
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
File: enMAIRE9JFEdbouFYuck7J6YJRs.mft (raw, json)
Hash identifier: ZeLo63JH6bSljeK5poIUEtnqgY2Wtg80JxblCt6qVU8=
Subject key identifier: 0C:F6:CB:BD:53:4E:3A:00:2F:DA:FF:AD:DB:A0:5F:93:08:ED:2F:CE
Authority key identifier: 7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B
Certificate issuer: /CN=A91EA9C0/serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
Manifest number: DE
Signing time: Fri 17 Jul 2026 07:51:17 +0000
Manifest this update: Fri 17 Jul 2026 07:51:16 +0000
Manifest next update: Fri 24 Jul 2026 07:51:16 +0000
Files and hashes: 1: enMAIRE9JFEdbouFYuck7J6YJRs.crl (hash: mdUTq2muB6IU12I56KiGPORN7gHi24h4eSKCgHO5pFY=)
2: 51E2DA3C032811F1B93270B91D3D8C67.roa (hash: ZdHxlT3OqwPC+xGI71Ljv6ozI4riSBo2nvgbAgHx1Rg=)
3: 38A5CCEC0EFD11F198037EE50C3D8C67.roa (hash: 05pC1QjdXz/JcKagpqRB8Es2Hu2WFfz+kHjfBEq36Yo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl
rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:51:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA9C0, serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
Validity
Not Before: Jul 17 07:51:16 2026 GMT
Not After : Jul 24 07:51:16 2026 GMT
Subject: CN=6a59def5-1ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:fd:27:28:76:a9:f0:9f:b4:53:5a:f0:66:
61:e6:9d:99:cb:5e:a7:ec:60:5d:15:43:48:00:cb:
3a:4f:b2:aa:8c:6e:d4:89:f1:24:e8:47:17:12:90:
43:31:95:5f:53:db:db:35:32:fc:4f:48:04:c3:28:
4c:e0:d0:62:f6:5d:97:4a:8d:c8:45:d6:3d:a9:9f:
ff:58:95:b2:ed:06:98:e9:08:68:ca:ec:b1:13:f7:
a3:b0:4e:94:3c:bb:9b:fa:4d:8d:ac:1b:8c:79:7a:
a6:6d:47:be:fb:79:13:24:69:ad:84:18:61:ba:ed:
5a:63:66:7f:2d:11:81:37:47:df:2b:27:34:95:47:
c2:d9:94:aa:d9:65:d2:bb:dd:f7:a5:2d:45:fb:89:
cd:1d:cd:ff:7c:84:7f:37:df:df:d8:37:fa:0d:bb:
5f:29:6b:41:b4:96:06:68:85:50:dd:7d:69:ca:18:
4a:57:41:bb:ac:80:5d:77:cc:eb:9d:7e:7b:eb:38:
06:84:7b:e4:a6:01:77:79:7e:1a:c1:85:4e:16:57:
97:52:af:8e:46:bf:41:b1:37:49:33:8d:1d:82:f9:
c9:8f:d6:10:6f:f3:e3:f1:fa:d8:0c:ea:ad:61:82:
fe:43:6a:58:58:b6:b8:37:b6:e8:ce:cd:14:80:af:
2c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F6:CB:BD:53:4E:3A:00:2F:DA:FF:AD:DB:A0:5F:93:08:ED:2F:CE
X509v3 Authority Key Identifier:
keyid:7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:84:a4:1c:8f:75:98:c1:1e:bc:ec:8b:a0:86:1d:0b:41:d4:
63:63:aa:ae:52:a5:2a:e6:ae:dd:de:58:fb:b9:14:8b:c1:1e:
ee:e1:be:ad:ff:9e:93:2a:e6:8a:72:aa:4f:92:4d:da:0b:d6:
9c:9e:2f:97:c1:f6:37:84:db:74:8b:8b:31:7c:f6:08:0f:43:
ef:16:86:1c:32:43:0e:bc:3e:93:dd:cd:8d:bb:1f:a7:87:47:
00:fb:85:78:7e:92:8f:5d:f5:79:b5:d1:69:7a:91:e7:2a:8d:
2f:fb:b8:83:d4:f2:cc:1e:c1:a8:5d:6a:9a:d2:97:83:ab:c1:
9b:2d:e4:3a:13:34:5b:f9:3b:cd:31:0f:1e:6b:c4:34:37:19:
17:cd:09:49:74:d4:b5:de:4e:96:77:52:d5:c0:38:ec:c1:e4:
a9:cc:20:9f:2f:80:0d:c1:29:f1:76:52:6b:10:17:e0:ed:43:
0a:fc:0c:0a:d8:4d:47:6f:bb:a4:55:49:42:b9:4c:fa:88:2d:
9d:27:ef:45:f3:f7:e4:d0:46:eb:01:3e:a8:28:11:23:8e:ee:
97:9f:22:fa:b7:2b:b5:b3:f2:85:15:33:10:44:ad:27:2c:90:
db:cf:a7:52:0d:c3:3f:6f:ce:b9:d3:be:b0:01:bf:80:1a:35:
2f:b3:20:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:15 2026 by rpki-client