$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft File: IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json) Hash identifier: 6ExejZAv7RrFZBekN7MvenCaYjeOtTiKh6CFqrNP0nc= Subject key identifier: 9C:50:86:F4:20:3D:F7:BB:1B:F5:5B:6B:E5:D6:AB:5A:B5:46:D0:B2 Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 1170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft Manifest number: 1135 Signing time: Mon 08 Sep 2025 17:18:50 +0000 Manifest this update: Mon 08 Sep 2025 17:18:50 +0000 Manifest next update: Mon 15 Sep 2025 17:18:50 +0000 Files and hashes: 1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: YbtnoKUlg6AMstd+S87tEnDnJnyntqskTJ3ZfZ1mYgI=) 2: D9BBFBDA4D3111F099A48033C4F9AE02.roa (hash: A1A/LnUqdsNFUNCbA9pj78Zy7mXZZnhX+0nyseCL3vE=) 3: 13D21C6EFEBA11ED9D83553FC4F9AE02.roa (hash: mPVwkbrmgIGFwgmxOu/KgFG11TMB51WhYaitUgpspRc=) 4: 98A0F61840AD11F0BB332714C4F9AE02.roa (hash: tKQU1f9hJtuAYfiy2kdRz9mYUmd+c/z8iKCPuJpB5Jo=) 5: 97F6216640AD11F0BB332714C4F9AE02.roa (hash: D/cwdq2qeau3nAVw8Sz3zqNDQKjgr7DJFvLl2UTQid4=) 6: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: GKHRKfwk3bqrqOFGPvJ+kjY0NTnB33jXoiW8bXeNOjw=) 7: 6521A70C395411F0AF136459C4F9AE02.roa (hash: 4Idad4dFmk8KzOmK1O+klRuBqcKZ7Fg2fSUd52ueJnE=) 8: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: PDXFymAQeHbTCItIfy8LqqoHr3PVKA+eJZNU6voGL5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 17:18:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4464 (0x1170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Sep 8 17:18:50 2025 GMT Not After : Sep 15 17:18:50 2025 GMT Subject: CN=68bf0ffa-c71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:07:40:cc:0d:bf:6e:42:d2:ae:23:5e:5c:ae: 60:ee:43:33:57:a3:d4:65:4b:52:42:ae:d1:fb:4a: a9:ce:b7:d6:d3:01:ad:d1:60:20:63:a3:ad:47:0d: 51:4e:e4:35:d8:34:10:4d:69:f4:fd:44:43:1f:27: 0b:80:14:73:cb:e0:d9:4e:68:b0:de:17:3d:66:e5: 5a:06:ae:dc:2f:43:dd:e7:0e:9a:ff:5f:78:b6:3c: 81:85:a2:07:c5:f8:37:7a:f2:b6:23:01:ab:90:03: 41:b0:4d:64:a6:9e:9b:4e:e6:c2:90:fe:80:30:89: 24:22:8b:74:3f:87:9e:0a:46:4a:91:cf:fd:dd:fc: 32:0a:5b:f3:25:6b:da:10:bc:27:22:43:fb:5d:64: 55:f6:80:e6:fd:61:f8:9b:bf:cd:e8:43:d1:f2:cf: a2:fe:2a:35:bd:f8:39:b4:4b:ad:b7:63:f4:a7:66: 38:34:d6:b6:53:66:6f:ca:65:1d:cd:32:0f:3f:79: 79:62:ee:39:63:73:70:77:bf:04:96:5d:59:a9:8f: 53:f7:2f:95:1c:27:d7:cb:fd:7e:1b:cf:41:60:da: db:dd:6d:d0:9c:14:63:94:1d:52:5d:27:ba:9c:42: 28:0f:1e:9c:c3:ee:f7:e6:24:c1:52:86:1a:90:76: ab:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:50:86:F4:20:3D:F7:BB:1B:F5:5B:6B:E5:D6:AB:5A:B5:46:D0:B2 X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ea:d0:d2:c1:bc:26:c4:5d:eb:26:16:e6:0f:af:14:70:54: 2b:77:bf:f0:fc:34:bd:f0:1e:ef:b7:a7:2d:79:34:ca:de:bb: 96:c8:a7:31:27:a5:4e:72:0b:27:00:0c:fd:e4:b3:8e:98:ca: 2e:d0:8d:24:63:ce:13:d8:1e:c7:bf:86:c2:3c:12:a9:bf:90: a7:6f:08:a3:84:49:0a:3a:64:78:8a:c1:b5:9f:1e:4f:4f:f1: 28:9b:2b:37:3f:4c:45:5f:b8:4d:ce:71:01:e0:f2:6a:ea:be: fe:1d:c7:e6:3e:c9:9c:8f:99:ca:7b:a5:41:d1:2c:b2:f6:a2: 1d:22:cb:9a:22:9b:b4:03:ee:a9:bf:c8:9c:52:34:62:0c:be: 00:d3:95:49:d8:7d:b5:86:a0:88:20:67:49:3c:93:9b:c2:47: 21:dd:53:55:de:e9:2f:1f:44:b8:e9:57:70:68:54:56:bf:f7: 24:14:78:6e:99:2e:2e:2d:c5:b7:c7:be:f5:03:66:a0:da:f3: ca:19:65:59:59:3e:09:21:c6:e9:b5:48:73:9e:d3:7c:e8:73: d5:b9:42:53:79:9e:e2:7e:5e:bd:e2:16:a8:82:2e:6e:29:d0: a2:be:f8:ec:ff:76:01:f1:b7:ab:f5:fb:b8:12:a1:68:72:02: 9c:41:82:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjUwOTA4MTcxODUwWhcNMjUwOTE1MTcxODUwWjAYMRYwFAYD VQQDEw02OGJmMGZmYS1jNzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAdAzA2/bkLSriNeXK5g7kMzV6PUZUtSQq7R+0qpzrfW0wGt0WAgY6OtRw1R TuQ12DQQTWn0/URDHycLgBRzy+DZTmiw3hc9ZuVaBq7cL0Pd5w6a/194tjyBhaIH xfg3evK2IwGrkANBsE1kpp6bTubCkP6AMIkkIot0P4eeCkZKkc/93fwyClvzJWva ELwnIkP7XWRV9oDm/WH4m7/N6EPR8s+i/io1vfg5tEutt2P0p2Y4NNa2U2ZvymUd zTIPP3l5Yu45Y3Nwd78Ell1ZqY9T9y+VHCfXy/1+G89BYNrb3W3QnBRjlB1SXSe6 nEIoDx6cw+735iTBUoYakHargwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxQhvQg Pfe7G/Vba+XWq1q1RtCyMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdEQy8zNUY3OTg2NjFGMDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85 aEhPUjhzTHBabDVPN2h0MEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO6tDSwbwmxF3rJhbmD68UcFQrd7/w/DS98B7vt6cteTTK3ruWyKcx J6VOcgsnAAz95LOOmMou0I0kY84T2B7Hv4bCPBKpv5CnbwijhEkKOmR4isG1nx5P T/Eomys3P0xFX7hNznEB4PJq6r7+HcfmPsmcj5nKe6VB0Syy9qIdIsuaIpu0A+6p v8icUjRiDL4A05VJ2H21hqCIIGdJPJObwkch3VNV3ukvH0S46VdwaFRWv/ckFHhu mS4uLcW3x771A2ag2vPKGWVZWT4JIcbptUhzntN86HPVuUJTeZ7ifl694haogi5u KdCivvjs/3YB8ber9fu4EqFocgKcQYK1 -----END CERTIFICATE-----Generated at Wed Sep 10 13:34:02 2025 by rpki-client