Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
File:                     mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft (raw, json)
Hash identifier:          /U2f5rwLdk0CNMdTY5FEAmW0Q2fTwBReJJkjFReToOE=
Subject key identifier:   C4:26:86:9E:99:D3:DE:D9:AF:7E:AE:28:A2:AF:96:2F:01:AA:29:3B
Authority key identifier: 9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39
Certificate issuer:       /CN=A91E3E80/serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
Manifest number:          BD
Signing time:             Sat 13 Jun 2026 07:05:12 +0000
Manifest this update:     Sat 13 Jun 2026 07:05:11 +0000
Manifest next update:     Sat 20 Jun 2026 07:05:11 +0000
Files and hashes:         1: mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl (hash: 0I+Xz9TcysfbGmANVmleJEGAggO/O0VESR2BrM2w8Wk=)
                          2: 29CA404A3B0D11F18EE2601DA2833773.roa (hash: Jzax6E6Sfv6INltxB8Hf3ktPyBHc/bZL9WLenaL6FpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl
                          rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:05:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3E80, serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
        Validity
            Not Before: Jun 13 07:05:11 2026 GMT
            Not After : Jun 20 07:05:11 2026 GMT
        Subject: CN=6a2d0128-faa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6b:47:69:07:a6:12:5b:75:71:21:6c:93:fa:
                    27:cc:ed:73:d7:07:af:57:95:41:3f:5a:9f:0a:92:
                    df:5e:02:1a:cf:e3:d2:fe:fe:b5:db:dd:12:fc:90:
                    c7:24:15:ed:f7:09:2a:56:fc:59:0f:dc:a0:3a:fd:
                    86:30:eb:7d:49:8b:77:ed:c7:7f:0e:3e:c4:69:af:
                    eb:d9:3c:43:f6:d6:f8:8b:3f:62:72:33:71:6d:8c:
                    09:9f:d3:f0:d4:81:f1:8e:47:ef:9c:22:12:33:5a:
                    d0:ad:e6:ed:14:37:c3:32:ff:41:04:b2:2c:9f:b8:
                    af:8f:65:23:05:72:a9:06:c0:f5:7f:c8:8e:ef:bb:
                    20:96:8a:a3:03:1e:81:57:8f:fe:dd:5c:d7:1d:07:
                    ac:93:0d:23:53:f4:07:63:7c:15:f1:e5:35:df:e3:
                    f8:46:6a:cb:6d:20:92:d8:70:8a:1c:9c:5d:1c:b6:
                    6f:83:0e:0a:f2:5c:34:0f:a3:a6:13:3c:87:33:13:
                    ff:04:11:62:6e:10:fc:d4:c2:0a:8f:4f:ef:8a:be:
                    21:1d:86:bd:28:1a:0c:09:b4:07:f6:d1:5d:ac:90:
                    9e:e3:75:7b:38:9f:c3:40:bd:b5:c6:1f:8e:1c:65:
                    ad:32:19:16:0a:7d:54:cb:64:41:11:cc:48:60:0d:
                    fd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:26:86:9E:99:D3:DE:D9:AF:7E:AE:28:A2:AF:96:2F:01:AA:29:3B
            X509v3 Authority Key Identifier:
                keyid:9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:6e:d4:46:87:31:28:9d:b8:84:5d:07:bc:30:1b:26:11:c9:
         ad:72:2b:0f:2d:2b:6c:8f:a2:dc:36:ca:05:25:65:14:f8:79:
         52:e7:e0:f3:ff:2c:1b:cf:ba:4f:06:fb:89:88:d9:68:c0:1c:
         8b:00:e2:73:db:e1:e8:1a:bb:79:fa:04:26:b9:76:48:49:5c:
         61:69:5a:e0:6e:2c:9d:b4:b4:e9:c9:d1:2a:23:0b:ff:aa:34:
         43:0c:9b:84:d5:48:9b:f4:13:df:3a:38:67:98:4d:d4:21:9c:
         1a:14:9c:20:0e:0a:c1:b0:03:2c:b8:48:08:6f:2c:14:ae:80:
         e4:87:14:b0:73:f4:c0:5f:37:40:58:2c:32:66:c5:fd:73:22:
         57:90:f9:12:3f:80:b0:8a:4d:6d:d4:4e:bc:91:dc:8d:ba:a7:
         6a:69:9e:13:7d:6a:fd:d6:ec:d2:f9:26:b6:fa:df:18:78:b5:
         b2:99:46:e5:17:31:8e:fa:40:93:09:d7:b9:84:9c:cf:ba:00:
         f4:9d:18:25:1c:0c:5d:85:c4:49:fb:a2:fa:a2:fc:27:44:c1:
         d0:df:6c:55:64:55:a6:79:27:83:11:60:bc:74:0e:71:8a:c8:
         ce:f4:89:e5:b3:d3:0e:11:66:f5:05:14:54:b2:05:fc:3a:2a:
         e2:c4:da:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:06:59 2026 by rpki-client