$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft File: MGSQ23RcleyGYUmf_IJkZnumf4o.mft (raw, json) Hash identifier: RADGg+ufSSoFcMftBFt6Q1GBuCdQXBqxkCKnIEVaSb8= Subject key identifier: E6:DF:44:13:22:09:05:0F:75:06:32:47:E1:96:70:81:47:90:69:22 Authority key identifier: 30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A Certificate issuer: /CN=A91CE7A4/serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft Manifest number: 7E Signing time: Fri 05 Sep 2025 07:11:13 +0000 Manifest this update: Fri 05 Sep 2025 07:11:12 +0000 Manifest next update: Fri 12 Sep 2025 07:11:12 +0000 Files and hashes: 1: MGSQ23RcleyGYUmf_IJkZnumf4o.crl (hash: Vvar+s2cfE1ZkpZ8zJYnQx7ANPuZhktQ3bNLiPShPAM=) 2: 19C407C0CC1011EFBC7E0050C4F9AE02.roa (hash: 0uD06YfXP8jJiypkQtgg/+0Dg/DOv6s8Gpjo5ybB4rE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7A4, serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A Validity Not Before: Sep 5 07:11:12 2025 GMT Not After : Sep 12 07:11:12 2025 GMT Subject: CN=68ba8d11-226f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3e:b5:45:29:c7:a6:83:0d:45:dd:5d:02:fa: 7f:e4:1d:86:db:32:4f:3b:6c:cc:02:8f:57:b1:79: 10:92:71:9c:80:20:8c:73:13:fa:ac:35:66:31:1e: 2f:be:2c:7c:76:76:41:82:b0:27:89:18:19:58:ff: e3:74:bf:cb:51:a4:b2:ae:58:82:7c:e7:a1:ab:70: 22:a3:ce:94:92:a4:1b:b9:30:8f:7b:27:32:74:cd: a2:a8:a1:5c:c5:fd:80:ee:3e:f7:c0:f6:e8:a3:e2: 83:93:44:d4:b2:54:01:97:07:32:48:fd:62:8a:59: e4:fc:56:f4:65:5b:0a:bf:73:6b:31:5d:3e:97:d9: f2:12:52:01:b7:8e:b9:e8:39:5c:da:6b:4e:a3:b4: ac:5b:49:c7:e4:e9:85:1f:3c:4e:d1:a2:b5:37:46: d3:f3:7c:51:ec:60:63:f1:5e:de:59:6a:f7:32:7a: 10:f7:f7:ac:81:1b:df:90:1c:83:9e:4e:95:6a:63: e0:9c:ed:88:1b:ae:f0:c9:ee:e5:e8:b8:a8:76:68: b3:a0:54:4d:dd:9a:20:2f:f2:10:95:f9:5f:1f:8b: 8a:f2:fc:6a:d1:4a:52:4e:37:8b:9d:45:8b:2a:d4: 90:5c:0e:51:60:08:5f:d6:55:c6:f8:32:7b:d2:17: b8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DF:44:13:22:09:05:0F:75:06:32:47:E1:96:70:81:47:90:69:22 X509v3 Authority Key Identifier: keyid:30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:50:05:6f:0e:4b:30:68:50:d0:73:09:ee:44:ac:02:53:5a: 06:b9:7c:6f:d8:ce:b4:0e:8d:64:34:c3:b1:e6:af:cb:f3:a8: bc:3d:fc:b1:d3:42:23:71:91:3a:92:e9:6e:e1:e0:3f:3f:66: b3:9a:18:64:4d:a6:31:07:55:e1:05:ce:05:74:c8:70:92:d6: 2e:c4:fe:3e:74:06:34:e0:ba:a7:67:61:d0:92:dd:69:48:21: e4:45:ba:39:f0:40:55:b7:4c:e9:c3:e3:b3:c4:20:cc:b8:02: af:ee:77:f4:0c:1c:3c:ff:3a:de:0e:15:7d:2c:d4:77:c4:fd: 0e:02:b4:2c:21:63:ed:57:9c:cb:f0:92:b2:5c:33:e3:53:14: 22:98:a8:2d:58:b6:43:bd:af:e5:94:68:4c:67:97:4c:b5:13: 62:19:60:ba:90:25:77:3f:ac:96:43:e5:f5:5f:5d:d5:ed:78: d8:9c:c7:c8:2c:47:8f:bd:7d:4c:96:e0:b9:5e:88:99:72:10: 9b:36:e2:b9:39:c0:c5:9d:d3:c0:91:e8:06:e6:7f:4a:a0:34: 75:b9:46:ba:50:81:84:27:cd:76:29:73:c3:c0:5c:05:16:06: 74:31:0d:27:65:71:90:c9:4d:90:f2:80:cd:70:2a:5e:ee:3b: d0:eb:82:10 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTdBNDExMC8GA1UEBRMoMzA2NDkwREI3NDVDOTVFQzg2NjE0OTlGRkM4MjY0NjY3 QkE2N0Y4QTAeFw0yNTA5MDUwNzExMTJaFw0yNTA5MTIwNzExMTJaMBgxFjAUBgNV BAMTDTY4YmE4ZDExLTIyNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqPrVFKcemgw1F3V0C+n/kHYbbMk87bMwCj1exeRCScZyAIIxzE/qsNWYxHi++ LHx2dkGCsCeJGBlY/+N0v8tRpLKuWIJ856GrcCKjzpSSpBu5MI97JzJ0zaKooVzF /YDuPvfA9uij4oOTRNSyVAGXBzJI/WKKWeT8VvRlWwq/c2sxXT6X2fISUgG3jrno OVzaa06jtKxbScfk6YUfPE7RorU3RtPzfFHsYGPxXt5ZavcyehD396yBG9+QHIOe TpVqY+Cc7YgbrvDJ7uXouKh2aLOgVE3dmiAv8hCV+V8fi4ry/GrRSlJON4udRYsq 1JBcDlFgCF/WVcb4MnvSF7gdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5t9EEyIJ BQ91BjJH4ZZwgUeQaSIwHwYDVR0jBBgwFoAUMGSQ23RcleyGYUmf/IJkZnumf4ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFN0E0L0I4OTBERkQyQ0Mw RjExRUZBMjc4RkQ0Q0M0RjlBRTAyL01HU1EyM1JjbGV5R1lVbWZfSUprWm51bWY0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTUdTUTIzUmNsZXlHWVVtZl9JSmtabnVtZjRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF N0E0L0I4OTBERkQyQ0MwRjExRUZBMjc4RkQ0Q0M0RjlBRTAyL01HU1EyM1JjbGV5 R1lVbWZfSUprWm51bWY0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABRQBW8OSzBoUNBzCe5ErAJTWga5fG/YzrQOjWQ0w7Hmr8vzqLw9/LHT QiNxkTqS6W7h4D8/ZrOaGGRNpjEHVeEFzgV0yHCS1i7E/j50BjTguqdnYdCS3WlI IeRFujnwQFW3TOnD47PEIMy4Aq/ud/QMHDz/Ot4OFX0s1HfE/Q4CtCwhY+1XnMvw krJcM+NTFCKYqC1YtkO9r+WUaExnl0y1E2IZYLqQJXc/rJZD5fVfXdXteNicx8gs R4+9fUyW4LleiJlyEJs24rk5wMWd08CR6Abmf0qgNHW5RrpQgYQnzXYpc8PAXAUW BnQxDSdlcZDJTZDygM1wKl7uO9DrghA= -----END CERTIFICATE-----Generated at Sat Sep 6 21:01:19 2025 by rpki-client