
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft
File: MGSQ23RcleyGYUmf_IJkZnumf4o.mft (raw, json)
Hash identifier: KhLx/Qs5mg+wJXW71P9GUp78ZCUsOWYlTe+tosSA0c0=
Subject key identifier: B9:7D:F1:17:CC:E0:AD:7F:31:2D:D1:29:8A:04:E9:FD:55:BE:A0:3F
Authority key identifier: 30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A
Certificate issuer: /CN=A91CE7A4/serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A
Certificate serial: 0115
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft
Manifest number: 0111
Signing time: Sat 13 Jun 2026 06:05:32 +0000
Manifest this update: Sat 13 Jun 2026 06:05:32 +0000
Manifest next update: Sat 20 Jun 2026 06:05:32 +0000
Files and hashes: 1: MGSQ23RcleyGYUmf_IJkZnumf4o.crl (hash: v35Vf8HcgQqVqNnaipDG3lnnUmPu1bYd20JVM9HTSVM=)
2: 19C407C0CC1011EFBC7E0050C4F9AE02.roa (hash: utxItg9AZP9jPtUfaHZNYYZ2s+pDsbIze+rI9Pl7uws=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl
rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277 (0x115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE7A4, serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A
Validity
Not Before: Jun 13 06:05:32 2026 GMT
Not After : Jun 20 06:05:32 2026 GMT
Subject: CN=6a2cf32c-227c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:82:37:eb:dc:0a:dd:18:22:d6:8a:f8:88:
9d:23:5e:e7:67:25:57:ba:b6:34:da:3c:7b:f3:d9:
bd:b8:be:ed:e1:7f:4c:c5:0d:79:bc:6b:5e:b9:7e:
ff:c2:de:09:d3:a9:65:68:61:c9:55:c4:a3:6e:66:
b9:f3:64:8c:88:26:2c:1b:5a:54:03:c1:ad:76:8a:
06:38:0e:97:d9:b1:05:89:46:57:a8:08:10:29:ae:
0b:b3:16:fd:4d:a7:3b:8f:e5:b2:76:ab:ca:73:57:
f2:8b:aa:9d:e3:36:bc:8c:03:80:6b:b0:de:0b:a7:
78:e9:b5:de:a2:51:91:13:a8:a7:cf:71:c2:e8:44:
14:bc:ef:9a:22:08:a4:f1:0a:d4:de:bf:bb:f0:1e:
dd:2d:26:1e:97:ee:6a:87:0d:93:1c:7f:f3:75:8f:
c9:08:d8:21:2b:05:27:61:78:61:72:b5:a1:64:25:
56:3a:0d:f8:ca:e8:23:21:3c:70:1f:f8:aa:92:82:
9d:95:7b:c2:5c:d0:4b:a3:ef:b1:70:0d:4e:bc:a9:
fe:6d:6d:08:2a:02:ff:b2:d8:c5:0c:d2:9e:23:fa:
6b:fd:ad:88:12:1f:29:3b:82:7d:92:1f:cd:22:b2:
27:c3:7c:49:1f:f9:5f:02:40:0b:3d:8b:e4:54:7c:
83:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7D:F1:17:CC:E0:AD:7F:31:2D:D1:29:8A:04:E9:FD:55:BE:A0:3F
X509v3 Authority Key Identifier:
keyid:30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:36:0b:0d:ae:5e:06:15:89:ae:55:c3:28:ac:24:0e:d2:b5:
