$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft File: enMAIRE9JFEdbouFYuck7J6YJRs.mft (raw, json) Hash identifier: zSEFvVG9bbgChLzR9qVcPuGri43RRLvEE7qKpYPs4h0= Subject key identifier: 4D:0B:8F:98:78:E5:13:75:15:B2:9A:DA:A4:16:16:CA:C8:EB:76:72 Authority key identifier: 7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B Certificate issuer: /CN=A91EA9C0/serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft Manifest number: 38 Signing time: Fri 05 Sep 2025 08:05:41 +0000 Manifest this update: Fri 05 Sep 2025 08:05:40 +0000 Manifest next update: Fri 12 Sep 2025 08:05:40 +0000 Files and hashes: 1: enMAIRE9JFEdbouFYuck7J6YJRs.crl (hash: tLvsQo43REY9j4uA7/8zYeXSaApQUS6/nIQPNIStnbI=) 2: 28BB8F3E7CFD11F0A33DEA21C4F9AE02.roa (hash: r4KaPqqtCXW7b+8GzlZoQ18nPDvw2xoi898WdJXVWq0=) 3: 27D35A2A7CFD11F0A33DEA21C4F9AE02.roa (hash: WMBMTYm4zJmJb6l3lGaR3MIPCoKpE7rld4fHZdKyhLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9C0, serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B Validity Not Before: Sep 5 08:05:40 2025 GMT Not After : Sep 12 08:05:40 2025 GMT Subject: CN=68ba99d4-aeb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:08:34:bb:d2:36:45:4c:8b:bd:22:a4:7c:6b: 93:7d:ef:ae:c2:f1:0d:67:07:f6:65:53:3c:d2:cf: 92:ca:e9:9a:e6:a5:f7:35:70:da:5c:02:a2:7e:7c: b7:12:59:5a:40:5f:48:7d:bd:46:78:ab:b1:b5:d9: 2f:0d:74:3b:c7:05:c0:b4:79:04:4f:0c:24:e2:ed: a3:90:d6:81:04:7b:94:58:2f:82:89:2f:04:76:a0: a4:55:c0:1f:61:09:26:49:c4:e8:0b:3e:14:c7:b5: fd:23:67:12:d0:58:5d:cc:34:6d:68:cb:47:89:57: af:d8:33:37:68:a9:19:34:b1:bc:e8:fa:60:3b:29: 2f:88:1d:ea:3b:f5:6b:4e:98:f3:87:38:d6:fa:d6: 09:6f:62:71:ad:a8:58:d9:13:f7:a9:98:bf:5d:90: 68:26:cf:f1:8e:aa:1f:12:80:5f:20:cc:67:cb:35: 6a:55:d9:5d:49:36:b4:48:54:ff:a8:70:c2:d5:35: f7:13:03:0e:33:aa:0e:d7:ab:7a:e9:d7:7a:6f:c3: 84:83:8c:c1:0c:42:97:24:c5:ef:36:7a:c2:bd:93: 1b:86:9f:ca:c5:c1:7c:f8:d4:45:b6:26:ed:64:9b: 09:6b:00:93:49:52:28:ff:70:4b:cb:24:73:bf:4b: 1a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0B:8F:98:78:E5:13:75:15:B2:9A:DA:A4:16:16:CA:C8:EB:76:72 X509v3 Authority Key Identifier: keyid:7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:eb:1a:d7:74:35:64:34:f3:3e:d7:d6:87:af:36:47:25:1c: db:54:ac:c4:85:b4:7d:34:67:f0:9e:f7:e0:4a:bc:9d:90:2a: 