$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft File: MGSQ23RcleyGYUmf_IJkZnumf4o.mft (raw, json) Hash identifier: V0DttCj/jFBDtSNaih9+49XLFeeq5IA94rRIyb84HAM= Subject key identifier: D7:91:63:D4:C2:FB:2A:3E:06:75:20:B3:BB:4E:45:16:90:85:24:12 Authority key identifier: 30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A Certificate issuer: /CN=A91CE7A4/serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft Manifest number: 0125 Signing time: Thu 23 Jul 2026 07:25:42 +0000 Manifest this update: Thu 23 Jul 2026 07:25:41 +0000 Manifest next update: Thu 30 Jul 2026 07:25:41 +0000 Files and hashes: 1: MGSQ23RcleyGYUmf_IJkZnumf4o.crl (hash: dDvxzRu26sdrU25rqz3hFFkUEmqPVUAAZn1Jg0jEwB8=) 2: 19C407C0CC1011EFBC7E0050C4F9AE02.roa (hash: utxItg9AZP9jPtUfaHZNYYZ2s+pDsbIze+rI9Pl7uws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7A4, serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A Validity Not Before: Jul 23 07:25:41 2026 GMT Not After : Jul 30 07:25:41 2026 GMT Subject: CN=6a61c1f6-1e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:41:83:79:e6:00:58:b2:24:eb:81:ca:3a:ac: 1f:b6:53:29:c5:70:07:b6:15:45:42:e3:07:45:54: a9:dd:91:88:06:95:13:3c:3a:4f:39:2e:dd:72:cf: b9:4e:1c:7f:e2:d6:f1:75:be:7d:b8:50:2a:04:bc: 60:a1:52:e3:3d:da:e6:31:f1:ba:cf:fa:4a:1f:8f: de:fa:47:0e:c4:05:29:90:ed:5e:20:81:41:a2:02: 2f:fd:48:df:d0:c6:71:4b:99:08:02:6a:8c:84:d6: 7a:d8:7c:2f:e7:82:12:3e:1f:c8:19:6b:30:aa:ba: 1d:d9:1f:d9:3c:9f:d5:8b:3b:08:93:7d:7d:7d:71: d3:ba:cf:23:62:b9:6c:f9:20:b6:20:f3:3f:0a:05: cc:c9:2a:55:b3:27:cd:e7:12:e3:95:f4:e3:19:29: ab:c8:a7:9f:1f:e7:e4:b0:be:3c:26:7f:fc:e3:ce: 72:1a:e1:f4:09:69:ee:68:31:43:aa:1e:29:2e:ae: db:6a:6b:4a:15:f0:7b:38:b3:82:0f:c4:85:58:43: cf:6e:16:b4:d3:e1:8d:a8:51:f6:2a:53:70:c5:8c: b5:4d:6f:06:8c:7a:bf:07:61:2b:e4:c1:38:ac:ca: d9:fd:ba:40:09:56:49:d0:61:07:8a:4c:81:19:ff: 0d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:91:63:D4:C2:FB:2A:3E:06:75:20:B3:BB:4E:45:16:90:85:24:12 X509v3 Authority Key Identifier: keyid:30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e5:df:01:4c:b8:ed:cf:3b:c0:84:16:73:95:04:d0:2d:30: e3:c7:36:f7:ec:7c:52:7f:89:98:e7:3e:20:db:14:b8:12:bf: 74:49:67:ad:19:d5:5f:0c:a5:23:8e:74:01:ae:1d:17:29:71: 9d:49:3d:4f:d9:89:a5:e5:12:20:7c:ec:91:d9:ad:b6:bc:b0: 36:10:7e:a6:79:bd:8f:b7:6d:38:53:78:8d:70:f2:9b:11:b3: 8d:0b:12:41:6a:39:d8:39:fe:51:92:89:c7:0a:e2:02:a6:4b: 59:00:67:2e:c1:10:95:3f:d7:c8:ef:8b:48:bf:07:0b:84:10: 6b:24:f2:c6:68:9f:68:82:b1:88:5d:a3:fa:56:ac:de:b4:aa: b8:36:94:80:cc:74:93:e5:00:b6:02:f3:a1:df:c6:47:7c:8d: 76:42:2b:b7:c0:18:b5:1d:e4:ea:86:20:64:5c:c7:04:c1:c0: f7:a5:5a:7f:4c:a4:f1:c5:3f:bd:ea:5e:02:41:79:a5:ea:d4: 77:b6:f7:a7:04:c0:24:8a:7f:16:dd:e5:83:ac:f3:2c:f6:75: 6c:50:b5:1e:f5:dd:75:fb:5a:76:29:c5:47:95:42:a8:92:89: 6d:9c:10:d8:d6:4a:78:ab:ad:cc:d5:db:8c:3a:ad:9c:d1:ee: 8d:ac:e5:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U3QTQxMTAvBgNVBAUTKDMwNjQ5MERCNzQ1Qzk1RUM4NjYxNDk5RkZDODI2NDY2 N0JBNjdGOEEwHhcNMjYwNzIzMDcyNTQxWhcNMjYwNzMwMDcyNTQxWjAYMRYwFAYD VQQDEw02YTYxYzFmNi0xZTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0GDeeYAWLIk64HKOqwftlMpxXAHthVFQuMHRVSp3ZGIBpUTPDpPOS7dcs+5 Thx/4tbxdb59uFAqBLxgoVLjPdrmMfG6z/pKH4/e+kcOxAUpkO1eIIFBogIv/Ujf 0MZxS5kIAmqMhNZ62Hwv54ISPh/IGWswqrod2R/ZPJ/VizsIk319fXHTus8jYrls +SC2IPM/CgXMySpVsyfN5xLjlfTjGSmryKefH+fksL48Jn/8485yGuH0CWnuaDFD qh4pLq7bamtKFfB7OLOCD8SFWEPPbha00+GNqFH2KlNwxYy1TW8GjHq/B2Er5ME4 rMrZ/bpACVZJ0GEHikyBGf8NdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNeRY9TC +yo+BnUgs7tORRaQhSQSMB8GA1UdIwQYMBaAFDBkkNt0XJXshmFJn/yCZGZ7pn+K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTdBNC9CODkwREZEMkND MEYxMUVGQTI3OEZENENDNEY5QUUwMi9NR1NRMjNSY2xleUdZVW1mX0lKa1pudW1m NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01HU1EyM1JjbGV5R1lVbWZfSUprWm51bWY0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTdBNC9CODkwREZEMkNDMEYxMUVGQTI3OEZENENDNEY5QUUwMi9NR1NRMjNSY2xl eUdZVW1mX0lKa1pudW1mNG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPOXfAUy47c87wIQWc5UE0C0w48c29+x8Un+JmOc+INsUuBK/dElnrRnVXwyl I450Aa4dFylxnUk9T9mJpeUSIHzskdmttrywNhB+pnm9j7dtOFN4jXDymxGzjQsS QWo52Dn+UZKJxwriAqZLWQBnLsEQlT/XyO+LSL8HC4QQayTyxmifaIKxiF2j+las 3rSquDaUgMx0k+UAtgLzod/GR3yNdkIrt8AYtR3k6oYgZFzHBMHA96Vaf0yk8cU/ vepeAkF5perUd7b3pwTAJIp/Ft3lg6zzLPZ1bFC1HvXddftadinFR5VCqJKJbZwQ 2NZKeKutzNXbjDqtnNHujazlBQ== -----END CERTIFICATE-----Generated at Fri Jul 24 00:01:45 2026 by rpki-client