$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft File: IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json) Hash identifier: VIbJCyY+vqEDhuaw0+nv0jSrDJFW8xyJHAah+KD4YjM= Subject key identifier: 86:09:0E:8A:9F:22:BC:BE:34:9A:D3:E5:F5:76:4C:1A:5A:40:CB:C5 Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 1233 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft Manifest number: 11DD Signing time: Wed 10 Jun 2026 17:11:14 +0000 Manifest this update: Wed 10 Jun 2026 17:11:13 +0000 Manifest next update: Wed 17 Jun 2026 17:11:13 +0000 Files and hashes: 1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: v2HoccDWm52TUaZft3OJn2fMxsCwdTVE5/NOPWGsjGE=) 2: D9BBFBDA4D3111F099A48033C4F9AE02.roa (hash: DerhX6OwSbe0rRaFIZdy5dbL/hGKFEzFgbvMCI0QCo0=) 3: 69915526EA0711F0976467B16F6F56BC.roa (hash: sLYsx+0TCakC1YwYdtjQtbYvAlnAp516G4hk84r24Hc=) 4: D276D68CACDC11F093B6B95AC4F9AE02.roa (hash: 3yfrgKeAqT2UJ9hoABf1H6+wfUw8pcotIBYIseVLvBY=) 5: 2E3A7CDCECB411F0B6919987656F56BC.roa (hash: kTCwjps9JXKEexuvTBj7XMywtX0m9mqMVThPCXp01vw=) 6: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: XYEh/xOjDbsTNdnGi10ej2EmI6JjqzNUkL1XRZsJguA=) 7: 98A0F61840AD11F0BB332714C4F9AE02.roa (hash: IS1j4fiLKS57qrKHF7wS3bUANSIBQvPd5t8keIKkTrs=) 8: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: vKccd2F9ftUD7dxFhS0jRDAUZNsfYOsIjkhXXA2UhHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4659 (0x1233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Jun 10 17:11:13 2026 GMT Not After : Jun 17 17:11:13 2026 GMT Subject: CN=6a299ab2-5519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:55:2c:85:c5:37:b6:42:dd:20:95:c8:a8:e2: df:19:45:ba:3d:a7:c3:cf:b5:80:12:91:b5:1c:6d: ba:89:06:7b:69:03:e0:6d:92:c3:74:f2:ff:a5:9a: 7f:62:c5:e1:9c:17:c6:67:7b:5d:37:99:f0:3a:d1: 0b:a5:69:ca:03:bb:a9:17:48:e5:0b:18:be:07:f9: a4:48:c2:1d:38:55:00:0f:8a:ad:7a:a8:1d:fb:8a: 30:25:fc:51:4b:98:97:93:a4:62:b1:2f:16:8f:dd: f3:49:21:d5:35:d4:c9:b2:46:bc:50:b2:36:29:1e: 89:ce:8b:7f:64:50:37:f2:9c:4a:5e:dc:4b:c0:54: 17:bb:88:04:46:13:c1:51:e1:1f:5f:58:54:b1:03: 0d:5b:d4:3b:65:29:bf:ac:8d:bc:7a:f4:49:92:a7: e9:ca:8b:50:34:8f:84:3c:c7:07:2e:18:e6:12:36: 2c:63:e4:22:27:89:f0:00:39:df:3f:c4:f7:4c:cd: 9b:24:24:22:38:42:85:65:4b:67:25:6f:91:44:93: c9:c5:ac:3b:e1:3c:44:be:9a:8b:64:7e:ea:e3:6c: 06:d2:5a:1a:43:2d:74:4b:d6:79:d7:bb:10:7f:6b: e7:6e:1b:2c:de:e2:2e:73:1c:ed:4a:c6:20:1d:01: 2a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:09:0E:8A:9F:22:BC:BE:34:9A:D3:E5:F5:76:4C:1A:5A:40:CB:C5 X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:ca:15:0f:32:9a:e7:bc:06:2a:0b:4a:25:f1:15:76:f8:0f: 80:18:fe:09:b1:22:ce:1d:66:57:e0:3e:2f:e6:f2:0b:0b:5f: 73:23:74:9a:3d:f9:ec:4a:60:73:8b:c0:52:be:5e:51:c7:91: 16:49:fc:6b:07:6c:df:47:a2:33:43:df:83:5f:78:6f:d0:c6: 52:be:46:40:ad:68:f4:9c:6a:b7:87:64:70:00:e5:61:f8:f2: dd:16:aa:41:a3:b3:a2:1e:7a:81:83:d4:ec:3a:a9:4e:92:2d: 65:42:fb:19:83:07:3c:e0:d2:59:b0:0d:04:ba:73:8a:99:77: 86:ad:86:bd:88:04:38:76:a5:d8:29:5e:b9:c7:24:ae:9f:ac: 81:79:58:81:31:91:dc:46:01:3a:64:10:44:65:c9:1c:b1:d1: 8c:63:41:10:2c:9b:ff:c0:5f:a8:f4:12:65:10:dc:02:20:42: aa:6a:15:72:34:7b:da:6b:55:bb:75:6c:20:0e:7c:d1:37:ea: 84:5f:89:f4:6e:9f:9a:0b:5b:64:a5:c6:87:b9:68:8f:51:10: 9e:68:da:5c:7d:c4:f3:14:9f:1f:fc:82:39:8f:76:3e:70:59: f5:1d:18:4e:73:76:cc:88:22:95:a2:36:33:60:8c:90:45:52: d5:24:79:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjYwNjEwMTcxMTEzWhcNMjYwNjE3MTcxMTEzWjAYMRYwFAYD VQQDEw02YTI5OWFiMi01NTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlVUshcU3tkLdIJXIqOLfGUW6PafDz7WAEpG1HG26iQZ7aQPgbZLDdPL/pZp/ YsXhnBfGZ3tdN5nwOtELpWnKA7upF0jlCxi+B/mkSMIdOFUAD4qteqgd+4owJfxR S5iXk6RisS8Wj93zSSHVNdTJska8ULI2KR6Jzot/ZFA38pxKXtxLwFQXu4gERhPB UeEfX1hUsQMNW9Q7ZSm/rI28evRJkqfpyotQNI+EPMcHLhjmEjYsY+QiJ4nwADnf P8T3TM2bJCQiOEKFZUtnJW+RRJPJxaw74TxEvpqLZH7q42wG0loaQy10S9Z517sQ f2vnbhss3uIucxztSsYgHQEqDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIYJDoqf Iry+NJrT5fV2TBpaQMvFMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdEQy8zNUY3OTg2NjFGMDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85 aEhPUjhzTHBabDVPN2h0MEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJcoVDzKa57wGKgtKJfEVdvgPgBj+CbEizh1mV+A+L+byCwtfcyN0mj357Epg c4vAUr5eUceRFkn8awds30eiM0Pfg194b9DGUr5GQK1o9Jxqt4dkcADlYfjy3Raq QaOzoh56gYPU7DqpTpItZUL7GYMHPODSWbANBLpzipl3hq2GvYgEOHal2Cleucck rp+sgXlYgTGR3EYBOmQQRGXJHLHRjGNBECyb/8BfqPQSZRDcAiBCqmoVcjR72mtV u3VsIA580TfqhF+J9G6fmgtbZKXGh7loj1EQnmjaXH3E8xSfH/yCOY92PnBZ9R0Y TnN2zIgilaI2M2CMkEVS1SR5Kg== -----END CERTIFICATE-----Generated at Fri Jun 12 14:42:40 2026 by rpki-client