$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft File: enMAIRE9JFEdbouFYuck7J6YJRs.mft (raw, json) Hash identifier: FpmORV68vI5xQH0377lE56KdWwQ5XilpH81NYKh47xw= Subject key identifier: 50:87:7E:89:5B:72:C6:C6:02:42:B3:BE:1A:F8:AF:25:4C:69:2E:A8 Authority key identifier: 7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B Certificate issuer: /CN=A91EA9C0/serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft Manifest number: 1E Signing time: Sat 19 Jul 2025 08:09:51 +0000 Manifest this update: Sat 19 Jul 2025 08:09:50 +0000 Manifest next update: Sat 26 Jul 2025 08:09:50 +0000 Files and hashes: 1: enMAIRE9JFEdbouFYuck7J6YJRs.crl (hash: d4i7sbkMG1TjdOPp+xmoUC/115QM+CuYwOnMNsCdt9w=) 2: 4CB0FD06388411F08C1F3F69C4F9AE02.roa (hash: CQtIdoN7iL7YhWLcKm67Xv0ZOHDw9METp8+XVwLWFR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9C0, serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B Validity Not Before: Jul 19 08:09:50 2025 GMT Not After : Jul 26 08:09:50 2025 GMT Subject: CN=687b52ce-431b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:47:04:93:4f:e3:20:d4:ea:ce:1b:ef:75:09: c6:23:7d:4f:1d:d7:95:03:ef:a9:de:f5:ce:a2:dd: 2b:f1:00:88:84:74:8c:da:89:c0:00:3e:f3:77:aa: c8:2a:c2:67:51:9f:88:4d:b0:b5:e4:a7:f7:3e:9f: 86:05:93:d4:32:9c:87:38:36:a8:12:d8:62:90:f2: 83:e3:25:48:74:1e:ab:e9:ee:ff:7b:c4:be:7b:8e: 5e:0d:66:83:0e:2c:a8:f6:e0:c4:4e:5c:23:0a:e1: 9f:9b:b7:32:80:9b:95:e7:f7:33:99:4b:95:10:34: 53:cb:41:27:f0:49:8d:ae:be:13:d1:5e:b4:3c:0c: 49:42:c7:a9:56:b6:48:05:e1:25:81:f9:67:ec:e1: 8d:6c:34:0e:9f:aa:23:89:ba:53:64:f9:db:5d:74: bd:a9:f3:f3:24:4a:27:86:b5:73:50:0f:34:9b:f4: e8:a5:16:fb:48:33:22:e2:6c:cf:cd:14:68:8a:1c: 00:03:d9:41:d6:f1:15:81:69:ff:9a:df:c4:f2:d2: c9:d3:c7:28:e5:3b:53:36:5a:86:2d:08:6a:d5:ee: 2d:e7:61:84:b9:eb:2f:3e:2d:36:4c:45:2b:ef:ca: b4:67:82:8d:4a:29:da:c5:28:5d:fb:ab:1e:aa:ba: f1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:87:7E:89:5B:72:C6:C6:02:42:B3:BE:1A:F8:AF:25:4C:69:2E:A8 X509v3 Authority Key Identifier: keyid:7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:53:f2:73:1f:b7:a5:f1:f3:43:2c:37:67:b7:8b:0c:c6:b6: 36:10:6d:40:07:c4:26:a6:a6:06:60:a3:f6:d6:c6:66:26:f1: 13:a8:0a:1e:d6:e3:41:0d:8f:c6:d7:57:75:90:fb:34:b5:bf: eb:3f:25:51:15:6c:88:a4:ed:ed:e5:61:ba:b1:5f:ae:1e:9c: fd:77:1f:5c:35:d4:91:38:d1:61:ff:2a:6b:cf:04:bc:c5:c0: 99:01:27:3a:66:cb:83:6c:7c:17:17:aa:75:60:2f:26:fb:f2: f6:3d:9b:0a:a5:0f:2f:5c:a6:bf:f0:75:f5:c0:73:2e:0b:cf: 78:ca:5a:cd:45:4d:50:d5:e4:3f:19:69:ee:6f:38:4d:d1:23: 5f:1d:7e:c5:a8:76:0a:95:95:e0:4a:0c:ec:38:b1:9d:27:18: d2:ed:9f:f7:2d:a8:54:3a:cc:d9:05:8d:7f:7a:fb:eb:85:cf: d4:78:2d:84:ea:36:ac:0c:48:ca:c8:fa:cd:f2:88:2f:35:50: 91:88:d7:4e:8e:1f:8d:51:a9:69:40:a8:18:fe:f2:c9:87:6d: aa:f0:bf:fb:40:6e:cb:82:61:a9:5c:09:e1:3e:b0:21:9c:e8: 99:fb:02:bb:6c:d8:56:8e:19:02:aa:39:ba:6a:42:eb:76:cc: 33:fe:14:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTlDMDExMC8GA1UEBRMoN0E3MzAwMjExMTNEMjQ1MTFENkU4Qjg1NjJFNzI0RUM5 RTk4MjUxQjAeFw0yNTA3MTkwODA5NTBaFw0yNTA3MjYwODA5NTBaMBgxFjAUBgNV BAMTDTY4N2I1MmNlLTQzMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6RwSTT+Mg1OrOG+91CcYjfU8d15UD76ne9c6i3SvxAIiEdIzaicAAPvN3qsgq wmdRn4hNsLXkp/c+n4YFk9QynIc4NqgS2GKQ8oPjJUh0Hqvp7v97xL57jl4NZoMO LKj24MROXCMK4Z+btzKAm5Xn9zOZS5UQNFPLQSfwSY2uvhPRXrQ8DElCx6lWtkgF 4SWB+Wfs4Y1sNA6fqiOJulNk+dtddL2p8/MkSieGtXNQDzSb9OilFvtIMyLibM/N FGiKHAAD2UHW8RWBaf+a38Ty0snTxyjlO1M2WoYtCGrV7i3nYYS56y8+LTZMRSvv yrRngo1KKdrFKF37qx6quvERAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUId+iVty xsYCQrO+GvivJUxpLqgwHwYDVR0jBBgwFoAUenMAIRE9JFEdbouFYuck7J6YJRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBOUMwLzUyOUJDMkZDMzg4 MjExRjA4Q0NCMTg2NkM0RjlBRTAyL2VuTUFJUkU5SkZFZGJvdUZZdWNrN0o2WUpS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZW5NQUlSRTlKRkVkYm91Rll1Y2s3SjZZSlJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB OUMwLzUyOUJDMkZDMzg4MjExRjA4Q0NCMTg2NkM0RjlBRTAyL2VuTUFJUkU5SkZF ZGJvdUZZdWNrN0o2WUpScy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJFT8nMft6Xx80MsN2e3iwzGtjYQbUAHxCampgZgo/bWxmYm8ROoCh7W 40ENj8bXV3WQ+zS1v+s/JVEVbIik7e3lYbqxX64enP13H1w11JE40WH/KmvPBLzF wJkBJzpmy4NsfBcXqnVgLyb78vY9mwqlDy9cpr/wdfXAcy4Lz3jKWs1FTVDV5D8Z ae5vOE3RI18dfsWodgqVleBKDOw4sZ0nGNLtn/ctqFQ6zNkFjX96++uFz9R4LYTq NqwMSMrI+s3yiC81UJGI106OH41RqWlAqBj+8smHbarwv/tAbsuCYalcCeE+sCGc 6Jn7Arts2FaOGQKqObpqQut2zDP+FDw= -----END CERTIFICATE-----Generated at Mon Jul 21 02:08:33 2025 by rpki-client