
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
File: SLHo4_K8VCn4xnmVXWTSJJRF42U.mft (raw, json)
Hash identifier: Puwu74dT9NyNqf2JERkuTNEV7+bBQO/J/B+d8FgCe5c=
Subject key identifier: 54:D5:B7:CB:1C:F4:DB:22:C7:C5:7A:4A:64:1A:11:D2:A2:0C:71:B5
Authority key identifier: 48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
Certificate issuer: /CN=A9140C62/serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Certificate serial: 02A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
Manifest number: 028F
Signing time: Wed 09 Sep 2026 02:08:22 +0000
Manifest this update: Wed 09 Sep 2026 02:08:22 +0000
Manifest next update: Wed 16 Sep 2026 02:08:22 +0000
Files and hashes: 1: SLHo4_K8VCn4xnmVXWTSJJRF42U.crl (hash: +mpKgm9kzs+nVE/SiVBPGcRz42iGdrmIuyI8TiG0k1c=)
2: 484D355C711011F1A036BF6D68A30FBC.roa (hash: I5hSFFUjMyx9oOBdLan6zXZEKWa3M/lzoo+9u7LGW3U=)
3: 0A624110067411EEA4A63A62C4F9AE02.roa (hash: YvbAycJNFa8CnWMJpInhLTTnZh9UXUtoDFaEIloDPRU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl
rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 02:08:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 679 (0x2a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140C62, serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Validity
Not Before: Sep 9 02:08:22 2026 GMT
Not After : Sep 16 02:08:22 2026 GMT
Subject: CN=6aa0bf96-0616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:a7:79:8a:58:cd:cb:9b:31:c4:42:e0:6d:
39:8c:09:7b:85:61:0a:0f:da:5a:c8:8d:93:6a:d6:
77:9c:ce:07:5f:34:70:ed:26:dc:30:52:d4:98:ed:
e1:31:1f:2c:a4:41:6c:77:67:e5:de:dd:2a:83:fb:
c0:52:3d:50:01:02:73:63:33:99:97:a7:b2:4e:cc:
3a:3f:6f:11:37:a3:ec:33:a1:4a:2c:a7:0e:e4:1a:
71:b2:3f:b3:3f:04:58:86:c7:cb:a8:da:f8:a0:aa:
4f:f7:0c:72:17:99:aa:53:0a:9f:23:17:93:b2:4b:
3b:c9:09:ee:a2:eb:5a:e7:4d:fa:8a:57:94:ab:15:
d0:dd:d1:8d:62:6f:2e:2e:7b:96:bb:b7:21:6c:a6:
91:6d:7f:28:e3:69:11:f0:78:e5:12:32:33:23:28:
14:f9:b4:3a:47:d8:59:0f:7c:fd:64:40:aa:c0:51:
50:fa:59:b3:e8:9b:a7:d3:1f:58:1d:f2:fa:a2:2d:
89:e9:65:c4:43:6e:b0:64:0c:00:d6:6c:d8:b3:96:
f0:42:f4:0e:88:63:e1:42:27:76:64:ab:6c:54:6d:
98:0c:c5:bc:b6:be:ee:45:5c:24:a5:44:3a:b7:97:
07:7a:1c:71:82:b0:5d:a5:03:bc:10:6d:53:39:64:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D5:B7:CB:1C:F4:DB:22:C7:C5:7A:4A:64:1A:11:D2:A2:0C:71:B5
X509v3 Authority Key Identifier:
keyid:48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:64:b3:70:08:e1:cc:4e:78:7e:fa:6a:db:ac:7e:0c:d0:15:
84:62:39:54:d4:e0:0a:81:29:62:4e:93:10:cd:74:bd:c6:f4:
f4:bc:a3:1e:db:bf:dd:09:20:20:8a:fb:cb:dd:80:17:9e:63:
ba:0c:3b:58:9f:0a:d4:e5:b5:d5:d7:af:24:e6:d1:5c:9d:86:
5f:44:f8:84:3e:cf:3f:b6:65:9a:c9:cc:60:8d:a5:98:c1:5b:
fa:bf:0b:47:74:d9:0c:d8:b4:35:40:d3:91:7b:12:40:d1:a0:
40:41:e5:20:e3:c7:e4:97:c7:e0:1a:fa:7c:65:ee:f3:e1:6c:
5a:31:b8:c2:e6:14:0d:31:16:9f:be:68:24:43:53:40:c0:b8:
ee:c2:17:b9:1f:03:f7:72:ee:39:9a:5b:65:09:5c:12:bd:d5:
ff:93:2a:0c:9e:29:73:69:94:cf:dc:33:e7:0b:c5:b1:af:94:
8e:a5:6a:ff:b9:85:5b:ea:10:0a:ba:ed:77:07:30:85:31:6d:
72:ae:c0:6a:b0:f1:61:0c:62:e4:9f:f6:86:f2:93:25:74:8c:
ea:dd:ad:7c:8c:c6:07:a4:6e:69:88:ef:ab:51:2f:f4:57:95:
6a:93:93:cc:66:69:ee:d2:f3:a3:bc:5e:eb:0f:79:22:27:63:
5f:3e:41:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:52:21 2026 by rpki-client