
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft
File: MGSQ23RcleyGYUmf_IJkZnumf4o.mft (raw, json)
Hash identifier: 1mXYoMDDGzf58Diqee0jUeP9RyUdBy6y1+YXx86oO18=
Subject key identifier: 2E:22:5C:26:9D:99:95:AD:B7:89:09:88:F3:A4:1F:EC:8D:59:B7:D4
Authority key identifier: 30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A
Certificate issuer: /CN=A91CE7A4/serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft
Manifest number: 0122
Signing time: Fri 17 Jul 2026 06:56:32 +0000
Manifest this update: Fri 17 Jul 2026 06:56:32 +0000
Manifest next update: Fri 24 Jul 2026 06:56:32 +0000
Files and hashes: 1: MGSQ23RcleyGYUmf_IJkZnumf4o.crl (hash: 3ovt7Z3QX28iJsqXzd3z5XFxHUN2wlP5Ey2W9JwM7Gg=)
2: 19C407C0CC1011EFBC7E0050C4F9AE02.roa (hash: utxItg9AZP9jPtUfaHZNYYZ2s+pDsbIze+rI9Pl7uws=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl
rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:56:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE7A4, serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A
Validity
Not Before: Jul 17 06:56:32 2026 GMT
Not After : Jul 24 06:56:32 2026 GMT
Subject: CN=6a59d220-b990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a9:ef:d4:47:b6:0f:51:70:93:79:4b:4b:9c:
b7:3b:86:0f:65:5c:5b:c1:ff:cb:99:3e:7c:68:a0:
c0:f4:e9:5d:99:bd:5a:74:ec:04:88:27:02:1d:ef:
c3:d6:b7:85:f4:59:3d:27:ef:d2:41:8a:65:af:0c:
90:5f:ee:10:f9:5a:aa:02:ba:f1:ce:6d:af:78:5c:
80:9d:0c:3b:22:95:81:cc:a8:7b:62:a8:9d:1c:eb:
80:dd:ba:c1:17:75:b5:99:97:da:2b:0d:7a:c2:78:
20:dc:71:32:c3:49:7c:a4:a5:06:11:fa:58:a5:d6:
c0:d4:e0:c8:2e:88:33:2b:8f:b7:5f:9d:70:29:ce:
52:66:d3:c0:8c:e8:d7:25:13:c7:43:59:70:63:90:
cc:f5:62:a7:ab:37:16:ab:3f:a3:ca:45:5b:d9:60:
17:92:eb:42:85:4b:31:c5:c4:7c:3d:47:4a:1c:f4:
e2:1c:83:10:bd:13:b8:ca:2f:10:ef:ae:5a:1a:77:
c9:22:78:46:e5:7a:5e:07:cf:98:6c:76:d9:00:04:
32:f4:36:82:1d:93:93:98:0a:72:cb:ab:de:cb:74:
a6:4f:ce:4e:1a:e2:b2:94:06:39:00:37:fa:9f:1c:
22:63:12:26:f9:de:aa:ee:b6:c0:4f:a1:bb:30:cf:
67:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:22:5C:26:9D:99:95:AD:B7:89:09:88:F3:A4:1F:EC:8D:59:B7:D4
X509v3 Authority Key Identifier:
keyid:30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0e:4f:c7:5c:47:d8:92:49:7c:30:e0:5a:c3:37:ff:23:06:
48:32:90:dc:fb:0b:2f:bc:a8:bd:84:14:1f:c2:ad:93:17:20:
d5:81:e9:9c:8d:77:5d:7e:92:1e:d5:d0:54:72:ee:ba:e6:16:
0b:c1:1f:82:c9:f9:16:08:8a:6d:92:63:c2:8b:4a:80:26:40:
2e:fb:65:73:7f:c1:72:a9:b0:fe:f4:0f:7f:ae:6e:f1:34:bf:
4d:6e:6e:23:f2:88:19:92:8e:55:eb:e1:0a:f6:c2:06:a4:d7:
68:d0:bf:8c:db:ac:9a:23:29:81:9f:2e:61:e5:2a:95:46:e1:
c1:89:a3:83:f2:de:57:51:c1:ae:56:f1:82:c2:10:69:0a:6c:
96:f2:7c:7f:e2:2c:76:ad:a8:ac:d3:a7:db:b6:fc:32:94:67:
f7:30:c1:3d:f5:18:53:20:bf:ab:3b:1a:e6:e4:da:6d:6c:92:
0f:c0:a9:2c:27:3c:c5:72:ca:0c:c4:17:88:a4:0c:b8:10:a6:
53:b1:6a:cb:82:51:c0:6a:0f:5c:38:c0:bc:8b:33:16:0b:9b:
04:71:5e:6b:49:53:23:12:e7:eb:00:25:35:94:ca:15:c8:a7:
58:37:05:39:68:dc:b3:f5:c5:1b:7f:22:5d:80:47:8d:32:64:
c2:ba:d9:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U3QTQxMTAvBgNVBAUTKDMwNjQ5MERCNzQ1Qzk1RUM4NjYxNDk5RkZDODI2NDY2
N0JBNjdGOEEwHhcNMjYwNzE3MDY1NjMyWhcNMjYwNzI0MDY1NjMyWjAYMRYwFAYD
VQQDEw02YTU5ZDIyMC1iOTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtKnv1Ee2D1Fwk3lLS5y3O4YPZVxbwf/LmT58aKDA9Oldmb1adOwEiCcCHe/D
1reF9Fk9J+/SQYplrwyQX+4Q+VqqArrxzm2veFyAnQw7IpWBzKh7YqidHOuA3brB
F3W1mZfaKw16wngg3HEyw0l8pKUGEfpYpdbA1ODILogzK4+3X51wKc5SZtPAjOjX
JRPHQ1lwY5DM9WKnqzcWqz+jykVb2WAXkutChUsxxcR8PUdKHPTiHIMQvRO4yi8Q
765aGnfJInhG5XpeB8+YbHbZAAQy9DaCHZOTmApyy6vey3SmT85OGuKylAY5ADf6
nxwiYxIm+d6q7rbAT6G7MM9nEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC4iXCad
mZWtt4kJiPOkH+yNWbfUMB8GA1UdIwQYMBaAFDBkkNt0XJXshmFJn/yCZGZ7pn+K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTdBNC9CODkwREZEMkND
MEYxMUVGQTI3OEZENENDNEY5QUUwMi9NR1NRMjNSY2xleUdZVW1mX0lKa1pudW1m
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL01HU1EyM1JjbGV5R1lVbWZfSUprWm51bWY0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTdBNC9CODkwREZEMkNDMEYxMUVGQTI3OEZENENDNEY5QUUwMi9NR1NRMjNSY2xl
eUdZVW1mX0lKa1pudW1mNG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXg5Px1xH2JJJfDDgWsM3/yMGSDKQ3PsLL7yovYQUH8Ktkxcg1YHpnI13XX6S
HtXQVHLuuuYWC8Efgsn5FgiKbZJjwotKgCZALvtlc3/Bcqmw/vQPf65u8TS/TW5u
I/KIGZKOVevhCvbCBqTXaNC/jNusmiMpgZ8uYeUqlUbhwYmjg/LeV1HBrlbxgsIQ
aQpslvJ8f+Isdq2orNOn27b8MpRn9zDBPfUYUyC/qzsa5uTabWySD8CpLCc8xXLK
DMQXiKQMuBCmU7Fqy4JRwGoPXDjAvIszFgubBHFea0lTIxLn6wAlNZTKFcinWDcF
OWjcs/XFG38iXYBHjTJkwrrZFw==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:26:46 2026 by rpki-client