
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
File: IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json)
Hash identifier: 5bv0utw6vv+f2KFJeycikBzg7xgfq6cjHnJzGC+Sg2k=
Subject key identifier: 7F:A9:23:A2:C0:89:FF:FE:63:78:7F:FB:93:C3:3A:8A:FD:6E:EB:A6
Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42
Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
Certificate serial: 1248
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
Manifest number: 11F2
Signing time: Wed 22 Jul 2026 17:18:39 +0000
Manifest this update: Wed 22 Jul 2026 17:18:38 +0000
Manifest next update: Wed 29 Jul 2026 17:18:38 +0000
Files and hashes: 1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: INhrzJdNAfWFhupJXrTxkrVJJQ3tW4lYsGHke7CAHmQ=)
2: 98A0F61840AD11F0BB332714C4F9AE02.roa (hash: IS1j4fiLKS57qrKHF7wS3bUANSIBQvPd5t8keIKkTrs=)
3: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: XYEh/xOjDbsTNdnGi10ej2EmI6JjqzNUkL1XRZsJguA=)
4: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: vKccd2F9ftUD7dxFhS0jRDAUZNsfYOsIjkhXXA2UhHI=)
5: D276D68CACDC11F093B6B95AC4F9AE02.roa (hash: 3yfrgKeAqT2UJ9hoABf1H6+wfUw8pcotIBYIseVLvBY=)
6: D9BBFBDA4D3111F099A48033C4F9AE02.roa (hash: DerhX6OwSbe0rRaFIZdy5dbL/hGKFEzFgbvMCI0QCo0=)
7: 69915526EA0711F0976467B16F6F56BC.roa (hash: sLYsx+0TCakC1YwYdtjQtbYvAlnAp516G4hk84r24Hc=)
8: 2E3A7CDCECB411F0B6919987656F56BC.roa (hash: kTCwjps9JXKEexuvTBj7XMywtX0m9mqMVThPCXp01vw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl
rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4680 (0x1248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
Validity
Not Before: Jul 22 17:18:38 2026 GMT
Not After : Jul 29 17:18:38 2026 GMT
Subject: CN=6a60fb6f-0750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ef:a6:dd:d8:b3:e8:c4:5c:29:25:f3:82:b0:
86:8e:18:27:01:31:a6:53:cc:ef:e3:91:2f:07:44:
bf:6b:89:6a:48:e1:65:73:74:48:7e:7b:b1:79:30:
21:e2:cb:54:16:11:64:e4:b1:a3:ab:c6:2a:cd:52:
a7:ae:1d:e0:0d:90:0e:cf:85:ae:43:21:d2:63:8f:
8f:d0:67:05:9c:6f:bc:57:49:ab:f2:4e:1d:e3:b4:
28:7a:1f:91:75:3e:c0:0f:ea:fe:1a:ba:4b:74:58:
03:4a:a1:c6:3a:bf:9a:cd:ed:56:69:36:f5:f1:93:
1c:04:56:3a:76:23:b0:7d:ae:16:3c:c7:14:2f:31:
51:a2:e0:20:c9:5f:ec:13:9c:fc:ef:d6:57:94:ee:
65:ab:d3:5b:11:0e:8f:4e:79:4f:2f:f3:89:00:d8:
91:b2:48:5c:1a:76:85:c6:b3:f8:20:66:74:10:a0:
c1:b8:89:d8:19:5e:4d:56:a2:ce:c2:37:d3:26:59:
d5:52:fa:7d:9c:c3:85:91:d3:ea:b4:97:5d:f6:7f:
86:c0:9f:ce:b9:44:25:ab:a3:32:a3:c8:10:a4:ed:
36:e4:ef:86:28:43:f5:9e:32:12:9b:c5:3e:3b:28:
71:4a:a7:ca:ea:dd:81:e2:59:aa:96:a9:c5:f8:75:
16:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A9:23:A2:C0:89:FF:FE:63:78:7F:FB:93:C3:3A:8A:FD:6E:EB:A6
X509v3 Authority Key Identifier:
keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:d5:76:41:75:c7:d5:c5:7d:33:18:28:d4:91:d9:a7:e9:32:
57:3f:78:eb:7e:0a:c3:99:98:af:bb:59:5f:92:55:41:a7:57:
16:76:5e:15:2c:cf:73:ea:87:e1:d7:2d:b1:88:c3:5d:5f:80:
e0:77:0c:d0:2b:1e:6f:ae:59:1d:8c:b9:db:d9:37:d3:28:86:
ba:f9:e5:bc:cd:d4:52:0a:68:63:65:f3:dc:fa:f5:2d:ab:e4:
87:14:9f:92:66:a6:ed:57:6f:20:27:85:96:1f:0b:42:5d:54:
5b:8f:d3:b3:27:8d:90:82:43:74:f1:97:cb:f7:da:31:34:4e:
9a:d1:dd:e8:0f:f5:2c:93:1e:a6:db:a9:82:38:6e:52:16:bb:
46:eb:c3:1d:80:ca:19:15:4f:4d:ad:ae:af:ad:98:76:79:23:
c8:18:b8:21:b7:92:1c:84:f7:ce:8e:a1:64:f2:70:a8:15:95:
61:9a:b5:a8:8c:04:1a:de:2d:dc:5e:c9:ee:e2:37:97:74:44:
f0:46:6e:38:87:6a:a4:a6:74:16:df:bb:71:e0:e7:35:dc:59:
60:92:41:01:8e:df:0a:33:f9:39:c3:10:b9:41:66:d8:3a:de:
86:c9:c3:98:9b:96:50:92:6d:71:d5:ce:52:61:5e:f2:17:65:
86:d8:3a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:44:13 2026 by rpki-client