$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft File: IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json) Hash identifier: N/eFRoNb3R93XMhFU2qMI8HVYDNlRuaZ2dx1VWDn2sg= Subject key identifier: 50:CB:DF:BB:DE:7D:A0:54:FF:B4:D9:32:0B:18:C1:DB:BA:28:F1:B2 Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 119B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft Manifest number: 1159 Signing time: Sun 26 Oct 2025 17:33:00 +0000 Manifest this update: Sun 26 Oct 2025 17:33:00 +0000 Manifest next update: Sun 02 Nov 2025 17:33:00 +0000 Files and hashes: 1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: 3I9FgQBmxiik7Kgr/h3UEvOqCZqogQsG8KRH8uG1eUg=) 2: D9BBFBDA4D3111F099A48033C4F9AE02.roa (hash: A1A/LnUqdsNFUNCbA9pj78Zy7mXZZnhX+0nyseCL3vE=) 3: 13D21C6EFEBA11ED9D83553FC4F9AE02.roa (hash: mPVwkbrmgIGFwgmxOu/KgFG11TMB51WhYaitUgpspRc=) 4: 98A0F61840AD11F0BB332714C4F9AE02.roa (hash: tKQU1f9hJtuAYfiy2kdRz9mYUmd+c/z8iKCPuJpB5Jo=) 5: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: GKHRKfwk3bqrqOFGPvJ+kjY0NTnB33jXoiW8bXeNOjw=) 6: D276D68CACDC11F093B6B95AC4F9AE02.roa (hash: HogXJmL/NwNRLzeVXgVFZcWMkVgOGwGFOMaQzjDPXUk=) 7: 4F2654ACACDB11F0A3F2FF3CC4F9AE02.roa (hash: OqS/n46MqXrg5tkeyWhJhZI3eE6XOuPELN4VDMy95NE=) 8: 981DEAC6B1C711F08CEB3C61C4F9AE02.roa (hash: Xd/ha+8Rf40EUcmF2S28Em4xm72VBdQzvds2dDfnPNU=) 9: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: PDXFymAQeHbTCItIfy8LqqoHr3PVKA+eJZNU6voGL5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 17:32:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4507 (0x119b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Oct 26 17:33:00 2025 GMT Not After : Nov 2 17:33:00 2025 GMT Subject: CN=68fe5b4c-d853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:de:fd:3e:b1:69:a1:21:af:6f:26:55:eb:2d: f3:75:c4:35:37:33:5e:24:ef:7f:0f:36:5f:36:69: 4f:ae:06:4a:ca:73:0f:31:3a:ea:23:5b:af:3a:d0: a2:ac:20:ef:8b:ce:2e:62:39:7e:a0:a5:db:51:17: f3:36:90:43:9c:36:56:82:f6:c2:49:9f:c3:e7:a7: 89:8e:a5:f5:a4:f5:1b:f6:fa:06:06:f9:a4:61:fa: eb:59:a9:c9:3a:25:3d:9f:a0:ef:33:5f:d5:95:d4: 74:51:ca:6f:f1:89:fe:53:9d:a1:67:16:23:71:f1: 1d:9c:07:72:0a:d5:f5:14:d0:52:9a:9e:f9:4f:82: 81:43:00:3b:fc:19:3c:fb:ca:7a:51:ed:6c:b8:90: 38:ca:48:75:14:c6:6e:68:28:7b:0a:02:c2:de:19: 1f:7c:25:3f:c5:73:7d:6d:70:16:92:24:44:3b:76: 90:19:73:6d:f1:31:e2:d4:29:07:42:1b:58:87:6b: 