$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft File: IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json) Hash identifier: k70JE79GVKST4g4GcXpcn/+7LpnXD97fS/Dhmm1edTs= Subject key identifier: 38:EB:97:7C:B1:0F:93:C6:F1:05:0A:3E:C3:2A:41:AA:43:19:9C:C6 Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 126F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft Manifest number: 1214 Signing time: Sun 20 Sep 2026 17:08:23 +0000 Manifest this update: Sun 20 Sep 2026 17:08:23 +0000 Manifest next update: Sun 27 Sep 2026 17:08:23 +0000 Files and hashes: 1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: oQNUdIacJ/enu9gbCXQYgnVP4m2FReXiyfyYTv1J02Y=) 2: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: vKccd2F9ftUD7dxFhS0jRDAUZNsfYOsIjkhXXA2UhHI=) 3: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: XYEh/xOjDbsTNdnGi10ej2EmI6JjqzNUkL1XRZsJguA=) 4: DB3006F8962A11F19F8219DF6311F970.roa (hash: El/juh33gOh26Nr9+88ixW3exl2598cwf/qJ0h1IURE=) 5: DA0D94B6962A11F19F8219DF6311F970.roa (hash: 0eDYd5bx4V8RD3fWCK7H0P6J+7V3ULJb/N3cYKdbtWg=) 6: 2E3A7CDCECB411F0B6919987656F56BC.roa (hash: kTCwjps9JXKEexuvTBj7XMywtX0m9mqMVThPCXp01vw=) 7: D8D9323A962A11F19F8219DF6311F970.roa (hash: pVYFs3HRNNehYpuljIjcWfILlhr7bBotjOW/wIaOGyg=) 8: 69915526EA0711F0976467B16F6F56BC.roa (hash: sLYsx+0TCakC1YwYdtjQtbYvAlnAp516G4hk84r24Hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4719 (0x126f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Sep 20 17:08:23 2026 GMT Not After : Sep 27 17:08:23 2026 GMT Subject: CN=6ab01307-6753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b4:83:f3:c6:51:f9:a6:12:2d:a2:51:23:d7: 7d:7d:72:f4:45:1d:49:75:0d:65:1c:1c:42:e1:aa: 56:00:37:65:97:31:8f:01:84:03:2f:3a:b5:61:07: a3:8a:0c:78:63:e1:03:8a:a0:cf:ec:cf:39:89:66: 72:3b:d6:bd:dd:d4:d9:cb:7c:53:9c:78:80:5f:ec: ab:c4:3e:52:ab:44:ce:32:ec:39:cc:65:89:12:7d: 4b:77:0a:e9:ee:52:13:46:f8:c3:9f:92:dd:3d:1f: 5f:00:2d:5a:72:60:e1:92:51:6b:50:ae:f9:f2:4a: c5:6c:a2:12:1e:f7:93:1e:68:5e:1e:22:03:24:6a: 18:65:82:37:f3:6a:7c:24:41:d4:73:ca:0f:ec:c4: 48:a5:c8:c6:a6:4c:68:94:b9:06:1b:7e:87:00:62: 44:8e:df:89:37:9f:66:cf:17:94:e3:0a:49:d6:ac: d2:69:7d:f2:80:b4:4f:d6:98:80:55:37:d9:75:a5: b1:e4:69:fd:ad:7f:56:db:85:b1:e7:db:a0:e1:c7: f1:a5:76:0c:8a:2c:ec:ee:f4:3c:13:fc:63:9f:6f: be:ee:46:30:0e:0a:d2:0f:5e:e2:03:ef:dc:b7:82: 4e:e0:5c:47:80:81:6a:bf:b9:c1:e2:00:0b:77:e0: 06:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:EB:97:7C:B1:0F:93:C6:F1:05:0A:3E:C3:2A:41:AA:43:19:9C:C6 X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4a:38:8a:36:07:81:2f:1f:72:a4:97:3a:44:f8:83:17:0c: 7b:79:48:11:93:97:f1:ee:ba:70:da:9d:6e:29:7c:95:b8:66: 58:dc:09:46:9b:53:29:95:e1:a4:46:fe:1f:d1:fa:30:c8:a4: a4:f5:87:b7:5e:d4:a2:c0:d3:ae:0b:c8:4c:34:5c:d2:6b:85: 2c:74:1e:06:e7:ed:9c:43:f9:b7:1a:78:a7:81:08:d4:61:3f: f1:cb:7a:c8:e3:63:b2:9a:76:e9:7a:17:04:9c:42:3b:d0:67: bb:34:da:66:34:aa:5c:a1:8d:56:34:f0:84:87:49:58:42:3b: 69:24:a1:43:d3:85:19:30:c5:11:cc:9d:d5:9f:bf:98:87:78: 90:41:0b:09:3e:fe:12:95:71:6f:80:34:cd:eb:5a:be:49:ba: b5:13:67:5e:b5:e1:99:ff:ef:a4:8e:8d:46:92:f2:a8:1d:9d: 3f:42:14:76:1c:42:7b:ca:01:8a:1d:62:6e:c7:b0:85:6b:ba: 29:8d:65:3c:9d:f4:1a:a7:70:77:1f:8a:72:b4:74:17:87:bf: 98:a0:5d:24:4a:6b:2e:2b:70:7d:76:ab:94:7b:80:6b:27:1d: eb:9e:78:f1:fc:23:45:70:ff:3e:9e:54:94:ff:d6:45:be:f4: 24:f3:dc:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjYwOTIwMTcwODIzWhcNMjYwOTI3MTcwODIzWjAYMRYwFAYD VQQDEw02YWIwMTMwNy02NzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7SD88ZR+aYSLaJRI9d9fXL0RR1JdQ1lHBxC4apWADdllzGPAYQDLzq1YQej igx4Y+EDiqDP7M85iWZyO9a93dTZy3xTnHiAX+yrxD5Sq0TOMuw5zGWJEn1Ldwrp 7lITRvjDn5LdPR9fAC1acmDhklFrUK758krFbKISHveTHmheHiIDJGoYZYI382p8 JEHUc8oP7MRIpcjGpkxolLkGG36HAGJEjt+JN59mzxeU4wpJ1qzSaX3ygLRP1piA VTfZdaWx5Gn9rX9W24Wx59ug4cfxpXYMiizs7vQ8E/xjn2++7kYwDgrSD17iA+/c t4JO4FxHgIFqv7nB4gALd+AGZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDjrl3yx D5PG8QUKPsMqQapDGZzGMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdEQy8zNUY3OTg2NjFGMDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85 aEhPUjhzTHBabDVPN2h0MEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT0o4ijYHgS8fcqSXOkT4gxcMe3lIEZOX8e66cNqdbil8lbhmWNwJRptTKZXh pEb+H9H6MMikpPWHt17UosDTrgvITDRc0muFLHQeBuftnEP5txp4p4EI1GE/8ct6 yONjspp26XoXBJxCO9BnuzTaZjSqXKGNVjTwhIdJWEI7aSShQ9OFGTDFEcyd1Z+/ mId4kEELCT7+EpVxb4A0zetavkm6tRNnXrXhmf/vpI6NRpLyqB2dP0IUdhxCe8oB ih1ibsewhWu6KY1lPJ30Gqdwdx+KcrR0F4e/mKBdJEprLitwfXarlHuAaycd6554 8fwjRXD/Pp5UlP/WRb70JPPcgA== -----END CERTIFICATE-----Generated at Tue Sep 22 16:29:22 2026 by rpki-client