
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
File: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft (raw, json)
Hash identifier: BnZTjkpyQgOlY++9fFwNLmRq14iBlD7Oct/Gdl3wXro=
Subject key identifier: FE:56:B5:7F:09:70:6D:31:8A:23:C7:54:0A:BA:AD:62:B0:F5:EE:96
Authority key identifier: 9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39
Certificate issuer: /CN=A91E3E80/serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
Certificate serial: 93
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
Manifest number: 91
Signing time: Wed 25 Mar 2026 06:42:01 +0000
Manifest this update: Wed 25 Mar 2026 06:42:00 +0000
Manifest next update: Wed 01 Apr 2026 06:42:00 +0000
Files and hashes: 1: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl (hash: RQrD+52aDk0Zx0xp//3WhvqXyANI7YLHbWHnY0ToUv4=)
2: 1E008B864B7411F09B3DF33BC4F9AE02.roa (hash: /zMdVLhGNollmYFXdF4G2YH+XX/SiRIlk1GXQ7DqDSs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl
rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:41:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3E80, serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
Validity
Not Before: Mar 25 06:42:00 2026 GMT
Not After : Apr 1 06:42:00 2026 GMT
Subject: CN=69c383b8-b9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5d:24:4c:74:78:01:0e:03:66:e7:d5:1c:c5:
9d:01:d5:8e:f5:4b:4b:bd:d8:40:1b:3e:16:0d:85:
35:74:d8:39:0b:6c:d8:47:97:f4:02:82:01:d1:21:
0a:fd:de:c2:12:23:88:8a:1b:a6:c3:2a:78:e7:a9:
e2:65:78:68:c7:0b:46:fc:97:d4:07:10:1b:c5:6e:
ed:1e:36:30:a4:15:35:22:d5:0c:d3:f5:fd:f9:90:
7b:2d:5f:13:28:ce:40:bf:29:aa:0b:5d:15:a8:76:
0e:e9:4d:82:29:4d:d9:dc:82:07:23:fd:80:58:cf:
49:6a:04:bd:62:95:4b:03:37:2c:8c:30:8a:e3:52:
14:4e:de:8c:5c:13:33:ab:44:49:a6:8e:5d:2c:fb:
65:38:0e:44:0a:cc:8c:e1:11:02:93:4c:db:e6:63:
18:74:92:29:a3:e3:c1:c3:51:7e:a3:30:e8:46:c9:
9e:cf:b3:80:a5:86:06:a8:95:8d:a6:d5:79:67:77:
b4:c9:77:d3:83:2a:dd:3f:de:a8:85:96:b1:0b:eb:
b8:27:3a:45:7a:76:1a:a7:96:a2:30:e2:e3:56:bc:
ba:6a:41:17:4b:95:13:03:9b:77:c2:b7:09:84:d9:
89:b2:f5:e4:ce:e6:72:21:48:7b:54:4f:b0:38:fc:
60:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:56:B5:7F:09:70:6D:31:8A:23:C7:54:0A:BA:AD:62:B0:F5:EE:96
X509v3 Authority Key Identifier:
keyid:9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:49:a7:4d:a4:5d:ad:2c:14:58:63:96:a4:e0:54:de:ed:d2:
e2:8b:e5:9c:47:7b:6d:74:c5:d0:b4:7a:c0:d3:92:76:e3:48:
db:01:df:b1:10:1e:b6:62:85:2f:2c:29:0b:1d:12:22:c7:6c:
87:70:27:cb:cc:15:41:b8:b3:e0:c1:f7:b3:11:79:2c:9f:6b:
90:de:aa:1b:6c:c3:c3:b0:36:75:48:ad:53:82:30:48:d1:76:
cc:55:dd:6a:61:bc:29:d9:99:98:d2:0d:1e:66:89:09:76:f1:
fe:b7:b1:78:59:74:96:f1:fb:69:c9:6a:ab:b5:3e:20:65:5c:
58:81:8a:4e:94:aa:83:df:33:1d:6f:31:27:7a:1f:71:c1:8e:
f0:ae:a4:3e:d2:c2:8e:47:8f:2d:22:7e:8c:d9:c6:43:04:77:
b9:49:57:37:65:3e:97:c6:5a:71:ed:7b:9c:32:07:d3:04:58:
0f:94:43:87:ab:46:71:28:24:93:1f:f0:a8:f6:60:6b:94:5e:
a8:61:71:60:8e:c0:b0:fc:cd:89:4d:cd:e1:92:ea:e1:03:1d:
5a:23:e1:af:4f:03:ac:a4:bb:81:39:4d:2d:2b:e6:93:81:0b:
72:1f:4f:bd:af:a0:7f:c8:e1:ef:01:d8:ee:0e:41:c6:f0:08:
9e:9a:94:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTNFODAxMTAvBgNVBAUTKDlBNTg3RTRFQ0Y2OEVDNzcyOUQ4REU0MzVGRkRBQURD
RUE1QjQ5MzkwHhcNMjYwMzI1MDY0MjAwWhcNMjYwNDAxMDY0MjAwWjAYMRYwFAYD
VQQDEw02OWMzODNiOC1iOWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjl0kTHR4AQ4DZufVHMWdAdWO9UtLvdhAGz4WDYU1dNg5C2zYR5f0AoIB0SEK
/d7CEiOIihumwyp456niZXhoxwtG/JfUBxAbxW7tHjYwpBU1ItUM0/X9+ZB7LV8T
KM5AvymqC10VqHYO6U2CKU3Z3IIHI/2AWM9JagS9YpVLAzcsjDCK41IUTt6MXBMz
q0RJpo5dLPtlOA5ECsyM4RECk0zb5mMYdJIpo+PBw1F+ozDoRsmez7OApYYGqJWN
ptV5Z3e0yXfTgyrdP96ohZaxC+u4JzpFenYap5aiMOLjVry6akEXS5UTA5t3wrcJ
hNmJsvXkzuZyIUh7VE+wOPxgXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP5WtX8J
cG0xiiPHVAq6rWKw9e6WMB8GA1UdIwQYMBaAFJpYfk7PaOx3KdjeQ1/9qtzqW0k5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0U4MC8zNTQzM0YyMjRC
NjYxMUYwQjg4NTI0MzlDNEY5QUUwMi9tbGgtVHM5bzdIY3AyTjVEWF8ycTNPcGJT
VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21saC1UczlvN0hjcDJONURYXzJxM09wYlNUay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
M0U4MC8zNTQzM0YyMjRCNjYxMUYwQjg4NTI0MzlDNEY5QUUwMi9tbGgtVHM5bzdI
Y3AyTjVEWF8ycTNPcGJTVGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXkmnTaRdrSwUWGOWpOBU3u3S4ovlnEd7bXTF0LR6wNOSduNI2wHfsRAetmKF
LywpCx0SIsdsh3Any8wVQbiz4MH3sxF5LJ9rkN6qG2zDw7A2dUitU4IwSNF2zFXd
amG8KdmZmNINHmaJCXbx/rexeFl0lvH7aclqq7U+IGVcWIGKTpSqg98zHW8xJ3of
ccGO8K6kPtLCjkePLSJ+jNnGQwR3uUlXN2U+l8Zace17nDIH0wRYD5RDh6tGcSgk
kx/wqPZga5ReqGFxYI7AsPzNiU3N4ZLq4QMdWiPhr08DrKS7gTlNLSvmk4ELch9P
va+gf8jh7wHY7g5BxvAInpqU5w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:35:27 2026 by rpki-client