$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft File: enMAIRE9JFEdbouFYuck7J6YJRs.mft (raw, json) Hash identifier: RocmniQcRS7GCRB7HFWM/oLfu78AiVwQuGkiVAwiAYE= Subject key identifier: 12:DC:89:A3:4B:E6:E2:39:EF:8A:88:A9:06:DB:AC:54:EF:7A:1F:23 Authority key identifier: 7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B Certificate issuer: /CN=A91EA9C0/serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft Manifest number: 31 Signing time: Sat 23 Aug 2025 07:54:37 +0000 Manifest this update: Sat 23 Aug 2025 07:54:37 +0000 Manifest next update: Sat 30 Aug 2025 07:54:37 +0000 Files and hashes: 1: enMAIRE9JFEdbouFYuck7J6YJRs.crl (hash: GSI8ibgHd6VxNZNQLW67uUT8gXM2fXmH8avpDFa8aZw=) 2: 28BB8F3E7CFD11F0A33DEA21C4F9AE02.roa (hash: r4KaPqqtCXW7b+8GzlZoQ18nPDvw2xoi898WdJXVWq0=) 3: 27D35A2A7CFD11F0A33DEA21C4F9AE02.roa (hash: WMBMTYm4zJmJb6l3lGaR3MIPCoKpE7rld4fHZdKyhLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9C0, serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B Validity Not Before: Aug 23 07:54:37 2025 GMT Not After : Aug 30 07:54:37 2025 GMT Subject: CN=68a973bd-dfcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:32:30:4d:61:93:48:de:f3:be:9e:fe:21:11: 1b:21:9c:29:87:5e:51:3d:6c:9c:fa:6e:41:bb:06: a1:a5:7c:8f:87:7f:60:b4:7b:7c:21:90:76:62:9b: c8:77:5b:7c:31:14:de:ea:30:c6:b1:8a:58:4a:84: 07:22:56:6e:85:cd:ba:d4:83:0f:16:1a:0c:2f:79: 72:d7:02:28:2f:01:46:2b:f2:a8:b0:fe:db:54:69: 08:bb:e2:16:92:52:92:a5:c3:35:60:30:ff:b5:46: a0:aa:2d:c1:34:5f:6b:74:f4:0f:30:37:97:90:6c: ea:9d:1d:bd:27:cb:70:92:a2:a9:4a:8e:d2:f5:b1: fb:ff:d3:44:27:b8:3c:a3:1e:94:8e:fc:53:0f:c1: 62:83:ae:57:df:70:69:fa:b8:2e:0a:86:b9:52:3e: c6:c8:a0:16:ae:71:63:60:5b:4b:d3:35:9c:38:19: 39:a3:21:af:94:2e:15:0b:e2:c9:fb:38:4e:52:74: 3f:17:97:9b:4b:28:74:54:4b:76:cc:f5:fd:a9:66: c2:07:e0:9a:f0:03:ba:61:e6:fc:ef:54:24:5f:ab: 97:f3:0c:90:de:04:63:5f:c3:94:30:f4:b2:25:a7: c7:1b:9d:55:b9:0e:6e:af:58:cd:06:08:0b:b0:f4: 5e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DC:89:A3:4B:E6:E2:39:EF:8A:88:A9:06:DB:AC:54:EF:7A:1F:23 X509v3 Authority Key Identifier: keyid:7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:95:a0:b3:a3:a2:75:40:53:b8:74:38:1a:ce:2b:29:ac:89: 7e:bc:08:af:b8:94:ee:b6:9f:d4:d2:e2:a9:57:4f:a0:51:83: 