
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
File: SLHo4_K8VCn4xnmVXWTSJJRF42U.mft (raw, json)
Hash identifier: 7tYPVf+DiJW3uSPjiZNZtgB5c0VkDxTudkV2GCUUsTI=
Subject key identifier: B1:D4:D4:9F:2E:5F:C0:82:02:0B:E3:60:3B:15:28:43:9F:63:35:C0
Authority key identifier: 48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
Certificate issuer: /CN=A9140C62/serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Certificate serial: 02AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
Manifest number: 0295
Signing time: Mon 21 Sep 2026 01:51:19 +0000
Manifest this update: Mon 21 Sep 2026 01:51:19 +0000
Manifest next update: Mon 28 Sep 2026 01:51:19 +0000
Files and hashes: 1: SLHo4_K8VCn4xnmVXWTSJJRF42U.crl (hash: WNGUSjsMeUe1m9QZZJTx2qEw6ouAf3GODwQTGmO6a/U=)
2: 484D355C711011F1A036BF6D68A30FBC.roa (hash: I5hSFFUjMyx9oOBdLan6zXZEKWa3M/lzoo+9u7LGW3U=)
3: 0A624110067411EEA4A63A62C4F9AE02.roa (hash: YvbAycJNFa8CnWMJpInhLTTnZh9UXUtoDFaEIloDPRU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl
rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685 (0x2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140C62, serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Validity
Not Before: Sep 21 01:51:19 2026 GMT
Not After : Sep 28 01:51:19 2026 GMT
Subject: CN=6ab08d97-ce11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a1:ec:54:e7:89:73:95:ac:f6:b5:8e:c1:0a:
4a:7a:07:9f:6b:6a:22:90:80:93:fe:b9:e7:d4:0b:
75:c0:4d:bc:0d:de:2f:ab:c4:25:fa:f0:5e:60:01:
d0:cb:c8:79:47:88:40:98:e4:6c:85:d7:63:42:ee:
fb:e8:d2:71:90:18:2b:dd:6c:e1:98:b5:eb:af:b7:
56:a4:51:39:25:e9:8d:5b:2e:51:b1:24:66:40:19:
66:e0:49:47:c3:a9:4d:af:70:bc:e5:59:09:df:aa:
06:7f:bd:b5:fb:a0:bd:91:81:21:e3:95:2a:a6:59:
e7:b3:a1:fb:ad:35:92:fd:49:11:66:31:bd:da:9f:
1d:78:5c:96:f4:36:03:16:e4:3b:8a:76:a2:af:d3:
b5:d0:0a:98:68:b1:14:ec:cc:b6:5e:03:96:ba:d7:
ed:85:e8:9f:12:68:87:03:93:03:4a:3a:56:b8:1c:
b6:62:dc:50:03:71:9d:29:20:05:0e:61:e8:2c:0c:
d3:ac:26:91:67:11:01:1a:4e:6f:4b:90:f6:42:e5:
88:d6:06:7e:03:f8:ce:48:95:7e:03:3d:65:0f:66:
85:36:59:3f:e9:4a:44:81:1c:fe:4e:85:6f:6a:93:
60:cf:38:47:d7:a3:98:76:6e:73:18:d0:87:7f:62:
1f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D4:D4:9F:2E:5F:C0:82:02:0B:E3:60:3B:15:28:43:9F:63:35:C0
X509v3 Authority Key Identifier:
keyid:48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:87:8c:f1:90:d7:78:70:87:90:3e:b0:6a:9b:29:80:5a:6c:
5d:96:5f:ec:19:01:d4:af:cb:5e:05:99:61:39:30:33:39:7d:
14:2d:35:b8:73:49:6d:0e:0e:30:e4:32:cc:78:8b:f0:f7:92:
55:20:91:74:e7:20:20:02:ee:32:99:d3:a1:bf:71:a3:be:d8:
a5:c3:d2:0d:e0:04:2d:a0:1a:3c:a0:29:69:44:b3:c3:00:37:
5a:0c:e4:4d:00:29:4f:63:46:5a:26:6f:cc:99:cb:4e:d0:2f:
89:c9:28:2b:d3:32:13:41:96:5d:a4:23:0f:48:06:8a:1f:83:
2c:96:7f:49:a3:30:8c:2d:40:be:45:1b:21:2f:6a:25:77:cd:
66:37:1c:56:da:eb:18:51:5b:3f:05:1c:e3:d0:47:cf:e9:35:
71:17:cf:12:dc:74:09:52:a1:c0:13:30:c6:8e:03:7f:b1:5b:
09:e2:28:77:08:e2:3c:6e:d4:6f:06:0f:ee:cd:04:e9:3a:fe:
52:be:56:69:96:22:f1:c8:77:55:38:16:65:36:17:8d:8c:b9:
36:5f:ac:29:c7:2a:56:53:92:fd:09:ef:dd:42:f7:ab:a3:88:
ad:9a:9d:c7:b5:24:fd:5b:c9:e8:cc:85:dd:23:87:ba:9d:67:
df:b9:89:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:12:06 2026 by rpki-client