
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
File: enMAIRE9JFEdbouFYuck7J6YJRs.mft (raw, json)
Hash identifier: 3jLw77loLwmK2EAEqXGoSEaje5We5pKozhB0nrJMmp4=
Subject key identifier: DB:1E:2E:D6:19:C0:10:CA:EB:C0:83:BC:F5:86:EA:30:D4:0E:6F:9F
Authority key identifier: 7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B
Certificate issuer: /CN=A91EA9C0/serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
Certificate serial: D1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
Manifest number: C8
Signing time: Mon 01 Jun 2026 07:42:55 +0000
Manifest this update: Mon 01 Jun 2026 07:42:55 +0000
Manifest next update: Mon 08 Jun 2026 07:42:55 +0000
Files and hashes: 1: enMAIRE9JFEdbouFYuck7J6YJRs.crl (hash: WRlgLMAwlkmpGSLYI++NjTU8jVVsqoDBVVBtXnv2czM=)
2: 38A5CCEC0EFD11F198037EE50C3D8C67.roa (hash: 05pC1QjdXz/JcKagpqRB8Es2Hu2WFfz+kHjfBEq36Yo=)
3: 51E2DA3C032811F1B93270B91D3D8C67.roa (hash: ZdHxlT3OqwPC+xGI71Ljv6ozI4riSBo2nvgbAgHx1Rg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl
rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA9C0, serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
Validity
Not Before: Jun 1 07:42:55 2026 GMT
Not After : Jun 8 07:42:55 2026 GMT
Subject: CN=6a1d37ff-9c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:89:8b:a2:6b:32:76:62:59:30:a4:2a:90:
77:5f:8d:50:fa:ac:ac:fb:9b:64:5b:76:5c:ac:30:
4e:ed:cf:a1:89:00:29:69:7f:29:1d:c3:33:d3:46:
e6:cd:82:cb:c7:ec:b3:b4:5a:c2:63:a1:34:58:69:
5c:f7:e4:65:d9:98:58:77:df:70:4b:85:28:3a:2e:
77:70:c8:37:99:d6:a7:81:d1:7a:f7:5b:19:bc:a8:
de:05:f2:46:1a:d1:c6:52:5b:a8:e8:8f:9e:fa:9a:
f0:27:e4:20:76:f2:84:ba:d0:14:ae:a0:77:dd:8e:
e5:c6:a8:3b:9d:78:18:5e:46:28:33:08:d3:37:e4:
fe:7a:cd:bf:92:68:42:ab:96:81:0e:ea:b3:32:6e:
f5:ec:13:4a:d7:f5:d2:aa:fe:34:66:f9:27:8e:16:
25:14:ab:1f:9e:65:cc:23:b7:28:65:c1:53:5c:90:
f4:6e:25:29:29:01:7d:2e:24:60:65:44:d7:c7:90:
07:3b:be:f7:c9:3b:ae:47:3f:14:ea:01:24:56:38:
dd:c0:74:71:5b:71:38:8c:9a:aa:39:e3:05:1f:04:
85:8c:e2:94:33:46:a0:e4:c9:74:7a:0b:79:e0:9c:
0d:2a:46:69:b9:e4:57:79:99:f8:88:86:ad:83:d7:
ba:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1E:2E:D6:19:C0:10:CA:EB:C0:83:BC:F5:86:EA:30:D4:0E:6F:9F
X509v3 Authority Key Identifier:
keyid:7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:32:17:44:4c:ac:19:b6:6e:b9:fa:f9:08:4c:3a:8e:21:3d:
fd:17:59:f6:40:65:79:11:31:a4:e9:b0:9f:9d:62:ce:b4:ba:
ba:a6:70:79:4c:97:3d:71:62:13:72:f7:77:5c:b2:f7:15:50:
98:20:1c:f5:cf:ab:14:47:2c:21:2c:8b:c9:a8:9c:96:b1:56:
7f:5b:b6:ba:bb:32:df:96:a0:a2:81:0f:73:42:01:54:07:4d:
1c:bb:3f:62:4b:7f:65:90:88:13:66:af:f0:d6:7f:4f:52:43:
e4:28:9b:2d:11:a3:69:3f:a0:31:0b:a6:29:37:c3:1e:ac:d4:
8d:ef:ab:3d:d4:ff:ee:02:31:3c:c9:9c:e5:bc:b1:77:ea:c8:
38:7c:f0:b9:37:b5:5e:2d:5f:44:6b:31:c4:b5:93:77:7e:83:
bc:a7:a0:5a:4d:16:4e:b4:38:03:ef:67:da:99:67:59:c3:5f:
f9:a0:8d:3e:f8:86:95:37:34:7d:9e:10:4b:d6:8c:21:00:5d:
26:46:52:bc:60:11:aa:18:49:d2:c9:e2:10:bb:74:38:2e:56:
15:48:03:bb:9e:df:8a:07:32:d1:3d:b7:9b:93:63:0f:03:4d:
73:63:09:73:a9:bc:09:07:0e:d9:c6:61:1a:6f:a5:a9:f7:65:
4f:63:02:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:46 2026 by rpki-client