Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
File:                     SLHo4_K8VCn4xnmVXWTSJJRF42U.mft (raw, json)
Hash identifier:          TT95dN0s92xdhqx1A4IDd4eg+B9rp/LqV1ZBxh9P+S4=
Subject key identifier:   31:5F:A9:C6:A9:72:67:08:54:5C:76:B7:85:00:AD:04:98:10:5B:05
Authority key identifier: 48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
Certificate issuer:       /CN=A9140C62/serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
Manifest number:          01A4
Signing time:             Sun 15 Jun 2025 02:38:28 +0000
Manifest this update:     Sun 15 Jun 2025 02:38:28 +0000
Manifest next update:     Sun 22 Jun 2025 02:38:28 +0000
Files and hashes:         1: SLHo4_K8VCn4xnmVXWTSJJRF42U.crl (hash: D1X+hQ74hGJltdgO1iyZg7A22tUDtej0X+TkEwSdPU4=)
                          2: 0A624110067411EEA4A63A62C4F9AE02.roa (hash: u9dNvDFAFnBaqoITKf4wttZqgTjkqepYYTTq0cWfxsA=)
                          3: 51B6AD3E03B211F0BDAF273BC4F9AE02.roa (hash: WmaI+JpQZGr+NV6hRWYVZkaBwEeLTPaT1/dSkWkVAdQ=)
                          4: 4C66C2B497F711EF8863DA4BC4F9AE02.roa (hash: uNIvVvjHdxYNXn+vLEcJTPhrZ9Sg+JCJeEhpJ1jJjbQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl
                          rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:38:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140C62, serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
        Validity
            Not Before: Jun 15 02:38:28 2025 GMT
            Not After : Jun 22 02:38:28 2025 GMT
        Subject: CN=684e3224-021e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:48:d8:d9:28:15:5b:46:53:db:0e:9a:41:70:
                    ec:16:b8:61:d0:b2:a4:e2:e3:fc:b6:6d:5c:f7:b4:
                    8d:4a:3e:02:6c:93:ef:25:7c:f6:2c:8c:b2:c0:e3:
                    c4:43:68:9d:c9:e7:f7:dd:72:25:66:b7:d8:ba:a6:
                    cb:df:c3:09:d6:11:63:d5:8b:bc:04:21:7b:e3:6d:
                    f5:ac:b1:aa:e3:f2:a5:5c:7e:f6:6c:86:25:08:b2:
                    f7:9d:b0:de:d4:19:23:af:ce:f9:24:c9:2a:0c:56:
                    f2:ae:07:35:19:64:68:98:0f:74:52:80:f1:77:b4:
                    2e:1e:88:78:3a:1d:ae:82:01:44:b5:d0:7c:a3:20:
                    93:a5:04:25:20:c8:e1:d6:0b:d8:5b:c3:b4:6a:ba:
                    b4:02:63:65:3b:59:64:ce:dd:6a:9c:47:fe:6a:1d:
                    4f:d6:08:51:b8:00:17:94:df:07:18:de:6d:07:15:
                    0e:90:6c:d7:d1:2f:5f:aa:1f:ba:e4:ab:1a:13:13:
                    4a:cd:42:50:cc:a6:45:b8:01:6d:dc:23:0d:78:9e:
                    76:87:4d:8e:a9:66:4c:42:d0:fb:7e:39:a9:a0:34:
                    f8:ef:a3:3e:de:e5:df:f1:7f:f6:fc:0b:95:1f:20:
                    55:d6:3f:58:ee:32:ab:cb:fb:7f:c9:fb:3d:84:98:
                    5a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5F:A9:C6:A9:72:67:08:54:5C:76:B7:85:00:AD:04:98:10:5B:05
            X509v3 Authority Key Identifier:
                keyid:48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:28:ae:40:56:7c:df:db:4c:a0:51:33:3b:d4:13:bf:fb:49:
         b4:d4:2c:02:88:41:2c:78:da:00:e2:26:68:3b:15:b3:93:7d:
         ca:54:a7:60:5f:11:25:e4:8d:1e:e5:9f:d7:e2:99:5b:98:1e:
         ec:ce:b7:4b:c6:26:4c:80:da:d6:44:28:53:8c:52:1a:8e:18:
         19:2e:e6:51:53:2c:b8:b8:a5:ca:7e:e7:11:bf:92:05:79:87:
         38:3f:d0:2f:70:46:07:2c:d0:66:6e:de:f1:2b:01:5f:a0:52:
         fd:b3:e9:f3:5b:48:e2:58:63:96:3b:40:84:d6:88:be:80:6a:
         2b:a2:fc:df:11:62:18:2d:93:2f:6b:69:fe:b1:1e:65:ab:c8:
         47:94:36:70:85:ac:4e:b7:f6:1b:ee:2f:c2:9c:d4:a8:f1:23:
         0a:65:ed:e6:77:0a:17:d4:d6:69:76:c6:f2:dc:76:a9:67:b6:
         86:81:fd:fa:49:6d:06:b3:06:70:45:37:4c:eb:a5:dd:53:1a:
         6a:7f:7a:23:a5:7a:40:09:06:f4:88:fa:be:bd:62:81:b8:03:
         51:f5:ba:17:94:1a:98:f4:46:9e:29:7d:f1:79:00:6f:3a:98:
         62:28:07:70:03:cd:c0:49:25:4d:6a:21:84:71:d2:3e:8b:2b:
         41:78:c9:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBDNjIxMTAvBgNVBAUTKDQ4QjFFOEUzRjJCQzU0MjlGOEM2Nzk5NTVENjREMjI0
OTQ0NUUzNjUwHhcNMjUwNjE1MDIzODI4WhcNMjUwNjIyMDIzODI4WjAYMRYwFAYD
VQQDEw02ODRlMzIyNC0wMjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3UjY2SgVW0ZT2w6aQXDsFrhh0LKk4uP8tm1c97SNSj4CbJPvJXz2LIyywOPE
Q2idyef33XIlZrfYuqbL38MJ1hFj1Yu8BCF74231rLGq4/KlXH72bIYlCLL3nbDe
1Bkjr875JMkqDFbyrgc1GWRomA90UoDxd7QuHoh4Oh2uggFEtdB8oyCTpQQlIMjh
1gvYW8O0arq0AmNlO1lkzt1qnEf+ah1P1ghRuAAXlN8HGN5tBxUOkGzX0S9fqh+6
5KsaExNKzUJQzKZFuAFt3CMNeJ52h02OqWZMQtD7fjmpoDT476M+3uXf8X/2/AuV
HyBV1j9Y7jKry/t/yfs9hJhakwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFfqcap
cmcIVFx2t4UArQSYEFsFMB8GA1UdIwQYMBaAFEix6OPyvFQp+MZ5lV1k0iSUReNl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEM2Mi82NDgyQzM3MEQ0
MkIxMUVEODQ3QTE5MzhDNEY5QUUwMi9TTEhvNF9LOFZDbjR4bm1WWFdUU0pKUkY0
MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NMSG80X0s4VkNuNHhubVZYV1RTSkpSRjQyVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEM2Mi82NDgyQzM3MEQ0MkIxMUVEODQ3QTE5MzhDNEY5QUUwMi9TTEhvNF9LOFZD
bjR4bm1WWFdUU0pKUkY0MlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCFKK5AVnzf20ygUTM71BO/+0m01CwCiEEseNoA4iZoOxWzk33KVKdg
XxEl5I0e5Z/X4plbmB7szrdLxiZMgNrWRChTjFIajhgZLuZRUyy4uKXKfucRv5IF
eYc4P9AvcEYHLNBmbt7xKwFfoFL9s+nzW0jiWGOWO0CE1oi+gGorovzfEWIYLZMv
a2n+sR5lq8hHlDZwhaxOt/Yb7i/CnNSo8SMKZe3mdwoX1NZpdsby3HapZ7aGgf36
SW0GswZwRTdM66XdUxpqf3ojpXpACQb0iPq+vWKBuANR9boXlBqY9EaeKX3xeQBv
OphiKAdwA83ASSVNaiGEcdI+iytBeMmh
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:33:58 2025 by rpki-client