$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft File: MGSQ23RcleyGYUmf_IJkZnumf4o.mft (raw, json) Hash identifier: nEgOpzxPZQEFAVzEDSvR7ClIJQX2c2Df0s0EIJUL+SE= Subject key identifier: 40:56:46:EE:E8:D2:F9:C3:0D:0C:E2:E2:68:F1:09:DD:28:6A:D7:62 Authority key identifier: 30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A Certificate issuer: /CN=A91CE7A4/serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft Manifest number: 0127 Signing time: Mon 27 Jul 2026 07:43:18 +0000 Manifest this update: Mon 27 Jul 2026 07:43:17 +0000 Manifest next update: Mon 03 Aug 2026 07:43:17 +0000 Files and hashes: 1: MGSQ23RcleyGYUmf_IJkZnumf4o.crl (hash: hqAmPWR5jtpBVOuzGTgBZq5CwwLBlw6oMnSEp/aOkD0=) 2: 19C407C0CC1011EFBC7E0050C4F9AE02.roa (hash: utxItg9AZP9jPtUfaHZNYYZ2s+pDsbIze+rI9Pl7uws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7A4, serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A Validity Not Before: Jul 27 07:43:17 2026 GMT Not After : Aug 3 07:43:17 2026 GMT Subject: CN=6a670c15-f528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:76:f8:4b:96:68:a8:0f:c4:9b:ed:64:ae:29: f5:fb:6a:94:42:ad:78:80:41:32:13:2c:c5:71:44: b8:e1:32:9a:ce:15:93:b0:a0:a7:1d:f6:14:ae:82: 0f:3a:66:57:7a:3f:aa:44:17:18:91:b2:67:c0:6d: a6:c6:2e:d7:64:da:fc:a1:09:ba:fa:ce:64:68:5a: 6e:be:fe:dc:7d:49:11:3d:f3:70:56:92:02:1c:a2: 5f:03:43:56:a9:c7:6a:29:5f:70:63:ed:a7:a2:fd: a5:36:40:8f:da:40:9d:c4:cc:c6:09:34:d4:e3:ed: 62:94:bc:73:fd:77:30:5d:e4:00:62:3c:06:69:f4: 1e:d9:b4:b6:97:48:44:c2:f6:bb:c2:13:17:01:80: 64:1a:cb:0d:6c:3a:a4:79:9c:c0:3a:5b:d5:a7:94: 0d:61:b4:5c:1d:bb:c1:dc:73:e0:78:13:db:59:15: 4a:45:88:4d:65:bb:2e:a2:78:d0:8f:26:cf:32:ff: ca:57:ce:42:21:74:1a:8c:1b:7a:65:40:40:e0:95: cd:10:4c:6a:f1:2e:58:36:d2:86:f9:5b:9f:ba:5e: df:38:7e:cd:61:be:a1:93:ca:6e:5e:19:3f:e1:43: 07:55:ae:3a:da:f5:13:39:03:48:3a:7b:f0:2b:1c: da:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:56:46:EE:E8:D2:F9:C3:0D:0C:E2:E2:68:F1:09:DD:28:6A:D7:62 X509v3 Authority Key Identifier: keyid:30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:8a:50:1b:81:a2:0f:af:2c:1a:5d:3e:8e:f8:32:0c:27:10: 88:82:05:dd:c3:3e:03:66:cb:e3:4f:cb:40:9f:d8:d8:5d:dc: 3c:81:c2:cb:39:08:9d:4f:07:55:b1:97:2e:4f:cf:60:05:08: ea:b7:eb:4a:11:e0:97:b8:0a:f5:14:93:ce:6c:8c:db:b1:2b: 91:e9:30:76:2b:9a:8d:c9:1a:d2:57:56:f9:33:9d:8a:63:e1: 25:02:e7:6d:0d:d8:29:eb:6f:27:e8:fe:3b:a4:35:f0:3d:3a: de:a5:28:86:b0:e5:b3:5b:b5:c3:e4:48:c2:3f:74:00:b8:f2: 06:36:ff:7b:16:41:1e:e9:5b:90:16:e7:19:c1:ff:c8:ec:7a: 72:20:bb:9f:af:59:8f:72:83:08:9d:72:74:04:61:a0:a8:93: b8:58:eb:49:0f:3e:45:d3:60:f8:76:2f:44:35:93:c3:dc:ad: 20:ed:af:84:c7:63:96:55:e8:59:98:31:ce:50:3e:4b:46:57: 0f:9e:bd:63:01:97:6b:8b:a6:58:67:94:3e:79:68:bb:e0:fc: ee:6b:85:70:28:88:5f:10:36:a6:66:c9:4a:36:31:a0:fe:a8: e6:34:3c:37:7e:91:d1:3a:aa:8e:46:c8:87:ef:b2:e8:77:19: 42:63:d4:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U3QTQxMTAvBgNVBAUTKDMwNjQ5MERCNzQ1Qzk1RUM4NjYxNDk5RkZDODI2NDY2 N0JBNjdGOEEwHhcNMjYwNzI3MDc0MzE3WhcNMjYwODAzMDc0MzE3WjAYMRYwFAYD VQQDEw02YTY3MGMxNS1mNTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXb4S5ZoqA/Em+1krin1+2qUQq14gEEyEyzFcUS44TKazhWTsKCnHfYUroIP OmZXej+qRBcYkbJnwG2mxi7XZNr8oQm6+s5kaFpuvv7cfUkRPfNwVpICHKJfA0NW qcdqKV9wY+2nov2lNkCP2kCdxMzGCTTU4+1ilLxz/XcwXeQAYjwGafQe2bS2l0hE wva7whMXAYBkGssNbDqkeZzAOlvVp5QNYbRcHbvB3HPgeBPbWRVKRYhNZbsuonjQ jybPMv/KV85CIXQajBt6ZUBA4JXNEExq8S5YNtKG+Vuful7fOH7NYb6hk8puXhk/ 4UMHVa462vUTOQNIOnvwKxzacwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEBWRu7o 0vnDDQzi4mjxCd0oatdiMB8GA1UdIwQYMBaAFDBkkNt0XJXshmFJn/yCZGZ7pn+K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTdBNC9CODkwREZEMkND MEYxMUVGQTI3OEZENENDNEY5QUUwMi9NR1NRMjNSY2xleUdZVW1mX0lKa1pudW1m NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01HU1EyM1JjbGV5R1lVbWZfSUprWm51bWY0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTdBNC9CODkwREZEMkNDMEYxMUVGQTI3OEZENENDNEY5QUUwMi9NR1NRMjNSY2xl eUdZVW1mX0lKa1pudW1mNG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc4pQG4GiD68sGl0+jvgyDCcQiIIF3cM+A2bL40/LQJ/Y2F3cPIHCyzkInU8H VbGXLk/PYAUI6rfrShHgl7gK9RSTzmyM27Erkekwdiuajcka0ldW+TOdimPhJQLn bQ3YKetvJ+j+O6Q18D063qUohrDls1u1w+RIwj90ALjyBjb/exZBHulbkBbnGcH/ yOx6ciC7n69Zj3KDCJ1ydARhoKiTuFjrSQ8+RdNg+HYvRDWTw9ytIO2vhMdjllXo WZgxzlA+S0ZXD569YwGXa4umWGeUPnlou+D87muFcCiIXxA2pmbJSjYxoP6o5jQ8 N36R0TqqjkbIh++y6HcZQmPUQQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:25:23 2026 by rpki-client