30:54:f0:65:8e:db:b3:6a:4e:b5:74:75:20:3e:ad:a4:67:f1: 67:15:eb:29:30:56:e2:d2:96:b5:1a:7e:b4:3a:83:2f:93:38: 75:8c:9a:53:42:25:16:46:af:14:6f:6f:b4:55:de:4c:58:df: e2:19:95:ae:c3:5c:c2:48:35:b5:89:36:72:b8:86:c9:7a:c4: fb:9f:df:02:5b:3d:75:c0:55:27:93:fc:b1:71:42:14:17:84: 9f:fa:d6:90:73:62:24:90:d3:44:52:bd:6c:a1:08:f0:cd:ae: 39:95:8f:11:1d:fe:54:ac:76:be:e8:36:d1:74:c0:4d:c6:18: 07:f1:b8:4a:65:bc:e4:d8:39:52:62:25:99:ae:a7:cb:c8:53: 16:df:4c:f3:21:7b:71:54:80:ac:6f:35:a4:ab:29:0a:5f:b3: c9:1b:4d:4d:7a:16:c4:43:01:49:4d:e4:09:6e:63:39:f0:de: 8d:3d:d1:36:0b:de:78:9e:22:b9:d0:35:08:55:40:9c:f5:b5: 4c:ae:06:6d:8e:82:11:48:ab:5d:ce:8d:39:ef:9f:67:a4:78: a8:1e:22:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTlDMDExMC8GA1UEBRMoN0E3MzAwMjExMTNEMjQ1MTFENkU4Qjg1NjJFNzI0RUM5 RTk4MjUxQjAeFw0yNTA4MjMwNzU0MzdaFw0yNTA4MzAwNzU0MzdaMBgxFjAUBgNV BAMTDTY4YTk3M2JkLWRmY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkMjBNYZNI3vO+nv4hERshnCmHXlE9bJz6bkG7BqGlfI+Hf2C0e3whkHZim8h3 W3wxFN7qMMaxilhKhAciVm6FzbrUgw8WGgwveXLXAigvAUYr8qiw/ttUaQi74haS UpKlwzVgMP+1RqCqLcE0X2t09A8wN5eQbOqdHb0ny3CSoqlKjtL1sfv/00QnuDyj HpSO/FMPwWKDrlffcGn6uC4KhrlSPsbIoBaucWNgW0vTNZw4GTmjIa+ULhUL4sn7 OE5SdD8Xl5tLKHRUS3bM9f2pZsIH4JrwA7ph5vzvVCRfq5fzDJDeBGNfw5Qw9LIl p8cbnVW5Dm6vWM0GCAuw9F65AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEtyJo0vm 4jnvioipBtusVO96HyMwHwYDVR0jBBgwFoAUenMAIRE9JFEdbouFYuck7J6YJRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBOUMwLzUyOUJDMkZDMzg4 MjExRjA4Q0NCMTg2NkM0RjlBRTAyL2VuTUFJUkU5SkZFZGJvdUZZdWNrN0o2WUpS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZW5NQUlSRTlKRkVkYm91Rll1Y2s3SjZZSlJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB OUMwLzUyOUJDMkZDMzg4MjExRjA4Q0NCMTg2NkM0RjlBRTAyL2VuTUFJUkU5SkZF ZGJvdUZZdWNrN0o2WUpScy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIyVoLOjonVAU7h0OBrOKymsiX68CK+4lO62n9TS4qlXT6BRgzBU8GWO 27NqTrV0dSA+raRn8WcV6ykwVuLSlrUafrQ6gy+TOHWMmlNCJRZGrxRvb7RV3kxY 3+IZla7DXMJINbWJNnK4hsl6xPuf3wJbPXXAVSeT/LFxQhQXhJ/61pBzYiSQ00RS vWyhCPDNrjmVjxEd/lSsdr7oNtF0wE3GGAfxuEplvOTYOVJiJZmup8vIUxbfTPMh e3FUgKxvNaSrKQpfs8kbTU16FsRDAUlN5AluYznw3o090TYL3nieIrnQNQhVQJz1 tUyuBm2OghFIq13OjTnvn2ekeKgeIl4= -----END CERTIFICATE-----Generated at Sat Aug 23 19:53:15 2025 by rpki-client