
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
File: VHoRD_LjpNQgjqW3w-hympsP1Jw.mft (raw, json)
Hash identifier: d20Utt8sGNdUrIk46+4tqgXmtXx+qOMGE1fT7qAbXV4=
Subject key identifier: F3:9A:44:E9:8A:6E:D7:A4:EF:5F:84:80:DB:30:38:DD:54:0C:8B:F1
Authority key identifier: 54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
Certificate issuer: /CN=A9153303/serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
Certificate serial: 0148
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
Manifest number: 0140
Signing time: Wed 25 Mar 2026 04:32:12 +0000
Manifest this update: Wed 25 Mar 2026 04:32:12 +0000
Manifest next update: Wed 01 Apr 2026 04:32:12 +0000
Files and hashes: 1: VHoRD_LjpNQgjqW3w-hympsP1Jw.crl (hash: 5I54NooPLMTeD4HoOaVwK9cOPklWS4DfCOYbJiEeeUU=)
2: 2916DB783FE111EFB5A50814C4F9AE02.roa (hash: epV5odcoH9JjdJu9CHvqxBAp0zjrfWXz2/0dQLE8qjI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl
rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153303, serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
Validity
Not Before: Mar 25 04:32:12 2026 GMT
Not After : Apr 1 04:32:12 2026 GMT
Subject: CN=69c3654c-29af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:ef:ad:20:0b:bc:10:1a:59:6f:bc:8d:f3:
b4:b9:26:7f:e9:1f:d8:b6:a6:c6:9a:14:87:2c:9f:
87:79:60:a7:1f:20:45:1c:f2:dc:d9:d2:65:a6:de:
ef:4c:5e:71:6e:71:0b:97:70:77:ce:30:ad:86:b1:
e7:a0:42:7f:cb:51:d3:05:ab:6b:16:e6:c2:69:8a:
36:1c:cd:3d:0f:cd:39:ec:5b:ea:53:fd:2b:f7:dd:
36:3c:20:b5:9e:35:8d:84:29:ec:81:fe:fe:d4:71:
6b:ba:73:58:65:62:31:2c:de:3b:d4:86:db:bd:56:
4d:b4:1a:d1:a5:e7:55:07:78:f4:37:2c:4c:f2:39:
fd:22:21:e1:df:bc:e4:8b:87:a5:d8:64:70:97:f9:
5d:2b:4b:8f:00:ab:c9:b9:53:a0:bb:37:cc:10:54:
3e:a1:3c:b2:77:27:d3:48:ce:1e:41:86:0e:e6:46:
04:5e:6a:ef:e4:a3:da:26:53:4f:ef:e8:ef:6e:8a:
17:c6:fc:34:14:d5:7a:e4:88:f1:32:51:b2:55:43:
e8:e8:dd:f0:58:ca:d1:2e:dc:79:dd:29:da:41:cc:
ac:6d:3d:93:1f:74:c0:0f:cb:b7:eb:fb:2d:d4:70:
f9:bd:b2:9f:bb:ae:1c:19:da:a2:c4:49:9a:7e:20:
21:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9A:44:E9:8A:6E:D7:A4:EF:5F:84:80:DB:30:38:DD:54:0C:8B:F1
X509v3 Authority Key Identifier:
keyid:54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:40:cc:3d:02:0b:a1:55:48:6e:06:00:58:4c:4d:e9:af:89:
a5:28:1e:13:95:1c:b5:85:f4:d4:23:bc:99:ed:76:65:a3:c4:
6c:b1:d0:f8:74:fa:20:8b:e0:ab:42:84:fe:3d:eb:ae:6d:d7:
2a:b8:d0:12:2d:a4:91:0b:22:98:d7:8a:c6:ca:84:92:50:42:
b1:93:68:73:bc:8c:d0:fb:a9:d4:c1:93:44:ad:e8:ad:ed:a2:
53:bb:fd:05:97:b4:36:c9:24:82:56:64:27:46:52:cd:76:a6:
ba:87:21:86:be:50:24:21:8c:2d:9d:be:b9:fc:4f:d8:d6:56:
bb:fd:4a:c0:3d:02:b8:62:49:04:a1:3c:e1:0d:24:90:e4:25:
f1:c9:cb:53:a7:df:9f:49:56:06:81:25:95:16:18:17:6e:5e:
19:3f:40:a6:e8:5a:df:83:e1:63:bc:b4:ae:da:9d:fe:11:e8:
3c:4e:a8:e9:de:bd:16:0c:c0:df:71:b2:5d:3e:5a:6c:33:74:
90:08:24:e5:be:6f:47:72:34:2f:57:02:08:70:3c:10:12:a8:
9e:a4:aa:a3:32:b1:90:1a:42:41:a5:03:41:bb:34:c4:b4:6e:
44:63:56:69:fa:bd:5d:26:cd:c9:62:b1:25:af:49:25:26:37:
87:1d:3d:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTMzMDMxMTAvBgNVBAUTKDU0N0ExMTBGRjJFM0E0RDQyMDhFQTVCN0MzRTg3MjlB
OUIwRkQ0OUMwHhcNMjYwMzI1MDQzMjEyWhcNMjYwNDAxMDQzMjEyWjAYMRYwFAYD
VQQDEw02OWMzNjU0Yy0yOWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvpTvrSALvBAaWW+8jfO0uSZ/6R/YtqbGmhSHLJ+HeWCnHyBFHPLc2dJlpt7v
TF5xbnELl3B3zjCthrHnoEJ/y1HTBatrFubCaYo2HM09D8057FvqU/0r9902PCC1
njWNhCnsgf7+1HFrunNYZWIxLN471IbbvVZNtBrRpedVB3j0NyxM8jn9IiHh37zk
i4el2GRwl/ldK0uPAKvJuVOguzfMEFQ+oTyydyfTSM4eQYYO5kYEXmrv5KPaJlNP
7+jvbooXxvw0FNV65IjxMlGyVUPo6N3wWMrRLtx53SnaQcysbT2TH3TAD8u36/st
1HD5vbKfu64cGdqixEmafiAhoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPOaROmK
btek71+EgNswON1UDIvxMB8GA1UdIwQYMBaAFFR6EQ/y46TUII6lt8PocpqbD9Sc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzMwMy83OEE4MUQxMDNG
RTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9WSG9SRF9ManBOUWdqcVczdy1oeW1wc1Ax
SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZIb1JEX0xqcE5RZ2pxVzN3LWh5bXBzUDFKdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzMwMy83OEE4MUQxMDNGRTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9WSG9SRF9ManBO
UWdqcVczdy1oeW1wc1AxSncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnUDMPQILoVVIbgYAWExN6a+JpSgeE5UctYX01CO8me12ZaPEbLHQ+HT6IIvg
q0KE/j3rrm3XKrjQEi2kkQsimNeKxsqEklBCsZNoc7yM0Pup1MGTRK3ore2iU7v9
BZe0NskkglZkJ0ZSzXamuochhr5QJCGMLZ2+ufxP2NZWu/1KwD0CuGJJBKE84Q0k
kOQl8cnLU6ffn0lWBoEllRYYF25eGT9Apuha34PhY7y0rtqd/hHoPE6o6d69FgzA
33GyXT5abDN0kAgk5b5vR3I0L1cCCHA8EBKonqSqozKxkBpCQaUDQbs0xLRuRGNW
afq9XSbNyWKxJa9JJSY3hx098Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:15:41 2026 by rpki-client