$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft File: IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json) Hash identifier: 3qI6KaK52ytltNwl9tZhNYj2vdKvJA/csj6mYUiBEeM= Subject key identifier: C5:04:AA:DF:B5:FE:43:EF:0F:B6:AE:6A:C4:20:B5:38:AE:40:64:92 Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 11F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft Manifest number: 11A7 Signing time: Sun 01 Mar 2026 22:52:21 +0000 Manifest this update: Sun 01 Mar 2026 22:52:21 +0000 Manifest next update: Sun 08 Mar 2026 22:52:21 +0000 Files and hashes: 1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: JUpzwfxA9105vlkJcAAsJs8nHpWNrULJlvE5fKOjk0g=) 2: 2E3A7CDCECB411F0B6919987656F56BC.roa (hash: 4utBjEApx20KJCzqd0eW5ajZ4NVkx31L9ZkE151uZUs=) 3: D9BBFBDA4D3111F099A48033C4F9AE02.roa (hash: zcDK7W0PfXIMXqiY8vmJjJWJICMO82ktF8Fv0RCYF1s=) 4: D276D68CACDC11F093B6B95AC4F9AE02.roa (hash: gqE+x20QnU3Jprst8DEUKF8tGWKOyyNqVQpNtO3Q028=) 5: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: DKnxHCWGK4M87Ukt6UmTYzykQ/tHWegReXZDU7ZlYJ0=) 6: 69915526EA0711F0976467B16F6F56BC.roa (hash: SFd4usN35GeJVO8naPqajPmsGMgesiXpwAu3vfPbeK0=) 7: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: IjpZ0jS6tnWw/4g4Tbl4x/ogYwx51M7WeePNdj2/uUg=) 8: 98A0F61840AD11F0BB332714C4F9AE02.roa (hash: IHS1dAGj9jKnE6X/SA4FOXKPpMTMBUd8S8gYvi2WOxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4598 (0x11f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Mar 1 22:52:21 2026 GMT Not After : Mar 8 22:52:21 2026 GMT Subject: CN=69a4c325-6534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:5f:e0:5a:74:ff:b2:38:7c:71:e2:86:f0: cc:fb:f1:ba:12:50:1f:42:cb:86:75:60:b6:5c:4a: 1c:6f:d5:b3:c0:40:a1:ce:9c:1b:f1:f2:3b:61:62: 6b:61:bf:50:6e:7d:81:df:81:21:67:da:2a:45:15: 1b:dc:b7:4b:3a:23:ae:76:66:23:9b:de:35:e3:d5: 86:16:4f:e9:29:c5:e2:d1:b6:ab:fa:9c:59:06:45: be:4f:07:49:60:f8:eb:a7:eb:9f:a7:8a:e3:d6:87: 57:61:33:bf:33:6b:d7:e9:e0:cd:54:60:49:9c:d2: cc:0e:ed:0a:a3:8b:1f:93:9e:24:24:75:de:d6:f5: be:b6:72:80:1c:10:7a:bc:c4:72:18:1d:2e:65:5d: c3:08:7f:10:27:4b:f4:fd:90:59:10:b9:9e:0f:82: 76:a7:35:b5:fb:98:0b:78:65:fc:d8:3a:ca:64:fc: 4f:40:5e:62:46:3d:66:82:f1:bb:95:e2:e3:a1:32: b8:bd:92:5c:d6:35:7c:fa:da:0e:67:31:2e:ab:96: 31:62:22:8e:85:dc:e9:6b:80:75:a8:35:ce:e4:02: de:84:d6:72:2b:18:db:f3:ed:be:ef:4b:fc:63:d4: 66:6e:c2:66:3b:31:4e:18:1c:24:4f:ba:13:62:78: c3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:04:AA:DF:B5:FE:43:EF:0F:B6:AE:6A:C4:20:B5:38:AE:40:64:92 X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e3:8c:f8:bb:c5:21:4c:d9:99:41:36:22:84:40:89:d6:9d: ca:14:30:e0:4d:ff:4e:62:75:7d:4d:cb:64:f5:47:79:8d:7f: de:30:40:f0:e3:4f:ea:e8:c4:51:1d:27:44:0b:1c:2e:31:d0: a1:9c:45:f6:9f:94:d7:2d:f4:f4:52:24:c9:ab:da:25:e7:16: bc:24:19:26:7f:a5:44:7e:1a:90:4c:9b:af:d1:4f:36:87:63: 70:d9:85:2c:72:91:2f:c9:5a:61:51:45:ee:08:a3:e4:65:44: 10:25:87:53:16:ff:51:d2:0b:df:27:40:65:86:0c:16:2c:db: 0e:a9:79:da:0b:e4:ae:c9:c6:fc:0d:93:c1:3d:ee:40:9e:84: ab:04:93:b6:27:33:bd:3e:fa:98:b2:36:1d:17:98:d4:ef:82: 44:74:8e:eb:4f:a5:ec:39:a8:ca:a5:0d:a7:7b:4b:21:04:e4: 89:2f:2f:d7:5e:79:33:43:80:56:0f:9f:ec:8a:b6:a2:d3:4e: df:13:a0:a3:30:6e:3a:8d:85:1f:fc:79:7b:38:2e:da:c9:cb: 79:33:6c:f0:27:96:81:de:55:c0:a2:bb:67:ba:a3:21:04:27: 44:31:c8:ff:62:e3:82:92:1c:1e:c4:28:c7:b0:5e:0f:d8:10: d7:b3:13:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjYwMzAxMjI1MjIxWhcNMjYwMzA4MjI1MjIxWjAYMRYwFAYD VQQDEw02OWE0YzMyNS02NTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1E1f4Fp0/7I4fHHihvDM+/G6ElAfQsuGdWC2XEocb9WzwEChzpwb8fI7YWJr Yb9Qbn2B34EhZ9oqRRUb3LdLOiOudmYjm94149WGFk/pKcXi0bar+pxZBkW+TwdJ YPjrp+ufp4rj1odXYTO/M2vX6eDNVGBJnNLMDu0Ko4sfk54kJHXe1vW+tnKAHBB6 vMRyGB0uZV3DCH8QJ0v0/ZBZELmeD4J2pzW1+5gLeGX82DrKZPxPQF5iRj1mgvG7 leLjoTK4vZJc1jV8+toOZzEuq5YxYiKOhdzpa4B1qDXO5ALehNZyKxjb8+2+70v8 Y9RmbsJmOzFOGBwkT7oTYnjDcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMUEqt+1 /kPvD7auasQgtTiuQGSSMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdEQy8zNUY3OTg2NjFGMDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85 aEhPUjhzTHBabDVPN2h0MEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXeOM+LvFIUzZmUE2IoRAidadyhQw4E3/TmJ1fU3LZPVHeY1/3jBA8ONP6ujE UR0nRAscLjHQoZxF9p+U1y309FIkyavaJecWvCQZJn+lRH4akEybr9FPNodjcNmF LHKRL8laYVFF7gij5GVEECWHUxb/UdIL3ydAZYYMFizbDql52gvkrsnG/A2TwT3u QJ6EqwSTticzvT76mLI2HReY1O+CRHSO60+l7DmoyqUNp3tLIQTkiS8v1155M0OA Vg+f7Iq2otNO3xOgozBuOo2FH/x5ezgu2snLeTNs8CeWgd5VwKK7Z7qjIQQnRDHI /2LjgpIcHsQox7BeD9gQ17MTKQ== -----END CERTIFICATE-----Generated at Mon Mar 2 06:20:00 2026 by rpki-client