$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft File: MGSQ23RcleyGYUmf_IJkZnumf4o.mft (raw, json) Hash identifier: vxOv88t/HPHoxSegSw8AAsH3mKTXPs/wLV852JyiUjY= Subject key identifier: 12:3B:B6:FA:8C:CA:8A:E2:57:A9:06:4E:11:FB:01:01:D4:51:11:53 Authority key identifier: 30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A Certificate issuer: /CN=A91CE7A4/serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft Manifest number: 0145 Signing time: Wed 23 Sep 2026 05:12:49 +0000 Manifest this update: Wed 23 Sep 2026 05:12:48 +0000 Manifest next update: Wed 30 Sep 2026 05:12:48 +0000 Files and hashes: 1: MGSQ23RcleyGYUmf_IJkZnumf4o.crl (hash: lUWeZ/KGPcHvMVcxnJN58P+HGHveDikKCr3YGNGMar8=) 2: 19C407C0CC1011EFBC7E0050C4F9AE02.roa (hash: utxItg9AZP9jPtUfaHZNYYZ2s+pDsbIze+rI9Pl7uws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7A4, serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A Validity Not Before: Sep 23 05:12:48 2026 GMT Not After : Sep 30 05:12:48 2026 GMT Subject: CN=6ab35fd1-0102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6a:14:50:16:8b:e9:7f:ce:9c:70:4c:a0:37: 3e:24:42:6f:32:f9:98:74:60:5a:7b:9b:8b:1a:7f: cf:d3:0c:1a:55:e7:b7:35:b0:e1:ac:a7:25:78:67: 9e:b8:66:7d:a1:6e:c8:af:a2:2f:18:d0:ce:ce:e4: 55:e7:af:11:ee:f7:de:72:2d:24:08:10:57:77:6d: 17:b1:a3:13:96:41:d8:aa:0c:44:e8:c3:d5:aa:32: 2f:45:9d:09:b3:0b:7f:f4:16:5b:05:91:b9:00:8f: 3a:24:23:f0:d9:65:c0:ed:0c:51:e6:13:0c:3d:39: 6f:92:e7:50:56:70:8b:ca:86:cc:28:e2:39:6d:20: 52:ee:2b:e3:04:0b:08:b7:2b:58:07:f7:18:2e:f8: 72:94:fb:eb:12:04:28:f5:86:3f:2c:4d:5f:94:81: 15:83:2f:73:d1:8e:c2:51:d9:6a:bb:53:b2:8c:e3: 14:c3:00:cd:d0:c4:39:54:2a:b0:87:9a:35:6d:5c: a2:e5:ff:39:4e:4f:f1:eb:40:98:aa:69:cb:ec:59: 36:88:7a:91:65:e8:20:d1:f1:5f:04:98:dd:c7:2f: 56:39:62:ab:a8:b3:30:2c:e1:a3:22:57:b2:26:f7: ed:14:f1:27:77:4e:72:33:28:90:81:e6:f8:77:31: d8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3B:B6:FA:8C:CA:8A:E2:57:A9:06:4E:11:FB:01:01:D4:51:11:53 X509v3 Authority Key Identifier: keyid:30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:6b:61:71:42:6e:5b:94:e6:5a:3f:9b:3f:93:e5:ec:e5:f9: aa:a3:bb:53:bc:af:fa:3a:9a:bb:aa:4c:db:d7:dd:32:fd:03: 46:56:82:70:8a:bd:e6:b2:46:06:83:93:0e:07:7a:cb:bd:36: 9f:35:32:fd:d4:7b:bd:43:10:31:6d:b8:ab:9d:64:2e:b4:60: 47:b4:86:cf:cb:89:70:d7:23:df:b7:da:2d:f1:7d:11:e7:58: 1d:3c:bf:9f:42:77:b0:90:e2:8d:40:78:2d:b0:5a:87:4b:d2: 03:aa:03:54:09:62:e7:7d:f8:50:45:a7:44:55:bb:15:08:1f: 21:07:d9:b7:8b:01:31:d0:0b:e2:bf:f8:eb:10:67:64:5c:fb: 5f:ff:36:97:42:71:b6:bd:75:97:e3:f6:da:b7:39:12:e3:d5: 2b:b1:03:e8:e7:07:84:3c:af:1b:b3:93:e1:e7:9e:1a:32:08: b6:b9:1f:07:8e:38:03:19:45:ae:a9:bb:77:04:1c:65:44:c3: 09:74:52:cc:af:dc:88:60:41:91:d4:64:9a:6b:d6:f9:31:53: f3:60:fb:3b:25:5a:80:85:8f:7b:22:20:d6:a1:62:61:c3:e2: 13:2b:e8:24:5c:0a:68:5b:45:a2:62:5d:36:97:3c:9f:02:76: e4:aa:79:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U3QTQxMTAvBgNVBAUTKDMwNjQ5MERCNzQ1Qzk1RUM4NjYxNDk5RkZDODI2NDY2 N0JBNjdGOEEwHhcNMjYwOTIzMDUxMjQ4WhcNMjYwOTMwMDUxMjQ4WjAYMRYwFAYD VQQDEw02YWIzNWZkMS0wMTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjWoUUBaL6X/OnHBMoDc+JEJvMvmYdGBae5uLGn/P0wwaVee3NbDhrKcleGee uGZ9oW7Ir6IvGNDOzuRV568R7vfeci0kCBBXd20XsaMTlkHYqgxE6MPVqjIvRZ0J swt/9BZbBZG5AI86JCPw2WXA7QxR5hMMPTlvkudQVnCLyobMKOI5bSBS7ivjBAsI tytYB/cYLvhylPvrEgQo9YY/LE1flIEVgy9z0Y7CUdlqu1OyjOMUwwDN0MQ5VCqw h5o1bVyi5f85Tk/x60CYqmnL7Fk2iHqRZegg0fFfBJjdxy9WOWKrqLMwLOGjIley JvftFPEnd05yMyiQgeb4dzHYPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBI7tvqM yoriV6kGThH7AQHUURFTMB8GA1UdIwQYMBaAFDBkkNt0XJXshmFJn/yCZGZ7pn+K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTdBNC9CODkwREZEMkND MEYxMUVGQTI3OEZENENDNEY5QUUwMi9NR1NRMjNSY2xleUdZVW1mX0lKa1pudW1m NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01HU1EyM1JjbGV5R1lVbWZfSUprWm51bWY0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTdBNC9CODkwREZEMkNDMEYxMUVGQTI3OEZENENDNEY5QUUwMi9NR1NRMjNSY2xl eUdZVW1mX0lKa1pudW1mNG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARGthcUJuW5TmWj+bP5Pl7OX5qqO7U7yv+jqau6pM29fdMv0DRlaCcIq95rJG BoOTDgd6y702nzUy/dR7vUMQMW24q51kLrRgR7SGz8uJcNcj37faLfF9EedYHTy/ n0J3sJDijUB4LbBah0vSA6oDVAli5334UEWnRFW7FQgfIQfZt4sBMdAL4r/46xBn ZFz7X/82l0Jxtr11l+P22rc5EuPVK7ED6OcHhDyvG7OT4eeeGjIItrkfB444AxlF rqm7dwQcZUTDCXRSzK/ciGBBkdRkmmvW+TFT82D7OyVagIWPeyIg1qFiYcPiEyvo JFwKaFtFomJdNpc8nwJ25Kp5IA== -----END CERTIFICATE-----Generated at Wed Sep 23 20:14:41 2026 by rpki-client