Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
File:                     SLHo4_K8VCn4xnmVXWTSJJRF42U.mft (raw, json)
Hash identifier:          tjIyVQsofN2ft5ibXK79ZIl4H20kwccE+lioFDDOLig=
Subject key identifier:   9C:64:39:B6:FA:7D:1E:48:19:78:5A:D3:2B:32:3E:58:EB:60:4D:96
Authority key identifier: 48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
Certificate issuer:       /CN=A9140C62/serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Certificate serial:       01B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
Manifest number:          01AB
Signing time:             Sun 29 Jun 2025 02:27:25 +0000
Manifest this update:     Sun 29 Jun 2025 02:27:25 +0000
Manifest next update:     Sun 06 Jul 2025 02:27:25 +0000
Files and hashes:         1: SLHo4_K8VCn4xnmVXWTSJJRF42U.crl (hash: BqUu6NSM/m50gr8fuJ/hu/TKCgVbhm+E/HauBxXBeBE=)
                          2: 0A624110067411EEA4A63A62C4F9AE02.roa (hash: u9dNvDFAFnBaqoITKf4wttZqgTjkqepYYTTq0cWfxsA=)
                          3: 51B6AD3E03B211F0BDAF273BC4F9AE02.roa (hash: WmaI+JpQZGr+NV6hRWYVZkaBwEeLTPaT1/dSkWkVAdQ=)
                          4: 4C66C2B497F711EF8863DA4BC4F9AE02.roa (hash: uNIvVvjHdxYNXn+vLEcJTPhrZ9Sg+JCJeEhpJ1jJjbQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl
                          rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 02:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140C62, serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
        Validity
            Not Before: Jun 29 02:27:25 2025 GMT
            Not After : Jul  6 02:27:25 2025 GMT
        Subject: CN=6860a48d-657c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:38:db:a6:4b:46:91:a8:1f:ed:fc:2a:f0:b2:
                    a7:2c:60:1f:2f:d0:9c:d1:5e:e1:ed:40:3a:28:c7:
                    4f:60:1d:2c:40:74:bf:1b:bf:77:b9:9b:c9:05:aa:
                    e6:07:7f:13:1b:a8:84:54:37:e4:e4:1d:19:41:0c:
                    1c:86:63:1c:c3:39:b6:f6:7f:ee:96:cc:ee:1e:f8:
                    ef:dc:e1:95:5d:cb:58:c8:70:8f:29:53:52:16:b2:
                    a3:a8:db:52:eb:d7:ce:0c:4f:df:ac:54:00:79:e6:
                    98:ca:8d:d9:30:b0:f6:60:62:76:40:ba:1a:d4:09:
                    48:d0:b2:14:89:65:51:a2:df:58:25:b7:a8:bd:72:
                    f2:5b:7b:74:e1:3a:db:de:c5:52:01:92:dd:75:83:
                    67:0b:c1:0a:fc:e1:07:24:fe:b6:bb:c7:64:5c:b6:
                    5b:da:0d:4c:18:7c:c4:ba:64:9e:1c:93:f8:a7:29:
                    a4:87:53:03:a1:1e:0a:5a:98:f9:9a:14:c2:6b:8a:
                    6d:e6:37:aa:65:ac:da:42:1b:39:ed:83:0a:29:b7:
                    5f:58:63:12:db:0e:8f:53:76:43:b1:6a:1c:a5:85:
                    46:b7:f1:8c:69:df:8d:99:79:89:ce:ba:14:00:2e:
                    36:29:eb:60:12:4c:bb:28:77:70:af:6d:56:a5:34:
                    13:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:64:39:B6:FA:7D:1E:48:19:78:5A:D3:2B:32:3E:58:EB:60:4D:96
            X509v3 Authority Key Identifier:
                keyid:48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b3:75:ca:28:37:6a:35:89:c0:04:72:5b:06:96:d2:e6:d7:
         2f:df:e9:7a:25:a5:00:33:88:0d:44:4d:73:d7:46:ff:a9:28:
         22:d9:02:1e:7a:9c:3b:2b:b0:35:4a:aa:9e:00:bc:51:f2:62:
         19:96:ec:02:72:69:c7:72:93:e6:b2:7f:0c:49:70:ce:d9:46:
         3d:33:23:90:d9:1f:d3:7c:06:f1:7d:c3:02:dd:a3:c6:04:75:
         b5:02:e6:29:bd:12:57:e2:0f:b9:0e:b4:ef:9d:99:fd:aa:a9:
         42:81:84:ab:e1:98:c4:a3:70:23:3d:84:bc:c6:27:c9:3f:b2:
         55:49:78:e9:ce:26:34:9f:87:d9:28:bb:f7:0c:21:33:f0:1d:
         11:2f:cc:9d:5b:53:ba:9d:3b:eb:a1:e8:9d:22:7e:c7:fc:56:
         a0:50:5e:10:cf:a0:16:eb:97:84:ad:1e:d8:27:94:16:16:e4:
         44:38:be:7b:a3:14:28:9e:b3:56:b7:01:8e:2d:c4:f6:d5:ec:
         d8:29:bb:cb:3d:7e:15:f1:8b:a7:20:fd:62:79:79:a9:19:5d:
         8f:18:2a:4a:61:88:99:70:93:4f:5a:1c:a8:d5:85:2e:27:0f:
         6e:41:f7:71:56:1c:d3:9a:a3:85:2e:1a:92:45:ea:18:28:62:
         c3:1c:d0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:50:24 2025 by rpki-client