1a:e6:64:24:37:
69:4a:ac:01:e9:7a:d5:c6:3a:c8:7c:93:69:64:06:
25:c0:3c:93:22:95:fc:29:b2:e0:6c:ff:af:96:b9:
86:d5:64:1c:14:66:a1:cc:51:5a:22:92:08:72:77:
6c:96:95:4a:4d:61:51:88:fb:69:d2:05:c3:6e:9e:
ce:47:c9:2f:e8:e3:f3:25:82:cc:6c:5b:2b:60:7b:
2c:1e:05:07:26:70:79:7e:f4:2c:9c:48:4b:e5:5d:
fe:0d:b1:ff:21:c9:a7:60:83:3a:10:44:df:c8:46:
5c:d4:ce:2e:ca:22:15:2a:6e:aa:42:d5:50:26:c7:
d1:72:03:14:02:98:3b:60:19:ce:51:be:fb:8c:ab:
76:05:33:53:53:7d:df:fe:a0:69:92:5e:21:74:76:
e3:90:1e:a1:4e:f3:e4:0a:34:6a:91:a2:c0:95:59:
bc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:44:17:C7:88:F1:36:6C:36:C2:91:1C:81:54:F2:D1:16:5C:BA:AA
X509v3 Authority Key Identifier:
keyid:54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:51:4a:a2:84:ef:c6:c5:3f:5b:2d:a9:61:15:a0:85:43:85:
79:7e:4e:12:ee:41:63:ad:f8:bd:64:2a:38:a5:f9:9c:cb:84:
35:e6:bd:29:e0:76:44:d3:ff:6a:3d:82:f6:b0:d9:dc:c5:bb:
aa:57:94:42:ce:66:a6:c7:e8:03:3e:ae:78:85:a2:ef:f8:77:
0a:41:b6:18:75:08:46:a7:1e:05:fe:de:c4:2f:cb:39:65:54:
b8:14:eb:41:f0:94:ed:c5:ce:34:f2:ce:0c:a2:c6:bf:3b:54:
29:45:42:b7:02:de:d6:c7:1d:cd:4b:57:7a:44:52:01:3a:06:
3c:60:84:cc:a1:30:e0:27:cd:42:bc:fa:4d:a0:94:9b:91:cc:
df:cc:b9:c1:08:5b:13:c4:2f:41:e0:ba:66:c4:0b:3f:1f:91:
cc:83:d2:76:61:54:f4:1d:c8:9b:64:23:98:12:d0:d9:dc:92:
ac:85:1f:6d:dc:6a:91:04:ad:17:4a:ff:8d:89:4f:1a:2c:a0:
e5:63:49:9a:fc:7c:48:4d:9a:3b:94:be:03:87:8a:aa:f5:ae:
d3:7a:59:48:0d:14:a9:e2:48:56:49:c7:b4:fc:64:1e:54:fa:
95:d7:e8:12:bb:68:36:a9:d3:51:91:6b:ea:02:5b:f3:f5:37:
e2:ca:b4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:46:22 2026 by rpki-client