$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft File: enMAIRE9JFEdbouFYuck7J6YJRs.mft (raw, json) Hash identifier: CI2hPg7P9XH2S2wB2H1VBFLF27Qg1xnF/40yCoLsak0= Subject key identifier: B9:E4:9A:13:93:67:FC:C5:E2:8D:0E:65:8C:CC:DF:1B:37:AE:75:7F Authority key identifier: 7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B Certificate issuer: /CN=A91EA9C0/serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft Manifest number: 16 Signing time: Thu 03 Jul 2025 08:15:49 +0000 Manifest this update: Thu 03 Jul 2025 08:15:49 +0000 Manifest next update: Thu 10 Jul 2025 08:15:49 +0000 Files and hashes: 1: enMAIRE9JFEdbouFYuck7J6YJRs.crl (hash: 9W6eYNu3SwBG+jdq8kwgsQapXdKAbMfRJg6VymoheXE=) 2: 4CB0FD06388411F08C1F3F69C4F9AE02.roa (hash: CQtIdoN7iL7YhWLcKm67Xv0ZOHDw9METp8+XVwLWFR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9C0, serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B Validity Not Before: Jul 3 08:15:49 2025 GMT Not After : Jul 10 08:15:49 2025 GMT Subject: CN=68663c35-3c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f1:ef:30:25:ea:69:6a:05:31:b0:3b:c9:df: 16:c3:3a:40:13:2d:be:a3:08:81:ee:18:d3:4e:40: 1c:39:35:8b:32:17:90:a3:06:ed:1e:fa:1a:83:a6: f1:4d:21:cf:83:98:97:8c:86:46:b5:9e:90:68:84: c4:64:da:2a:19:91:d6:d7:99:c8:0f:45:00:bd:a6: 4c:4e:ae:fb:16:a3:47:a0:fc:96:e4:1e:52:f2:1d: e8:e1:39:69:49:16:b0:b0:0f:1d:fb:9a:51:8b:be: a2:21:fb:a8:eb:37:26:69:8d:f3:07:0b:46:3f:b4: 2b:70:77:10:a7:d8:2b:6e:56:87:bc:59:ee:fd:41: 74:52:a6:1f:c2:10:1c:0b:c2:3d:15:8b:70:03:4c: 81:91:3c:a3:fd:98:1a:9a:f0:d7:ce:79:9d:b2:7e: 28:10:5a:63:9a:f4:73:2f:09:d7:fb:f6:b2:91:96: c8:65:b5:05:38:3d:db:27:45:46:f3:98:d5:8b:cf: a3:1b:ae:4a:2d:db:ce:c7:94:be:82:04:47:4f:43: 81:6e:b5:3d:0f:6d:0b:fb:98:04:7c:45:69:59:55: 01:cb:81:40:de:54:d1:a1:35:44:dd:30:b2:c6:0e: 5f:ab:27:8d:8e:59:1b:51:68:9e:37:9f:66:55:2e: e8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E4:9A:13:93:67:FC:C5:E2:8D:0E:65:8C:CC:DF:1B:37:AE:75:7F X509v3 Authority Key Identifier: keyid:7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:43:cc:84:db:8a:ef:aa:96:18:33:5d:8b:5f:cb:dc:47:ee: 34:75:7e:8a:30:cf:2c:4e:6a:ce:69:d6:76:e5:f6:3d:ac:8b: 09:0a:b4:26:6d:6b:f4:82:cf:28:f0:2e:49:fa:ff:bd:f9:82: d2:1a:26:f1:46:ec:0e:4a:4b:57:7e:51:d3:67:8b:a2:98:01: 6d:b8:4d:30:98:d6:bf:87:9e:cf:b9:9f:df:fa:98:1e:0b:69: f1:e9:c9:8b:a8:ef:b7:86:75:d5:23:e8:f4:09:31:70:5c:9f: 91:c3:8c:9d:d1:55:45:19:e4:3f:74:6a:c4:2e:f4:16:39:df: bf:34:6e:60:44:ad:6e:67:77:ac:55:d9:76:a0:13:26:eb:9a: 58:b0:2a:f4:59:a2:64:a5:d7:87:48:6a:10:d0:21:31:29:35: ef:b3:a7:44:b1:4c:f5:96:a0:4e:d5:a2:ad:e3:7d:fc:61:13: 17:27:49:d7:c8:3d:b9:57:af:81:f1:41:a4:84:f8:d2:87:8b: 80:c7:5c:61:51:3f:fb:cd:2d:8d:4a:f8:e3:46:08:a9:18:11: 69:3d:93:4f:d3:e5:97:d6:a6:b2:ba:79:c8:75:88:f7:2f:9c: ab:9a:5a:c3:d3:4f:3e:b0:4f:c4:53:5f:fd:96:ef:dc:69:5b: 45:f5:fa:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTlDMDExMC8GA1UEBRMoN0E3MzAwMjExMTNEMjQ1MTFENkU4Qjg1NjJFNzI0RUM5 RTk4MjUxQjAeFw0yNTA3MDMwODE1NDlaFw0yNTA3MTAwODE1NDlaMBgxFjAUBgNV BAMTDTY4NjYzYzM1LTNjNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDl8e8wJeppagUxsDvJ3xbDOkATLb6jCIHuGNNOQBw5NYsyF5CjBu0e+hqDpvFN Ic+DmJeMhka1npBohMRk2ioZkdbXmcgPRQC9pkxOrvsWo0eg/JbkHlLyHejhOWlJ FrCwDx37mlGLvqIh+6jrNyZpjfMHC0Y/tCtwdxCn2CtuVoe8We79QXRSph/CEBwL wj0Vi3ADTIGRPKP9mBqa8NfOeZ2yfigQWmOa9HMvCdf79rKRlshltQU4PdsnRUbz mNWLz6Mbrkot287HlL6CBEdPQ4FutT0PbQv7mAR8RWlZVQHLgUDeVNGhNUTdMLLG Dl+rJ42OWRtRaJ43n2ZVLuglAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUueSaE5Nn /MXijQ5ljMzfGzeudX8wHwYDVR0jBBgwFoAUenMAIRE9JFEdbouFYuck7J6YJRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBOUMwLzUyOUJDMkZDMzg4 MjExRjA4Q0NCMTg2NkM0RjlBRTAyL2VuTUFJUkU5SkZFZGJvdUZZdWNrN0o2WUpS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZW5NQUlSRTlKRkVkYm91Rll1Y2s3SjZZSlJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB OUMwLzUyOUJDMkZDMzg4MjExRjA4Q0NCMTg2NkM0RjlBRTAyL2VuTUFJUkU5SkZF ZGJvdUZZdWNrN0o2WUpScy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJxDzITbiu+qlhgzXYtfy9xH7jR1foowzyxOas5p1nbl9j2siwkKtCZt a/SCzyjwLkn6/735gtIaJvFG7A5KS1d+UdNni6KYAW24TTCY1r+Hns+5n9/6mB4L afHpyYuo77eGddUj6PQJMXBcn5HDjJ3RVUUZ5D90asQu9BY53780bmBErW5nd6xV 2XagEybrmliwKvRZomSl14dIahDQITEpNe+zp0SxTPWWoE7Voq3jffxhExcnSdfI PblXr4HxQaSE+NKHi4DHXGFRP/vNLY1K+ONGCKkYEWk9k0/T5ZfWprK6ech1iPcv nKuaWsPTTz6wT8RTX/2W79xpW0X1+pM= -----END CERTIFICATE-----Generated at Thu Jul 3 19:44:59 2025 by rpki-client