$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft File: IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json) Hash identifier: fFMRR4Qx3z3sc1WcNt/C2t0w2a0HoDsPCdaQCmoaQvo= Subject key identifier: EA:C5:A8:F5:EF:4D:A1:52:CB:DB:98:FB:22:E6:71:80:0A:69:E0:AE Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 1286 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft Manifest number: 1229 Signing time: Wed 28 Oct 2026 17:13:32 +0000 Manifest this update: Wed 28 Oct 2026 17:13:32 +0000 Manifest next update: Wed 04 Nov 2026 17:13:32 +0000 Files and hashes: 1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: g4ztqJ2nGZBMqjoGBrpzPLVr7ZaPmSu7psBbQ+RNwJQ=) 2: A9AC92A6D2C311F1A0349A210666CEF9.roa (hash: Ip2p8iXWv2hA4rtmjAlbuNMvcHvIjXqMYUGUSyi+7SU=) 3: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: vKccd2F9ftUD7dxFhS0jRDAUZNsfYOsIjkhXXA2UhHI=) 4: DA0D94B6962A11F19F8219DF6311F970.roa (hash: 0eDYd5bx4V8RD3fWCK7H0P6J+7V3ULJb/N3cYKdbtWg=) 5: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: XYEh/xOjDbsTNdnGi10ej2EmI6JjqzNUkL1XRZsJguA=) 6: D8D9323A962A11F19F8219DF6311F970.roa (hash: pVYFs3HRNNehYpuljIjcWfILlhr7bBotjOW/wIaOGyg=) 7: 2E3A7CDCECB411F0B6919987656F56BC.roa (hash: kTCwjps9JXKEexuvTBj7XMywtX0m9mqMVThPCXp01vw=) 8: DB3006F8962A11F19F8219DF6311F970.roa (hash: El/juh33gOh26Nr9+88ixW3exl2598cwf/qJ0h1IURE=) 9: 57346422D2C311F1A1EE051E0666CEF9.roa (hash: c2Vs7pGKi95jCvv1vx+9BcqbX+ipCmzoYLR9bWtkh60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 17:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4742 (0x1286) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Oct 28 17:13:32 2026 GMT Not After : Nov 4 17:13:32 2026 GMT Subject: CN=6ae22d3c-038e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:73:e9:9c:77:67:a4:80:38:f1:33:37:50:f6: 32:e1:5a:9e:00:e4:05:76:58:47:39:46:3e:1c:dd: a0:c5:12:03:0d:39:68:fb:40:02:66:b4:78:4e:5c: 4f:54:c7:c0:5a:37:98:33:f4:dd:d6:fa:ad:c7:ab: ea:4a:be:cc:43:be:56:63:b2:60:24:46:73:ad:14: b0:3b:03:16:6a:b9:c2:a2:b0:25:2d:26:06:7e:b6: f6:b7:85:a6:c8:b2:0b:c2:e7:4e:49:d4:dd:69:2f: 62:04:58:cf:4d:35:45:26:2d:d4:ea:a0:83:43:f1: d9:0e:70:7c:37:6c:b9:3a:22:26:db:98:e2:21:9e: 36:03:c9:7a:21:f4:57:14:9f:2e:35:4b:74:cc:2e: e8:4d:d0:5e:44:4f:0e:19:f9:1b:c8:65:a1:9e:17: 57:d9:93:02:96:5e:72:21:db:3b:bc:b3:60:68:41: 5b:4c:db:9f:15:c6:90:04:57:4a:ce:04:f5:80:54: 