$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft File: enMAIRE9JFEdbouFYuck7J6YJRs.mft (raw, json) Hash identifier: AgMZx70wHislxktCUO9Xh7Jxzc04E01X4UsReir2Py0= Subject key identifier: 60:50:01:AF:C7:5C:6D:A5:22:A0:E4:0F:32:78:57:A0:41:27:29:03 Authority key identifier: 7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B Certificate issuer: /CN=A91EA9C0/serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft Manifest number: 4E Signing time: Sun 19 Oct 2025 10:43:25 +0000 Manifest this update: Sun 19 Oct 2025 10:43:24 +0000 Manifest next update: Sun 26 Oct 2025 10:43:24 +0000 Files and hashes: 1: enMAIRE9JFEdbouFYuck7J6YJRs.crl (hash: rZUca7BnigceyxVP/lXLk0LQk8QEFNZVIfdCLpHWMhg=) 2: 28BB8F3E7CFD11F0A33DEA21C4F9AE02.roa (hash: r4KaPqqtCXW7b+8GzlZoQ18nPDvw2xoi898WdJXVWq0=) 3: 27D35A2A7CFD11F0A33DEA21C4F9AE02.roa (hash: WMBMTYm4zJmJb6l3lGaR3MIPCoKpE7rld4fHZdKyhLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9C0, serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B Validity Not Before: Oct 19 10:43:24 2025 GMT Not After : Oct 26 10:43:24 2025 GMT Subject: CN=68f4c0cd-fa47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:93:c7:07:d4:62:94:9a:f5:aa:82:0c:34:0a: b1:3b:f6:2d:b3:71:c5:28:6c:8b:1e:61:78:fa:20: 89:91:71:55:29:dc:48:8a:d7:be:d4:5f:88:2e:06: 9c:90:38:1a:c3:3f:7b:ee:6a:92:f2:cc:8e:a7:2f: 79:cf:c5:bd:ae:ca:28:80:d8:e4:3b:60:05:a3:17: f1:3c:1b:62:ef:1b:69:0c:b3:0e:d3:0c:56:3e:a2: 84:92:e1:28:5d:f4:a3:3d:c0:56:28:39:8b:d2:23: 0d:e1:37:c3:9c:4e:d9:68:fd:46:17:f3:f2:27:60: f4:e7:4f:71:3e:89:d6:83:7b:d7:99:49:e9:f9:3a: 66:5b:6f:3b:4a:ae:c1:70:e1:df:64:e7:6a:aa:64: 6b:8d:10:81:da:a8:71:32:d7:62:59:31:fe:77:b0: 64:e0:b2:f5:6b:00:8c:cf:81:7e:06:3f:a0:de:7e: 76:af:6d:2e:cc:d8:2d:d1:f7:c5:2a:3d:0f:58:17: 09:3d:27:81:a8:25:3e:fe:06:68:43:f8:1a:b3:a1: 0e:ac:ce:47:c0:63:18:dc:45:09:c4:50:c5:69:be: a4:98:4b:4e:7d:cb:3e:44:76:f0:cd:24:58:16:0b: 11:1b:c4:04:df:9a:18:b7:79:02:21:f2:0e:9e:8f: c0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:50:01:AF:C7:5C:6D:A5:22:A0:E4:0F:32:78:57:A0:41:27:29:03 X509v3 Authority Key Identifier: keyid:7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b7:da:1d:33:da:6f:49:f8:31:c3:45:89:1f:54:96:2b:08: 53:6a:51:69:69:29:ab:a4:8f:5c:a9:6f:6f:cf:b2:3f:ad:70: