$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft File: MGSQ23RcleyGYUmf_IJkZnumf4o.mft (raw, json) Hash identifier: ejm9uSpAPFUw/UliI8xfWeUXFwSA7RXiNwXTh0vR2oI= Subject key identifier: 02:65:25:D4:FC:52:AA:F6:F4:D0:20:A6:AA:76:BF:63:D1:5A:1F:84 Authority key identifier: 30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A Certificate issuer: /CN=A91CE7A4/serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft Manifest number: 010C Signing time: Mon 01 Jun 2026 06:49:18 +0000 Manifest this update: Mon 01 Jun 2026 06:49:17 +0000 Manifest next update: Mon 08 Jun 2026 06:49:17 +0000 Files and hashes: 1: MGSQ23RcleyGYUmf_IJkZnumf4o.crl (hash: kT3pSrOK5WX0jbgV32nwfRLwNTZ2mTA+sNuuW3EVdSY=) 2: 19C407C0CC1011EFBC7E0050C4F9AE02.roa (hash: utxItg9AZP9jPtUfaHZNYYZ2s+pDsbIze+rI9Pl7uws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 06:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7A4, serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A Validity Not Before: Jun 1 06:49:17 2026 GMT Not After : Jun 8 06:49:17 2026 GMT Subject: CN=6a1d2b6e-0694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5b:66:c0:c3:b5:7e:4d:91:89:b0:77:e0:dc: 5c:cf:f5:6d:60:3f:71:e6:bf:3c:53:70:fc:f5:b2: 7c:da:99:d3:23:6f:7f:7f:85:4e:15:8b:16:c5:86: a2:fc:fe:ca:58:04:18:86:43:5d:d8:72:7f:94:12: 95:39:7f:e7:fa:54:9a:0f:bc:05:e7:97:4d:8f:15: 16:61:c2:97:25:bb:b5:79:1d:04:fe:72:a2:7f:db: 85:d8:81:2a:f0:44:a4:54:1c:85:8c:96:4d:a5:76: b4:2d:fb:62:70:c8:ab:bb:cf:ee:57:06:c5:37:0b: 08:7d:7b:bb:b7:c7:7b:9a:4f:f5:d0:ac:0c:34:4b: 73:52:8c:74:57:0a:f1:f0:ab:55:16:e1:f5:9a:1a: 34:34:7b:60:06:d1:5b:ef:aa:39:af:8c:73:05:2e: 99:c1:54:61:48:94:17:63:b9:0d:88:ed:9b:f9:e8: 40:d7:f4:4d:af:71:d3:f9:1e:a1:c8:19:6f:e0:8b: 79:c3:b6:d4:4f:6b:9f:d3:d0:07:07:02:66:b0:5e: e1:d1:fd:8f:dc:3f:12:47:a8:cb:51:be:40:1f:45: e1:99:4b:19:19:e2:f8:06:0c:6b:fa:db:1f:c0:25: 73:0c:65:a3:c5:b2:39:6a:25:49:5d:4b:86:82:65: d0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:65:25:D4:FC:52:AA:F6:F4:D0:20:A6:AA:76:BF:63:D1:5A:1F:84 X509v3 Authority Key Identifier: keyid:30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b5:20:2a:21:33:ad:fd:e9:7c:c4:2d:2d:cc:c9:37:bd:29: 09:cb:a9:36:6d:31:f3:6b:bf:3d:8a:75:96:16:68:49:b3:c1: 65:b2:81:76:a0:07:a4:87:1c:6d:3d:23:eb:01:f5:28:69:25: ce:54:b5:75:27:a4:10:df:b5:4b:9d:35:3a:ac:b1:4e:33:99: 3c:79:2b:bd:cd:cb:b1:b2:8c:57:c7:a0:ef:80:9b:8d:bd:72: 8d:22:f6:27:7b:91:0e:92:7e:ce:27:16:fa:29:d6:ca:72:84: 9f:52:94:81:cb:5e:02:d3:6c:8e:ab:cc:4c:c2:ec:83:4a:59: 65:b8:4f:b8:45:df:08:55:ce:48:66:a3:ff:67:2a:5e:55:38: 4e:76:07:7a:d4:35:9b:e4:4d:fe:6a:8d:81:1b:f3:99:a5:9e: 21:a9:1b:0c:51:e8:34:21:c1:27:3c:d5:e5:b9:8c:60:82:03: cf:11:7c:a3:9f:a2:56:db:e2:40:45:ce:36:33:5f:61:fd:91: 5d:6c:1a:a1:a5:68:25:bd:4d:44:4d:e2:cf:8b:b5:ea:ca:b9: f6:95:0f:60:64:6a:45:bd:cd:ae:d7:18:41:ef:b4:bc:9d:f1: fa:69:63:3a:0a:3e:90:00:41:bf:a8:e6:a9:d7:4d:4d:cf:a4: b4:a9:b3:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U3QTQxMTAvBgNVBAUTKDMwNjQ5MERCNzQ1Qzk1RUM4NjYxNDk5RkZDODI2NDY2 N0JBNjdGOEEwHhcNMjYwNjAxMDY0OTE3WhcNMjYwNjA4MDY0OTE3WjAYMRYwFAYD VQQDEw02YTFkMmI2ZS0wNjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnltmwMO1fk2RibB34Nxcz/VtYD9x5r88U3D89bJ82pnTI29/f4VOFYsWxYai /P7KWAQYhkNd2HJ/lBKVOX/n+lSaD7wF55dNjxUWYcKXJbu1eR0E/nKif9uF2IEq 8ESkVByFjJZNpXa0LfticMiru8/uVwbFNwsIfXu7t8d7mk/10KwMNEtzUox0Vwrx 8KtVFuH1mho0NHtgBtFb76o5r4xzBS6ZwVRhSJQXY7kNiO2b+ehA1/RNr3HT+R6h yBlv4It5w7bUT2uf09AHBwJmsF7h0f2P3D8SR6jLUb5AH0XhmUsZGeL4Bgxr+tsf wCVzDGWjxbI5aiVJXUuGgmXQ4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAJlJdT8 Uqr29NAgpqp2v2PRWh+EMB8GA1UdIwQYMBaAFDBkkNt0XJXshmFJn/yCZGZ7pn+K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTdBNC9CODkwREZEMkND MEYxMUVGQTI3OEZENENDNEY5QUUwMi9NR1NRMjNSY2xleUdZVW1mX0lKa1pudW1m NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01HU1EyM1JjbGV5R1lVbWZfSUprWm51bWY0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTdBNC9CODkwREZEMkNDMEYxMUVGQTI3OEZENENDNEY5QUUwMi9NR1NRMjNSY2xl eUdZVW1mX0lKa1pudW1mNG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGrUgKiEzrf3pfMQtLczJN70pCcupNm0x82u/PYp1lhZoSbPBZbKBdqAHpIcc bT0j6wH1KGklzlS1dSekEN+1S501OqyxTjOZPHkrvc3LsbKMV8eg74Cbjb1yjSL2 J3uRDpJ+zicW+inWynKEn1KUgcteAtNsjqvMTMLsg0pZZbhPuEXfCFXOSGaj/2cq XlU4TnYHetQ1m+RN/mqNgRvzmaWeIakbDFHoNCHBJzzV5bmMYIIDzxF8o5+iVtvi QEXONjNfYf2RXWwaoaVoJb1NRE3iz4u16sq59pUPYGRqRb3NrtcYQe+0vJ3x+mlj Ogo+kABBv6jmqddNTc+ktKmzfg== -----END CERTIFICATE-----Generated at Tue Jun 2 21:23:14 2026 by rpki-client