$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft File: IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json) Hash identifier: bPFZnDKQ4HDkdI3FLJ4ZkkeQcubJWnXmYzS6VY2VOF0= Subject key identifier: 50:AC:53:BB:EE:83:AB:1F:4C:40:AA:5C:78:92:8E:D8:31:36:F0:0B Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 1218 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft Manifest number: 11C2 Signing time: Sat 18 Apr 2026 17:07:24 +0000 Manifest this update: Sat 18 Apr 2026 17:07:24 +0000 Manifest next update: Sat 25 Apr 2026 17:07:24 +0000 Files and hashes: 1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: yWD6+8eJtIWevHRB7P3CGYf0Hj0YFzQxzlHDSsGzupY=) 2: 69915526EA0711F0976467B16F6F56BC.roa (hash: sLYsx+0TCakC1YwYdtjQtbYvAlnAp516G4hk84r24Hc=) 3: D276D68CACDC11F093B6B95AC4F9AE02.roa (hash: 3yfrgKeAqT2UJ9hoABf1H6+wfUw8pcotIBYIseVLvBY=) 4: D9BBFBDA4D3111F099A48033C4F9AE02.roa (hash: DerhX6OwSbe0rRaFIZdy5dbL/hGKFEzFgbvMCI0QCo0=) 5: 2E3A7CDCECB411F0B6919987656F56BC.roa (hash: kTCwjps9JXKEexuvTBj7XMywtX0m9mqMVThPCXp01vw=) 6: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: vKccd2F9ftUD7dxFhS0jRDAUZNsfYOsIjkhXXA2UhHI=) 7: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: XYEh/xOjDbsTNdnGi10ej2EmI6JjqzNUkL1XRZsJguA=) 8: 98A0F61840AD11F0BB332714C4F9AE02.roa (hash: IS1j4fiLKS57qrKHF7wS3bUANSIBQvPd5t8keIKkTrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 17:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4632 (0x1218) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Apr 18 17:07:24 2026 GMT Not After : Apr 25 17:07:24 2026 GMT Subject: CN=69e3ba4c-6b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:80:3b:7a:38:24:a6:2d:db:00:52:43:76:d5: 86:6f:40:39:bc:5e:a1:af:06:45:c8:89:ca:ae:27: fa:aa:e8:c3:3b:6b:a6:3e:f4:69:c1:87:94:a5:c6: c0:80:fd:e9:25:8c:95:4f:9c:a7:f1:68:23:6d:33: 6c:a4:d2:68:45:17:ef:2c:7d:d7:8b:e4:c7:db:30: b3:79:9d:cf:f0:f8:5c:7f:c0:fc:3f:7d:04:e6:d7: 0d:92:4c:50:a3:dc:6b:49:7c:ed:06:c1:10:b8:3e: 67:1b:6a:2e:0d:02:ac:c2:40:d8:79:9f:d5:3d:22: 02:58:5b:56:94:11:96:a0:3b:95:f6:62:ce:4a:e5: 5a:18:63:22:81:0a:f2:f8:11:4d:ed:70:b6:90:d7: e8:34:14:d2:c2:66:d6:91:54:6e:8b:81:90:fb:75: ce:b0:30:7f:6b:9f:42:40:a3:0e:c8:4f:4a:e1:3b: ea:a0:b1:26:43:70:c8:49:22:f6:a1:e0:ce:26:2e: 54:b7:fa:c6:12:b7:03:af:d8:1d:ed:aa:fd:22:d0: 5f:29:0c:89:81:23:84:11:bd:90:d8:fa:43:1d:fe: 02:aa:ff:51:b8:72:b4:48:3b:a1:20:11:73:e1:db: c5:3f:50:83:fe:c5:f3:7a:c0:95:7b:69:9f:42:3c: 51:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AC:53:BB:EE:83:AB:1F:4C:40:AA:5C:78:92:8E:D8:31:36:F0:0B X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:15:60:f8:ba:d1:1f:0a:96:a5:53:3d:81:ce:2b:2b:12:74: 34:73:78:0b:62:5f:e0:82:2e:c9:38:ec:88:b6:96:ae:e2:7f: 45:85:d0:11:c9:63:35:03:6a:71:4e:57:8c:80:de:2e:48:a8: 38:d0:ea:75:c8:a4:d4:d9:09:66:b6:71:4f:13:2f:5c:4a:6c: 8d:88:c4:17:41:c3:41:90:c8:18:6c:43:32:ad:0f:e0:8d:9b: 2e:d2:73:91:7b:f0:1c:32:c5:3b:73:c1:33:11:cb:97:c2:02: 66:a6:22:bd:89:fc:a7:65:bb:89:88:1d:93:e9:f4:90:98:fa: dd:7c:f1:46:8d:4a:32:f9:15:3b:31:bf:19:de:1e:57:2e:96: 5e:8f:df:c1:63:81:50:11:86:ef:83:a2:59:4a:6f:53:1e:8a: 55:10:dd:43:8a:df:90:c4:42:12:6f:49:1d:f3:08:f0:b9:e6: 34:30:d5:27:97:38:a2:5c:40:5a:48:f0:ff:42:7d:3c:0b:df: 21:d6:13:86:79:18:d5:38:1e:4f:df:88:20:35:7d:af:d9:9c: d3:57:cf:00:1f:e7:b7:76:95:09:58:9a:48:e3:09:ed:de:8c: 6b:7d:ca:93:ff:ed:8c:18:c9:ed:55:54:f0:d4:e2:7b:d7:2c: 7d:d5:f5:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjYwNDE4MTcwNzI0WhcNMjYwNDI1MTcwNzI0WjAYMRYwFAYD VQQDEw02OWUzYmE0Yy02Yjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIA7ejgkpi3bAFJDdtWGb0A5vF6hrwZFyInKrif6qujDO2umPvRpwYeUpcbA gP3pJYyVT5yn8WgjbTNspNJoRRfvLH3Xi+TH2zCzeZ3P8Phcf8D8P30E5tcNkkxQ o9xrSXztBsEQuD5nG2ouDQKswkDYeZ/VPSICWFtWlBGWoDuV9mLOSuVaGGMigQry +BFN7XC2kNfoNBTSwmbWkVRui4GQ+3XOsDB/a59CQKMOyE9K4TvqoLEmQ3DISSL2 oeDOJi5Ut/rGErcDr9gd7ar9ItBfKQyJgSOEEb2Q2PpDHf4Cqv9RuHK0SDuhIBFz 4dvFP1CD/sXzesCVe2mfQjxRtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFCsU7vu g6sfTECqXHiSjtgxNvALMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdEQy8zNUY3OTg2NjFGMDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85 aEhPUjhzTHBabDVPN2h0MEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVxVg+LrRHwqWpVM9gc4rKxJ0NHN4C2Jf4IIuyTjsiLaWruJ/RYXQEcljNQNq cU5XjIDeLkioONDqdcik1NkJZrZxTxMvXEpsjYjEF0HDQZDIGGxDMq0P4I2bLtJz kXvwHDLFO3PBMxHLl8ICZqYivYn8p2W7iYgdk+n0kJj63XzxRo1KMvkVOzG/Gd4e Vy6WXo/fwWOBUBGG74OiWUpvUx6KVRDdQ4rfkMRCEm9JHfMI8LnmNDDVJ5c4olxA Wkjw/0J9PAvfIdYThnkY1TgeT9+IIDV9r9mc01fPAB/nt3aVCViaSOMJ7d6Ma33K k//tjBjJ7VVU8NTie9csfdX1xQ== -----END CERTIFICATE-----Generated at Sun Apr 19 09:33:00 2026 by rpki-client