e9:d3:c4:08:7b:e3:f4:87:e6:51:bd:e0:3b:83:c9:ca:76:fe: 31:e3:b2:a6:5f:6d:8b:df:73:37:e2:33:bf:9b:ca:7a:7b:c8: 8e:f2:b4:fc:75:53:3b:8f:6f:69:95:7d:34:8d:f0:b8:f5:d7: de:a9:11:d5:6e:7f:d8:55:0f:2c:13:d7:a3:51:de:8d:42:5a: 10:ec:37:3a:eb:ed:d9:95:48:6a:e0:6c:45:1b:9b:bf:2b:37: 20:1b:47:7d:fe:ed:59:ae:71:7c:54:54:e1:c3:6a:57:41:26: 74:91:64:a7:82:13:be:60:29:b8:09:fc:62:44:5a:76:e8:66: 6f:35:ad:b5:69:68:a6:da:d0:b8:cf:fa:11:0e:06:85:4a:10: dd:88:25:ee:e3:17:4c:4c:e8:da:8b:34:51:5d:60:64:b8:34: 6f:32:77:9b:f3:05:ef:c3:07:62:c4:82:f3:07:90:ae:b3:40: 5b:71:40:79:f3:55:9e:0d:0b:e8:8a:77:30:74:1f:ed:17:a5: 83:ab:18:bc:54:a7:de:b4:90:44:39:69:1e:36:68:85:8c:66: 27:b4:c8:6e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTlDMDExMC8GA1UEBRMoN0E3MzAwMjExMTNEMjQ1MTFENkU4Qjg1NjJFNzI0RUM5 RTk4MjUxQjAeFw0yNTEwMTkxMDQzMjRaFw0yNTEwMjYxMDQzMjRaMBgxFjAUBgNV BAMTDTY4ZjRjMGNkLWZhNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1k8cH1GKUmvWqggw0CrE79i2zccUobIseYXj6IImRcVUp3EiK177UX4guBpyQ OBrDP3vuapLyzI6nL3nPxb2uyiiA2OQ7YAWjF/E8G2LvG2kMsw7TDFY+ooSS4Shd 9KM9wFYoOYvSIw3hN8OcTtlo/UYX8/InYPTnT3E+idaDe9eZSen5OmZbbztKrsFw 4d9k52qqZGuNEIHaqHEy12JZMf53sGTgsvVrAIzPgX4GP6DefnavbS7M2C3R98Uq PQ9YFwk9J4GoJT7+BmhD+BqzoQ6szkfAYxjcRQnEUMVpvqSYS059yz5EdvDNJFgW CxEbxATfmhi3eQIh8g6ej8CZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYFABr8dc baUioOQPMnhXoEEnKQMwHwYDVR0jBBgwFoAUenMAIRE9JFEdbouFYuck7J6YJRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBOUMwLzUyOUJDMkZDMzg4 MjExRjA4Q0NCMTg2NkM0RjlBRTAyL2VuTUFJUkU5SkZFZGJvdUZZdWNrN0o2WUpS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZW5NQUlSRTlKRkVkYm91Rll1Y2s3SjZZSlJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB OUMwLzUyOUJDMkZDMzg4MjExRjA4Q0NCMTg2NkM0RjlBRTAyL2VuTUFJUkU5SkZF ZGJvdUZZdWNrN0o2WUpScy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACq32h0z2m9J+DHDRYkfVJYrCFNqUWlpKaukj1ypb2/Psj+tcOnTxAh7 4/SH5lG94DuDycp2/jHjsqZfbYvfczfiM7+bynp7yI7ytPx1UzuPb2mVfTSN8Lj1 196pEdVuf9hVDywT16NR3o1CWhDsNzrr7dmVSGrgbEUbm78rNyAbR33+7VmucXxU VOHDaldBJnSRZKeCE75gKbgJ/GJEWnboZm81rbVpaKba0LjP+hEOBoVKEN2IJe7j F0xM6NqLNFFdYGS4NG8yd5vzBe/DB2LEgvMHkK6zQFtxQHnzVZ4NC+iKdzB0H+0X pYOrGLxUp960kEQ5aR42aIWMZie0yG4= -----END CERTIFICATE-----Generated at Mon Oct 20 21:02:50 2025 by rpki-client