3d:72:56:d7:ca:68:32:49:1c:14:f4:b5:a7:e8:c8: ce:a4:85:3c:02:92:1e:68:bd:79:b9:3a:cf:e4:19: 8f:a5:83:45:9a:da:fe:9d:82:09:6d:aa:0e:61:db: e9:49:b3:32:c4:5d:71:ef:cb:48:98:96:da:21:66: 59:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C5:A8:F5:EF:4D:A1:52:CB:DB:98:FB:22:E6:71:80:0A:69:E0:AE X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:57:9c:2c:94:1f:5b:40:46:d4:a8:06:a5:75:a6:57:34:4f: 14:ae:fc:10:84:d6:42:31:d9:3d:03:a8:9f:ac:99:fc:3b:a1: 4b:3f:67:a6:b0:eb:7b:b3:88:22:63:61:6e:22:2c:f9:38:0c: 0f:b1:d6:d5:fd:d7:48:36:6d:9c:8f:2a:dc:17:9c:21:e3:e1: 43:be:76:57:4e:20:06:98:bf:be:ca:2f:42:42:9d:09:f3:73: 8a:bb:58:3c:9a:37:11:ce:9a:4b:19:ec:17:a0:35:aa:39:d2: e9:c6:77:4a:15:e2:d5:2b:fa:ba:df:cc:89:8d:d2:ad:a1:31: 51:e9:22:51:af:f1:ad:e9:a8:ac:cc:92:da:62:eb:28:56:b7: 56:3e:6c:e6:21:7f:63:d9:a1:6d:25:4f:01:cb:d5:2d:70:94: 60:42:25:02:1a:89:ae:4b:11:87:de:5f:7e:20:d1:1c:67:85: 7f:9a:fb:ea:1e:18:7c:fe:9d:eb:04:54:ad:aa:53:51:ae:a2: 88:2e:f8:26:a8:a0:6a:41:7f:8c:9f:19:16:b0:29:41:0b:d4: 27:64:4d:71:8e:69:95:96:e4:09:8b:51:4d:43:d8:fa:19:2b: e6:1a:14:09:bc:7c:53:7d:ed:41:66:60:1c:7f:43:46:b8:40: cd:f7:12:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjYxMDI4MTcxMzMyWhcNMjYxMTA0MTcxMzMyWjAYMRYwFAYD VQQDEw02YWUyMmQzYy0wMzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HPpnHdnpIA48TM3UPYy4VqeAOQFdlhHOUY+HN2gxRIDDTlo+0ACZrR4TlxP VMfAWjeYM/Td1vqtx6vqSr7MQ75WY7JgJEZzrRSwOwMWarnCorAlLSYGfrb2t4Wm yLILwudOSdTdaS9iBFjPTTVFJi3U6qCDQ/HZDnB8N2y5OiIm25jiIZ42A8l6IfRX FJ8uNUt0zC7oTdBeRE8OGfkbyGWhnhdX2ZMCll5yIds7vLNgaEFbTNufFcaQBFdK zgT1gFQ9clbXymgySRwU9LWn6MjOpIU8ApIeaL15uTrP5BmPpYNFmtr+nYIJbaoO YdvpSbMyxF1x78tImJbaIWZZ2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOrFqPXv TaFSy9uY+yLmcYAKaeCuMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdEQy8zNUY3OTg2NjFGMDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85 aEhPUjhzTHBabDVPN2h0MEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX1ecLJQfW0BG1KgGpXWmVzRPFK78EITWQjHZPQOon6yZ/DuhSz9nprDre7OI ImNhbiIs+TgMD7HW1f3XSDZtnI8q3BecIePhQ752V04gBpi/vsovQkKdCfNzirtY PJo3Ec6aSxnsF6A1qjnS6cZ3ShXi1Sv6ut/MiY3SraExUekiUa/xremorMyS2mLr KFa3Vj5s5iF/Y9mhbSVPAcvVLXCUYEIlAhqJrksRh95ffiDRHGeFf5r76h4YfP6d 6wRUrapTUa6iiC74JqigakF/jJ8ZFrApQQvUJ2RNcY5plZbkCYtRTUPY+hkr5hoU Cbx8U33tQWZgHH9DRrhAzfcS1Q== -----END CERTIFICATE-----Generated at Thu Oct 29 00:42:39 2026 by rpki-client