$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft File: IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json) Hash identifier: olOOwbowmhRcocbGXV8yrwcdw4jXdiBJMF8ReZfq58Q= Subject key identifier: E7:D3:A1:50:5B:25:3E:48:C7:EF:1F:B2:EB:FE:F9:AA:78:9B:3D:64 Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 11FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft Manifest number: 11AD Signing time: Thu 12 Mar 2026 17:04:43 +0000 Manifest this update: Thu 12 Mar 2026 17:04:43 +0000 Manifest next update: Thu 19 Mar 2026 17:04:43 +0000 Files and hashes: 1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: JMBe+gk0CDWcYCEdXbm1vomSSGvvj8RySB2IZLw0mPA=) 2: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: IjpZ0jS6tnWw/4g4Tbl4x/ogYwx51M7WeePNdj2/uUg=) 3: 69915526EA0711F0976467B16F6F56BC.roa (hash: SFd4usN35GeJVO8naPqajPmsGMgesiXpwAu3vfPbeK0=) 4: D9BBFBDA4D3111F099A48033C4F9AE02.roa (hash: zcDK7W0PfXIMXqiY8vmJjJWJICMO82ktF8Fv0RCYF1s=) 5: D276D68CACDC11F093B6B95AC4F9AE02.roa (hash: gqE+x20QnU3Jprst8DEUKF8tGWKOyyNqVQpNtO3Q028=) 6: 2E3A7CDCECB411F0B6919987656F56BC.roa (hash: 4utBjEApx20KJCzqd0eW5ajZ4NVkx31L9ZkE151uZUs=) 7: 98A0F61840AD11F0BB332714C4F9AE02.roa (hash: IHS1dAGj9jKnE6X/SA4FOXKPpMTMBUd8S8gYvi2WOxw=) 8: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: DKnxHCWGK4M87Ukt6UmTYzykQ/tHWegReXZDU7ZlYJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 17:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4604 (0x11fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Mar 12 17:04:43 2026 GMT Not After : Mar 19 17:04:43 2026 GMT Subject: CN=69b2f22b-821b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:62:d2:e6:cf:9b:b2:b3:08:d7:f6:cd:77:ac: 69:1e:ed:df:ac:69:30:0d:cf:7c:27:53:af:e7:6e: 3f:a0:05:45:51:b5:7c:e5:3b:69:39:72:f7:d0:8b: 3e:39:68:01:9b:b5:78:d1:7d:59:bd:8e:c1:5e:80: 05:e9:82:9f:72:22:fa:e5:84:1e:17:74:2e:78:5a: f9:96:34:24:86:c5:ac:ee:b4:f5:a4:a8:0d:ea:2e: af:b9:00:8e:5f:9a:5f:cc:6b:6a:83:72:b9:80:f7: 47:a5:8a:c9:6a:5a:f3:9d:c8:af:51:6e:08:a2:20: f8:16:a2:f0:b1:04:4f:c5:33:7a:4b:1e:e3:f9:09: b3:72:e2:ae:53:ed:ee:e0:18:5f:9d:1b:8e:50:17: 8a:b6:67:24:85:c2:9c:a5:67:9c:33:f2:c1:05:d6: 74:35:e4:ad:de:1e:61:40:59:f9:35:fc:82:6b:5e: 50:de:22:ce:29:4c:3d:1f:47:9b:3a:0f:f8:2d:69: ff:6a:15:6e:46:d2:08:24:62:99:4a:73:b3:cd:9c: b4:b3:53:61:e0:fd:cc:28:9e:77:97:db:8e:44:23: 40:54:7c:2d:5c:32:6e:73:76:b7:71:d2:7e:c1:0c: 88:1e:71:60:78:b5:98:59:b8:8a:ec:6d:31:6b:bc: f8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D3:A1:50:5B:25:3E:48:C7:EF:1F:B2:EB:FE:F9:AA:78:9B:3D:64 X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:9a:6a:41:7d:58:80:f4:94:ec:69:14:68:98:00:2c:9e:7e: 95:93:d7:41:d8:4c:04:d0:70:f8:3c:4b:82:84:f8:5d:45:22: 26:b8:4a:51:ea:a6:d1:fa:17:5f:f5:36:14:85:b7:ba:ce:7f: 2f:03:46:75:9d:49:e2:1d:4d:59:a9:97:74:bd:c7:1e:fa:7e: 0f:97:18:05:6c:44:b3:d6:f1:09:0c:d5:d5:d8:4e:46:19:98: 79:c5:a5:89:3d:d2:43:d1:29:bb:38:7c:e2:3a:6f:c4:9a:40: 69:70:09:b7:67:d4:f9:c9:6a:83:fb:57:dc:11:8a:d6:cf:dc: 0e:82:74:27:e4:33:4c:eb:5c:2e:4c:0c:20:3e:35:e6:46:9f: 2d:09:c7:6d:d5:e2:c3:a1:9a:df:21:78:07:55:1e:38:f2:45: b8:1d:16:8e:64:5d:42:c6:54:c7:5d:32:7a:ee:68:28:dd:f5: ae:c5:83:83:62:01:5b:b3:25:41:fa:ce:8b:19:40:33:e1:79: 8e:c3:2a:2f:1e:7b:3e:f6:e8:e8:2b:63:b5:a4:af:32:7e:f8: e3:72:06:10:f3:fb:ee:f7:f5:a6:02:3b:b2:c0:34:05:7b:98: 39:8e:e0:af:71:10:8e:d8:8e:34:42:bc:49:54:eb:4c:6d:44: 99:f2:04:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjYwMzEyMTcwNDQzWhcNMjYwMzE5MTcwNDQzWjAYMRYwFAYD VQQDEw02OWIyZjIyYi04MjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2LS5s+bsrMI1/bNd6xpHu3frGkwDc98J1Ov524/oAVFUbV85TtpOXL30Is+ OWgBm7V40X1ZvY7BXoAF6YKfciL65YQeF3QueFr5ljQkhsWs7rT1pKgN6i6vuQCO X5pfzGtqg3K5gPdHpYrJalrzncivUW4IoiD4FqLwsQRPxTN6Sx7j+QmzcuKuU+3u 4BhfnRuOUBeKtmckhcKcpWecM/LBBdZ0NeSt3h5hQFn5NfyCa15Q3iLOKUw9H0eb Og/4LWn/ahVuRtIIJGKZSnOzzZy0s1Nh4P3MKJ53l9uORCNAVHwtXDJuc3a3cdJ+ wQyIHnFgeLWYWbiK7G0xa7z4YwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOfToVBb JT5Ix+8fsuv++ap4mz1kMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdEQy8zNUY3OTg2NjFGMDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85 aEhPUjhzTHBabDVPN2h0MEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlZpqQX1YgPSU7GkUaJgALJ5+lZPXQdhMBNBw+DxLgoT4XUUiJrhKUeqm0foX X/U2FIW3us5/LwNGdZ1J4h1NWamXdL3HHvp+D5cYBWxEs9bxCQzV1dhORhmYecWl iT3SQ9Epuzh84jpvxJpAaXAJt2fU+clqg/tX3BGK1s/cDoJ0J+QzTOtcLkwMID41 5kafLQnHbdXiw6Ga3yF4B1UeOPJFuB0WjmRdQsZUx10yeu5oKN31rsWDg2IBW7Ml QfrOixlAM+F5jsMqLx57Pvbo6CtjtaSvMn7443IGEPP77vf1pgI7ssA0BXuYOY7g r3EQjtiONEK8SVTrTG1EmfIEhg== -----END CERTIFICATE-----Generated at Fri Mar 13 14:53:58 2026 by rpki-client