
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
File: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft (raw, json)
Hash identifier: lPma2p/UeH7Ej0QsmKJvxFUv0jLoMkb95L4nclLqVtk=
Subject key identifier: 95:98:37:E3:22:BF:24:47:C9:31:67:FF:23:35:F9:48:66:61:17:22
Authority key identifier: 9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39
Certificate issuer: /CN=A91E3E80/serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
Manifest number: F9
Signing time: Mon 05 Oct 2026 06:42:58 +0000
Manifest this update: Mon 05 Oct 2026 06:42:57 +0000
Manifest next update: Mon 12 Oct 2026 06:42:57 +0000
Files and hashes: 1: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl (hash: ojSkHsdKpmDCMVHxgTFMye2N9j6lbWIlAkk37aJGhio=)
2: 29CA404A3B0D11F18EE2601DA2833773.roa (hash: SEQeKAJZ47ssFRvOtGo19kLELwxUiKXiWbmguFVl+b4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl
rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 06:42:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3E80, serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
Validity
Not Before: Oct 5 06:42:57 2026 GMT
Not After : Oct 12 06:42:57 2026 GMT
Subject: CN=6ac346f2-ea8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:df:8d:ca:7e:4b:cc:90:92:eb:8c:60:06:
70:d1:bf:5a:1f:47:e2:f4:d6:af:44:4f:49:33:7e:
af:53:c1:ce:48:79:d6:96:90:c7:6b:4e:8b:24:f0:
18:29:48:2e:5b:4e:1e:ec:16:80:0c:8e:f3:1c:d7:
e7:75:0b:b4:fe:8f:71:17:fa:fe:9b:53:cb:f9:c8:
8b:24:4c:c2:da:4a:12:a7:29:6d:ce:16:95:6f:b2:
95:4f:61:94:83:40:8b:14:9e:b9:13:b5:2c:64:14:
02:38:71:a7:e0:59:e2:d8:0e:08:40:93:17:f0:e4:
1f:a7:60:bc:c5:21:38:14:53:6a:2a:56:fb:9e:4c:
d3:56:17:0e:62:a0:ea:15:08:85:d0:6f:ee:c6:5f:
16:4e:1b:f5:c4:61:19:ad:a6:2b:c0:de:72:f1:7c:
2b:89:24:d7:17:2b:a1:e6:9b:28:cd:fa:5f:12:8f:
b7:df:30:83:aa:4e:5a:03:e7:b9:f5:e4:e9:eb:7a:
c0:c2:b1:16:46:29:43:d4:92:7a:20:79:c8:af:e7:
27:84:d8:d3:34:d5:a3:df:3b:99:9d:f4:00:73:39:
53:b6:e9:5e:d6:58:6e:ab:6f:2e:8f:d5:f0:04:10:
f9:7b:90:37:bb:67:7e:18:88:6a:66:47:72:a3:be:
b7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:98:37:E3:22:BF:24:47:C9:31:67:FF:23:35:F9:48:66:61:17:22
X509v3 Authority Key Identifier:
keyid:9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:fc:58:66:a2:ae:e9:d5:44:a4:fb:8e:cc:ad:90:85:d2:5c:
7b:cc:b9:01:89:8b:b9:1f:14:90:4d:76:e5:b8:d7:23:55:19:
3d:44:c8:08:8c:28:45:56:14:af:d7:07:16:21:ee:89:2c:db:
4f:20:a2:ba:e3:37:10:26:2a:b1:9d:1e:d7:34:a8:58:8d:58:
8c:89:89:8e:01:e3:75:3c:7d:9b:b6:2f:98:3e:e2:c3:54:b2:
18:87:2e:30:ee:64:5e:5f:fa:3e:ea:32:8b:ad:d9:ac:9d:2e:
cf:c3:8e:08:1d:d3:ca:6d:9d:66:41:03:9b:f0:80:fc:b6:ee:
a3:a2:ec:3e:0c:1f:29:05:83:41:90:4f:fd:d7:e8:54:23:92:
8f:5c:57:2c:45:8f:d9:26:ba:bd:7d:9a:d6:75:f7:86:f9:dc:
9d:43:78:df:9e:eb:41:f6:46:bc:fd:4a:46:a0:1b:86:0a:6b:
18:b1:16:6d:2b:72:7d:89:48:fe:32:19:35:ed:8e:ce:f6:84:
97:14:ee:ec:b6:14:e4:88:d5:10:cf:91:83:e3:a4:d8:7c:0b:
5e:41:e9:5c:b4:7d:59:1d:d0:f0:08:c3:1c:ec:0c:ff:ab:31:
bd:af:a3:a5:90:d8:80:df:e6:cc:11:9a:dc:19:74:8f:66:6b:
34:03:08:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:50:41 2026 by rpki-client