$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft File: MGSQ23RcleyGYUmf_IJkZnumf4o.mft (raw, json) Hash identifier: Y/t4SCJG1EcF7vn3YotfyTMoEhSS8Z22FxTp1swd/EI= Subject key identifier: BF:07:01:F4:26:F5:F2:08:60:97:D9:9C:61:76:9B:07:C4:87:D0:6E Authority key identifier: 30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A Certificate issuer: /CN=A91CE7A4/serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft Manifest number: ED Signing time: Sun 05 Apr 2026 05:47:45 +0000 Manifest this update: Sun 05 Apr 2026 05:47:44 +0000 Manifest next update: Sun 12 Apr 2026 05:47:44 +0000 Files and hashes: 1: MGSQ23RcleyGYUmf_IJkZnumf4o.crl (hash: f/hiQIoXFX9dEBZ66JwvRcFzM+wUwgK0yZxHzEx+7Us=) 2: 19C407C0CC1011EFBC7E0050C4F9AE02.roa (hash: YhEgP7BtjPiAKP/DklQo7tOfqEOazq/YqPHJ1ipjURA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7A4, serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A Validity Not Before: Apr 5 05:47:44 2026 GMT Not After : Apr 12 05:47:44 2026 GMT Subject: CN=69d1f780-eb70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:17:a8:f0:0d:98:1e:fd:ab:46:b5:ed:91:22: 35:29:56:15:f7:27:69:69:10:9a:f2:77:89:88:a4: 42:0f:f0:15:39:11:82:50:98:a5:fb:64:23:c1:02: aa:d8:57:ae:99:ff:9a:f6:ca:cb:92:4b:00:35:db: cc:39:8e:7e:6b:c0:a7:57:51:77:8a:92:a4:79:53: 43:b8:8b:aa:0d:4f:d4:95:0b:20:91:1a:40:20:02: ba:65:19:55:d9:73:af:56:af:c5:9b:c7:59:16:d5: 08:3f:08:92:1d:07:f1:2b:df:11:c0:5b:00:46:d0: 19:93:85:12:e0:16:d8:38:9f:8e:83:bb:0d:cf:a4: b4:52:03:69:7b:35:68:ba:ee:e9:c5:3b:76:f3:db: b3:b0:84:d0:89:31:f0:bf:3a:65:e6:36:84:90:29: a9:dc:15:b6:eb:f5:af:7d:97:6f:52:11:85:73:f2: 4b:12:8a:38:db:8f:7d:3b:3c:0f:ef:6a:2f:a1:3f: 80:e4:ff:5e:18:f5:81:9c:85:63:42:08:34:52:05: 44:9e:b8:45:8b:00:45:24:51:fb:2c:1d:a9:a0:48: 89:c1:01:0d:65:68:6b:df:d8:31:07:aa:14:c5:12: 52:b7:0a:d0:d5:c2:72:df:17:38:80:5c:7b:92:85: 45:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:07:01:F4:26:F5:F2:08:60:97:D9:9C:61:76:9B:07:C4:87:D0:6E X509v3 Authority Key Identifier: keyid:30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:77:cf:b2:99:1c:81:9d:db:b1:b2:9a:cd:74:84:01:29:f8: 8c:b6:a2:c8:36:3b:c3:b5:2f:03:96:63:e9:c5:6e:b6:d2:c0: c7:39:6a:44:70:b4:dd:85:0a:b0:68:53:22:8b:47:65:66:17: 19:d4:0c:66:ea:fd:d7:f5:86:7e:1a:68:63:21:44:15:2e:d4: 63:37:ae:12:f2:a5:fa:16:f2:13:0e:e8:67:69:67:d2:9a:8e: 51:8a:d5:60:c6:f7:7c:af:b0:f8:ea:7e:f9:44:f0:cb:eb:57: f5:03:89:8c:cd:30:63:58:bb:5b:a0:a2:a6:1c:ce:1a:e7:ef: 5e:91:70:16:6d:c8:44:93:e5:62:30:73:fe:f1:a8:b3:1c:e4: 6c:79:c4:83:44:df:1d:a7:b6:1c:09:70:2c:32:9c:1d:36:a2: e3:63:14:f8:01:3d:96:2a:e1:fa:b1:9c:7a:9f:f0:a0:b9:c1: e9:c1:bd:cd:3e:08:31:67:90:41:27:2c:86:ea:aa:48:d5:38: e7:be:e5:f8:d8:fc:4d:83:60:72:a7:4a:ca:69:a9:26:5f:31: ca:af:a3:71:63:01:6c:7f:1e:e0:eb:d1:3e:f9:b7:03:33:a4: 5b:62:d9:2c:53:25:4f:27:c8:68:a2:34:84:2d:35:f7:c5:d8: d5:71:d8:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U3QTQxMTAvBgNVBAUTKDMwNjQ5MERCNzQ1Qzk1RUM4NjYxNDk5RkZDODI2NDY2 N0JBNjdGOEEwHhcNMjYwNDA1MDU0NzQ0WhcNMjYwNDEyMDU0NzQ0WjAYMRYwFAYD VQQDEw02OWQxZjc4MC1lYjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxeo8A2YHv2rRrXtkSI1KVYV9ydpaRCa8neJiKRCD/AVORGCUJil+2QjwQKq 2Feumf+a9srLkksANdvMOY5+a8CnV1F3ipKkeVNDuIuqDU/UlQsgkRpAIAK6ZRlV 2XOvVq/Fm8dZFtUIPwiSHQfxK98RwFsARtAZk4US4BbYOJ+Og7sNz6S0UgNpezVo uu7pxTt289uzsITQiTHwvzpl5jaEkCmp3BW26/WvfZdvUhGFc/JLEoo42499OzwP 72ovoT+A5P9eGPWBnIVjQgg0UgVEnrhFiwBFJFH7LB2poEiJwQENZWhr39gxB6oU xRJStwrQ1cJy3xc4gFx7koVF7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL8HAfQm 9fIIYJfZnGF2mwfEh9BuMB8GA1UdIwQYMBaAFDBkkNt0XJXshmFJn/yCZGZ7pn+K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTdBNC9CODkwREZEMkND MEYxMUVGQTI3OEZENENDNEY5QUUwMi9NR1NRMjNSY2xleUdZVW1mX0lKa1pudW1m NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01HU1EyM1JjbGV5R1lVbWZfSUprWm51bWY0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTdBNC9CODkwREZEMkNDMEYxMUVGQTI3OEZENENDNEY5QUUwMi9NR1NRMjNSY2xl eUdZVW1mX0lKa1pudW1mNG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA3fPspkcgZ3bsbKazXSEASn4jLaiyDY7w7UvA5Zj6cVuttLAxzlqRHC03YUK sGhTIotHZWYXGdQMZur91/WGfhpoYyFEFS7UYzeuEvKl+hbyEw7oZ2ln0pqOUYrV YMb3fK+w+Op++UTwy+tX9QOJjM0wY1i7W6CiphzOGufvXpFwFm3IRJPlYjBz/vGo sxzkbHnEg0TfHae2HAlwLDKcHTai42MU+AE9lirh+rGcep/woLnB6cG9zT4IMWeQ QScshuqqSNU4577l+Nj8TYNgcqdKymmpJl8xyq+jcWMBbH8e4OvRPvm3AzOkW2LZ LFMlTyfIaKI0hC0198XY1XHYpA== -----END CERTIFICATE-----Generated at Mon Apr 6 15:10:00 2026 by rpki-client