$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft File: IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json) Hash identifier: Mkri5n62nzhRLsJHLRFBoDnltgmZm66hhIOBNbLJAaU= Subject key identifier: 27:7D:B2:04:97:29:8B:C9:92:66:6B:EA:28:4A:4C:CB:1E:7D:2F:B7 Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 126A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft Manifest number: 120F Signing time: Thu 10 Sep 2026 17:08:36 +0000 Manifest this update: Thu 10 Sep 2026 17:08:35 +0000 Manifest next update: Thu 17 Sep 2026 17:08:35 +0000 Files and hashes: 1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: ngxO2TMOtwe6CfohQVhsLNwn2ZXNX6cNyg3ve8fWP3o=) 2: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: XYEh/xOjDbsTNdnGi10ej2EmI6JjqzNUkL1XRZsJguA=) 3: DA0D94B6962A11F19F8219DF6311F970.roa (hash: 0eDYd5bx4V8RD3fWCK7H0P6J+7V3ULJb/N3cYKdbtWg=) 4: D8D9323A962A11F19F8219DF6311F970.roa (hash: pVYFs3HRNNehYpuljIjcWfILlhr7bBotjOW/wIaOGyg=) 5: 69915526EA0711F0976467B16F6F56BC.roa (hash: sLYsx+0TCakC1YwYdtjQtbYvAlnAp516G4hk84r24Hc=) 6: 2E3A7CDCECB411F0B6919987656F56BC.roa (hash: kTCwjps9JXKEexuvTBj7XMywtX0m9mqMVThPCXp01vw=) 7: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: vKccd2F9ftUD7dxFhS0jRDAUZNsfYOsIjkhXXA2UhHI=) 8: DB3006F8962A11F19F8219DF6311F970.roa (hash: El/juh33gOh26Nr9+88ixW3exl2598cwf/qJ0h1IURE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4714 (0x126a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Sep 10 17:08:35 2026 GMT Not After : Sep 17 17:08:35 2026 GMT Subject: CN=6aa2e414-1e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:07:5a:9a:83:c9:cf:03:84:4e:28:d7:40:ce: 29:b5:d8:94:84:1a:fa:ce:ea:69:03:fe:2e:8e:64: d5:95:a0:08:86:dd:0e:65:de:12:64:07:53:99:fd: a5:43:43:f4:db:bb:c4:e8:30:11:f1:59:e0:a1:ce: 55:e9:7d:fa:0f:31:e5:81:dd:7b:e6:54:db:d4:51: d2:ca:b9:86:ee:2c:4a:fa:97:45:23:58:d0:5c:6f: b7:82:fb:c5:86:67:b5:af:dc:87:ca:a2:72:f6:b9: 59:54:1e:77:b1:fc:d4:c7:24:d5:64:b8:80:72:ae: fc:ae:9e:4a:bd:19:95:47:2e:05:14:09:0b:42:7d: ca:6a:69:84:0d:fb:f0:5a:97:13:e8:09:11:70:91: 60:60:ed:c4:6e:e8:9f:9d:6e:6d:d5:ad:e0:d6:15: 89:a6:20:c5:82:70:9b:8a:0f:8a:d5:43:6a:da:b8: 6c:18:03:aa:50:06:79:b2:5c:06:21:62:17:6b:22: f5:e9:92:e8:ca:b9:0a:88:81:7e:94:74:e0:35:4f: 12:50:0c:dd:aa:91:e1:78:74:03:25:c8:0f:5f:ff: 49:c7:b3:a3:d9:e8:80:df:d2:63:fc:b5:3c:6e:fc: ac:6a:62:de:b4:71:6c:12:32:cc:ca:1f:df:3f:69: 2a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7D:B2:04:97:29:8B:C9:92:66:6B:EA:28:4A:4C:CB:1E:7D:2F:B7 X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c8:45:10:bd:e1:3e:22:a4:d9:28:8a:9d:80:0b:f5:8a:71: a3:3d:13:ec:d9:3b:fa:20:22:8d:2a:66:e5:d7:0b:95:33:d4: fb:b1:70:4d:ef:9e:29:d2:b8:d6:1b:d5:4a:06:08:f3:20:46: e2:5a:69:31:88:28:9c:7e:67:11:e3:5b:dc:19:10:3c:7e:30: c6:ca:8c:5c:e5:b0:9d:6f:9b:fd:b8:a5:24:5c:00:9f:7c:47: 5b:f6:3e:03:fb:f9:2f:59:79:41:a2:b4:98:75:ca:5c:54:86: 86:d9:fe:45:1d:40:d2:a3:0e:52:17:63:d3:50:a0:76:99:d6: 5e:ee:22:ca:78:9d:90:4c:11:37:c2:95:c2:bb:40:3c:4e:ef: 09:f8:c4:4c:c7:c3:e8:22:20:f6:b8:2e:a9:94:3e:28:3c:6b: ac:ff:3a:17:aa:6c:98:84:4c:13:7a:66:55:22:0d:6c:26:fd: de:de:c8:34:20:af:fa:25:14:fa:02:65:cc:b8:37:56:16:f9: 55:5e:b5:d9:92:9c:ff:79:33:0b:1b:80:79:f6:a3:bd:b9:87: 23:32:0a:79:9b:d8:69:b3:e3:79:0e:54:4c:f5:a1:0c:6e:50: 37:20:67:23:37:a3:43:6e:e1:db:96:69:ad:eb:a0:95:f4:66: 73:95:9c:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjYwOTEwMTcwODM1WhcNMjYwOTE3MTcwODM1WjAYMRYwFAYD VQQDEw02YWEyZTQxNC0xZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswdamoPJzwOETijXQM4ptdiUhBr6zuppA/4ujmTVlaAIht0OZd4SZAdTmf2l Q0P027vE6DAR8Vngoc5V6X36DzHlgd175lTb1FHSyrmG7ixK+pdFI1jQXG+3gvvF hme1r9yHyqJy9rlZVB53sfzUxyTVZLiAcq78rp5KvRmVRy4FFAkLQn3KammEDfvw WpcT6AkRcJFgYO3EbuifnW5t1a3g1hWJpiDFgnCbig+K1UNq2rhsGAOqUAZ5slwG IWIXayL16ZLoyrkKiIF+lHTgNU8SUAzdqpHheHQDJcgPX/9Jx7Oj2eiA39Jj/LU8 bvysamLetHFsEjLMyh/fP2kqnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCd9sgSX KYvJkmZr6ihKTMsefS+3MB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdEQy8zNUY3OTg2NjFGMDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85 aEhPUjhzTHBabDVPN2h0MEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbchFEL3hPiKk2SiKnYAL9Ypxoz0T7Nk7+iAijSpm5dcLlTPU+7FwTe+eKdK4 1hvVSgYI8yBG4lppMYgonH5nEeNb3BkQPH4wxsqMXOWwnW+b/bilJFwAn3xHW/Y+ A/v5L1l5QaK0mHXKXFSGhtn+RR1A0qMOUhdj01CgdpnWXu4iynidkEwRN8KVwrtA PE7vCfjETMfD6CIg9rguqZQ+KDxrrP86F6psmIRME3pmVSINbCb93t7INCCv+iUU +gJlzLg3Vhb5VV612ZKc/3kzCxuAefajvbmHIzIKeZvYabPjeQ5UTPWhDG5QNyBn IzejQ27h25ZpreuglfRmc5WcIg== -----END CERTIFICATE-----Generated at Fri Sep 11 06:16:06 2026 by rpki-client