
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
File: SLHo4_K8VCn4xnmVXWTSJJRF42U.mft (raw, json)
Hash identifier: ZUZIy3wi1+o2l7BHi4UDgFprNLD/Cw3ZYgu161pCIHo=
Subject key identifier: C2:94:7F:01:9B:6D:82:D8:46:93:AF:D4:23:F8:05:83:CB:C5:EA:D7
Authority key identifier: 48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
Certificate issuer: /CN=A9140C62/serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Certificate serial: 025C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
Manifest number: 0245
Signing time: Tue 21 Apr 2026 02:21:14 +0000
Manifest this update: Tue 21 Apr 2026 02:21:13 +0000
Manifest next update: Tue 28 Apr 2026 02:21:13 +0000
Files and hashes: 1: SLHo4_K8VCn4xnmVXWTSJJRF42U.crl (hash: rjKmubX6w1LEc0HpHZEkC/0macYMb9lk9TbQh6pEerI=)
2: 4C66C2B497F711EF8863DA4BC4F9AE02.roa (hash: o8q8cpWAFHMejNlyhFKsxJdzn6kYbKz2uPZ6/GcJTlk=)
3: 51B6AD3E03B211F0BDAF273BC4F9AE02.roa (hash: UuKJK26jX3Rl7RcP2M0fqflfBMPRZn8fZfrjbt0GlvM=)
4: 0A624110067411EEA4A63A62C4F9AE02.roa (hash: YvbAycJNFa8CnWMJpInhLTTnZh9UXUtoDFaEIloDPRU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl
rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 02:21:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 604 (0x25c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140C62, serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Validity
Not Before: Apr 21 02:21:13 2026 GMT
Not After : Apr 28 02:21:13 2026 GMT
Subject: CN=69e6df1a-73e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:71:13:03:4e:ac:75:e7:44:32:e4:b3:bd:
47:9f:7a:58:f9:83:9e:df:93:3e:94:2f:11:5b:67:
64:8d:ab:bc:49:5b:99:41:f2:77:2f:18:fd:b1:e6:
97:cd:7a:a1:d4:81:63:1b:1b:7c:c8:d4:41:8b:e0:
92:1d:e3:ef:94:39:db:2b:a9:0a:9d:d7:ba:f7:b8:
4d:aa:05:74:be:56:62:94:9d:0d:fc:d0:6b:ef:ab:
9a:ef:6e:85:cd:84:34:55:42:4a:4c:6f:2d:a0:95:
02:8a:9a:e3:a6:ea:89:46:b2:ea:f6:d0:c1:4d:2d:
49:ad:9e:bc:82:81:4e:46:8a:c6:82:f6:1c:40:e9:
36:77:44:2c:70:3e:39:df:be:e9:37:90:56:d9:f6:
32:19:bd:67:52:3e:5b:dd:b9:4d:cb:7f:41:0b:29:
ee:0b:a9:3e:d5:c5:20:d4:a1:7f:c3:26:d4:97:32:
a2:e7:8f:b0:13:80:5f:cf:02:4c:c4:ce:b4:cb:9a:
a4:ae:b2:b0:41:30:81:41:74:60:dd:aa:09:e2:ee:
9f:1c:cd:1c:6c:8b:df:5f:3b:e6:3c:5f:26:a8:cb:
12:5a:c1:d5:e2:f1:a2:b0:5b:56:23:3f:a5:05:bc:
9b:09:d3:b8:fe:9f:3f:e4:b9:f2:d0:9b:7f:f1:ad:
ba:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:94:7F:01:9B:6D:82:D8:46:93:AF:D4:23:F8:05:83:CB:C5:EA:D7
X509v3 Authority Key Identifier:
keyid:48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:00:3b:a1:3a:bd:48:1f:b7:b5:0e:ba:82:fd:69:29:94:28:
a7:3b:29:9a:3e:a2:33:65:09:da:f6:a0:a5:41:0c:c6:ab:ac:
d2:01:54:e7:0e:d2:c3:79:bf:0c:14:f8:26:dd:8e:40:42:b0:
2b:36:f7:72:2f:77:fa:24:02:9e:8a:e1:28:ea:93:d1:bc:f7:
86:f7:a6:8a:7b:af:42:60:b7:3f:12:5d:2b:7d:28:57:3b:83:
38:03:df:19:de:64:ba:c6:7c:98:56:ed:8f:9d:75:a8:ed:4b:
f6:df:4c:61:38:99:a9:2a:6b:09:d2:9e:15:c1:e0:b4:67:1c:
b7:1e:38:e1:93:fc:3b:3a:93:e0:93:ac:0e:4c:4b:03:0a:a2:
24:38:35:85:67:36:a0:fb:91:13:4f:34:25:3e:99:68:d8:78:
4a:69:c9:f0:27:61:da:e5:d3:4a:7c:09:eb:ae:a5:d3:db:90:
13:f7:7e:c4:c1:81:01:58:24:01:a1:50:29:29:e4:b2:31:c0:
3f:05:ec:e4:11:f9:56:84:16:6b:fd:6e:90:9c:5f:0c:a6:2f:
7c:0a:0f:27:28:f2:a4:4f:49:09:18:3e:93:5e:1a:0a:13:2a:
a3:fc:eb:ed:b8:d6:0f:9d:80:ff:bb:d4:dc:3e:db:46:1f:97:
0b:c9:f9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 08:29:48 2026 by rpki-client