$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft File: IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json) Hash identifier: lvtOWNEm8U+wpCcnsTBnzMMj3s8tJIkCO5aHT0q95hQ= Subject key identifier: 86:31:88:6E:08:35:66:37:F5:8D:BD:55:F2:3A:B0:56:86:94:EE:25 Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 1160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft Manifest number: 1125 Signing time: Fri 08 Aug 2025 17:28:55 +0000 Manifest this update: Fri 08 Aug 2025 17:28:55 +0000 Manifest next update: Fri 15 Aug 2025 17:28:55 +0000 Files and hashes: 1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: VFDC2wq6p7ihsz/otEyE9FnM7oRjqoaYov2hkPC4z1k=) 2: D9BBFBDA4D3111F099A48033C4F9AE02.roa (hash: A1A/LnUqdsNFUNCbA9pj78Zy7mXZZnhX+0nyseCL3vE=) 3: 13D21C6EFEBA11ED9D83553FC4F9AE02.roa (hash: mPVwkbrmgIGFwgmxOu/KgFG11TMB51WhYaitUgpspRc=) 4: 98A0F61840AD11F0BB332714C4F9AE02.roa (hash: tKQU1f9hJtuAYfiy2kdRz9mYUmd+c/z8iKCPuJpB5Jo=) 5: 97F6216640AD11F0BB332714C4F9AE02.roa (hash: D/cwdq2qeau3nAVw8Sz3zqNDQKjgr7DJFvLl2UTQid4=) 6: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: GKHRKfwk3bqrqOFGPvJ+kjY0NTnB33jXoiW8bXeNOjw=) 7: 6521A70C395411F0AF136459C4F9AE02.roa (hash: 4Idad4dFmk8KzOmK1O+klRuBqcKZ7Fg2fSUd52ueJnE=) 8: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: PDXFymAQeHbTCItIfy8LqqoHr3PVKA+eJZNU6voGL5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4448 (0x1160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Aug 8 17:28:55 2025 GMT Not After : Aug 15 17:28:55 2025 GMT Subject: CN=689633d7-f0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e6:29:5e:42:6e:14:c1:e1:bb:0b:17:d0:52: 61:19:6a:3d:53:63:84:f0:d2:13:2a:ad:b2:a2:39: 47:f7:2e:b0:c1:ab:d6:4e:84:bd:81:a2:09:1c:7e: b3:ce:d9:3c:15:85:98:e3:f2:62:6e:5e:a5:71:73: 16:5e:c4:9a:13:12:c7:2d:37:7b:23:c3:f0:8f:2e: 82:b2:7d:27:01:b7:ea:a9:0a:e8:9c:b7:fb:ae:52: 91:28:0a:f9:72:90:14:82:eb:b1:74:22:e4:d3:56: d0:ba:d4:ef:65:2a:b8:1a:d7:57:0d:b5:42:e9:22: 68:26:00:55:7e:62:7e:f7:90:3f:5d:27:83:c1:af: b3:e8:9d:66:02:35:51:a7:66:03:c0:aa:79:a0:d8: 02:6e:1c:52:1a:94:7a:20:9a:79:65:d7:04:af:33: f1:de:09:22:bc:fb:82:b1:93:95:20:2a:46:3b:52: 69:dd:c1:91:70:43:85:d9:2e:12:45:db:a2:c5:16: 9e:eb:bd:22:01:da:4e:d6:1c:42:2e:21:9d:ed:c5: 33:d6:f9:4c:f3:c1:57:fc:54:4e:db:d8:c7:8d:5a: 73:af:0c:c5:0d:21:0e:da:4c:02:b7:dd:7f:de:00: 05:93:6e:4c:41:b3:c8:83:12:f1:3f:83:66:d5:1c: 42:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:31:88:6E:08:35:66:37:F5:8D:BD:55:F2:3A:B0:56:86:94:EE:25 X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:55:77:f5:93:35:d1:e1:75:3b:75:1b:ab:5c:8f:8e:25:e6: 5a:d2:b7:0f:19:16:21:e2:18:af:b6:d7:27:89:02:eb:4f:92: 4c:d3:a6:5a:38:9d:97:0a:64:53:e3:db:86:4f:72:39:04:28: bc:ef:11:76:b2:c6:5c:56:0d:71:f1:a2:4b:87:13:a8:64:58: 58:72:6b:4e:6c:25:ca:2a:13:c5:27:f5:b1:56:01:66:22:64: 2a:f5:22:c8:ec:8c:22:fe:01:1e:4e:9f:f7:1e:c8:d9:2f:f6: cd:b7:4d:9f:d3:39:38:34:d4:b0:34:70:96:e5:df:aa:c4:f9: d3:df:9b:34:00:4b:07:e0:98:b0:0e:f6:37:89:65:96:b9:a0: 73:cc:07:99:6c:fa:da:9c:ca:7f:49:87:5f:6b:91:fe:4a:e7: e2:07:f8:2e:2d:b9:af:dc:87:a2:d2:e4:8b:8e:c6:14:bc:5c: 78:15:de:00:65:1d:b9:78:21:4d:c6:b5:b1:fd:c3:34:ad:fe: 5c:91:b0:22:2d:c0:ca:fd:ec:0c:4c:18:82:cc:25:4b:4b:bb: e1:36:73:64:66:d9:a7:95:d3:fc:e2:c1:8b:9c:ea:19:b9:98: 03:9a:7d:7f:61:fa:d2:25:42:6b:f8:60:2c:44:a4:f4:cb:11: e3:df:4e:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjUwODA4MTcyODU1WhcNMjUwODE1MTcyODU1WjAYMRYwFAYD VQQDEw02ODk2MzNkNy1mMGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOYpXkJuFMHhuwsX0FJhGWo9U2OE8NITKq2yojlH9y6wwavWToS9gaIJHH6z ztk8FYWY4/Jibl6lcXMWXsSaExLHLTd7I8Pwjy6Csn0nAbfqqQronLf7rlKRKAr5 cpAUguuxdCLk01bQutTvZSq4GtdXDbVC6SJoJgBVfmJ+95A/XSeDwa+z6J1mAjVR p2YDwKp5oNgCbhxSGpR6IJp5ZdcErzPx3gkivPuCsZOVICpGO1Jp3cGRcEOF2S4S RduixRae670iAdpO1hxCLiGd7cUz1vlM88FX/FRO29jHjVpzrwzFDSEO2kwCt91/ 3gAFk25MQbPIgxLxP4Nm1RxCSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYxiG4I NWY39Y29VfI6sFaGlO4lMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdEQy8zNUY3OTg2NjFGMDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85 aEhPUjhzTHBabDVPN2h0MEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtVXf1kzXR4XU7dRurXI+OJeZa0rcPGRYh4hivttcniQLrT5JM06Za OJ2XCmRT49uGT3I5BCi87xF2ssZcVg1x8aJLhxOoZFhYcmtObCXKKhPFJ/WxVgFm ImQq9SLI7Iwi/gEeTp/3HsjZL/bNt02f0zk4NNSwNHCW5d+qxPnT35s0AEsH4Jiw DvY3iWWWuaBzzAeZbPranMp/SYdfa5H+SufiB/guLbmv3Iei0uSLjsYUvFx4Fd4A ZR25eCFNxrWx/cM0rf5ckbAiLcDK/ewMTBiCzCVLS7vhNnNkZtmnldP84sGLnOoZ uZgDmn1/YfrSJUJr+GAsRKT0yxHj307L -----END CERTIFICATE-----Generated at Sat Aug 9 03:01:44 2025 by rpki-client