
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
File: enMAIRE9JFEdbouFYuck7J6YJRs.mft (raw, json)
Hash identifier: W+lws2J7rh8epcvqh9nOkNwzFdqmG4LvFVg7JCZPJPk=
Subject key identifier: 3E:44:08:23:C6:16:ED:46:75:2D:42:77:97:91:EE:93:E7:CD:74:65
Authority key identifier: 7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B
Certificate issuer: /CN=A91EA9C0/serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
Certificate serial: 011B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
Manifest number: 0112
Signing time: Tue 27 Oct 2026 06:19:52 +0000
Manifest this update: Tue 27 Oct 2026 06:19:51 +0000
Manifest next update: Tue 03 Nov 2026 06:19:51 +0000
Files and hashes: 1: enMAIRE9JFEdbouFYuck7J6YJRs.crl (hash: wNwqOP8bUKAHAIJIoyVbZg+Ae5ZKHNMnxnz20AE5hMQ=)
2: 38A5CCEC0EFD11F198037EE50C3D8C67.roa (hash: 05pC1QjdXz/JcKagpqRB8Es2Hu2WFfz+kHjfBEq36Yo=)
3: 51E2DA3C032811F1B93270B91D3D8C67.roa (hash: ZdHxlT3OqwPC+xGI71Ljv6ozI4riSBo2nvgbAgHx1Rg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl
rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 06:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA9C0, serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
Validity
Not Before: Oct 27 06:19:51 2026 GMT
Not After : Nov 3 06:19:51 2026 GMT
Subject: CN=6ae04288-9940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:90:4c:60:63:37:15:58:59:85:fc:1d:6e:
b3:43:64:79:64:5d:11:69:57:27:4c:ff:d7:1a:8e:
11:62:4f:16:f8:6e:19:0d:ba:38:84:ce:41:42:70:
60:82:1d:1b:f7:f2:b5:38:07:1d:23:aa:3c:c5:6d:
7c:b2:2d:bf:80:61:8c:be:fe:b0:2a:c6:16:6f:91:
df:08:61:08:65:ca:b3:2b:d7:95:a8:ac:28:b9:64:
fc:af:a9:27:f9:b6:31:b4:9a:3e:da:25:5a:cb:f5:
e6:ae:8c:b3:39:d7:c8:52:f4:4c:a4:8b:20:dd:6f:
8f:af:0e:8c:be:22:7c:48:b6:b2:93:a2:d9:69:93:
ba:53:7b:44:25:7c:52:fd:cb:69:d7:4b:83:e9:a0:
6c:fd:65:c6:f5:39:10:27:2a:ab:c4:2a:9b:79:cb:
7f:70:73:c4:70:2f:c5:2e:9d:21:f3:3c:2d:cb:0f:
03:af:03:f1:ff:08:32:d6:99:a4:18:ec:7d:b4:f1:
d7:c7:d9:b2:60:ac:42:14:8c:b6:7d:a4:52:ed:06:
b6:39:6c:b3:72:45:c0:ef:10:d7:10:2d:f2:2a:8e:
47:13:f1:ec:4f:5f:c9:4d:46:65:1e:ff:d6:3c:74:
8c:58:14:b1:81:52:9d:0d:89:d0:8d:5e:09:7a:6c:
f3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:44:08:23:C6:16:ED:46:75:2D:42:77:97:91:EE:93:E7:CD:74:65
X509v3 Authority Key Identifier:
keyid:7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:52:7e:6d:09:d2:9c:ad:17:c3:80:6e:08:7b:4b:c3:80:4a:
be:97:d1:e5:5e:dd:14:75:61:e4:3c:b0:76:74:5c:fc:d0:4d:
26:11:53:92:81:43:08:1a:5b:6d:f5:ca:98:a9:9f:de:0d:bc:
fc:ae:77:fb:9e:e7:ef:a5:35:75:cb:2c:a5:0d:09:13:d7:84:
3f:1c:91:4a:96:99:93:dd:1c:e5:44:57:ba:10:fc:b0:aa:ab:
70:30:4f:39:7e:b3:c6:96:ab:ee:a9:79:c8:54:21:19:c6:66:
10:8d:84:b9:19:f5:74:a2:85:14:75:fe:fe:25:4e:4e:68:7b:
00:bb:05:8f:7e:b8:2a:a8:5b:b6:54:79:1e:c2:3c:aa:7a:0e:
83:f8:5b:54:02:02:9a:2c:e5:75:6b:2f:b4:b8:25:e1:1f:34:
b2:a0:9d:da:52:b0:75:85:73:0c:3e:e9:06:3f:bc:e0:29:4b:
51:ac:c4:0d:bd:ef:1f:70:20:5b:a0:06:83:41:03:d4:e8:9a:
7b:4d:03:5a:3b:0f:75:fb:03:0f:b0:49:4b:94:ef:92:2a:61:
f5:49:d5:e7:3c:e7:11:cc:bc:b9:7b:24:ce:56:7b:b7:fd:f3:
fc:f6:86:b2:5c:90:d7:be:d8:0d:d9:15:06:1d:3a:26:bb:d8:
25:7f:db:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:52:16 2026 by rpki-client