Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
File:                     enMAIRE9JFEdbouFYuck7J6YJRs.mft (raw, json)
Hash identifier:          ZeLo63JH6bSljeK5poIUEtnqgY2Wtg80JxblCt6qVU8=
Subject key identifier:   0C:F6:CB:BD:53:4E:3A:00:2F:DA:FF:AD:DB:A0:5F:93:08:ED:2F:CE
Authority key identifier: 7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B
Certificate issuer:       /CN=A91EA9C0/serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
Certificate serial:       E7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
Manifest number:          DE
Signing time:             Fri 17 Jul 2026 07:51:17 +0000
Manifest this update:     Fri 17 Jul 2026 07:51:16 +0000
Manifest next update:     Fri 24 Jul 2026 07:51:16 +0000
Files and hashes:         1: enMAIRE9JFEdbouFYuck7J6YJRs.crl (hash: mdUTq2muB6IU12I56KiGPORN7gHi24h4eSKCgHO5pFY=)
                          2: 51E2DA3C032811F1B93270B91D3D8C67.roa (hash: ZdHxlT3OqwPC+xGI71Ljv6ozI4riSBo2nvgbAgHx1Rg=)
                          3: 38A5CCEC0EFD11F198037EE50C3D8C67.roa (hash: 05pC1QjdXz/JcKagpqRB8Es2Hu2WFfz+kHjfBEq36Yo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl
                          rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 07:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA9C0, serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
        Validity
            Not Before: Jul 17 07:51:16 2026 GMT
            Not After : Jul 24 07:51:16 2026 GMT
        Subject: CN=6a59def5-1ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:fd:27:28:76:a9:f0:9f:b4:53:5a:f0:66:
                    61:e6:9d:99:cb:5e:a7:ec:60:5d:15:43:48:00:cb:
                    3a:4f:b2:aa:8c:6e:d4:89:f1:24:e8:47:17:12:90:
                    43:31:95:5f:53:db:db:35:32:fc:4f:48:04:c3:28:
                    4c:e0:d0:62:f6:5d:97:4a:8d:c8:45:d6:3d:a9:9f:
                    ff:58:95:b2:ed:06:98:e9:08:68:ca:ec:b1:13:f7:
                    a3:b0:4e:94:3c:bb:9b:fa:4d:8d:ac:1b:8c:79:7a:
                    a6:6d:47:be:fb:79:13:24:69:ad:84:18:61:ba:ed:
                    5a:63:66:7f:2d:11:81:37:47:df:2b:27:34:95:47:
                    c2:d9:94:aa:d9:65:d2:bb:dd:f7:a5:2d:45:fb:89:
                    cd:1d:cd:ff:7c:84:7f:37:df:df:d8:37:fa:0d:bb:
                    5f:29:6b:41:b4:96:06:68:85:50:dd:7d:69:ca:18:
                    4a:57:41:bb:ac:80:5d:77:cc:eb:9d:7e:7b:eb:38:
                    06:84:7b:e4:a6:01:77:79:7e:1a:c1:85:4e:16:57:
                    97:52:af:8e:46:bf:41:b1:37:49:33:8d:1d:82:f9:
                    c9:8f:d6:10:6f:f3:e3:f1:fa:d8:0c:ea:ad:61:82:
                    fe:43:6a:58:58:b6:b8:37:b6:e8:ce:cd:14:80:af:
