Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
File:                     mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft (raw, json)
Hash identifier:          zNvaizvs13USadUa0889nDqMkuZ084+tUoniveAIASI=
Subject key identifier:   7F:67:52:67:0B:DB:D9:64:B8:99:BE:A1:D5:A3:9C:0A:3C:8C:FD:AB
Authority key identifier: 9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39
Certificate issuer:       /CN=A91E3E80/serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
Certificate serial:       F6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
Manifest number:          F1
Signing time:             Sat 19 Sep 2026 06:29:00 +0000
Manifest this update:     Sat 19 Sep 2026 06:28:59 +0000
Manifest next update:     Sat 26 Sep 2026 06:28:59 +0000
Files and hashes:         1: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl (hash: r+JDBbfa2RfV/3NWMDqFcKBTLm5XZl0YdwB2A5q7YOk=)
                          2: 29CA404A3B0D11F18EE2601DA2833773.roa (hash: SEQeKAJZ47ssFRvOtGo19kLELwxUiKXiWbmguFVl+b4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl
                          rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3E80, serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
        Validity
            Not Before: Sep 19 06:28:59 2026 GMT
            Not After : Sep 26 06:28:59 2026 GMT
        Subject: CN=6aae2bac-b8cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:45:3a:eb:36:b3:ed:d8:a9:45:c8:ed:16:f6:
                    c0:11:7f:f8:d3:1d:b2:39:09:4c:69:12:4e:39:1c:
                    6c:bd:94:cc:aa:c6:ae:e6:79:10:b3:31:52:be:d2:
                    82:6e:7c:93:a5:45:bd:ed:94:45:0a:07:84:b5:df:
                    4a:d0:4f:10:7c:74:c3:ae:a1:2c:85:30:c9:4e:4e:
                    84:da:4e:1b:fb:36:55:14:83:d8:9b:7b:9a:d0:b9:
                    5d:f9:c3:21:94:a8:7c:0c:0f:0e:7f:93:e2:2a:84:
                    2a:4a:7c:73:14:19:70:9c:82:6b:eb:5c:8b:6e:9c:
                    24:88:23:71:fb:bd:a4:9c:2c:e2:88:ea:6c:d1:05:
                    c3:bd:fb:c9:2c:73:d1:88:3e:50:b0:e0:a4:18:73:
                    20:75:93:23:61:36:94:c3:76:df:5c:3e:4a:10:8c:
                    6e:98:5e:db:28:0f:ca:bd:13:8e:25:d6:7c:c8:35:
                    03:d8:9f:5d:8e:de:40:e1:43:67:d1:75:b6:35:c4:
                    cb:f2:22:ac:b4:2c:9c:0c:71:a0:26:d1:0c:a7:af:
                    c6:e8:53:7c:ab:0a:06:76:01:47:bc:b6:6b:b9:02:
                    e6:25:f5:8d:ab:d6:51:54:5e:6d:f9:05:b7:87:6d:
                    d9:08:27:63:8b:b1:ac:46:2a:54:d0:14:d1:ac:47:
                    08:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:67:52:67:0B:DB:D9:64:B8:99:BE:A1:D5:A3:9C:0A:3C:8C:FD:AB
            X509v3 Authority Key Identifier:
                keyid:9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:6c:fd:29:48:25:83:66:dd:80:a2:09:8d:bb:cc:53:d4:1d:
         7a:bb:32:04:ec:cc:c2:0d:a3:eb:df:fc:aa:98:dc:57:f6:d8:
         64:66:1b:e5:f2:00:c2:72:91:49:53:9e:67:1b:b5:fd:f1:f6:
         32:1e:12:06:5b:8a:56:97:ed:72:d6:a2:fa:8e:ff:18:59:92:
         14:78:80:e6:0f:21:19:45:36:8e:18:15:e8:5c:95:a2:cf:d7:
         87:19:a7:96:98:f9:e4:43:c7:50:e1:ba:8a:d9:53:6f:da:2a:
         c4:a5:02:6b:92:dc:a3:19:32:3b:72:93:c6:37:e7:8f:f2:91:
         ed:b9:90:00:12:9f:e8:12:1e:2b:fd:fa:81:c5:ba:76:95:07:
         b8:7d:47:c8:83:9a:a0:f5:5a:e0:7d:0a:29:f9:cf:e5:d3:b3:
         0d:73:91:4d:63:2f:89:57:a3:93:fa:86:c9:69:93:ec:10:3a:
         18:5a:1c:24:07:1f:b7:4c:c3:c0:ff:25:7d:54:85:b4:a8:08:
         6e:eb:4c:ef:8d:2a:ee:3e:84:28:6c:e4:d9:57:e7:0b:38:6c:
         2f:ac:a8:a7:01:07:63:50:f4:ae:a3:bc:cb:5e:0e:c4:0e:df:
         3b:7d:f7:e0:bd:08:f6:f3:0e:8d:24:47:2a:51:60:59:cf:2b:
         55:0e:b7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:26:29 2026 by rpki-client