$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft File: enMAIRE9JFEdbouFYuck7J6YJRs.mft (raw, json) Hash identifier: KBJ16L0hLyXF076Ju2q0ceCUEfwC1GSGK15veNuq358= Subject key identifier: 39:D8:FD:84:2F:BA:F6:15:89:DE:40:C3:66:73:60:80:BC:1A:33:B4 Authority key identifier: 7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B Certificate issuer: /CN=A91EA9C0/serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft Manifest number: BB Signing time: Mon 11 May 2026 07:12:00 +0000 Manifest this update: Mon 11 May 2026 07:11:59 +0000 Manifest next update: Mon 18 May 2026 07:11:59 +0000 Files and hashes: 1: enMAIRE9JFEdbouFYuck7J6YJRs.crl (hash: aFphdzzbrF8Tfsy/ue9UhjK4VAYVD1j++MXVQ4dMxxw=) 2: 51E2DA3C032811F1B93270B91D3D8C67.roa (hash: 3U4FEVRGy9jE+wB4tgnDMOY88kDC7cd7O9eOZNx+krU=) 3: 38A5CCEC0EFD11F198037EE50C3D8C67.roa (hash: Ws5xeasORqbsl//ZjsZh/u1HnC6Hx/gc7hpsz4QOW5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9C0, serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B Validity Not Before: May 11 07:11:59 2026 GMT Not After : May 18 07:11:59 2026 GMT Subject: CN=6a018140-62ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7c:e7:20:e3:a1:50:e8:c5:f1:8f:54:b5:6c: 7f:12:bb:57:aa:d6:96:1c:02:33:2b:84:a9:be:0c: 1d:84:84:2a:03:ac:c7:dc:4b:fb:4f:37:8d:cd:eb: 2a:b2:9e:5c:ff:8c:55:87:68:76:50:fb:02:d3:c1: 61:81:35:9d:15:08:fe:05:77:e4:fb:a9:e5:8b:36: ea:3b:0f:9f:38:8b:8f:cc:43:34:9e:05:0e:6c:d0: d6:fb:d0:5c:84:2c:97:80:4e:5a:61:91:ed:2a:30: 94:4e:ce:7a:48:43:2e:f6:77:d0:bf:51:2e:ff:02: c1:1a:bb:84:9b:a6:5b:05:6c:78:01:ed:29:db:bd: 95:5d:d1:b2:0e:be:04:7b:2a:7e:46:7f:f9:51:d1: f1:e6:0e:9f:1a:8f:6f:b6:af:eb:b2:e7:c5:b7:86: 5c:b6:22:64:90:59:20:14:36:26:09:1f:52:78:23: 85:eb:42:0e:50:0b:88:97:c0:ea:ab:fc:b2:da:b3: 9a:b6:18:de:79:a2:2b:5e:d1:97:f4:b8:02:ea:56: 4d:c3:14:18:07:39:d3:1d:58:d3:86:36:20:99:37: f3:9d:7f:cd:04:c9:33:72:c8:55:94:72:6d:80:34: e7:0d:f2:0e:83:fd:92:f6:71:10:cb:2e:e2:f8:ab: 5d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D8:FD:84:2F:BA:F6:15:89:DE:40:C3:66:73:60:80:BC:1A:33:B4 X509v3 Authority Key Identifier: keyid:7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:9c:ab:59:4d:fd:e8:79:08:46:90:27:c2:cf:1c:94:c1:75: 75:d2:b7:0c:b9:73:f8:fe:dd:b4:59:36:c1:69:5f:f2:0b:f1: 