$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft File: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft (raw, json) Hash identifier: 3uAg3H4gWN9tRoYsirlSHGr9PyN6n+yxzCtZfexMOAk= Subject key identifier: 7A:99:02:BE:F3:56:20:CC:6D:97:C0:6E:90:92:92:6E:05:69:70:AA Authority key identifier: 9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39 Certificate issuer: /CN=A91E3E80/serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft Manifest number: F3 Signing time: Wed 23 Sep 2026 06:10:09 +0000 Manifest this update: Wed 23 Sep 2026 06:10:09 +0000 Manifest next update: Wed 30 Sep 2026 06:10:09 +0000 Files and hashes: 1: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl (hash: 0eIbPUFiCPZ9iOSUWwlE37hrH/O2jnh3p5tjPG/c6v0=) 2: 29CA404A3B0D11F18EE2601DA2833773.roa (hash: SEQeKAJZ47ssFRvOtGo19kLELwxUiKXiWbmguFVl+b4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E80, serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939 Validity Not Before: Sep 23 06:10:09 2026 GMT Not After : Sep 30 06:10:09 2026 GMT Subject: CN=6ab36d41-ebdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f0:62:69:e6:c8:e9:43:f0:6e:70:3e:e1:f1: d0:24:d3:71:9e:a3:a0:48:fa:34:50:85:aa:8a:30: 4d:2e:f4:c2:28:3e:2d:33:d8:61:54:06:44:40:c4: d6:e7:ed:86:f8:f1:df:40:7b:35:5f:c6:ba:52:86: ea:ce:4b:a6:26:23:d5:c5:63:5a:cf:fd:0e:27:20: b5:bc:7f:0c:34:b9:6b:f2:71:c8:be:d8:cd:7a:44: a4:6b:02:94:fc:4c:7a:2e:c6:1b:62:47:fb:70:4d: c9:77:64:a8:a4:95:85:ab:61:aa:e9:3c:6f:f5:f7: 4b:3b:a0:09:f6:57:02:c6:09:02:b5:18:59:90:7f: 6b:56:ca:45:ac:ee:dc:8a:58:02:4f:76:c2:1b:bb: df:50:ed:db:df:40:a4:9c:7d:7b:c2:7e:e9:91:df: a1:31:4e:91:35:12:a5:e2:6a:4b:03:67:a2:c1:3f: 8c:03:7f:0c:73:b4:e4:00:83:1b:cb:5a:79:56:46: 40:4a:26:4e:cb:dc:c5:1e:b4:2d:ee:47:7e:3c:3e: 00:1d:1b:8f:4e:0f:ea:dd:24:1e:6f:2b:de:ac:c4: 4d:92:70:83:3a:94:4b:73:41:75:64:15:32:19:dd: df:9b:7e:bb:40:60:cc:29:9d:cb:47:29:c5:0e:28: 01:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:99:02:BE:F3:56:20:CC:6D:97:C0:6E:90:92:92:6E:05:69:70:AA X509v3 Authority Key Identifier: keyid:9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:d2:43:6a:73:36:0b:07:fe:17:1c:69:7f:cb:ba:cb:88:d8: 60:88:2d:d1:b7:bd:fc:97:3f:ff:3d:c0:b5:fd:18:f2:73:8c: e1:80:3f:ba:cb:d3:74:29:32:03:0b:8c:e4:3f:66:69:ac:91: 69:7f:4a:ca:dd:f1:4c:cb:d4:d4:46:99:6a:00:2d:a0:24:c5: 7a:75:a7:fd:df:bd:37:bd:f9:42:0f:ea:05:5d:0f:8c:b9:aa: aa:e9:ee:a8:e3:52:3b:2e:3a:df:f8:f3:9a:3f:10:0c:a7:fa: 20:b1:ff:fe:c3:51:a8:96:3c:4a:b3:3c:f2:08:f0:ef:85:ed: 6f:b0:63:4d:a9:af:a8:1c:61:a3:3c:4f:39:b6:2d:52:2a:01: bc:4e:b4:12:e3:de:ee:9c:2b:30:c7:ba:46:4a:7a:88:fb:74: 02:0a:cb:6f:f6:b0:80:20:34:d0:74:28:87:6e:9f:4c:97:40: 36:01:f1:da:2b:0d:69:a9:3d:8f:76:ef:6a:7f:09:bb:c1:cb: e5:8b:2a:e5:55:76:5f:3b:de:b2:7c:5c:18:07:bb:1d:d0:9e: 5e:04:7b:20:5d:a5:f5:03:a4:78:df:c3:c8:9e:51:2e:cd:65: cd:18:9c:52:1a:7c:1f:d4:65:cf:07:c4:7b:f1:3a:6d:71:69: 48:70:ac:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFODAxMTAvBgNVBAUTKDlBNTg3RTRFQ0Y2OEVDNzcyOUQ4REU0MzVGRkRBQURD RUE1QjQ5MzkwHhcNMjYwOTIzMDYxMDA5WhcNMjYwOTMwMDYxMDA5WjAYMRYwFAYD VQQDEw02YWIzNmQ0MS1lYmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fBiaebI6UPwbnA+4fHQJNNxnqOgSPo0UIWqijBNLvTCKD4tM9hhVAZEQMTW 5+2G+PHfQHs1X8a6UobqzkumJiPVxWNaz/0OJyC1vH8MNLlr8nHIvtjNekSkawKU /Ex6LsYbYkf7cE3Jd2SopJWFq2Gq6Txv9fdLO6AJ9lcCxgkCtRhZkH9rVspFrO7c ilgCT3bCG7vfUO3b30CknH17wn7pkd+hMU6RNRKl4mpLA2eiwT+MA38Mc7TkAIMb y1p5VkZASiZOy9zFHrQt7kd+PD4AHRuPTg/q3SQebyverMRNknCDOpRLc0F1ZBUy Gd3fm367QGDMKZ3LRynFDigBmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHqZAr7z ViDMbZfAbpCSkm4FaXCqMB8GA1UdIwQYMBaAFJpYfk7PaOx3KdjeQ1/9qtzqW0k5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0U4MC8zNTQzM0YyMjRC NjYxMUYwQjg4NTI0MzlDNEY5QUUwMi9tbGgtVHM5bzdIY3AyTjVEWF8ycTNPcGJT VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21saC1UczlvN0hjcDJONURYXzJxM09wYlNUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0U4MC8zNTQzM0YyMjRCNjYxMUYwQjg4NTI0MzlDNEY5QUUwMi9tbGgtVHM5bzdI Y3AyTjVEWF8ycTNPcGJTVGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAANJDanM2Cwf+Fxxpf8u6y4jYYIgt0be9/Jc//z3Atf0Y8nOM4YA/usvTdCky AwuM5D9maayRaX9Kyt3xTMvU1EaZagAtoCTFenWn/d+9N735Qg/qBV0PjLmqqunu qONSOy463/jzmj8QDKf6ILH//sNRqJY8SrM88gjw74Xtb7BjTamvqBxhozxPObYt UioBvE60EuPe7pwrMMe6Rkp6iPt0AgrLb/awgCA00HQoh26fTJdANgHx2isNaak9 j3bvan8Ju8HL5Ysq5VV2XzvesnxcGAe7HdCeXgR7IF2l9QOkeN/DyJ5RLs1lzRic Uhp8H9RlzwfEe/E6bXFpSHCsVw== -----END CERTIFICATE-----Generated at Wed Sep 23 13:11:54 2026 by rpki-client