$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft File: IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json) Hash identifier: HVog8zfB8XXC+APkMIsyuxXXl87prkd6yHH9ugb+G0Q= Subject key identifier: D7:BF:E7:91:77:21:FD:A0:81:81:22:33:C5:EC:24:EC:5F:B7:B2:3C Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 124A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft Manifest number: 11F4 Signing time: Sun 26 Jul 2026 17:21:16 +0000 Manifest this update: Sun 26 Jul 2026 17:21:16 +0000 Manifest next update: Sun 02 Aug 2026 17:21:16 +0000 Files and hashes: 1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: RWrfkYVTjxv/qVq7MKB296fn973BAddPthe1CsdZBzM=) 2: 98A0F61840AD11F0BB332714C4F9AE02.roa (hash: IS1j4fiLKS57qrKHF7wS3bUANSIBQvPd5t8keIKkTrs=) 3: D9BBFBDA4D3111F099A48033C4F9AE02.roa (hash: DerhX6OwSbe0rRaFIZdy5dbL/hGKFEzFgbvMCI0QCo0=) 4: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: XYEh/xOjDbsTNdnGi10ej2EmI6JjqzNUkL1XRZsJguA=) 5: D276D68CACDC11F093B6B95AC4F9AE02.roa (hash: 3yfrgKeAqT2UJ9hoABf1H6+wfUw8pcotIBYIseVLvBY=) 6: 2E3A7CDCECB411F0B6919987656F56BC.roa (hash: kTCwjps9JXKEexuvTBj7XMywtX0m9mqMVThPCXp01vw=) 7: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: vKccd2F9ftUD7dxFhS0jRDAUZNsfYOsIjkhXXA2UhHI=) 8: 69915526EA0711F0976467B16F6F56BC.roa (hash: sLYsx+0TCakC1YwYdtjQtbYvAlnAp516G4hk84r24Hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 17:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4682 (0x124a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Jul 26 17:21:16 2026 GMT Not After : Aug 2 17:21:16 2026 GMT Subject: CN=6a66420c-f4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e0:d6:05:66:0f:72:e9:2b:6d:05:bf:12:72: e1:ff:36:14:22:09:6c:13:4f:a1:ba:0c:2a:7a:cd: 3f:31:b7:d5:d6:a6:88:b7:37:75:0c:f8:cd:62:5f: 55:87:65:aa:f9:ac:5d:7d:10:f8:ed:e1:44:86:69: ff:2e:99:be:99:1d:63:db:c8:dc:bf:d1:1b:61:5a: 22:6d:99:91:11:4f:b9:27:65:72:87:f9:b6:c0:84: e0:d4:ba:b6:47:64:5f:ec:6c:13:7c:5a:b1:d2:5f: 89:49:84:ad:ff:9b:25:95:be:22:b5:ee:70:c9:46: 12:84:83:1b:58:1b:d1:97:3b:b8:b1:c6:79:1a:93: df:f8:71:e8:75:24:26:f8:c1:14:ff:e0:f3:4a:51: 5c:47:2f:5b:b1:8e:b2:86:64:1a:f3:72:99:19:5a: df:53:69:e0:44:72:83:8b:ac:5a:a6:7e:ea:01:44: 2a:df:ff:41:0e:8e:27:16:37:4f:de:73:35:cd:33: 8e:a9:11:df:7c:6d:d4:78:c3:e3:e6:bf:c7:c1:5f: 24:86:b0:9b:47:26:fe:32:f1:ca:7d:dc:01:17:fa: f2:8d:07:f9:33:1f:a6:e5:6c:3f:d7:fa:e5:b3:99: 96:94:01:aa:e6:a7:40:f3:c3:b8:1c:77:2e:33:73: 10:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BF:E7:91:77:21:FD:A0:81:81:22:33:C5:EC:24:EC:5F:B7:B2:3C X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:9b:16:6a:cf:e0:35:08:e5:5d:44:b0:d9:62:55:8b:22:54: 1a:32:7a:5b:fd:3e:db:5c:1a:9e:c5:98:cc:57:27:70:08:80: ce:22:3d:5d:01:0c:fd:19:e9:d8:fc:9b:4f:4b:ae:0f:15:9f: be:c7:81:0a:f0:a7:cf:e6:06:0f:b6:f2:a7:1a:49:a4:fa:5f: 6d:a3:22:ef:ec:19:72:b1:29:e9:83:ab:cb:46:3c:c7:b0:df: a1:2e:2a:36:5b:03:2c:e4:77:0f:d2:2a:66:aa:3a:63:74:62: 51:e4:e9:39:d7:9c:69:99:d2:15:cc:6e:60:9d:1d:c5:08:dd: ca:61:5e:70:93:22:26:85:02:8c:b8:7b:a4:b1:eb:ca:89:77: 5c:ef:5f:70:4c:11:1c:a9:06:14:d9:1d:3e:a5:cb:2d:d7:84: 8d:bc:0e:96:31:a1:2c:bf:61:e0:7f:3d:f1:8d:00:72:e4:4f: 49:8e:e9:cd:3c:e6:4d:99:64:fd:1d:95:ec:74:34:96:a9:02: c1:10:ec:b8:98:5f:39:33:77:e4:74:8e:08:13:d8:47:db:f4: 46:3e:6f:6c:c0:8c:f6:86:fd:95:cd:76:31:b9:d9:ed:d5:40: 50:69:c8:3a:f5:83:ca:16:5e:4f:52:1c:fa:88:5a:f1:8c:cc: c6:07:d7:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjYwNzI2MTcyMTE2WhcNMjYwODAyMTcyMTE2WjAYMRYwFAYD VQQDEw02YTY2NDIwYy1mNGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjuDWBWYPcukrbQW/EnLh/zYUIglsE0+hugwqes0/MbfV1qaItzd1DPjNYl9V h2Wq+axdfRD47eFEhmn/Lpm+mR1j28jcv9EbYVoibZmREU+5J2Vyh/m2wITg1Lq2 R2Rf7GwTfFqx0l+JSYSt/5sllb4ite5wyUYShIMbWBvRlzu4scZ5GpPf+HHodSQm +MEU/+DzSlFcRy9bsY6yhmQa83KZGVrfU2ngRHKDi6xapn7qAUQq3/9BDo4nFjdP 3nM1zTOOqRHffG3UeMPj5r/HwV8khrCbRyb+MvHKfdwBF/ryjQf5Mx+m5Ww/1/rl s5mWlAGq5qdA88O4HHcuM3MQ2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNe/55F3 If2ggYEiM8XsJOxft7I8MB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdEQy8zNUY3OTg2NjFGMDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85 aEhPUjhzTHBabDVPN2h0MEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQJsWas/gNQjlXUSw2WJViyJUGjJ6W/0+21wansWYzFcncAiAziI9XQEM/Rnp 2PybT0uuDxWfvseBCvCnz+YGD7bypxpJpPpfbaMi7+wZcrEp6YOry0Y8x7DfoS4q NlsDLOR3D9IqZqo6Y3RiUeTpOdecaZnSFcxuYJ0dxQjdymFecJMiJoUCjLh7pLHr yol3XO9fcEwRHKkGFNkdPqXLLdeEjbwOljGhLL9h4H898Y0AcuRPSY7pzTzmTZlk /R2V7HQ0lqkCwRDsuJhfOTN35HSOCBPYR9v0Rj5vbMCM9ob9lc12MbnZ7dVAUGnI OvWDyhZeT1Ic+oha8YzMxgfXHQ== -----END CERTIFICATE-----Generated at Mon Jul 27 18:55:50 2026 by rpki-client