$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft File: IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json) Hash identifier: FYR89OzFxnx0kkFiA/s8KNKsvZxaVx3WcEHNjXimLBY= Subject key identifier: BA:DE:2A:09:8F:EC:B3:34:CC:48:04:69:E9:AB:56:EB:80:69:02:E4 Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 11A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft Manifest number: 1162 Signing time: Tue 04 Nov 2025 17:21:18 +0000 Manifest this update: Tue 04 Nov 2025 17:21:18 +0000 Manifest next update: Tue 11 Nov 2025 17:21:18 +0000 Files and hashes: 1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: X6QLhLrVodv21y4srX9vnOjL84L+aK6e+0v7jfc5uWg=) 2: D9BBFBDA4D3111F099A48033C4F9AE02.roa (hash: A1A/LnUqdsNFUNCbA9pj78Zy7mXZZnhX+0nyseCL3vE=) 3: 98A0F61840AD11F0BB332714C4F9AE02.roa (hash: tKQU1f9hJtuAYfiy2kdRz9mYUmd+c/z8iKCPuJpB5Jo=) 4: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: GKHRKfwk3bqrqOFGPvJ+kjY0NTnB33jXoiW8bXeNOjw=) 5: 4F2654ACACDB11F0A3F2FF3CC4F9AE02.roa (hash: ezSFE6z1AfPI1kfaZKGN0eX+4u/ZznyBrlMf93wLFII=) 6: D276D68CACDC11F093B6B95AC4F9AE02.roa (hash: HogXJmL/NwNRLzeVXgVFZcWMkVgOGwGFOMaQzjDPXUk=) 7: 981DEAC6B1C711F08CEB3C61C4F9AE02.roa (hash: Xd/ha+8Rf40EUcmF2S28Em4xm72VBdQzvds2dDfnPNU=) 8: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: PDXFymAQeHbTCItIfy8LqqoHr3PVKA+eJZNU6voGL5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4518 (0x11a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Nov 4 17:21:18 2025 GMT Not After : Nov 11 17:21:18 2025 GMT Subject: CN=690a360e-24de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6c:c7:7d:96:e0:f8:23:95:4e:60:7d:62:88: 82:3b:05:d7:c3:b7:cd:3f:d2:72:b4:47:41:ee:79: ef:dc:8d:d0:d8:16:60:c7:b3:30:5a:0f:a6:0d:ae: 71:5d:05:c5:e3:7f:dc:fa:e0:30:3b:6a:7c:30:3d: a1:dc:ce:7b:18:9e:ba:50:4a:18:11:c3:54:3b:34: 53:bf:75:c3:95:a2:ea:3c:d7:67:ef:d2:60:57:3c: b9:bd:2b:36:88:39:29:e6:84:2c:b9:74:d1:e1:8e: 32:8b:55:d4:72:7b:8f:47:6e:83:bf:8a:b0:3a:54: 68:87:b2:ba:fc:7d:4e:08:c7:7f:be:3d:da:fb:ab: de:eb:cf:97:dc:83:d8:f4:31:b3:71:9f:eb:25:75: 48:4e:b5:d9:5e:07:0c:bf:97:a0:47:91:bb:fb:c5: 03:da:f3:ca:e7:dc:c8:0b:d4:01:aa:86:ca:80:f1: 64:61:c2:af:01:98:7d:98:41:6c:b4:93:ce:63:ed: 72:e7:1b:56:39:af:7e:79:d9:b6:9a:8a:3c:0b:6f: 6b:3a:29:30:3a:5c:82:f5:d0:75:89:1b:01:e8:9f: 65:f3:83:27:8b:60:a9:16:9b:3b:82:20:de:11:4e: 4a:c5:f7:b3:78:83:a7:9b:ff:7f:bd:a3:4c:95:89: 4c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DE:2A:09:8F:EC:B3:34:CC:48:04:69:E9:AB:56:EB:80:69:02:E4 X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:bc:8d:ca:ff:b3:97:1e:4c:7f:cf:81:c4:17:cf:16:2d:eb: 43:ad:9c:1d:77:dd:42:56:20:35:cc:04:3e:de:74:65:36:c6: 7d:b7:cc:ac:32:d1:e0:62:2c:66:da:79:50:fc:12:07:db:f9: 17:b0:89:4f:fb:f4:e0:90:72:75:a2:75:28:f1:4d:e7:1e:c3: bc:56:fe:b4:e9:a6:58:4a:9a:98:c4:ed:26:87:89:73:08:86: c3:64:55:c4:b0:a0:02:5f:c5:81:f3:a2:54:95:17:aa:34:2a: 43:44:36:39:16:9d:fa:6e:92:bb:c3:41:eb:4d:00:75:b9:93: c8:f1:5d:42:1f:f6:75:88:94:b9:79:11:04:ee:a1:2d:9b:fa: 7f:7f:ab:51:a7:e0:ec:68:30:13:7a:22:7e:5d:97:61:9c:97: 1a:4a:bf:8c:aa:d0:dd:2b:e4:4b:25:c7:2c:b6:ad:7f:5c:ac: a9:50:45:b4:21:36:69:14:f9:03:65:26:67:33:16:ec:4e:c0: d3:22:6f:3d:8d:79:93:75:5c:2f:87:86:54:26:d8:82:0f:48: f7:cd:e2:d1:7c:d7:c2:d9:6c:f4:1e:23:b6:35:53:57:08:28: 80:22:bc:1e:e7:e1:d1:0b:d4:22:16:68:38:7f:31:c5:ca:4e: 33:e6:22:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjUxMTA0MTcyMTE4WhcNMjUxMTExMTcyMTE4WjAYMRYwFAYD VQQDEw02OTBhMzYwZS0yNGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2zHfZbg+COVTmB9YoiCOwXXw7fNP9JytEdB7nnv3I3Q2BZgx7MwWg+mDa5x XQXF43/c+uAwO2p8MD2h3M57GJ66UEoYEcNUOzRTv3XDlaLqPNdn79JgVzy5vSs2 iDkp5oQsuXTR4Y4yi1XUcnuPR26Dv4qwOlRoh7K6/H1OCMd/vj3a+6ve68+X3IPY 9DGzcZ/rJXVITrXZXgcMv5egR5G7+8UD2vPK59zIC9QBqobKgPFkYcKvAZh9mEFs tJPOY+1y5xtWOa9+edm2moo8C29rOikwOlyC9dB1iRsB6J9l84Mni2CpFps7giDe EU5KxfezeIOnm/9/vaNMlYlM0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLreKgmP 7LM0zEgEaemrVuuAaQLkMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdEQy8zNUY3OTg2NjFGMDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85 aEhPUjhzTHBabDVPN2h0MEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfvI3K/7OXHkx/z4HEF88WLetDrZwdd91CViA1zAQ+3nRlNsZ9t8ys MtHgYixm2nlQ/BIH2/kXsIlP+/TgkHJ1onUo8U3nHsO8Vv606aZYSpqYxO0mh4lz CIbDZFXEsKACX8WB86JUlReqNCpDRDY5Fp36bpK7w0HrTQB1uZPI8V1CH/Z1iJS5 eREE7qEtm/p/f6tRp+DsaDATeiJ+XZdhnJcaSr+MqtDdK+RLJccstq1/XKypUEW0 ITZpFPkDZSZnMxbsTsDTIm89jXmTdVwvh4ZUJtiCD0j3zeLRfNfC2Wz0HiO2NVNX CCiAIrwe5+HRC9QiFmg4fzHFyk4z5iL7 -----END CERTIFICATE-----Generated at Wed Nov 5 10:04:29 2025 by rpki-client