Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
File:                     VHoRD_LjpNQgjqW3w-hympsP1Jw.mft (raw, json)
Hash identifier:          5QyTSSsu04jVsh2Kw3m2A0HFLbNSD6yCVp+enSfLcQE=
Subject key identifier:   BA:22:3A:D5:81:29:5E:E7:E7:8D:75:4C:85:09:3E:76:C6:F0:B1:C5
Authority key identifier: 54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
Certificate issuer:       /CN=A9153303/serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
Certificate serial:       0184
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
Manifest number:          017C
Signing time:             Thu 23 Jul 2026 06:06:08 +0000
Manifest this update:     Thu 23 Jul 2026 06:06:07 +0000
Manifest next update:     Thu 30 Jul 2026 06:06:07 +0000
Files and hashes:         1: VHoRD_LjpNQgjqW3w-hympsP1Jw.crl (hash: qPoiAECp+Gfaz0StV2VkFFa07/lUG1IseIx3SkvKJfQ=)
                          2: 2916DB783FE111EFB5A50814C4F9AE02.roa (hash: epV5odcoH9JjdJu9CHvqxBAp0zjrfWXz2/0dQLE8qjI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl
                          rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153303, serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
        Validity
            Not Before: Jul 23 06:06:07 2026 GMT
            Not After : Jul 30 06:06:07 2026 GMT
        Subject: CN=6a61af50-593e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f9:b7:d9:2c:9b:65:2d:83:0a:39:4b:b8:81:
                    ef:a2:28:1a:4e:3b:44:c5:1f:a0:e1:dc:68:eb:16:
                    a2:3a:fb:82:e6:51:a8:34:00:2a:b4:57:44:a0:4f:
                    0b:0b:82:64:2d:3e:85:89:2f:dc:a6:7d:6e:de:6e:
                    32:53:f9:01:b9:7b:8a:0b:10:6b:97:7a:ec:9b:0d:
                    1a:f9:65:54:1c:9d:1a:d7:4a:b6:50:87:de:16:7c:
                    05:46:a8:36:a2:a8:46:a9:0a:57:16:60:cf:fb:fb:
                    cc:9c:9a:7b:86:c4:f9:fb:91:37:af:e6:44:5f:ba:
                    78:24:8a:71:7e:5b:f5:51:54:fb:1d:c4:46:4b:88:
                    7e:2d:fa:fa:16:32:c3:b4:c5:09:16:f1:1d:0e:db:
                    8d:bd:a5:4d:78:0c:5e:ac:6f:f0:cf:51:55:65:3a:
                    55:02:a4:12:ea:df:70:f1:a4:2b:a7:d6:80:23:3f:
                    26:7f:45:5b:d9:5f:e6:52:47:b5:81:2a:64:58:7b:
                    21:35:0e:f7:a5:17:10:38:14:d2:f7:97:4a:5b:e4:
                    04:8a:aa:b1:b7:a1:8d:a2:9d:33:41:e6:e5:27:1e:
                    1d:97:6f:f8:42:39:54:21:e1:97:f1:f7:0c:4a:8c:
                    cb:ac:2b:d0:ed:85:8a:a8:0a:ac:d0:33:45:11:db:
                    6a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:22:3A:D5:81:29:5E:E7:E7:8D:75:4C:85:09:3E:76:C6:F0:B1:C5
            X509v3 Authority Key Identifier:
                keyid:54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:70:39:f5:de:a5:6a:df:0f:a5:27:8a:e2:fd:4b:cf:99:32:
         08:ee:3a:16:a5:8d:66:74:34:7a:af:6d:e5:58:a9:ac:32:39:
         6c:96:90:c2:c2:cf:32:ba:46:1d:1f:70:12:38:d0:1d:ed:e9:
         a2:f5:dc:15:41:b2:93:59:d5:93:b4:4a:89:8d:a0:c5:f5:dc:
         ff:59:6f:42:78:64:ec:48:02:69:64:2b:7e:d6:26:06:06:e0:
         10:c9:b1:68:e0:de:02:fa:04:72:4e:aa:90:d5:12:5c:d3:d2:
         0a:f4:b6:7a:b3:89:d8:02:4f:ee:11:4c:87:b5:75:7b:d5:a2:
         94:0a:f1:3e:5f:1b:b1:e2:eb:c7:d2:3d:2c:25:0d:26:85:16:
         f8:97:ee:de:a0:bc:80:d6:29:2d:d8:9d:89:93:c4:69:3a:92:
         04:4f:6a:eb:9b:5d:9f:01:dd:cd:d6:26:94:11:9c:2e:ca:72:
         88:f5:79:91:90:e0:b0:bc:1f:51:3c:1c:31:7d:36:58:66:2c:
         39:ab:15:a6:43:b3:a4:0b:4b:cd:ac:9e:41:ee:da:6e:de:b2:
         5b:a2:a1:44:f5:b6:65:48:c1:38:bf:d1:fb:5e:a6:8a:f5:97:
         b5:9b:f8:40:a8:66:17:c1:4e:bb:5d:76:9c:fe:03:3c:23:b6:
         57:8a:35:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:18:54 2026 by rpki-client