
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
File: enMAIRE9JFEdbouFYuck7J6YJRs.mft (raw, json)
Hash identifier: vz3zCcvGYcg+hD0B3QON9UrgsRkYUIPOrtqkAIX7+eE=
Subject key identifier: DD:96:EA:FD:AB:58:47:45:DB:36:B1:70:6D:DD:66:BF:90:2C:E1:C3
Authority key identifier: 7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B
Certificate issuer: /CN=A91EA9C0/serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
Certificate serial: EA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
Manifest number: E1
Signing time: Thu 23 Jul 2026 08:22:51 +0000
Manifest this update: Thu 23 Jul 2026 08:22:50 +0000
Manifest next update: Thu 30 Jul 2026 08:22:50 +0000
Files and hashes: 1: enMAIRE9JFEdbouFYuck7J6YJRs.crl (hash: H3ttdUXG4+QENrMdfEJBlth72lPyogVqm0QlerwcAXM=)
2: 38A5CCEC0EFD11F198037EE50C3D8C67.roa (hash: 05pC1QjdXz/JcKagpqRB8Es2Hu2WFfz+kHjfBEq36Yo=)
3: 51E2DA3C032811F1B93270B91D3D8C67.roa (hash: ZdHxlT3OqwPC+xGI71Ljv6ozI4riSBo2nvgbAgHx1Rg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl
rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA9C0, serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
Validity
Not Before: Jul 23 08:22:50 2026 GMT
Not After : Jul 30 08:22:50 2026 GMT
Subject: CN=6a61cf5a-ac16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:af:e7:27:d7:44:12:22:a8:9b:9b:5c:b6:
d0:01:9e:e3:65:01:2a:bd:52:0e:6b:de:07:d2:1e:
d4:b2:ae:16:3d:02:98:89:0f:0b:e4:d7:4c:5f:1e:
27:a5:46:07:2a:d8:00:c7:50:0e:1e:89:ca:98:08:
21:0a:0f:a3:4d:c5:66:4f:0f:da:7c:fc:a3:d9:27:
10:8c:c5:5c:4e:eb:41:35:38:f5:28:59:82:b1:51:
e4:67:89:ec:04:50:b3:d3:0a:e0:05:bb:2b:7a:90:
e7:c0:0d:2b:16:71:49:30:72:aa:87:11:b3:61:18:
6e:8d:e3:bc:6c:79:ed:54:fc:e5:e5:9b:96:e3:f6:
68:0e:8a:16:3f:d4:2d:6b:9b:79:ba:32:a1:ef:81:
ba:7d:d6:b9:43:24:86:e7:5a:16:26:bb:f3:45:be:
dd:13:6b:fe:0b:53:0f:64:c9:69:53:fd:e3:09:a5:
e6:1d:a3:2e:6c:4c:51:f6:ab:e4:51:5f:59:9d:3d:
cb:5d:45:4d:af:1d:7a:9a:be:6f:c0:39:a5:41:76:
5d:f2:2b:f8:d0:1d:7a:6a:c0:07:52:b9:98:dd:7d:
b5:5b:38:30:66:0c:3d:06:77:a4:ab:9e:73:ba:fc:
05:64:55:e1:18:be:d1:23:05:04:11:2d:68:6f:33:
50:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:96:EA:FD:AB:58:47:45:DB:36:B1:70:6D:DD:66:BF:90:2C:E1:C3
X509v3 Authority Key Identifier:
keyid:7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:95:14:5c:5c:47:48:3f:6b:cd:11:e9:ab:42:a7:03:e0:ff:
96:cb:b5:63:b0:26:be:ba:1f:d2:96:bf:7f:80:2e:cd:e6:d9:
a1:70:f9:f8:5b:e3:92:1b:89:57:5f:bf:a2:f9:c0:8c:a3:37:
f5:5d:24:74:f0:7e:6f:40:f9:59:4a:90:b6:ac:a0:39:b1:21:
dd:2c:82:7f:c3:3e:c5:ac:7f:b9:ec:7b:f2:79:00:f7:12:00:
81:ec:db:06:26:09:c4:16:00:9d:c4:be:89:a5:e5:c7:f1:70:
b4:22:55:06:f7:61:b1:a9:6d:8a:8e:0e:cf:5e:25:70:ba:89:
eb:31:32:29:91:a0:db:76:0c:19:32:5d:9c:db:37:de:22:2c:
68:1f:8d:a6:a8:a2:8a:c7:07:9d:b3:7b:4d:d2:86:fb:78:a2:
0b:34:b6:39:9f:20:4b:2c:f6:9f:f8:38:66:fe:e5:88:a9:a2:
75:9d:7a:be:68:f0:06:0b:3e:5f:ff:6d:38:c8:3c:cc:00:3c:
61:53:c7:a8:f7:ea:1e:02:9c:e0:59:61:4a:d8:51:1e:64:c5:
9c:26:b9:93:c1:85:b6:83:ab:d2:35:eb:18:f4:87:c0:fc:f5:
5a:fd:56:8a:ff:4a:bc:2a:0e:bc:bf:a8:9a:ba:58:59:fd:f9:
a6:d8:f9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:50:09 2026 by rpki-client