$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft File: MGSQ23RcleyGYUmf_IJkZnumf4o.mft (raw, json) Hash identifier: DOAjFjFUs5REAr9V0bxRBoMeEiu25zsp0KR1FIRTcMk= Subject key identifier: 3D:CD:4A:09:68:A8:94:C4:D4:4D:6B:50:D4:40:E3:24:EF:D9:5C:6D Authority key identifier: 30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A Certificate issuer: /CN=A91CE7A4/serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft Manifest number: 0144 Signing time: Mon 21 Sep 2026 05:25:28 +0000 Manifest this update: Mon 21 Sep 2026 05:25:28 +0000 Manifest next update: Mon 28 Sep 2026 05:25:28 +0000 Files and hashes: 1: MGSQ23RcleyGYUmf_IJkZnumf4o.crl (hash: nJN5SqGocArW+3aEjVBF+y3XlS2BBE93iS4cCH8emrQ=) 2: 19C407C0CC1011EFBC7E0050C4F9AE02.roa (hash: utxItg9AZP9jPtUfaHZNYYZ2s+pDsbIze+rI9Pl7uws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7A4, serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A Validity Not Before: Sep 21 05:25:28 2026 GMT Not After : Sep 28 05:25:28 2026 GMT Subject: CN=6ab0bfc8-bf5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:82:15:e0:06:07:7e:0a:54:ff:43:00:fc:4a: 20:8d:57:c6:4c:6b:6f:77:2c:57:cd:68:3d:e0:e1: c1:a7:01:ab:7e:29:c5:ac:c0:4d:d3:e8:42:40:d1: 32:fd:cc:3a:3b:8c:37:a9:3a:4e:b5:9b:24:67:da: 26:96:76:e6:41:5f:36:0a:bb:56:b0:ce:61:84:f9: 47:08:bb:64:da:8a:65:6b:ef:01:16:17:56:3b:c5: ea:6f:3d:f6:50:91:7d:96:93:c2:fb:a9:2e:2a:d9: e4:c6:b0:7d:1b:4b:34:f0:78:fb:92:09:55:a4:2e: 56:eb:3b:06:e7:f1:1e:25:f7:0b:53:f8:be:f9:c6: 85:10:c2:1f:f1:60:8f:e5:9a:8d:97:28:64:aa:b2: ee:04:17:d0:92:de:35:2a:89:15:27:82:0f:d1:f2: 47:ea:60:de:c2:bb:a1:7b:62:04:a5:9f:9d:14:a0: 75:ec:d8:52:d2:e9:19:fd:ca:8f:1b:94:97:a3:21: f8:18:30:dc:62:e7:06:92:a5:0d:c6:38:15:16:f3: 29:ee:20:56:c8:1d:de:af:2a:91:e6:f8:c5:91:91: 52:66:d7:a8:95:1b:a1:35:5a:e1:46:4a:83:fe:90: f1:86:28:5b:11:6f:64:a3:fe:7b:d4:65:0f:2d:9d: a0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CD:4A:09:68:A8:94:C4:D4:4D:6B:50:D4:40:E3:24:EF:D9:5C:6D X509v3 Authority Key Identifier: keyid:30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:27:1e:f9:ef:9b:28:8b:f4:28:de:8b:08:e1:c9:72:29:b6: b2:b3:6b:75:19:85:e8:87:70:73:88:2b:16:80:9e:11:30:38: ff:07:4e:9e:3e:c5:62:11:c9:70:e2:81:54:2b:ee:ac:d7:5b: 61:0b:df:1d:0c:51:41:55:d3:54:63:35:66:dc:0e:cd:33:87: d0:80:ea:1c:12:fd:21:21:1e:e3:cc:ee:44:a0:15:af:de:4e: 08:7f:f8:62:91:4c:4c:c0:5d:3c:ed:42:a5:27:3f:aa:13:8d: 7a:a0:af:61:b9:b0:40:b8:2c:a2:b3:ab:14:56:20:7b:66:78: 25:d9:81:fe:3a:a5:29:88:e3:08:5f:77:07:8f:dd:7b:b5:14: 4c:1c:fa:79:bd:0c:74:86:5e:c0:0c:5e:12:c7:d0:ea:69:83: 54:cd:04:6b:40:98:bd:00:39:18:34:aa:ac:bf:61:bb:11:3f: b7:84:22:50:32:d6:59:9e:56:32:1e:bb:b3:17:e8:a7:f3:e8: c3:22:83:24:1e:31:fb:02:f2:a5:7f:04:55:9a:e1:5f:73:e7: ff:4b:6d:c7:98:de:39:5a:9d:2a:c2:11:e4:21:77:1f:a4:6f: 6f:95:23:15:ec:6f:f2:80:d3:5e:e8:d2:d6:cf:c6:8a:29:21: af:b8:75:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U3QTQxMTAvBgNVBAUTKDMwNjQ5MERCNzQ1Qzk1RUM4NjYxNDk5RkZDODI2NDY2 N0JBNjdGOEEwHhcNMjYwOTIxMDUyNTI4WhcNMjYwOTI4MDUyNTI4WjAYMRYwFAYD VQQDEw02YWIwYmZjOC1iZjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYIV4AYHfgpU/0MA/EogjVfGTGtvdyxXzWg94OHBpwGrfinFrMBN0+hCQNEy /cw6O4w3qTpOtZskZ9omlnbmQV82CrtWsM5hhPlHCLtk2opla+8BFhdWO8Xqbz32 UJF9lpPC+6kuKtnkxrB9G0s08Hj7kglVpC5W6zsG5/EeJfcLU/i++caFEMIf8WCP 5ZqNlyhkqrLuBBfQkt41KokVJ4IP0fJH6mDewruhe2IEpZ+dFKB17NhS0ukZ/cqP G5SXoyH4GDDcYucGkqUNxjgVFvMp7iBWyB3eryqR5vjFkZFSZteolRuhNVrhRkqD /pDxhihbEW9ko/571GUPLZ2grwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD3NSglo qJTE1E1rUNRA4yTv2VxtMB8GA1UdIwQYMBaAFDBkkNt0XJXshmFJn/yCZGZ7pn+K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTdBNC9CODkwREZEMkND MEYxMUVGQTI3OEZENENDNEY5QUUwMi9NR1NRMjNSY2xleUdZVW1mX0lKa1pudW1m NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01HU1EyM1JjbGV5R1lVbWZfSUprWm51bWY0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTdBNC9CODkwREZEMkNDMEYxMUVGQTI3OEZENENDNEY5QUUwMi9NR1NRMjNSY2xl eUdZVW1mX0lKa1pudW1mNG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoSce+e+bKIv0KN6LCOHJcim2srNrdRmF6Idwc4grFoCeETA4/wdOnj7FYhHJ cOKBVCvurNdbYQvfHQxRQVXTVGM1ZtwOzTOH0IDqHBL9ISEe48zuRKAVr95OCH/4 YpFMTMBdPO1CpSc/qhONeqCvYbmwQLgsorOrFFYge2Z4JdmB/jqlKYjjCF93B4/d e7UUTBz6eb0MdIZewAxeEsfQ6mmDVM0Ea0CYvQA5GDSqrL9huxE/t4QiUDLWWZ5W Mh67sxfop/PowyKDJB4x+wLypX8EVZrhX3Pn/0ttx5jeOVqdKsIR5CF3H6Rvb5Uj Fexv8oDTXujS1s/Giikhr7h1gw== -----END CERTIFICATE-----Generated at Tue Sep 22 06:36:23 2026 by rpki-client