$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft File: IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json) Hash identifier: zXwtxTLocCZiWGe6CwdIFC8uN1Ob+PTIRzxTZubUjmA= Subject key identifier: B1:FF:7F:75:A1:2A:3A:27:5B:19:D5:AF:42:5F:4F:5C:E8:A5:22:B6 Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 1234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft Manifest number: 11DE Signing time: Fri 12 Jun 2026 17:09:41 +0000 Manifest this update: Fri 12 Jun 2026 17:09:40 +0000 Manifest next update: Fri 19 Jun 2026 17:09:40 +0000 Files and hashes: 1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: JCbUAhG/oYsx8tYQdvMQ+h2pD3qg8FeJ0S2/Ikn8ZSo=) 2: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: XYEh/xOjDbsTNdnGi10ej2EmI6JjqzNUkL1XRZsJguA=) 3: D276D68CACDC11F093B6B95AC4F9AE02.roa (hash: 3yfrgKeAqT2UJ9hoABf1H6+wfUw8pcotIBYIseVLvBY=) 4: 69915526EA0711F0976467B16F6F56BC.roa (hash: sLYsx+0TCakC1YwYdtjQtbYvAlnAp516G4hk84r24Hc=) 5: 98A0F61840AD11F0BB332714C4F9AE02.roa (hash: IS1j4fiLKS57qrKHF7wS3bUANSIBQvPd5t8keIKkTrs=) 6: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: vKccd2F9ftUD7dxFhS0jRDAUZNsfYOsIjkhXXA2UhHI=) 7: D9BBFBDA4D3111F099A48033C4F9AE02.roa (hash: DerhX6OwSbe0rRaFIZdy5dbL/hGKFEzFgbvMCI0QCo0=) 8: 2E3A7CDCECB411F0B6919987656F56BC.roa (hash: kTCwjps9JXKEexuvTBj7XMywtX0m9mqMVThPCXp01vw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 17:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4660 (0x1234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Jun 12 17:09:40 2026 GMT Not After : Jun 19 17:09:40 2026 GMT Subject: CN=6a2c3d54-82ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:20:b0:a7:d2:24:11:e2:e6:1a:51:36:70:20: ce:c6:a6:f4:42:2e:87:5c:e3:99:45:82:c2:65:86: 2a:64:23:af:66:92:aa:27:f1:8a:24:f6:ad:c6:94: 46:1b:39:8a:6f:88:19:68:d2:d6:05:ab:cd:29:31: 09:2c:92:ef:8e:31:bd:22:0a:49:98:e4:17:65:69: a8:5b:2b:94:20:02:0b:e0:ff:99:11:41:25:17:22: bd:d0:0f:e8:3d:60:43:9c:ca:39:22:8c:28:46:61: 4c:ee:e0:49:71:10:aa:b9:db:6f:c7:85:1b:dd:cf: 2a:5b:0f:b8:99:9c:2f:aa:79:87:1b:2c:4f:3f:db: 12:e8:7a:e1:12:7e:06:0b:ae:a6:63:2f:3c:35:25: 8e:9c:f2:fa:80:20:a7:ab:02:cc:8b:d2:78:b1:77: 7f:b9:3e:bc:e2:c7:9a:f5:ed:bf:a6:28:07:40:93: 40:2d:52:b4:9f:fd:06:b3:40:5d:34:62:45:c1:b2: fa:56:9f:0c:1a:3a:89:cf:68:36:9d:f0:ce:73:f3: e0:72:97:53:6c:ce:13:b9:9f:6f:35:37:d2:34:2d: bb:0d:28:11:0e:ba:fd:c2:2b:43:e8:1d:07:d4:44: 7f:33:51:e4:5a:83:98:22:42:4d:43:91:71:6c:93: 6f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FF:7F:75:A1:2A:3A:27:5B:19:D5:AF:42:5F:4F:5C:E8:A5:22:B6 X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:3e:d2:53:04:71:3d:76:7f:a3:e3:af:e8:de:e3:f1:e5:13: b1:18:42:c9:1e:ac:eb:5a:8c:50:a3:3a:28:ad:35:94:d1:da: 26:cd:91:97:cf:31:c9:10:44:e6:98:d4:4f:b7:8d:8d:64:10: e4:e5:2e:e5:cc:58:11:9d:06:53:bd:ce:a0:0f:b8:31:13:ef: 5a:c0:c1:36:92:e3:51:70:a9:78:0f:68:e5:66:cf:28:6d:42: d0:78:67:c3:99:a8:f2:d0:3a:b9:6c:da:16:14:e1:0a:29:2f: 45:3e:e1:4b:ed:13:02:21:d6:bf:02:74:66:2d:ea:1c:8b:1d: 47:b3:38:bb:3a:aa:39:55:6e:a4:f2:c1:db:ad:b6:f5:5c:fd: e3:cf:c2:55:a6:ad:07:a8:37:67:93:75:ce:cf:37:16:40:2e: 0e:e9:c8:fb:48:fd:99:e3:e0:d5:38:14:a5:e7:f7:e4:45:12: 21:b0:61:7e:cb:c8:f9:0c:e9:2c:76:8d:c7:3c:f8:40:20:53: c2:cd:61:ca:4d:ce:dd:1a:fb:83:9f:ae:86:70:78:d5:14:da: 46:53:18:df:7c:42:b9:b9:83:db:e1:9f:d5:7d:05:c9:f0:82: f8:2d:9c:ee:9b:7d:57:54:2c:91:c9:5e:30:5a:44:eb:76:4e: 51:44:72:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjYwNjEyMTcwOTQwWhcNMjYwNjE5MTcwOTQwWjAYMRYwFAYD VQQDEw02YTJjM2Q1NC04MmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiCwp9IkEeLmGlE2cCDOxqb0Qi6HXOOZRYLCZYYqZCOvZpKqJ/GKJPatxpRG GzmKb4gZaNLWBavNKTEJLJLvjjG9IgpJmOQXZWmoWyuUIAIL4P+ZEUElFyK90A/o PWBDnMo5IowoRmFM7uBJcRCqudtvx4Ub3c8qWw+4mZwvqnmHGyxPP9sS6HrhEn4G C66mYy88NSWOnPL6gCCnqwLMi9J4sXd/uT684sea9e2/pigHQJNALVK0n/0Gs0Bd NGJFwbL6Vp8MGjqJz2g2nfDOc/PgcpdTbM4TuZ9vNTfSNC27DSgRDrr9witD6B0H 1ER/M1HkWoOYIkJNQ5FxbJNvGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLH/f3Wh KjonWxnVr0JfT1zopSK2MB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdEQy8zNUY3OTg2NjFGMDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85 aEhPUjhzTHBabDVPN2h0MEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARj7SUwRxPXZ/o+Ov6N7j8eUTsRhCyR6s61qMUKM6KK01lNHaJs2Rl88xyRBE 5pjUT7eNjWQQ5OUu5cxYEZ0GU73OoA+4MRPvWsDBNpLjUXCpeA9o5WbPKG1C0Hhn w5mo8tA6uWzaFhThCikvRT7hS+0TAiHWvwJ0Zi3qHIsdR7M4uzqqOVVupPLB2622 9Vz948/CVaatB6g3Z5N1zs83FkAuDunI+0j9mePg1TgUpef35EUSIbBhfsvI+Qzp LHaNxzz4QCBTws1hyk3O3Rr7g5+uhnB41RTaRlMY33xCubmD2+Gf1X0FyfCC+C2c 7pt9V1QskcleMFpE63ZOUURyGQ== -----END CERTIFICATE-----Generated at Sat Jun 13 08:39:02 2026 by rpki-client