$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft File: IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json) Hash identifier: DJ03R74/iOSLaCqqsraCfqwezQptCO6hseL2K1Pt48M= Subject key identifier: 9C:64:70:CA:99:B7:5B:53:28:DB:6D:28:16:D6:57:8B:6F:04:97:3D Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 124B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft Manifest number: 11F5 Signing time: Tue 28 Jul 2026 17:16:49 +0000 Manifest this update: Tue 28 Jul 2026 17:16:48 +0000 Manifest next update: Tue 04 Aug 2026 17:16:48 +0000 Files and hashes: 1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: CBtA4DGgQviC6DCAFP3c4iPcgN3HftWEMvEwCecw6ps=) 2: D9BBFBDA4D3111F099A48033C4F9AE02.roa (hash: DerhX6OwSbe0rRaFIZdy5dbL/hGKFEzFgbvMCI0QCo0=) 3: 98A0F61840AD11F0BB332714C4F9AE02.roa (hash: IS1j4fiLKS57qrKHF7wS3bUANSIBQvPd5t8keIKkTrs=) 4: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: vKccd2F9ftUD7dxFhS0jRDAUZNsfYOsIjkhXXA2UhHI=) 5: 69915526EA0711F0976467B16F6F56BC.roa (hash: sLYsx+0TCakC1YwYdtjQtbYvAlnAp516G4hk84r24Hc=) 6: D276D68CACDC11F093B6B95AC4F9AE02.roa (hash: 3yfrgKeAqT2UJ9hoABf1H6+wfUw8pcotIBYIseVLvBY=) 7: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: XYEh/xOjDbsTNdnGi10ej2EmI6JjqzNUkL1XRZsJguA=) 8: 2E3A7CDCECB411F0B6919987656F56BC.roa (hash: kTCwjps9JXKEexuvTBj7XMywtX0m9mqMVThPCXp01vw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4683 (0x124b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Jul 28 17:16:48 2026 GMT Not After : Aug 4 17:16:48 2026 GMT Subject: CN=6a68e401-f4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c8:04:b2:1c:45:0e:3f:f0:87:e9:d2:1c:ac: 93:43:78:10:e4:de:2b:2f:4f:4b:67:c9:ad:e3:2c: ef:e5:b0:c9:cb:dc:e1:bf:15:a6:98:a2:55:43:9b: f8:02:d8:12:f3:79:f3:21:03:f2:a7:e5:06:c8:93: 59:c9:8d:93:f5:5e:a1:43:50:7e:7e:d6:d5:a1:d9: 6d:76:4d:3a:81:50:9e:b7:a6:a1:87:29:88:4e:62: 8d:7f:91:7e:2b:94:d1:85:b5:7c:e9:c8:ab:44:db: c0:23:d3:67:a1:c5:aa:d7:16:6d:5a:e9:c4:60:13: 55:d7:f4:b2:dc:1c:47:dc:8b:db:43:f5:e7:88:58: b8:c6:b8:49:83:2c:dc:2e:9b:8d:c9:cd:1d:71:03: d7:ed:e5:78:74:c6:3d:e9:de:ce:31:49:d1:9d:d5: 48:f2:b0:3c:39:0a:6d:09:63:5c:27:45:d6:7f:6c: 17:a2:dc:ab:93:bc:8e:18:13:2b:e3:4b:34:2d:78: 58:75:34:34:94:c8:ed:ae:e3:b8:d2:83:a2:02:17: 5f:b2:15:d3:d0:87:36:05:a7:92:15:43:d7:e2:29: 85:1c:3c:e8:c5:a5:4e:f0:c9:15:5a:4b:98:11:33: c5:1e:0e:e3:c3:a4:b8:e6:fa:0d:bb:8b:29:0b:c5: 67:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:64:70:CA:99:B7:5B:53:28:DB:6D:28:16:D6:57:8B:6F:04:97:3D X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:df:59:80:cc:82:b5:05:87:bf:7e:74:10:51:7a:be:25:05: c0:b7:99:b4:86:48:2f:7f:2a:96:3b:70:cc:bb:a6:48:0f:b8: 77:6d:01:d2:d0:f0:c9:c8:2c:c0:47:7c:05:c0:2a:f7:82:f4: 32:2f:4e:d4:6d:d4:5d:7d:5e:a5:b9:84:5a:a7:52:55:e3:89: 6f:d3:6b:2d:eb:21:f6:df:07:48:40:83:90:79:a1:cb:35:15: ed:13:0c:b5:dd:ae:24:1e:25:f0:3e:5e:0b:a4:a1:c2:85:0c: eb:47:0d:60:c2:ca:95:d7:2d:40:ae:9e:da:61:d9:04:6e:ca: d2:49:09:6e:15:5f:75:33:d5:f8:36:e9:45:37:f3:89:91:26: 74:07:1a:80:0c:80:23:46:b2:ba:6d:94:7f:6d:e8:e3:52:ca: 53:95:fc:65:77:ad:46:b1:4a:30:38:a8:d3:37:c7:38:84:7a: 32:4b:5e:8c:97:61:06:31:c0:49:ef:f6:3d:e9:28:24:93:fc: 08:14:fd:13:89:f5:a3:47:84:8a:98:b2:dc:4f:3e:0a:88:2b: 6e:f0:df:24:43:d1:c8:6a:c8:22:5f:94:2f:00:3e:95:3d:e5: 7a:ee:ea:2e:00:14:8b:59:0e:2a:4f:3d:43:d4:24:71:0f:ff: 54:98:86:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjYwNzI4MTcxNjQ4WhcNMjYwODA0MTcxNjQ4WjAYMRYwFAYD VQQDEw02YTY4ZTQwMS1mNGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsgEshxFDj/wh+nSHKyTQ3gQ5N4rL09LZ8mt4yzv5bDJy9zhvxWmmKJVQ5v4 AtgS83nzIQPyp+UGyJNZyY2T9V6hQ1B+ftbVodltdk06gVCet6ahhymITmKNf5F+ K5TRhbV86cirRNvAI9NnocWq1xZtWunEYBNV1/Sy3BxH3IvbQ/XniFi4xrhJgyzc LpuNyc0dcQPX7eV4dMY96d7OMUnRndVI8rA8OQptCWNcJ0XWf2wXotyrk7yOGBMr 40s0LXhYdTQ0lMjtruO40oOiAhdfshXT0Ic2BaeSFUPX4imFHDzoxaVO8MkVWkuY ETPFHg7jw6S45voNu4spC8VnbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJxkcMqZ t1tTKNttKBbWV4tvBJc9MB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdEQy8zNUY3OTg2NjFGMDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85 aEhPUjhzTHBabDVPN2h0MEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYN9ZgMyCtQWHv350EFF6viUFwLeZtIZIL38qljtwzLumSA+4d20B0tDwycgs wEd8BcAq94L0Mi9O1G3UXX1epbmEWqdSVeOJb9NrLesh9t8HSECDkHmhyzUV7RMM td2uJB4l8D5eC6ShwoUM60cNYMLKldctQK6e2mHZBG7K0kkJbhVfdTPV+DbpRTfz iZEmdAcagAyAI0ayum2Uf23o41LKU5X8ZXetRrFKMDio0zfHOIR6MktejJdhBjHA Se/2PekoJJP8CBT9E4n1o0eEipiy3E8+CogrbvDfJEPRyGrIIl+ULwA+lT3leu7q LgAUi1kOKk89Q9QkcQ//VJiGgg== -----END CERTIFICATE-----Generated at Tue Jul 28 23:36:14 2026 by rpki-client