
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
File: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft (raw, json)
Hash identifier: 1HpZ6C7Yh1ke/+VkhYJXay/VGZZiiuKGGM+caKJIEHM=
Subject key identifier: 5A:51:DD:E0:16:15:9F:EB:A9:AF:07:FB:26:93:3A:EE:58:B7:2F:DB
Authority key identifier: 9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39
Certificate issuer: /CN=A91E3E80/serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
Certificate serial: BC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
Manifest number: B8
Signing time: Mon 01 Jun 2026 07:51:07 +0000
Manifest this update: Mon 01 Jun 2026 07:51:07 +0000
Manifest next update: Mon 08 Jun 2026 07:51:07 +0000
Files and hashes: 1: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl (hash: 3LJZdrWe1xVmXkRkY9r8ulSxNAgy6b0DZZMdKelmx2s=)
2: 29CA404A3B0D11F18EE2601DA2833773.roa (hash: Jzax6E6Sfv6INltxB8Hf3ktPyBHc/bZL9WLenaL6FpM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl
rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3E80, serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
Validity
Not Before: Jun 1 07:51:07 2026 GMT
Not After : Jun 8 07:51:07 2026 GMT
Subject: CN=6a1d39eb-6d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:24:f2:ef:26:f5:b5:e6:b5:84:c9:ea:66:
f4:b3:3e:ae:24:e1:1e:d0:42:bc:04:71:8f:d0:82:
80:fc:05:b6:8e:e6:cd:92:a6:08:a1:b0:fd:a5:bd:
1a:66:4f:18:64:90:b2:58:b5:f4:2d:49:32:7e:40:
c6:8b:ec:66:72:f1:57:90:e2:55:af:c9:23:7a:7f:
d4:21:d2:36:fc:8e:b6:81:1b:22:be:12:b1:2a:45:
09:eb:e3:8f:51:17:5b:1a:23:00:4b:0f:81:20:5e:
0b:30:0f:c1:63:45:19:93:0e:59:ad:c1:ed:05:ec:
2c:c6:76:9e:19:7e:d7:ea:23:89:d5:94:d3:8c:9f:
c7:00:b5:d0:ec:e6:cd:c0:82:0a:77:d5:57:97:d5:
0a:2e:73:e4:6f:20:d7:ff:eb:a9:2f:6b:97:4e:73:
63:ac:b5:2d:d9:e4:e3:39:5a:9a:c3:19:73:8d:73:
fa:fe:d0:a4:4b:84:11:85:6e:5f:84:49:c9:c1:cf:
23:82:7b:1a:61:ce:b2:8c:3c:ec:d4:db:48:92:1e:
ab:f6:77:55:86:14:5c:29:07:94:b6:56:5d:01:de:
ca:9f:82:8d:63:a5:92:e8:cb:0f:8c:79:19:49:e3:
c4:9f:1d:ba:b4:3b:e5:af:8a:09:6d:62:e4:27:b6:
30:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:51:DD:E0:16:15:9F:EB:A9:AF:07:FB:26:93:3A:EE:58:B7:2F:DB
X509v3 Authority Key Identifier:
keyid:9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:68:06:de:5b:e6:56:2c:d5:7b:77:40:7a:f0:a1:72:76:8a:
be:30:fe:0e:21:b4:e7:4e:d2:c6:8d:4e:5c:b4:a7:34:40:9c:
7c:ed:e0:74:c4:11:5e:d8:32:f1:ff:c4:5a:18:19:69:91:bc:
31:fb:98:b2:e2:69:e3:16:8c:29:88:ea:9d:da:b1:ac:f4:03:
bf:7f:e0:76:74:a3:88:e7:22:07:59:8b:f4:37:42:ff:ce:be:
70:7f:96:f6:75:32:09:b6:01:1e:bc:fe:20:a4:ec:a7:37:21:
8b:2b:f9:10:30:46:d6:d4:e8:03:42:87:25:20:fd:d5:c2:6d:
0e:a5:fc:4f:af:87:5a:c6:de:68:4b:e3:e4:8c:7a:7a:a6:30:
40:b3:db:b8:9b:70:6a:f4:96:2c:a6:80:3a:e0:ad:ba:d3:f9:
0f:5d:14:16:0d:7d:79:e8:9f:bf:c2:dc:e3:6d:21:3e:a6:06:
94:7a:9e:c4:a5:64:16:ff:f5:e0:96:eb:8f:39:b9:5d:06:12:
83:f8:80:12:ac:af:4f:83:b2:3a:d7:7e:b6:c2:74:95:41:b2:
0d:b0:aa:00:cb:a1:52:7c:10:1d:a0:5b:6d:45:3b:d4:3a:1e:
12:60:8d:26:4e:6b:90:86:96:9f:f4:07:48:8e:79:d4:31:c4:
4f:4c:ec:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:25:50 2026 by rpki-client