$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft File: IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json) Hash identifier: JTYvFVn2kBxn6LKolYnQFne7MdKa8NkHFhMSyr3df+s= Subject key identifier: F9:83:BF:F7:E5:24:14:A7:B0:3F:9D:ED:5D:13:70:26:F5:E6:6C:15 Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 121C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft Manifest number: 11C6 Signing time: Sun 26 Apr 2026 17:07:45 +0000 Manifest this update: Sun 26 Apr 2026 17:07:44 +0000 Manifest next update: Sun 03 May 2026 17:07:44 +0000 Files and hashes: 1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: NVPXHPfj4c4azKH/wvZAxz5IusWnOSIw2dEu9k2eUCQ=) 2: 2E3A7CDCECB411F0B6919987656F56BC.roa (hash: kTCwjps9JXKEexuvTBj7XMywtX0m9mqMVThPCXp01vw=) 3: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: vKccd2F9ftUD7dxFhS0jRDAUZNsfYOsIjkhXXA2UhHI=) 4: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: XYEh/xOjDbsTNdnGi10ej2EmI6JjqzNUkL1XRZsJguA=) 5: 69915526EA0711F0976467B16F6F56BC.roa (hash: sLYsx+0TCakC1YwYdtjQtbYvAlnAp516G4hk84r24Hc=) 6: D9BBFBDA4D3111F099A48033C4F9AE02.roa (hash: DerhX6OwSbe0rRaFIZdy5dbL/hGKFEzFgbvMCI0QCo0=) 7: D276D68CACDC11F093B6B95AC4F9AE02.roa (hash: 3yfrgKeAqT2UJ9hoABf1H6+wfUw8pcotIBYIseVLvBY=) 8: 98A0F61840AD11F0BB332714C4F9AE02.roa (hash: IS1j4fiLKS57qrKHF7wS3bUANSIBQvPd5t8keIKkTrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 17:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4636 (0x121c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Apr 26 17:07:44 2026 GMT Not After : May 3 17:07:44 2026 GMT Subject: CN=69ee4661-8e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:2e:2a:c3:51:b5:2f:e1:09:80:d0:8e:50: 9b:67:25:ab:cc:ea:20:29:90:2f:3d:2c:0d:c3:45: e9:b1:89:d3:ae:4e:c4:74:e0:95:81:fa:1c:16:10: ca:e8:6b:92:eb:9f:55:83:80:0d:8c:38:2c:73:fb: 32:19:5d:cc:15:b3:08:24:c3:b1:8c:40:e3:25:11: ba:66:c4:60:7b:2a:b3:06:7d:90:f4:66:46:64:fc: 3a:ee:7e:70:02:c1:8a:8e:e8:52:e8:7c:d0:d8:e3: 22:28:30:e8:62:32:b1:dd:2b:43:75:03:e4:41:db: bc:75:60:74:1d:53:2a:05:ae:34:01:86:ea:0c:fc: be:d0:78:14:03:a9:b8:4a:35:18:88:ef:7e:e7:43: 34:bd:6c:32:9b:4e:1f:8f:83:46:66:ba:2c:a7:1f: 54:f4:46:88:c8:d6:9f:85:0c:85:1c:8a:d8:b4:00: f7:eb:d4:32:61:4e:0a:77:c9:b9:dc:7e:f1:4b:ed: 58:cb:18:bf:d2:f1:2f:9f:bc:68:9c:77:35:2d:82: e5:6d:62:7b:0c:8a:0e:63:cc:90:f4:9a:f5:7b:d3: f4:4a:b3:f8:58:be:2f:0e:1b:0c:a6:e3:fb:54:b7: 9e:70:f9:97:99:5a:4c:07:d9:a0:e9:de:0c:19:43: 57:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:83:BF:F7:E5:24:14:A7:B0:3F:9D:ED:5D:13:70:26:F5:E6:6C:15 X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:9e:ed:04:6b:24:fb:7b:3b:95:64:bd:47:e4:3f:95:99:2e: 2f:d1:32:1c:64:a7:19:49:1f:cf:bf:9d:e7:97:1b:e6:ec:33: 40:25:b4:8f:57:6b:36:6d:2f:6f:c2:a6:f0:8e:4f:3e:dd:14: 9b:d2:5f:ad:d9:ce:41:f4:a3:c3:73:a3:03:38:39:84:e1:eb: 54:3e:08:29:ee:e5:3b:9e:f0:79:5d:ed:61:a7:84:2d:b4:8b: 9b:59:a8:4c:67:e7:e9:05:62:74:9e:85:53:4c:64:f7:ce:53: 1b:3b:e5:89:9c:b6:15:2b:83:00:d6:ab:47:20:57:68:c3:cf: 36:0a:97:66:dd:0a:1e:96:cf:cd:1a:2b:b6:2d:ff:24:ba:6b: 1f:8d:bb:ec:51:f7:fc:b8:91:3d:ee:8e:ef:fe:6e:db:58:8f: f2:e4:4a:87:f4:b4:a0:90:43:a3:a1:e8:f7:5f:4c:d2:18:f6: 7e:2f:65:31:c7:86:ed:c2:69:f4:e8:57:76:e5:9b:a7:21:5b: 15:b4:60:e9:a2:6d:b6:8e:50:bf:af:31:31:27:4e:56:6d:f1: 73:4e:3e:14:4e:f4:24:79:c8:6b:61:cb:c0:a3:94:50:31:a9: 85:19:50:51:e6:12:6c:ae:be:05:39:62:dd:9a:d8:bc:fe:b3: 2b:52:45:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjYwNDI2MTcwNzQ0WhcNMjYwNTAzMTcwNzQ0WjAYMRYwFAYD VQQDEw02OWVlNDY2MS04ZTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudcuKsNRtS/hCYDQjlCbZyWrzOogKZAvPSwNw0XpsYnTrk7EdOCVgfocFhDK 6GuS659Vg4ANjDgsc/syGV3MFbMIJMOxjEDjJRG6ZsRgeyqzBn2Q9GZGZPw67n5w AsGKjuhS6HzQ2OMiKDDoYjKx3StDdQPkQdu8dWB0HVMqBa40AYbqDPy+0HgUA6m4 SjUYiO9+50M0vWwym04fj4NGZrospx9U9EaIyNafhQyFHIrYtAD369QyYU4Kd8m5 3H7xS+1Yyxi/0vEvn7xonHc1LYLlbWJ7DIoOY8yQ9Jr1e9P0SrP4WL4vDhsMpuP7 VLeecPmXmVpMB9mg6d4MGUNX6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPmDv/fl JBSnsD+d7V0TcCb15mwVMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdEQy8zNUY3OTg2NjFGMDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85 aEhPUjhzTHBabDVPN2h0MEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG57tBGsk+3s7lWS9R+Q/lZkuL9EyHGSnGUkfz7+d55cb5uwzQCW0j1drNm0v b8Km8I5PPt0Um9JfrdnOQfSjw3OjAzg5hOHrVD4IKe7lO57weV3tYaeELbSLm1mo TGfn6QVidJ6FU0xk985TGzvliZy2FSuDANarRyBXaMPPNgqXZt0KHpbPzRorti3/ JLprH4277FH3/LiRPe6O7/5u21iP8uRKh/S0oJBDo6Ho919M0hj2fi9lMceG7cJp 9OhXduWbpyFbFbRg6aJtto5Qv68xMSdOVm3xc04+FE70JHnIa2HLwKOUUDGphRlQ UeYSbK6+BTli3ZrYvP6zK1JFKQ== -----END CERTIFICATE-----Generated at Tue Apr 28 08:12:38 2026 by rpki-client