48:b0:10:f3:87:eb:5e:13:fa:aa:bc:10:51:0e:24:76:26:af: 35:e3:58:68:2a:94:40:e9:1f:74:23:11:48:8b:ce:3b:49:6b: 9d:ce:ee:80:50:15:81:5a:ee:31:29:bd:45:bc:ec:86:09:f8: 6b:41:77:17:88:79:90:de:fc:0d:c3:84:08:f3:1b:50:a1:8d: 40:a5:08:be:18:95:75:49:d5:3b:b1:be:f0:e2:9b:86:d9:15: 31:a7:5a:41:3e:d3:eb:32:1c:e1:2d:4b:79:b9:ca:7e:1e:ea: f5:c1:04:e5:5c:d2:59:46:2d:d3:bd:46:3d:2a:c3:db:2b:21: 5f:4c:30:5b:23:33:0c:c1:02:ed:e3:6a:19:ca:84:33:8d:36: 71:8a:12:ca:8c:73:7f:ba:19:e2:40:17:fd:2a:83:ef:aa:6a: cc:be:cf:fc:a0:e7:7b:c7:55:40:d6:51:27:fa:e1:1e:6d:d6: 7e:f8:2c:3b:d9:20:3a:03:cd:cf:1b:6a:37:16:75:57:30:06: 43:fe:d0:6d:f3:c9:c5:6c:36:63:43:bb:2f:65:b0:32:14:e5: 36:d8:07:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTlDMDExMC8GA1UEBRMoN0E3MzAwMjExMTNEMjQ1MTFENkU4Qjg1NjJFNzI0RUM5 RTk4MjUxQjAeFw0yNTA5MDUwODA1NDBaFw0yNTA5MTIwODA1NDBaMBgxFjAUBgNV BAMTDTY4YmE5OWQ0LWFlYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKCDS70jZFTIu9IqR8a5N9767C8Q1nB/ZlUzzSz5LK6Zrmpfc1cNpcAqJ+fLcS WVpAX0h9vUZ4q7G12S8NdDvHBcC0eQRPDCTi7aOQ1oEEe5RYL4KJLwR2oKRVwB9h CSZJxOgLPhTHtf0jZxLQWF3MNG1oy0eJV6/YMzdoqRk0sbzo+mA7KS+IHeo79WtO mPOHONb61glvYnGtqFjZE/epmL9dkGgmz/GOqh8SgF8gzGfLNWpV2V1JNrRIVP+o cMLVNfcTAw4zqg7Xq3rp13pvw4SDjMEMQpckxe82esK9kxuGn8rFwXz41EW2Ju1k mwlrAJNJUij/cEvLJHO/SxoDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTQuPmHjl E3UVsprapBYWysjrdnIwHwYDVR0jBBgwFoAUenMAIRE9JFEdbouFYuck7J6YJRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBOUMwLzUyOUJDMkZDMzg4 MjExRjA4Q0NCMTg2NkM0RjlBRTAyL2VuTUFJUkU5SkZFZGJvdUZZdWNrN0o2WUpS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZW5NQUlSRTlKRkVkYm91Rll1Y2s3SjZZSlJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB OUMwLzUyOUJDMkZDMzg4MjExRjA4Q0NCMTg2NkM0RjlBRTAyL2VuTUFJUkU5SkZF ZGJvdUZZdWNrN0o2WUpScy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALXrGtd0NWQ08z7X1oevNkclHNtUrMSFtH00Z/Ce9+BKvJ2QKkiwEPOH 614T+qq8EFEOJHYmrzXjWGgqlEDpH3QjEUiLzjtJa53O7oBQFYFa7jEpvUW87IYJ +GtBdxeIeZDe/A3DhAjzG1ChjUClCL4YlXVJ1TuxvvDim4bZFTGnWkE+0+syHOEt S3m5yn4e6vXBBOVc0llGLdO9Rj0qw9srIV9MMFsjMwzBAu3jahnKhDONNnGKEsqM c3+6GeJAF/0qg++qasy+z/yg53vHVUDWUSf64R5t1n74LDvZIDoDzc8bajcWdVcw BkP+0G3zycVsNmNDuy9lsDIU5TbYB7A= -----END CERTIFICATE-----Generated at Sat Sep 6 20:46:15 2025 by rpki-client