Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
File:                     SLHo4_K8VCn4xnmVXWTSJJRF42U.mft (raw, json)
Hash identifier:          78EmqM2abIXENPhUI2sWeMY9W1G1lGYSxP1+RyNBxNk=
Subject key identifier:   59:3B:D2:A9:64:82:DB:A8:B9:93:1D:2D:11:B7:A5:37:A3:F8:B4:33
Authority key identifier: 48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
Certificate issuer:       /CN=A9140C62/serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Certificate serial:       024E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
Manifest number:          0237
Signing time:             Wed 25 Mar 2026 02:03:15 +0000
Manifest this update:     Wed 25 Mar 2026 02:03:14 +0000
Manifest next update:     Wed 01 Apr 2026 02:03:14 +0000
Files and hashes:         1: SLHo4_K8VCn4xnmVXWTSJJRF42U.crl (hash: ibrJ0rF/O+bQkGiSmjmfV0pf4qnJcNWT6q90hDglews=)
                          2: 4C66C2B497F711EF8863DA4BC4F9AE02.roa (hash: o8q8cpWAFHMejNlyhFKsxJdzn6kYbKz2uPZ6/GcJTlk=)
                          3: 0A624110067411EEA4A63A62C4F9AE02.roa (hash: YvbAycJNFa8CnWMJpInhLTTnZh9UXUtoDFaEIloDPRU=)
                          4: 51B6AD3E03B211F0BDAF273BC4F9AE02.roa (hash: UuKJK26jX3Rl7RcP2M0fqflfBMPRZn8fZfrjbt0GlvM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl
                          rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140C62, serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
        Validity
            Not Before: Mar 25 02:03:14 2026 GMT
            Not After : Apr  1 02:03:14 2026 GMT
        Subject: CN=69c34262-4a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7a:06:56:4f:b4:09:e8:28:30:ae:43:31:25:
                    c9:46:ba:8d:1c:47:2a:5c:22:3d:04:c6:3d:62:e7:
                    59:77:55:6d:80:74:f5:26:a8:47:3b:67:d7:81:2e:
                    e1:88:25:3b:75:90:3a:2c:c3:d2:18:d1:88:82:79:
                    91:91:a7:4d:90:5d:bf:f7:3b:d1:29:ca:06:82:92:
                    15:85:76:17:88:6d:b9:1e:93:4f:87:c6:11:0b:63:
                    cf:f7:55:96:bb:21:34:1f:1e:aa:3f:e1:c3:46:98:
                    94:ed:9a:1e:ca:ae:f3:86:4b:99:57:e2:73:36:53:
                    29:9e:1a:93:81:3e:3e:09:a0:56:e2:8a:3c:e8:83:
                    8e:8b:0a:09:1e:9b:dd:29:83:38:fc:d6:58:06:55:
                    35:80:7e:dd:34:e4:07:9c:58:2b:e2:a8:12:7d:8f:
                    17:56:ba:72:17:20:3f:67:29:e7:a8:51:d6:5d:c9:
                    33:5b:28:bf:c2:c1:2b:b2:31:57:8d:46:1a:3c:41:
                    82:e8:d6:99:c2:41:f5:50:c9:7c:97:11:6f:aa:6f:
                    4f:ba:2c:7d:b6:76:1f:a1:98:bf:01:f3:c1:a4:1c:
                    1e:e2:d0:7e:22:a1:15:09:e1:c8:ac:b0:4d:72:92:
                    10:9f:a0:c7:db:0a:c7:5d:ab:85:dd:88:41:db:36:
                    22:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3B:D2:A9:64:82:DB:A8:B9:93:1D:2D:11:B7:A5:37:A3:F8:B4:33
            X509v3 Authority Key Identifier:
                keyid:48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e3:60:49:7d:50:4e:8c:5d:58:1a:bd:16:0c:89:73:8a:f3:
         de:2e:ec:4b:93:71:75:3d:1c:71:f5:31:3c:e2:fa:f9:e0:2c:
         57:03:ba:7c:57:b5:94:ca:77:93:9e:95:16:54:00:c6:c4:e9:
         42:67:9b:62:ae:e7:1c:f3:c4:e0:25:8f:37:19:59:47:5a:fe:
         54:5d:3a:62:a8:92:e1:60:e7:6d:4d:bb:63:75:a6:4d:82:5e:
         b1:ce:03:25:5c:7e:e6:d9:9d:91:a8:5f:b6:ff:ac:6a:9c:f2:
         12:1f:ce:4e:54:3b:ec:02:c4:bf:36:72:90:05:c3:b4:bb:fa:
         8d:56:e4:7d:8c:45:73:06:48:26:96:13:ec:10:e5:2c:41:1e:
         b4:e3:ba:b2:d9:26:7d:bb:0d:33:9a:36:c7:2a:66:1e:8d:30:
         da:19:10:4f:5a:f2:5a:f0:a9:a6:c7:65:a8:e5:2b:fa:7b:09:
         d7:19:9f:41:05:6e:e3:6b:e8:bf:d2:e7:68:01:7c:d0:12:27:
         72:ff:aa:aa:d5:0c:37:aa:6a:da:d7:4c:c8:88:ed:c1:63:a8:
         61:f3:f8:b4:d3:a1:4b:bd:aa:74:28:e2:2f:55:a0:44:67:99:
         58:ba:a3:2e:30:32:d1:aa:2f:28:0a:c1:9f:d0:64:58:82:42:
         42:85:48:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:48:45 2026 by rpki-client