Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
File:                     mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft (raw, json)
Hash identifier:          BnZTjkpyQgOlY++9fFwNLmRq14iBlD7Oct/Gdl3wXro=
Subject key identifier:   FE:56:B5:7F:09:70:6D:31:8A:23:C7:54:0A:BA:AD:62:B0:F5:EE:96
Authority key identifier: 9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39
Certificate issuer:       /CN=A91E3E80/serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
Manifest number:          91
Signing time:             Wed 25 Mar 2026 06:42:01 +0000
Manifest this update:     Wed 25 Mar 2026 06:42:00 +0000
Manifest next update:     Wed 01 Apr 2026 06:42:00 +0000
Files and hashes:         1: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl (hash: RQrD+52aDk0Zx0xp//3WhvqXyANI7YLHbWHnY0ToUv4=)
                          2: 1E008B864B7411F09B3DF33BC4F9AE02.roa (hash: /zMdVLhGNollmYFXdF4G2YH+XX/SiRIlk1GXQ7DqDSs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl
                          rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3E80, serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
        Validity
            Not Before: Mar 25 06:42:00 2026 GMT
            Not After : Apr  1 06:42:00 2026 GMT
        Subject: CN=69c383b8-b9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5d:24:4c:74:78:01:0e:03:66:e7:d5:1c:c5:
                    9d:01:d5:8e:f5:4b:4b:bd:d8:40:1b:3e:16:0d:85:
                    35:74:d8:39:0b:6c:d8:47:97:f4:02:82:01:d1:21:
                    0a:fd:de:c2:12:23:88:8a:1b:a6:c3:2a:78:e7:a9:
                    e2:65:78:68:c7:0b:46:fc:97:d4:07:10:1b:c5:6e:
                    ed:1e:36:30:a4:15:35:22:d5:0c:d3:f5:fd:f9:90:
                    7b:2d:5f:13:28:ce:40:bf:29:aa:0b:5d:15:a8:76:
                    0e:e9:4d:82:29:4d:d9:dc:82:07:23:fd:80:58:cf:
                    49:6a:04:bd:62:95:4b:03:37:2c:8c:30:8a:e3:52:
                    14:4e:de:8c:5c:13:33:ab:44:49:a6:8e:5d:2c:fb:
                    65:38:0e:44:0a:cc:8c:e1:11:02:93:4c:db:e6:63:
                    18:74:92:29:a3:e3:c1:c3:51:7e:a3:30:e8:46:c9:
                    9e:cf:b3:80:a5:86:06:a8:95:8d:a6:d5:79:67:77:
                    b4:c9:77:d3:83:2a:dd:3f:de:a8:85:96:b1:0b:eb:
                    b8:27:3a:45:7a:76:1a:a7:96:a2:30:e2:e3:56:bc:
                    ba:6a:41:17:4b:95:13:03:9b:77:c2:b7:09:84:d9:
                    89:b2:f5:e4:ce:e6:72:21:48:7b:54:4f:b0:38:fc:
                    60:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:56:B5:7F:09:70:6D:31:8A:23:C7:54:0A:BA:AD:62:B0:F5:EE:96
            X509v3 Authority Key Identifier:
                keyid:9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:49:a7:4d:a4:5d:ad:2c:14:58:63:96:a4:e0:54:de:ed:d2:
         e2:8b:e5:9c:47:7b:6d:74:c5:d0:b4:7a:c0:d3:92:76:e3:48:
         db:01:df:b1:10:1e:b6:62:85:2f:2c:29:0b:1d:12:22:c7:6c:
         87:70:27:cb:cc:15:41:b8:b3:e0:c1:f7:b3:11:79:2c:9f:6b:
         90:de:aa:1b:6c:c3:c3:b0:36:75:48:ad:53:82:30:48:d1:76:
         cc:55:dd:6a:61:bc:29:d9:99:98:d2:0d:1e:66:89:09:76:f1:
         fe:b7:b1:78:59:74:96:f1:fb:69:c9:6a:ab:b5:3e:20:65:5c:
         58:81:8a:4e:94:aa:83:df:33:1d:6f:31:27:7a:1f:71:c1:8e:
         f0:ae:a4:3e:d2:c2:8e:47:8f:2d:22:7e:8c:d9:c6:43:04:77:
         b9:49:57:37:65:3e:97:c6:5a:71:ed:7b:9c:32:07:d3:04:58:
         0f:94:43:87:ab:46:71:28:24:93:1f:f0:a8:f6:60:6b:94:5e:
         a8:61:71:60:8e:c0:b0:fc:cd:89:4d:cd:e1:92:ea:e1:03:1d:
         5a:23:e1:af:4f:03:ac:a4:bb:81:39:4d:2d:2b:e6:93:81:0b:
         72:1f:4f:bd:af:a0:7f:c8:e1:ef:01:d8:ee:0e:41:c6:f0:08:
         9e:9a:94:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTNFODAxMTAvBgNVBAUTKDlBNTg3RTRFQ0Y2OEVDNzcyOUQ4REU0MzVGRkRBQURD
RUE1QjQ5MzkwHhcNMjYwMzI1MDY0MjAwWhcNMjYwNDAxMDY0MjAwWjAYMRYwFAYD
VQQDEw02OWMzODNiOC1iOWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjl0kTHR4AQ4DZufVHMWdAdWO9UtLvdhAGz4WDYU1dNg5C2zYR5f0AoIB0SEK
/d7CEiOIihumwyp456niZXhoxwtG/JfUBxAbxW7tHjYwpBU1ItUM0/X9+ZB7LV8T
KM5AvymqC10VqHYO6U2CKU3Z3IIHI/2AWM9JagS9YpVLAzcsjDCK41IUTt6MXBMz
q0RJpo5dLPtlOA5ECsyM4RECk0zb5mMYdJIpo+PBw1F+ozDoRsmez7OApYYGqJWN
ptV5Z3e0yXfTgyrdP96ohZaxC+u4JzpFenYap5aiMOLjVry6akEXS5UTA5t3wrcJ
hNmJsvXkzuZyIUh7VE+wOPxgXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP5WtX8J
cG0xiiPHVAq6rWKw9e6WMB8GA1UdIwQYMBaAFJpYfk7PaOx3KdjeQ1/9qtzqW0k5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0U4MC8zNTQzM0YyMjRC
NjYxMUYwQjg4NTI0MzlDNEY5QUUwMi9tbGgtVHM5bzdIY3AyTjVEWF8ycTNPcGJT
VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21saC1UczlvN0hjcDJONURYXzJxM09wYlNUay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
M0U4MC8zNTQzM0YyMjRCNjYxMUYwQjg4NTI0MzlDNEY5QUUwMi9tbGgtVHM5bzdI
Y3AyTjVEWF8ycTNPcGJTVGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXkmnTaRdrSwUWGOWpOBU3u3S4ovlnEd7bXTF0LR6wNOSduNI2wHfsRAetmKF
LywpCx0SIsdsh3Any8wVQbiz4MH3sxF5LJ9rkN6qG2zDw7A2dUitU4IwSNF2zFXd
amG8KdmZmNINHmaJCXbx/rexeFl0lvH7aclqq7U+IGVcWIGKTpSqg98zHW8xJ3of
ccGO8K6kPtLCjkePLSJ+jNnGQwR3uUlXN2U+l8Zace17nDIH0wRYD5RDh6tGcSgk
kx/wqPZga5ReqGFxYI7AsPzNiU3N4ZLq4QMdWiPhr08DrKS7gTlNLSvmk4ELch9P
va+gf8jh7wHY7g5BxvAInpqU5w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:35:27 2026 by rpki-client