$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft File: MGSQ23RcleyGYUmf_IJkZnumf4o.mft (raw, json) Hash identifier: vintRhjPi2AO31afPEs9TPUtTkTg9mUQWfvxjJ8x9mc= Subject key identifier: D5:53:6A:C5:58:EB:CC:B5:0A:73:EE:60:59:C3:62:22:72:2A:EC:B4 Authority key identifier: 30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A Certificate issuer: /CN=A91CE7A4/serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft Manifest number: 65 Signing time: Sat 19 Jul 2025 07:15:01 +0000 Manifest this update: Sat 19 Jul 2025 07:15:01 +0000 Manifest next update: Sat 26 Jul 2025 07:15:01 +0000 Files and hashes: 1: MGSQ23RcleyGYUmf_IJkZnumf4o.crl (hash: Jd02l2HKm5yqJsLHcLLTz6nrTpOo0nmFg+oaopvXvEk=) 2: 19C407C0CC1011EFBC7E0050C4F9AE02.roa (hash: 0uD06YfXP8jJiypkQtgg/+0Dg/DOv6s8Gpjo5ybB4rE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7A4, serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A Validity Not Before: Jul 19 07:15:01 2025 GMT Not After : Jul 26 07:15:01 2025 GMT Subject: CN=687b45f5-6978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:79:51:16:4a:1f:e7:03:b9:53:84:aa:12: 84:cb:38:27:a4:69:86:65:5c:0a:27:cc:ba:19:2b: 1b:33:6d:1f:da:87:05:dd:af:90:13:a6:10:21:87: bc:cc:6c:6f:6b:5b:a7:5b:83:95:c1:1e:df:4b:b0: 3a:06:91:7d:57:5f:a3:67:d1:08:f9:c5:0c:a1:9d: 18:86:21:c9:28:2f:95:38:8c:d8:e3:26:f6:db:2f: a1:26:e1:e5:ef:8a:ba:6b:9f:67:d0:f9:71:19:7c: ab:e3:1d:93:fa:35:e9:a6:a7:b8:7f:72:d2:4a:5e: 88:05:b0:72:19:a5:69:5a:a7:bc:72:8d:83:d3:72: 2f:03:45:57:c1:ed:99:7c:34:81:f9:f1:b0:61:f0: d2:7f:81:e6:97:74:46:69:0b:0e:78:a1:cb:fb:15: 99:7a:c1:ce:bc:d6:e9:9c:06:6d:65:33:20:80:6f: 4c:d4:78:08:03:6d:5b:ff:6e:6e:26:0e:3a:44:85: 52:4f:7d:c4:32:b1:2b:f8:d8:29:4d:24:10:2c:43: c8:dd:b2:40:28:d2:a2:78:dc:1d:51:a1:7e:b7:c2: 9f:48:96:e5:7b:71:c8:33:c8:fe:8c:e9:70:e3:62: fa:c2:89:67:08:6a:4d:95:a2:db:8d:4e:5f:c6:70: 11:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:53:6A:C5:58:EB:CC:B5:0A:73:EE:60:59:C3:62:22:72:2A:EC:B4 X509v3 Authority Key Identifier: keyid:30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:b2:da:c8:ce:31:88:f0:bd:28:69:77:ab:db:d0:b3:67:08: d4:e5:9e:19:f5:07:77:e5:01:00:03:31:71:e1:b1:1d:39:3d: 62:f5:1b:8f:82:52:42:3b:42:0e:9a:c6:36:cc:8a:06:b3:35: 0b:f1:a9:83:1f:ca:de:eb:47:58:47:be:76:ec:fd:75:d4:0c: fe:47:b0:53:da:90:c1:02:82:61:ce:7a:ca:86:08:fc:13:6a: 24:ba:dc:86:37:62:ee:d5:ae:b2:b0:34:06:0d:b5:39:07:0a: 67:fa:63:4a:eb:35:d8:e3:2b:f0:ce:04:a1:f9:d9:5f:7c:65: 15:52:bf:6b:a2:b3:c7:4c:7d:1a:38:bc:d0:f0:e3:31:35:67: 1f:dc:bf:60:f3:c1:c5:23:83:a3:c2:45:43:0c:ed:5a:0f:3b: 71:13:36:40:ee:4e:0e:5d:62:3b:47:41:8e:2d:69:53:3f:8d: ed:56:3e:a0:ad:a6:97:42:9c:81:6e:41:d2:ab:0e:11:1b:8b: e1:98:51:be:4e:82:f6:30:fb:ce:24:44:f1:4b:5b:82:71:1f: 98:a0:71:8e:89:83:20:30:6f:bb:2e:08:8f:8a:02:b3:15:49: 13:e1:36:b7:a0:f1:cd:cb:23:b8:fb:05:2e:db:50:df:94:36: a8:b6:7b:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTdBNDExMC8GA1UEBRMoMzA2NDkwREI3NDVDOTVFQzg2NjE0OTlGRkM4MjY0NjY3 QkE2N0Y4QTAeFw0yNTA3MTkwNzE1MDFaFw0yNTA3MjYwNzE1MDFaMBgxFjAUBgNV BAMTDTY4N2I0NWY1LTY5NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFUHlRFkof5wO5U4SqEoTLOCekaYZlXAonzLoZKxszbR/ahwXdr5ATphAhh7zM bG9rW6dbg5XBHt9LsDoGkX1XX6Nn0Qj5xQyhnRiGIckoL5U4jNjjJvbbL6Em4eXv irprn2fQ+XEZfKvjHZP6Nemmp7h/ctJKXogFsHIZpWlap7xyjYPTci8DRVfB7Zl8 NIH58bBh8NJ/geaXdEZpCw54ocv7FZl6wc681umcBm1lMyCAb0zUeAgDbVv/bm4m DjpEhVJPfcQysSv42ClNJBAsQ8jdskAo0qJ43B1RoX63wp9IluV7ccgzyP6M6XDj YvrCiWcIak2VotuNTl/GcBEZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1VNqxVjr zLUKc+5gWcNiInIq7LQwHwYDVR0jBBgwFoAUMGSQ23RcleyGYUmf/IJkZnumf4ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFN0E0L0I4OTBERkQyQ0Mw RjExRUZBMjc4RkQ0Q0M0RjlBRTAyL01HU1EyM1JjbGV5R1lVbWZfSUprWm51bWY0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTUdTUTIzUmNsZXlHWVVtZl9JSmtabnVtZjRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF N0E0L0I4OTBERkQyQ0MwRjExRUZBMjc4RkQ0Q0M0RjlBRTAyL01HU1EyM1JjbGV5 R1lVbWZfSUprWm51bWY0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFGy2sjOMYjwvShpd6vb0LNnCNTlnhn1B3flAQADMXHhsR05PWL1G4+C UkI7Qg6axjbMigazNQvxqYMfyt7rR1hHvnbs/XXUDP5HsFPakMECgmHOesqGCPwT aiS63IY3Yu7VrrKwNAYNtTkHCmf6Y0rrNdjjK/DOBKH52V98ZRVSv2uis8dMfRo4 vNDw4zE1Zx/cv2DzwcUjg6PCRUMM7VoPO3ETNkDuTg5dYjtHQY4taVM/je1WPqCt ppdCnIFuQdKrDhEbi+GYUb5OgvYw+84kRPFLW4JxH5igcY6JgyAwb7suCI+KArMV SRPhNreg8c3LI7j7BS7bUN+UNqi2ey4= -----END CERTIFICATE-----Generated at Mon Jul 21 02:06:53 2025 by rpki-client