                    2c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F6:CB:BD:53:4E:3A:00:2F:DA:FF:AD:DB:A0:5F:93:08:ED:2F:CE
            X509v3 Authority Key Identifier:
                keyid:7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:84:a4:1c:8f:75:98:c1:1e:bc:ec:8b:a0:86:1d:0b:41:d4:
         63:63:aa:ae:52:a5:2a:e6:ae:dd:de:58:fb:b9:14:8b:c1:1e:
         ee:e1:be:ad:ff:9e:93:2a:e6:8a:72:aa:4f:92:4d:da:0b:d6:
         9c:9e:2f:97:c1:f6:37:84:db:74:8b:8b:31:7c:f6:08:0f:43:
         ef:16:86:1c:32:43:0e:bc:3e:93:dd:cd:8d:bb:1f:a7:87:47:
         00:fb:85:78:7e:92:8f:5d:f5:79:b5:d1:69:7a:91:e7:2a:8d:
         2f:fb:b8:83:d4:f2:cc:1e:c1:a8:5d:6a:9a:d2:97:83:ab:c1:
         9b:2d:e4:3a:13:34:5b:f9:3b:cd:31:0f:1e:6b:c4:34:37:19:
         17:cd:09:49:74:d4:b5:de:4e:96:77:52:d5:c0:38:ec:c1:e4:
         a9:cc:20:9f:2f:80:0d:c1:29:f1:76:52:6b:10:17:e0:ed:43:
         0a:fc:0c:0a:d8:4d:47:6f:bb:a4:55:49:42:b9:4c:fa:88:2d:
         9d:27:ef:45:f3:f7:e4:d0:46:eb:01:3e:a8:28:11:23:8e:ee:
         97:9f:22:fa:b7:2b:b5:b3:f2:85:15:33:10:44:ad:27:2c:90:
         db:cf:a7:52:0d:c3:3f:6f:ce:b9:d3:be:b0:01:bf:80:1a:35:
         2f:b3:20:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE5QzAxMTAvBgNVBAUTKDdBNzMwMDIxMTEzRDI0NTExRDZFOEI4NTYyRTcyNEVD
OUU5ODI1MUIwHhcNMjYwNzE3MDc1MTE2WhcNMjYwNzI0MDc1MTE2WjAYMRYwFAYD
VQQDEw02YTU5ZGVmNS0xZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqjf9Jyh2qfCftFNa8GZh5p2Zy16n7GBdFUNIAMs6T7KqjG7UifEk6EcXEpBD
MZVfU9vbNTL8T0gEwyhM4NBi9l2XSo3IRdY9qZ//WJWy7QaY6QhoyuyxE/ejsE6U
PLub+k2NrBuMeXqmbUe++3kTJGmthBhhuu1aY2Z/LRGBN0ffKyc0lUfC2ZSq2WXS
u933pS1F+4nNHc3/fIR/N9/f2Df6DbtfKWtBtJYGaIVQ3X1pyhhKV0G7rIBdd8zr
nX576zgGhHvkpgF3eX4awYVOFleXUq+ORr9BsTdJM40dgvnJj9YQb/Pj8frYDOqt
YYL+Q2pYWLa4N7bozs0UgK8syQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAz2y71T
TjoAL9r/rdugX5MI7S/OMB8GA1UdIwQYMBaAFHpzACERPSRRHW6LhWLnJOyemCUb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlDMC81MjlCQzJGQzM4
ODIxMUYwOENDQjE4NjZDNEY5QUUwMi9lbk1BSVJFOUpGRWRib3VGWXVjazdKNllK
UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2VuTUFJUkU5SkZFZGJvdUZZdWNrN0o2WUpScy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTlDMC81MjlCQzJGQzM4ODIxMUYwOENDQjE4NjZDNEY5QUUwMi9lbk1BSVJFOUpG
RWRib3VGWXVjazdKNllKUnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIYSkHI91mMEevOyLoIYdC0HUY2OqrlKlKuau3d5Y+7kUi8Ee7uG+rf+ekyrm
inKqT5JN2gvWnJ4vl8H2N4TbdIuLMXz2CA9D7xaGHDJDDrw+k93Njbsfp4dHAPuF
eH6Sj131ebXRaXqR5yqNL/u4g9TyzB7BqF1qmtKXg6vBmy3kOhM0W/k7zTEPHmvE
NDcZF80JSXTUtd5OlndS1cA47MHkqcwgny+ADcEp8XZSaxAX4O1DCvwMCthNR2+7
pFVJQrlM+ogtnSfvRfP35NBG6wE+qCgRI47ul58i+rcrtbPyhRUzEEStJyyQ28+n
Ug3DP2/OudO+sAG/gBo1L7MgsA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:15 2026 by rpki-client