
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
File: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft (raw, json)
Hash identifier: /U2f5rwLdk0CNMdTY5FEAmW0Q2fTwBReJJkjFReToOE=
Subject key identifier: C4:26:86:9E:99:D3:DE:D9:AF:7E:AE:28:A2:AF:96:2F:01:AA:29:3B
Authority key identifier: 9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39
Certificate issuer: /CN=A91E3E80/serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
Certificate serial: C1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
Manifest number: BD
Signing time: Sat 13 Jun 2026 07:05:12 +0000
Manifest this update: Sat 13 Jun 2026 07:05:11 +0000
Manifest next update: Sat 20 Jun 2026 07:05:11 +0000
Files and hashes: 1: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl (hash: 0I+Xz9TcysfbGmANVmleJEGAggO/O0VESR2BrM2w8Wk=)
2: 29CA404A3B0D11F18EE2601DA2833773.roa (hash: Jzax6E6Sfv6INltxB8Hf3ktPyBHc/bZL9WLenaL6FpM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl
rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3E80, serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
Validity
Not Before: Jun 13 07:05:11 2026 GMT
Not After : Jun 20 07:05:11 2026 GMT
Subject: CN=6a2d0128-faa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:47:69:07:a6:12:5b:75:71:21:6c:93:fa:
27:cc:ed:73:d7:07:af:57:95:41:3f:5a:9f:0a:92:
df:5e:02:1a:cf:e3:d2:fe:fe:b5:db:dd:12:fc:90:
c7:24:15:ed:f7:09:2a:56:fc:59:0f:dc:a0:3a:fd:
86:30:eb:7d:49:8b:77:ed:c7:7f:0e:3e:c4:69:af:
eb:d9:3c:43:f6:d6:f8:8b:3f:62:72:33:71:6d:8c:
09:9f:d3:f0:d4:81:f1:8e:47:ef:9c:22:12:33:5a:
d0:ad:e6:ed:14:37:c3:32:ff:41:04:b2:2c:9f:b8:
af:8f:65:23:05:72:a9:06:c0:f5:7f:c8:8e:ef:bb:
20:96:8a:a3:03:1e:81:57:8f:fe:dd:5c:d7:1d:07:
ac:93:0d:23:53:f4:07:63:7c:15:f1:e5:35:df:e3:
f8:46:6a:cb:6d:20:92:d8:70:8a:1c:9c:5d:1c:b6:
6f:83:0e:0a:f2:5c:34:0f:a3:a6:13:3c:87:33:13:
ff:04:11:62:6e:10:fc:d4:c2:0a:8f:4f:ef:8a:be:
21:1d:86:bd:28:1a:0c:09:b4:07:f6:d1:5d:ac:90:
9e:e3:75:7b:38:9f:c3:40:bd:b5:c6:1f:8e:1c:65:
ad:32:19:16:0a:7d:54:cb:64:41:11:cc:48:60:0d:
fd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:26:86:9E:99:D3:DE:D9:AF:7E:AE:28:A2:AF:96:2F:01:AA:29:3B
X509v3 Authority Key Identifier:
keyid:9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:6e:d4:46:87:31:28:9d:b8:84:5d:07:bc:30:1b:26:11:c9:
ad:72:2b:0f:2d:2b:6c:8f:a2:dc:36:ca:05:25:65:14:f8:79:
52:e7:e0:f3:ff:2c:1b:cf:ba:4f:06:fb:89:88:d9:68:c0:1c:
8b:00:e2:73:db:e1:e8:1a:bb:79:fa:04:26:b9:76:48:49:5c:
61:69:5a:e0:6e:2c:9d:b4:b4:e9:c9:d1:2a:23:0b:ff:aa:34:
43:0c:9b:84:d5:48:9b:f4:13:df:3a:38:67:98:4d:d4:21:9c:
1a:14:9c:20:0e:0a:c1:b0:03:2c:b8:48:08:6f:2c:14:ae:80:
e4:87:14:b0:73:f4:c0:5f:37:40:58:2c:32:66:c5:fd:73:22:
57:90:f9:12:3f:80:b0:8a:4d:6d:d4:4e:bc:91:dc:8d:ba:a7:
6a:69:9e:13:7d:6a:fd:d6:ec:d2:f9:26:b6:fa:df:18:78:b5:
b2:99:46:e5:17:31:8e:fa:40:93:09:d7:b9:84:9c:cf:ba:00:
f4:9d:18:25:1c:0c:5d:85:c4:49:fb:a2:fa:a2:fc:27:44:c1:
d0:df:6c:55:64:55:a6:79:27:83:11:60:bc:74:0e:71:8a:c8:
ce:f4:89:e5:b3:d3:0e:11:66:f5:05:14:54:b2:05:fc:3a:2a:
e2:c4:da:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:06:59 2026 by rpki-client