Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
File:                     VHoRD_LjpNQgjqW3w-hympsP1Jw.mft (raw, json)
Hash identifier:          wHE9xXeQCyWTP2St9lvzH2kQBv1F6zoPblUJJsWkfGg=
Subject key identifier:   AE:E7:DD:72:8A:5A:94:05:7B:21:4B:36:CA:23:E8:8B:C7:C5:FE:92
Authority key identifier: 54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
Certificate issuer:       /CN=A9153303/serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
Certificate serial:       F1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
Manifest number:          EF
Signing time:             Sun 19 Oct 2025 08:15:45 +0000
Manifest this update:     Sun 19 Oct 2025 08:15:45 +0000
Manifest next update:     Sun 26 Oct 2025 08:15:45 +0000
Files and hashes:         1: VHoRD_LjpNQgjqW3w-hympsP1Jw.crl (hash: ALJnJKEqfshCkQMexfctyU5/4ibwbDnai7Eue2sRP+4=)
                          2: 2916DB783FE111EFB5A50814C4F9AE02.roa (hash: XqPR58WFjxW/r7vrXermk8/pxwRAohdmERUavDiArx0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl
                          rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153303, serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
        Validity
            Not Before: Oct 19 08:15:45 2025 GMT
            Not After : Oct 26 08:15:45 2025 GMT
        Subject: CN=68f49e31-f691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f7:64:dc:64:6c:44:59:f7:dc:c0:3e:74:11:
                    3b:93:e7:dc:29:c9:be:86:45:03:d4:2d:75:14:56:
                    d4:52:b2:b9:bb:6c:2c:61:76:d6:6c:ea:82:04:3f:
                    5d:97:5a:eb:ea:12:96:86:8d:19:d3:1b:b9:b2:59:
                    3a:a9:3d:64:15:6f:35:68:1d:99:b0:61:8e:a8:6c:
                    60:3a:78:e0:5a:aa:35:55:f7:f3:a9:53:0b:5f:8b:
                    91:24:47:e4:d6:b7:ee:33:89:27:fb:41:1d:d8:53:
                    7c:73:05:b9:74:c9:7b:a2:a0:ba:ab:89:1b:41:50:
                    a7:8f:b9:ed:2f:04:c3:82:f2:1a:fe:b4:8d:4c:2a:
                    de:c5:2d:87:aa:06:ef:af:35:fa:8b:83:6a:63:12:
                    c6:79:72:6f:94:2d:ce:9a:ae:b7:7e:94:21:3a:b1:
                    a3:94:84:05:fc:74:88:eb:a1:5b:ff:d3:e9:1a:12:
                    33:81:0d:88:17:bd:da:30:cd:39:e4:fa:2c:6f:48:
                    3f:95:b8:dc:bc:d5:5c:5a:b4:fb:f5:60:e8:e8:b9:
                    42:7e:2b:29:40:46:26:c2:c9:c3:62:74:15:95:22:
                    ef:36:9d:1e:3f:43:e0:2b:8f:c3:0b:4f:07:b5:e0:
                    d8:d6:1a:bd:b6:fd:c9:f7:81:34:ab:94:0f:62:02:
                    cf:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E7:DD:72:8A:5A:94:05:7B:21:4B:36:CA:23:E8:8B:C7:C5:FE:92