2a:48:f2:44:e5:43:cb:15:d0:c5:da:1d:68:e4:a4:1d:2e:46: 18:67:0f:0f:dd:c8:c7:60:7a:26:f8:f4:9c:e6:c7:a9:e9:5a: b7:72:0f:a7:59:fd:63:6f:a5:8b:aa:19:8c:d7:ef:27:57:8f: 49:92:e7:4b:c0:a1:3e:7e:79:37:be:a7:76:27:95:a7:b5:7e: 48:66:96:83:05:20:12:44:02:de:ca:11:fa:25:07:8f:d8:cc: 63:cc:a4:b7:38:ad:0b:bd:64:87:3d:8b:85:8f:a1:af:eb:7c: e1:0d:e7:ca:e9:a4:c3:5a:ad:1b:3f:e5:2c:00:7d:f1:47:7f: 6c:14:04:c6:50:c3:99:40:16:26:cc:41:6a:fa:4d:e7:18:6b: 49:b2:42:6a:9a:ef:42:fd:01:3a:02:b9:12:0a:ae:57:88:d7: d9:ff:91:4a:36:77:73:41:13:4a:0a:7d:40:f9:dd:07:f9:92: bf:ea:95:10:53:1a:39:88:6d:21:2e:e0:db:08:ce:12:79:45: 3e:8b:77:c0:59:e1:de:74:c3:12:33:94:8a:7d:be:cf:33:f5: 4d:1b:3f:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5QzAxMTAvBgNVBAUTKDdBNzMwMDIxMTEzRDI0NTExRDZFOEI4NTYyRTcyNEVD OUU5ODI1MUIwHhcNMjYwNTExMDcxMTU5WhcNMjYwNTE4MDcxMTU5WjAYMRYwFAYD VQQDEw02YTAxODE0MC02MmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlnznIOOhUOjF8Y9UtWx/ErtXqtaWHAIzK4SpvgwdhIQqA6zH3Ev7TzeNzesq sp5c/4xVh2h2UPsC08FhgTWdFQj+BXfk+6nlizbqOw+fOIuPzEM0ngUObNDW+9Bc hCyXgE5aYZHtKjCUTs56SEMu9nfQv1Eu/wLBGruEm6ZbBWx4Ae0p272VXdGyDr4E eyp+Rn/5UdHx5g6fGo9vtq/rsufFt4ZctiJkkFkgFDYmCR9SeCOF60IOUAuIl8Dq q/yy2rOathjeeaIrXtGX9LgC6lZNwxQYBznTHVjThjYgmTfznX/NBMkzcshVlHJt gDTnDfIOg/2S9nEQyy7i+KtdTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDnY/YQv uvYVid5Aw2ZzYIC8GjO0MB8GA1UdIwQYMBaAFHpzACERPSRRHW6LhWLnJOyemCUb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlDMC81MjlCQzJGQzM4 ODIxMUYwOENDQjE4NjZDNEY5QUUwMi9lbk1BSVJFOUpGRWRib3VGWXVjazdKNllK UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2VuTUFJUkU5SkZFZGJvdUZZdWNrN0o2WUpScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTlDMC81MjlCQzJGQzM4ODIxMUYwOENDQjE4NjZDNEY5QUUwMi9lbk1BSVJFOUpG RWRib3VGWXVjazdKNllKUnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD5yrWU396HkIRpAnws8clMF1ddK3DLlz+P7dtFk2wWlf8gvxKkjyROVDyxXQ xdodaOSkHS5GGGcPD93Ix2B6Jvj0nObHqelat3IPp1n9Y2+li6oZjNfvJ1ePSZLn S8ChPn55N76ndieVp7V+SGaWgwUgEkQC3soR+iUHj9jMY8yktzitC71khz2LhY+h r+t84Q3nyumkw1qtGz/lLAB98Ud/bBQExlDDmUAWJsxBavpN5xhrSbJCaprvQv0B OgK5EgquV4jX2f+RSjZ3c0ETSgp9QPndB/mSv+qVEFMaOYhtIS7g2wjOEnlFPot3 wFnh3nTDEjOUin2+zzP1TRs/1Q== -----END CERTIFICATE-----Generated at Wed May 13 07:06:08 2026 by rpki-client