68:ee:75:b3:d7:0f:34:60:2b:9a:b6:1b:21:5d:d3: ca:04:03:d9:00:8b:76:87:55:b9:07:2d:69:e4:84: 51:52:7c:c8:20:00:10:d5:ea:31:c7:a2:3d:47:95: a3:b5:ca:20:d0:fd:6a:b5:af:bd:5e:98:a0:7a:68: 56:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:CB:DF:BB:DE:7D:A0:54:FF:B4:D9:32:0B:18:C1:DB:BA:28:F1:B2 X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:38:6f:89:65:cb:4f:af:4f:bf:a1:98:f1:5a:13:2f:bb:f0: 49:55:3d:88:fa:d3:c2:f4:f4:ee:b9:fa:3c:5e:7e:8b:67:5c: 88:93:bf:54:b4:4b:f9:e2:92:56:eb:06:87:fc:d8:65:57:7f: 46:06:44:fc:dc:59:d4:b8:1c:8b:30:65:dc:55:df:e9:c4:9b: 92:06:bc:b3:1b:a2:cd:67:ad:91:e0:52:d4:74:23:26:c7:13: fd:a0:7b:a4:06:30:9b:cc:d9:cc:e4:41:0f:b8:88:cd:b2:da: 3c:16:de:f4:9e:8e:6f:f7:e3:51:7a:1e:e3:18:aa:51:6e:55: 23:f8:dc:1b:a2:7a:bb:2b:37:45:cc:9a:fd:b2:c8:36:1f:b0: b8:a2:dc:aa:fb:d0:ea:59:0b:2d:5a:2b:b9:40:f0:c3:6c:36: 50:f9:39:8e:49:97:22:1c:76:62:0b:4d:28:f5:1f:0c:4a:10: f9:21:11:ce:9e:eb:1d:88:bd:17:0b:8b:8a:eb:7d:14:73:21: 94:a2:24:6d:6e:dd:73:7e:74:12:bb:48:17:f0:6c:25:0b:1a: 03:43:d0:21:08:27:73:7a:8e:ab:98:b9:32:0c:bb:a5:df:fa: 0b:67:a1:71:e3:a1:c4:93:6a:6d:1e:19:f9:c2:fd:b4:ea:66: 43:da:41:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjUxMDI2MTczMzAwWhcNMjUxMTAyMTczMzAwWjAYMRYwFAYD VQQDEw02OGZlNWI0Yy1kODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsd79PrFpoSGvbyZV6y3zdcQ1NzNeJO9/DzZfNmlPrgZKynMPMTrqI1uvOtCi rCDvi84uYjl+oKXbURfzNpBDnDZWgvbCSZ/D56eJjqX1pPUb9voGBvmkYfrrWanJ OiU9n6DvM1/VldR0Ucpv8Yn+U52hZxYjcfEdnAdyCtX1FNBSmp75T4KBQwA7/Bk8 +8p6Ue1suJA4ykh1FMZuaCh7CgLC3hkffCU/xXN9bXAWkiREO3aQGXNt8THi1CkH QhtYh2to7nWz1w80YCuathshXdPKBAPZAIt2h1W5By1p5IRRUnzIIAAQ1eoxx6I9 R5Wjtcog0P1qta+9XpigemhW+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDL37ve faBU/7TZMgsYwdu6KPGyMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdEQy8zNUY3OTg2NjFGMDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85 aEhPUjhzTHBabDVPN2h0MEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoOG+JZctPr0+/oZjxWhMvu/BJVT2I+tPC9PTuufo8Xn6LZ1yIk79U tEv54pJW6waH/NhlV39GBkT83FnUuByLMGXcVd/pxJuSBryzG6LNZ62R4FLUdCMm xxP9oHukBjCbzNnM5EEPuIjNsto8Ft70no5v9+NReh7jGKpRblUj+Nwbonq7KzdF zJr9ssg2H7C4otyq+9DqWQstWiu5QPDDbDZQ+TmOSZciHHZiC00o9R8MShD5IRHO nusdiL0XC4uK630UcyGUoiRtbt1zfnQSu0gX8GwlCxoDQ9AhCCdzeo6rmLkyDLul 3/oLZ6Fx46HEk2ptHhn5wv206mZD2kGg -----END CERTIFICATE-----Generated at Mon Oct 27 04:41:32 2025 by rpki-client