55:2e:da:f0:a3:03:f7:a2:ee:da:e7:59:ec:f7:9c:7d:02:e3:
4d:e3:c4:fc:be:a0:85:06:d2:7f:f5:ab:0c:18:eb:07:35:49:
24:f4:ff:39:3d:ad:be:a6:e7:1f:8a:a5:7f:cd:78:5e:f0:8d:
84:a0:d0:f0:d8:27:01:e7:a8:68:55:d8:72:12:3a:85:b5:4a:
d7:aa:cd:2a:9d:a1:30:6c:be:94:98:8d:42:03:03:c1:1f:da:
8b:7a:9f:a1:89:f8:dd:ee:88:58:32:6f:d0:c8:0d:b8:08:c5:
7d:cd:d9:2b:b9:45:35:13:e1:c6:d0:47:05:4e:4d:4b:60:f7:
69:16:a4:eb:22:e2:cb:9a:6e:fa:34:63:26:16:69:8b:a2:a0:
2d:5d:72:7f:ec:de:67:12:4d:e0:1a:32:c3:54:c8:40:ff:bf:
56:1b:e6:e4:96:86:7e:c3:4c:30:b8:c5:0f:94:9d:91:bf:a2:
27:31:8d:59:d9:3a:8e:3b:a7:7a:21:03:3d:bc:be:34:c9:a9:
2a:5d:45:a6:ae:69:15:61:f2:c1:44:8b:e1:7f:79:40:ce:3a:
76:be:ba:4e:3c:5e:07:52:51:75:d0:e5:b6:07:e2:a8:06:60:
bf:fe:55:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U3QTQxMTAvBgNVBAUTKDMwNjQ5MERCNzQ1Qzk1RUM4NjYxNDk5RkZDODI2NDY2
N0JBNjdGOEEwHhcNMjYwNjEzMDYwNTMyWhcNMjYwNjIwMDYwNTMyWjAYMRYwFAYD
VQQDEw02YTJjZjMyYy0yMjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuSyCN+vcCt0YItaK+IidI17nZyVXurY02jx789m9uL7t4X9MxQ15vGteuX7/
wt4J06llaGHJVcSjbma582SMiCYsG1pUA8GtdooGOA6X2bEFiUZXqAgQKa4Lsxb9
Tac7j+WydqvKc1fyi6qd4za8jAOAa7DeC6d46bXeolGRE6inz3HC6EQUvO+aIgik
8QrU3r+78B7dLSYel+5qhw2THH/zdY/JCNghKwUnYXhhcrWhZCVWOg34yugjITxw
H/iqkoKdlXvCXNBLo++xcA1OvKn+bW0IKgL/stjFDNKeI/pr/a2IEh8pO4J9kh/N
IrInw3xJH/lfAkALPYvkVHyDAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLl98RfM
4K1/MS3RKYoE6f1VvqA/MB8GA1UdIwQYMBaAFDBkkNt0XJXshmFJn/yCZGZ7pn+K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTdBNC9CODkwREZEMkND
MEYxMUVGQTI3OEZENENDNEY5QUUwMi9NR1NRMjNSY2xleUdZVW1mX0lKa1pudW1m
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL01HU1EyM1JjbGV5R1lVbWZfSUprWm51bWY0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTdBNC9CODkwREZEMkNDMEYxMUVGQTI3OEZENENDNEY5QUUwMi9NR1NRMjNSY2xl
eUdZVW1mX0lKa1pudW1mNG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApzYLDa5eBhWJrlXDKKwkDtK1VS7a8KMD96Lu2udZ7PecfQLjTePE/L6ghQbS
f/WrDBjrBzVJJPT/OT2tvqbnH4qlf814XvCNhKDQ8NgnAeeoaFXYchI6hbVK16rN
Kp2hMGy+lJiNQgMDwR/ai3qfoYn43e6IWDJv0MgNuAjFfc3ZK7lFNRPhxtBHBU5N
S2D3aRak6yLiy5pu+jRjJhZpi6KgLV1yf+zeZxJN4Boyw1TIQP+/Vhvm5JaGfsNM
MLjFD5Sdkb+iJzGNWdk6jjuneiEDPby+NMmpKl1Fpq5pFWHywUSL4X95QM46dr66
TjxeB1JRddDltgfiqAZgv/5V/g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:11:28 2026 by rpki-client