
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
File: SLHo4_K8VCn4xnmVXWTSJJRF42U.mft (raw, json)
Hash identifier: O2pIkVX0FezBdBwCs7XhaCbKitJcLIu3dYWQLhlue0I=
Subject key identifier: FD:6D:3A:45:C7:52:74:89:39:CD:39:42:B1:6F:53:2A:EB:30:12:B4
Authority key identifier: 48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
Certificate issuer: /CN=A9140C62/serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Certificate serial: 01F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
Manifest number: 01E7
Signing time: Thu 23 Oct 2025 04:17:52 +0000
Manifest this update: Thu 23 Oct 2025 04:17:52 +0000
Manifest next update: Thu 30 Oct 2025 04:17:52 +0000
Files and hashes: 1: SLHo4_K8VCn4xnmVXWTSJJRF42U.crl (hash: EhijPdiLZK0Oav5tZTajSgBoCp6H0i3KTJ79yF+2bKg=)
2: 0A624110067411EEA4A63A62C4F9AE02.roa (hash: O3yuQ31zENMh1g/9jjFz8sQqn2MpwcCjDJ+voriAa74=)
3: 51B6AD3E03B211F0BDAF273BC4F9AE02.roa (hash: uAteoiV/s+zlQ/ZG8ktRylUa5dBkimVakOFzY24C0Uo=)
4: 4C66C2B497F711EF8863DA4BC4F9AE02.roa (hash: f+64klJ8Ej7Y0HJMhZpydCMagyfzgIplKxtwq1IHTM0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl
rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 04:17:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504 (0x1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140C62, serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Validity
Not Before: Oct 23 04:17:52 2025 GMT
Not After : Oct 30 04:17:52 2025 GMT
Subject: CN=68f9ac70-61c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c2:03:47:9b:b6:35:18:21:7f:2c:fb:d5:fa:
de:ec:63:b5:c3:9e:69:d5:de:63:e4:82:92:67:d0:
7c:8e:da:93:42:65:80:94:d2:07:f7:05:b0:f6:2c:
d2:eb:38:ae:4e:24:cf:56:04:40:13:ef:c9:7c:1d:
86:16:0b:7b:ce:c4:6c:d7:9e:15:98:18:f4:db:b9:
9a:f8:df:fd:d6:31:42:b5:12:2b:52:99:87:f6:da:
48:4d:0f:7b:1b:9a:be:fd:4e:f0:19:40:aa:c4:62:
9e:d3:7b:54:d3:fa:81:46:74:3a:1e:a9:98:2d:fc:
af:3f:13:ba:45:ab:22:cf:b5:c0:43:55:04:09:eb:
88:fc:26:44:67:9b:b4:95:8e:62:bf:05:fd:cd:2a:
8c:e6:2d:73:94:0e:d9:ee:87:a1:1f:aa:a3:dd:ec:
5c:08:e7:78:81:32:06:33:d9:16:51:9e:d2:75:46:
30:74:ab:29:85:5e:65:b3:94:2d:00:39:59:9e:ff:
b9:a5:bb:0d:f3:b5:93:3d:49:3b:c1:19:04:fc:48:
37:ff:4f:2e:37:2c:5b:08:65:0a:88:de:a3:16:26:
86:95:26:c2:6f:d9:7e:02:70:7f:65:79:6c:dc:16:
b3:02:56:0b:75:bf:1f:20:71:19:a0:f1:60:90:5e:
73:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6D:3A:45:C7:52:74:89:39:CD:39:42:B1:6F:53:2A:EB:30:12:B4
X509v3 Authority Key Identifier:
keyid:48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:d2:da:8b:6f:9c:eb:51:b1:04:08:cd:71:f5:a7:8b:05:78:
79:83:14:59:d9:ce:c0:5c:2e:eb:78:ac:95:40:eb:a7:a7:0a:
dd:58:b8:e2:d6:19:0b:26:ba:47:64:97:4a:b4:42:40:1c:cc:
71:07:fa:2c:e1:e3:7b:83:2d:d8:3a:05:b8:cd:19:fe:82:6d:
36:c3:39:cb:31:4b:39:89:e3:c4:dc:82:d1:e1:05:96:3f:62:
73:5a:fe:58:17:dd:36:e3:6b:e2:60:e5:6b:de:9d:37:a0:94:
84:05:70:e4:df:b8:14:31:8c:31:d5:24:79:0f:63:3e:7a:08:
20:c8:77:d8:35:c6:c4:0d:61:a4:fa:41:65:18:ed:94:1b:11:
99:dd:dd:16:d4:d8:1e:89:0a:bc:e6:ee:11:f8:87:b1:52:ef:
b6:7c:65:34:f5:a2:2e:2e:ff:ef:fd:b3:45:30:01:54:13:c7:
68:31:a7:a2:6c:fc:bc:ed:ea:06:46:9d:4b:d8:55:36:30:31:
37:91:cb:03:cf:31:08:fa:3f:26:7b:28:65:77:6f:58:97:ce:
43:fe:fb:8f:bb:2d:37:fa:4f:a8:8e:44:22:8b:8a:14:f2:5d:
53:9b:65:96:a1:2b:6e:e2:a4:c1:c3:d9:53:3a:58:0b:a2:a5:
32:ed:22:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 18:51:11 2025 by rpki-client