            X509v3 Authority Key Identifier:
                keyid:54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:4c:2d:ba:c0:5b:b1:32:e8:34:fe:ca:dd:d1:68:b1:d4:1c:
         d0:95:02:22:1f:e2:e6:40:e7:27:04:fb:d9:3e:9e:86:54:cf:
         cf:6a:35:f7:2e:66:a6:19:a9:f1:ef:86:69:a2:70:9e:6b:76:
         da:25:41:e5:92:02:13:45:67:68:e1:82:db:65:6a:e0:44:fa:
         71:84:c3:2a:9d:a6:23:7d:88:1f:1a:26:18:f0:37:8d:0e:b0:
         28:b9:bc:06:34:ec:b3:86:84:c9:14:fa:b8:4d:16:c9:e1:c2:
         d1:68:2f:97:4a:9b:02:09:f1:56:b3:8e:af:8a:f4:cd:63:22:
         e6:e3:81:64:e1:23:7e:7f:cd:21:ba:6e:54:d6:d9:ae:a7:bc:
         1b:b0:c6:33:96:09:d9:cb:ab:9f:4d:d6:05:cd:02:00:ea:dc:
         97:fd:a3:c9:e0:cf:ca:42:b4:06:80:c3:1c:52:e5:0e:79:40:
         8d:a4:0a:61:ce:34:4e:2c:9a:1c:06:51:a3:db:24:56:48:01:
         f9:76:76:66:02:f8:3f:25:2e:9d:a9:09:5d:d1:d0:0b:e7:74:
         f9:61:43:1f:79:6f:e2:72:83:bb:9c:0b:86:62:bc:5a:6e:ad:
         d8:57:67:1c:35:45:5e:54:e8:11:4b:c9:1f:7f:1e:e2:fe:98:
         31:e1:75:2b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTMzMDMxMTAvBgNVBAUTKDU0N0ExMTBGRjJFM0E0RDQyMDhFQTVCN0MzRTg3MjlB
OUIwRkQ0OUMwHhcNMjUxMDE5MDgxNTQ1WhcNMjUxMDI2MDgxNTQ1WjAYMRYwFAYD
VQQDEw02OGY0OWUzMS1mNjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAovdk3GRsRFn33MA+dBE7k+fcKcm+hkUD1C11FFbUUrK5u2wsYXbWbOqCBD9d
l1rr6hKWho0Z0xu5slk6qT1kFW81aB2ZsGGOqGxgOnjgWqo1VffzqVMLX4uRJEfk
1rfuM4kn+0Ed2FN8cwW5dMl7oqC6q4kbQVCnj7ntLwTDgvIa/rSNTCrexS2Hqgbv
rzX6i4NqYxLGeXJvlC3Omq63fpQhOrGjlIQF/HSI66Fb/9PpGhIzgQ2IF73aMM05
5Posb0g/lbjcvNVcWrT79WDo6LlCfispQEYmwsnDYnQVlSLvNp0eP0PgK4/DC08H
teDY1hq9tv3J94E0q5QPYgLP5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7n3XKK
WpQFeyFLNsoj6IvHxf6SMB8GA1UdIwQYMBaAFFR6EQ/y46TUII6lt8PocpqbD9Sc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzMwMy83OEE4MUQxMDNG
RTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9WSG9SRF9ManBOUWdqcVczdy1oeW1wc1Ax
SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZIb1JEX0xqcE5RZ2pxVzN3LWh5bXBzUDFKdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzMwMy83OEE4MUQxMDNGRTAxMUVGODYzNUQ3MTJDNEY5QUUwMi9WSG9SRF9ManBO
UWdqcVczdy1oeW1wc1AxSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCcTC26wFuxMug0/srd0Wix1BzQlQIiH+LmQOcnBPvZPp6GVM/PajX3
LmamGanx74ZponCea3baJUHlkgITRWdo4YLbZWrgRPpxhMMqnaYjfYgfGiYY8DeN
DrAoubwGNOyzhoTJFPq4TRbJ4cLRaC+XSpsCCfFWs46vivTNYyLm44Fk4SN+f80h
um5U1tmup7wbsMYzlgnZy6ufTdYFzQIA6tyX/aPJ4M/KQrQGgMMcUuUOeUCNpAph
zjROLJocBlGj2yRWSAH5dnZmAvg/JS6dqQld0dAL53T5YUMfeW/icoO7nAuGYrxa
bq3YV2ccNUVeVOgRS8kffx7i/pgx4XUr
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:26:22 2025 by rpki-client