
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
File: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft (raw, json)
Hash identifier: qESjRK5/iyInYAgWZI4kWiEtLGPUWaSEMZKl+U2XigA=
Subject key identifier: 7F:83:51:BC:3D:6C:F7:8A:09:BE:B7:BC:14:0F:1D:F0:FF:9E:2C:3A
Authority key identifier: 9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39
Certificate issuer: /CN=A91E3E80/serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
Certificate serial: D5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
Manifest number: D1
Signing time: Thu 23 Jul 2026 08:31:58 +0000
Manifest this update: Thu 23 Jul 2026 08:31:58 +0000
Manifest next update: Thu 30 Jul 2026 08:31:58 +0000
Files and hashes: 1: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl (hash: di7DsWGpv/mGdvqqildTYU8X1kwhMApucccvmCLr4o8=)
2: 29CA404A3B0D11F18EE2601DA2833773.roa (hash: Jzax6E6Sfv6INltxB8Hf3ktPyBHc/bZL9WLenaL6FpM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl
rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3E80, serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
Validity
Not Before: Jul 23 08:31:58 2026 GMT
Not After : Jul 30 08:31:58 2026 GMT
Subject: CN=6a61d17e-8e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:c3:f4:92:c6:3f:86:3e:c3:81:be:b7:da:
3e:d1:81:33:d2:68:aa:bb:bc:5c:18:28:9f:e1:fa:
f9:d8:e1:d6:f8:99:f2:ad:5f:43:ab:ca:a4:49:5d:
d4:07:40:a9:2f:ac:ac:81:b0:5c:9a:38:be:b7:d5:
15:94:75:7f:d8:65:29:77:7a:df:b9:42:95:ab:6c:
0b:67:9e:e5:64:0c:95:fc:87:a6:1a:37:ad:e8:47:
e5:bd:2e:5f:e4:9a:b7:5e:82:6a:b4:b4:bd:e3:c9:
c2:aa:a6:85:50:8e:48:24:28:5b:c9:a1:c7:04:91:
a5:aa:63:65:f9:cc:53:fa:20:a5:41:37:d4:f0:f3:
e0:c0:3e:73:fc:e0:94:4a:6f:fd:12:12:8f:6a:43:
bb:df:75:55:c9:93:c3:d7:4e:2a:22:65:8e:e7:ee:
ee:a4:12:dd:0a:2f:a6:07:84:19:f1:11:56:bb:4c:
36:35:4a:ff:73:90:a2:85:df:cc:fc:37:11:dd:a4:
4b:de:71:e9:1c:60:ab:99:1a:00:22:9a:50:27:69:
e2:b6:2a:45:80:cd:8d:f2:80:e6:e0:34:e2:68:35:
9c:25:0c:cb:1a:cd:a9:4d:37:6c:c1:64:bd:bf:20:
40:44:56:5e:23:9f:50:11:9f:5a:dd:2c:ac:00:6d:
66:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:83:51:BC:3D:6C:F7:8A:09:BE:B7:BC:14:0F:1D:F0:FF:9E:2C:3A
X509v3 Authority Key Identifier:
keyid:9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:65:fc:83:38:fd:b3:fe:2e:70:b7:26:dc:9c:8a:37:26:a0:
00:c1:f7:c1:d9:37:36:9a:c1:72:80:84:13:ca:31:c4:19:42:
d3:66:fa:51:70:83:4d:bb:6a:9d:b7:54:f9:41:d6:3b:6f:60:
65:92:dd:9c:eb:dc:2f:05:9a:b6:ef:15:28:82:a5:ac:13:3a:
31:23:9a:9f:c4:3c:37:81:2e:0e:e4:fd:9f:2e:87:7e:d1:09:
71:0d:df:99:74:bf:ab:aa:47:68:e7:32:b9:84:15:cd:5d:d7:
d1:5f:8e:8f:04:f9:01:4e:4e:fa:32:04:99:a1:40:68:83:26:
64:75:ed:a3:b6:f4:99:bb:26:c1:57:eb:d1:dd:3d:d0:e2:86:
6e:ad:71:ac:29:c0:ca:53:3f:22:60:e8:1e:7a:92:ff:58:f7:
c9:bd:26:f0:d2:a0:53:e9:28:d3:dd:c5:ad:d7:b5:72:fa:6a:
15:e7:8c:da:6b:02:da:c7:4b:5f:76:81:d8:a4:06:bd:3b:cf:
d0:0a:10:4e:65:d5:34:a1:d5:2e:32:b8:37:7e:ac:03:d2:6c:
ac:63:e3:99:ab:9e:ff:a7:9d:83:7b:0a:88:50:50:c1:54:9d:
b4:1a:9d:5d:37:6a:8c:d6:52:0f:c7:99:d5:d2:98:d0:16:84:
f5:f5:20:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:17 2026 by rpki-client