
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
File: SLHo4_K8VCn4xnmVXWTSJJRF42U.mft (raw, json)
Hash identifier: TETNZetXPAKIDIuuamID3q/hRhV/0UfpVL4bAccaS2U=
Subject key identifier: DC:BA:7F:56:37:98:36:75:24:58:30:1F:F5:5D:4F:E2:EC:F2:03:72
Authority key identifier: 48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
Certificate issuer: /CN=A9140C62/serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Certificate serial: 023A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
Manifest number: 0229
Signing time: Sun 01 Mar 2026 03:34:09 +0000
Manifest this update: Sun 01 Mar 2026 03:34:09 +0000
Manifest next update: Sun 08 Mar 2026 03:34:09 +0000
Files and hashes: 1: SLHo4_K8VCn4xnmVXWTSJJRF42U.crl (hash: HeotAK1jqtD6DcPN2tOwRf4F2kv2l+pLDN2JQnNiUKI=)
2: 0A624110067411EEA4A63A62C4F9AE02.roa (hash: O3yuQ31zENMh1g/9jjFz8sQqn2MpwcCjDJ+voriAa74=)
3: 51B6AD3E03B211F0BDAF273BC4F9AE02.roa (hash: uAteoiV/s+zlQ/ZG8ktRylUa5dBkimVakOFzY24C0Uo=)
4: 4C66C2B497F711EF8863DA4BC4F9AE02.roa (hash: f+64klJ8Ej7Y0HJMhZpydCMagyfzgIplKxtwq1IHTM0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl
rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:34:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140C62, serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Validity
Not Before: Mar 1 03:34:09 2026 GMT
Not After : Mar 8 03:34:09 2026 GMT
Subject: CN=69a3b3b1-800d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:b6:2c:1b:e6:38:f2:cf:24:23:b8:4b:f0:
d6:fa:dd:14:2f:d4:de:56:f6:bc:dd:24:0c:61:84:
e5:7d:aa:9b:b3:35:bb:9b:89:34:be:bd:6a:2b:62:
a6:06:13:a6:01:96:86:bf:5c:fc:f1:e0:d2:f2:f5:
cc:77:5b:1f:ce:02:12:59:06:1f:94:10:60:04:cc:
3d:8c:7a:f6:aa:8f:19:98:bc:7b:29:fc:82:78:64:
b9:73:0c:bc:3f:fb:3a:03:b7:50:aa:fc:00:96:9a:
fc:5b:7b:eb:c7:f8:41:3a:fa:bf:ee:6d:2e:9b:91:
6c:9d:51:d8:fa:1e:2d:43:81:19:aa:79:9a:29:6c:
be:fe:5c:78:d8:d1:ea:94:04:0a:ef:33:c0:05:5d:
b2:96:d2:f2:db:36:db:47:3e:2d:9b:45:0d:d7:05:
b3:91:43:29:b1:63:83:cc:6c:07:60:5e:bc:78:09:
34:2f:46:c3:3d:d8:3c:20:bd:48:d7:8e:7c:a8:58:
b5:e7:88:3a:30:c1:19:d3:33:17:4a:83:88:71:29:
21:3d:35:46:5a:74:ad:e8:ba:02:b1:67:cf:1e:81:
d3:83:9e:82:fa:64:66:c4:63:a7:b3:4e:dc:c6:4e:
f0:e1:3c:dc:14:9e:d5:b0:09:c5:d0:0b:f2:0d:ef:
ec:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BA:7F:56:37:98:36:75:24:58:30:1F:F5:5D:4F:E2:EC:F2:03:72
X509v3 Authority Key Identifier:
keyid:48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:4d:39:7b:0a:66:e1:fb:93:d8:0d:f7:65:1c:77:8c:cc:a1:
44:59:10:0f:6d:eb:48:11:5a:64:96:01:95:c7:f2:08:03:8b:
9c:ae:dd:d4:14:af:58:29:ad:1e:2c:43:57:4d:b3:95:8f:a9:
11:b5:bd:1e:b9:1c:5a:d0:72:8b:4d:cc:75:cc:59:63:42:22:
90:f7:4f:e9:f6:a8:bc:77:25:a3:7f:a4:cc:03:d0:eb:73:44:
a4:88:db:72:0d:48:54:34:94:38:73:15:bc:ca:c4:15:0c:9a:
48:69:b6:d7:4e:99:a9:e5:60:16:e0:d8:40:b2:da:e8:a1:0c:
d2:0a:3a:6c:cb:77:a5:77:37:fe:2b:72:b9:69:95:ad:32:c3:
e0:fd:ba:62:f2:40:37:26:84:15:a5:04:65:ad:5e:c7:8e:43:
b4:3e:ca:0a:3f:0d:ef:2a:a3:5f:de:69:37:03:f7:d5:0e:85:
17:33:a4:a0:ef:70:8b:a1:99:ec:04:08:d6:75:7a:ba:7b:62:
c9:ba:cc:aa:51:7a:c7:66:95:a7:13:dd:14:18:73:ce:1a:37:
c8:0a:37:23:e1:e4:43:64:7a:07:b3:73:39:b6:94:c9:f8:d6:
63:98:84:f7:95:cd:8c:49:28:f0:a9:b7:5f:c9:7c:17:90:2c:
14:f3:1c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:13 2026 by rpki-client