$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft File: MGSQ23RcleyGYUmf_IJkZnumf4o.mft (raw, json) Hash identifier: YSRf3UUbqD/HGZeMNlP5bZdw2A+luDe9T8xkouemSf0= Subject key identifier: F4:66:AF:11:12:3C:68:B3:80:31:71:B7:74:73:99:D7:E8:20:4D:04 Authority key identifier: 30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A Certificate issuer: /CN=A91CE7A4/serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft Manifest number: 014C Signing time: Wed 07 Oct 2026 05:48:42 +0000 Manifest this update: Wed 07 Oct 2026 05:48:42 +0000 Manifest next update: Wed 14 Oct 2026 05:48:42 +0000 Files and hashes: 1: MGSQ23RcleyGYUmf_IJkZnumf4o.crl (hash: BEYpZxJg3BbrYe8ODg/X/hhuKUHO6GBdnGG8L5FHNOw=) 2: 19C407C0CC1011EFBC7E0050C4F9AE02.roa (hash: utxItg9AZP9jPtUfaHZNYYZ2s+pDsbIze+rI9Pl7uws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 05:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7A4, serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A Validity Not Before: Oct 7 05:48:42 2026 GMT Not After : Oct 14 05:48:42 2026 GMT Subject: CN=6ac5dd3a-1255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:d4:4a:b5:20:bc:4f:7d:90:c8:e1:7e:f2: c0:8b:35:1c:9f:2c:ee:8b:30:0b:ba:58:4b:1b:0f: c3:5c:4d:ca:de:df:82:ae:e5:da:8f:f2:45:9b:5f: d5:c6:8c:4c:fb:9d:0e:6f:0a:8c:09:6f:6b:e0:e0: ba:eb:4e:c8:f0:35:60:d3:34:7b:83:53:a4:0d:0e: da:27:6f:84:9c:5e:4f:f7:32:db:af:e4:40:92:ba: 50:86:2c:10:d4:fe:7f:38:e7:81:64:c8:5f:0d:ca: d4:ea:5e:31:ea:48:14:e0:79:fd:12:d2:5c:81:b6: 29:76:43:57:3f:ce:30:d7:18:6f:3a:ec:79:39:5b: 9e:94:60:f0:9c:74:55:e6:16:cd:89:31:94:cc:eb: d6:86:e1:8c:4f:d3:b2:b8:24:38:e1:41:58:e4:bc: 89:1c:df:6c:e8:a5:52:b6:cd:42:60:7c:02:d9:9c: 42:51:5c:b2:ba:5f:8f:1c:0d:a2:53:1c:cd:30:ee: 1c:4d:43:74:a3:1c:d8:b0:b1:b0:e2:a1:7d:d6:66: 5e:95:51:43:aa:e2:26:01:05:02:23:a7:f9:19:00: 7c:cd:f7:83:5e:be:de:e8:d3:5c:45:4a:67:1d:d5: d4:f7:c4:84:49:ff:49:7c:6b:a0:65:d6:06:ed:f8: cd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:66:AF:11:12:3C:68:B3:80:31:71:B7:74:73:99:D7:E8:20:4D:04 X509v3 Authority Key Identifier: keyid:30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d4:61:7d:b1:e7:f2:e2:12:f4:50:51:48:6b:94:02:46:e3: 90:11:ac:dc:b2:30:a8:76:f5:ef:e1:f6:2e:45:6c:0f:eb:f1: d0:c8:86:d5:c4:0e:72:a7:b1:9d:36:0a:4f:cd:b8:4b:12:27: fd:49:b6:a7:75:27:b4:ac:5d:26:96:4a:6d:7a:24:16:a8:52: 84:53:e4:f7:5e:d4:5d:97:b7:94:21:4a:04:2d:1c:98:2b:43: 25:39:22:19:b2:2c:fe:ca:d4:bc:d7:4c:2a:8b:cf:21:bb:53: 43:8e:f7:a7:51:1f:13:6e:7f:82:2f:a6:e7:87:1a:99:e2:f1: 5b:e1:ba:da:83:47:4c:fb:8d:10:c1:07:90:3e:96:a9:38:18: d2:e6:67:eb:64:d7:65:a7:4b:0f:96:23:7d:71:3e:b9:1c:97: 47:9c:30:28:0f:3b:66:c9:af:c8:c3:c0:73:e7:b9:1f:f9:7f: ce:8d:b3:f4:ac:2c:fb:3c:3c:61:43:3a:3e:d3:cd:b6:4f:98: fe:1b:c4:15:03:97:51:50:8d:86:07:be:53:10:9a:c4:70:bb: 4d:f6:9e:50:00:dd:56:36:64:fc:8e:17:9e:de:58:aa:2d:f6: c3:df:4b:a7:16:a0:c0:87:af:2d:b8:2c:3c:64:c6:e6:c7:a7: 28:10:84:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U3QTQxMTAvBgNVBAUTKDMwNjQ5MERCNzQ1Qzk1RUM4NjYxNDk5RkZDODI2NDY2 N0JBNjdGOEEwHhcNMjYxMDA3MDU0ODQyWhcNMjYxMDE0MDU0ODQyWjAYMRYwFAYD VQQDEw02YWM1ZGQzYS0xMjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3DUSrUgvE99kMjhfvLAizUcnyzuizALulhLGw/DXE3K3t+CruXaj/JFm1/V xoxM+50ObwqMCW9r4OC6607I8DVg0zR7g1OkDQ7aJ2+EnF5P9zLbr+RAkrpQhiwQ 1P5/OOeBZMhfDcrU6l4x6kgU4Hn9EtJcgbYpdkNXP84w1xhvOux5OVuelGDwnHRV 5hbNiTGUzOvWhuGMT9OyuCQ44UFY5LyJHN9s6KVSts1CYHwC2ZxCUVyyul+PHA2i UxzNMO4cTUN0oxzYsLGw4qF91mZelVFDquImAQUCI6f5GQB8zfeDXr7e6NNcRUpn HdXU98SESf9JfGugZdYG7fjNdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPRmrxES PGizgDFxt3RzmdfoIE0EMB8GA1UdIwQYMBaAFDBkkNt0XJXshmFJn/yCZGZ7pn+K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTdBNC9CODkwREZEMkND MEYxMUVGQTI3OEZENENDNEY5QUUwMi9NR1NRMjNSY2xleUdZVW1mX0lKa1pudW1m NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01HU1EyM1JjbGV5R1lVbWZfSUprWm51bWY0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTdBNC9CODkwREZEMkNDMEYxMUVGQTI3OEZENENDNEY5QUUwMi9NR1NRMjNSY2xl eUdZVW1mX0lKa1pudW1mNG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT9RhfbHn8uIS9FBRSGuUAkbjkBGs3LIwqHb17+H2LkVsD+vx0MiG1cQOcqex nTYKT824SxIn/Um2p3UntKxdJpZKbXokFqhShFPk917UXZe3lCFKBC0cmCtDJTki GbIs/srUvNdMKovPIbtTQ473p1EfE25/gi+m54cameLxW+G62oNHTPuNEMEHkD6W qTgY0uZn62TXZadLD5YjfXE+uRyXR5wwKA87ZsmvyMPAc+e5H/l/zo2z9Kws+zw8 YUM6PtPNtk+Y/hvEFQOXUVCNhge+UxCaxHC7TfaeUADdVjZk/I4Xnt5Yqi32w99L pxagwIevLbgsPGTG5senKBCEng== -----END CERTIFICATE-----Generated at Thu Oct 8 09:11:15 2026 by rpki-client