
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
File: SLHo4_K8VCn4xnmVXWTSJJRF42U.mft (raw, json)
Hash identifier: Jk2tBfxQpadpKCaiC5g9GD/ZXW0RnNaTQP4QWd61DKo=
Subject key identifier: DE:54:C6:56:5A:C3:5E:68:57:67:BC:BC:56:66:AE:93:AF:2A:EA:21
Authority key identifier: 48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
Certificate issuer: /CN=A9140C62/serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Certificate serial: 02C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
Manifest number: 02A9
Signing time: Tue 27 Oct 2026 01:51:22 +0000
Manifest this update: Tue 27 Oct 2026 01:51:22 +0000
Manifest next update: Tue 03 Nov 2026 01:51:22 +0000
Files and hashes: 1: SLHo4_K8VCn4xnmVXWTSJJRF42U.crl (hash: QjYimdEHFpeCWuXIqlyrhAYR9yni1e5OKaTD2hUU3lo=)
2: 484D355C711011F1A036BF6D68A30FBC.roa (hash: WJHH9K6KhyG8tK+33FZRHQQmDrRKMXWeuBUWVxSrsNI=)
3: 0A624110067411EEA4A63A62C4F9AE02.roa (hash: 2SnVGPqgIEEdQ//QyixUU3RKLDmioSYrOyC6f9LzTSc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl
rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 01:51:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 707 (0x2c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140C62, serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Validity
Not Before: Oct 27 01:51:22 2026 GMT
Not After : Nov 3 01:51:22 2026 GMT
Subject: CN=6ae0039a-bbe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:2d:31:ef:82:1a:62:be:57:31:6d:57:c3:
41:0b:e4:01:16:a4:f8:33:f9:66:17:27:2c:3c:4e:
65:07:60:be:cf:26:4a:88:87:22:3f:50:39:34:29:
b3:6e:0f:ed:5d:ce:fb:5f:63:7c:e5:2d:58:ac:7d:
3b:a8:b6:ae:79:db:c8:fa:72:70:86:1c:99:0c:ed:
a9:85:0e:2f:df:a4:b6:8f:1a:a6:fa:a6:e5:de:7d:
6d:96:33:0d:44:6b:99:bd:4c:b5:b2:f2:82:a1:c8:
6b:7a:fc:c1:9f:ec:83:34:8c:06:42:17:9e:45:43:
6b:19:5a:90:63:dd:7f:99:c4:6a:a1:00:d8:cb:f6:
f9:08:7c:a5:8f:8d:8a:4c:ac:b2:25:cb:dd:0f:f9:
0b:c5:40:02:a8:83:26:ba:22:02:e7:73:53:cf:df:
d7:79:6e:78:1f:03:93:35:61:eb:62:ac:61:1b:ff:
0d:d9:2c:37:ae:de:8c:5c:60:12:d8:06:e4:07:59:
c7:1d:00:4e:d5:1b:af:11:8a:eb:cd:d2:da:0f:aa:
e4:fd:4d:42:0d:ff:ef:21:1a:a4:e4:eb:10:0b:e3:
28:cd:33:0a:a9:1f:db:0c:b3:88:b0:92:cd:19:46:
3f:c4:ec:f1:f4:12:34:dc:ea:85:4c:57:fc:7f:96:
b4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:54:C6:56:5A:C3:5E:68:57:67:BC:BC:56:66:AE:93:AF:2A:EA:21
X509v3 Authority Key Identifier:
keyid:48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:64:fa:9b:c9:8d:9c:07:91:a3:f0:60:b6:33:07:f9:87:c7:
88:57:79:9a:ab:39:63:20:31:11:cd:7c:d8:77:ef:c8:7e:a1:
fa:1f:ef:84:69:41:86:c1:c0:59:d8:ef:7e:86:26:24:62:73:
5a:bc:1d:65:58:8b:3c:bf:7c:44:a6:42:51:99:0d:d6:c5:b8:
51:7c:46:7b:02:a7:86:f9:8f:09:f9:27:b2:52:ed:22:c3:da:
5a:21:45:b4:fe:85:05:12:e2:79:ef:5e:83:b2:11:3d:3e:4a:
0a:47:2c:82:21:aa:0b:8c:20:9a:81:90:f9:97:83:8d:bc:0d:
38:ff:7f:57:f8:0f:7b:43:51:54:e2:7a:a4:de:4d:be:f7:99:
88:ee:d3:a2:f1:4a:43:1d:15:81:08:69:95:a2:41:3e:18:b2:
c2:e5:3d:42:f3:31:12:f7:f9:db:db:d6:3e:e6:95:b0:2e:10:
87:a0:e5:81:1f:f8:64:a6:96:c4:1f:b9:8e:7b:39:66:94:21:
fa:5d:17:e0:e2:4a:c7:ea:37:aa:61:7e:7b:5d:e3:2f:02:1e:
c1:06:ff:cd:b5:e8:1d:2c:d1:5e:d8:a2:52:bd:e0:63:1d:2c:
34:3c:89:d3:6f:95:4d:a5:2c:bf:81:8d:4d:aa:2c:6d:79:fe:
14:64:c7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:34:29 2026 by rpki-client