$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft File: enMAIRE9JFEdbouFYuck7J6YJRs.mft (raw, json) Hash identifier: Hz7hj3Wgf/mtOkgx6YquAKy0vN1GbU62mSzPPIwGlwQ= Subject key identifier: C7:12:D3:B9:97:73:38:54:16:5C:47:E7:43:A0:6F:22:96:5E:0F:7B Authority key identifier: 7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B Certificate issuer: /CN=A91EA9C0/serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft Manifest number: 07 Signing time: Tue 03 Jun 2025 08:03:30 +0000 Manifest this update: Tue 03 Jun 2025 08:03:30 +0000 Manifest next update: Tue 10 Jun 2025 08:03:30 +0000 Files and hashes: 1: enMAIRE9JFEdbouFYuck7J6YJRs.crl (hash: d3PEYV5MxtYrlx3Xu1Nen4Jc51lk9hFneq+vbWU26m8=) 2: 4CB0FD06388411F08C1F3F69C4F9AE02.roa (hash: CQtIdoN7iL7YhWLcKm67Xv0ZOHDw9METp8+XVwLWFR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 08:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9C0, serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B Validity Not Before: Jun 3 08:03:30 2025 GMT Not After : Jun 10 08:03:30 2025 GMT Subject: CN=683eac52-3ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:89:55:2b:42:fa:5d:8a:c8:c4:53:89:39:c7: 9a:7a:e2:3c:4a:c0:77:f5:ba:37:57:90:6a:72:93: 0b:64:6d:ad:87:37:fe:2f:ad:35:74:8a:c7:c8:f4: 89:ec:30:96:f1:f3:31:0f:34:f3:ea:a4:de:52:68: d2:c6:2a:15:9d:d4:69:78:66:f6:a2:0a:2d:40:4e: c6:ac:64:f4:3a:8f:67:fe:ce:6f:2f:58:43:02:fb: 50:ff:f5:30:d1:05:de:2a:12:c7:22:2b:d8:9a:d1: 12:61:5a:2f:f0:66:50:f7:5c:ef:71:de:ea:44:ed: 35:89:5c:f0:2d:78:12:54:7a:7f:1d:59:56:8a:d1: 4f:ed:af:d6:9a:6c:cf:f4:7b:7d:25:5d:28:ac:f4: 73:ca:51:6c:3c:b1:56:0c:fb:8c:ac:74:2c:a0:67: 92:a0:42:f6:aa:f3:2a:54:7e:16:77:fe:3b:60:1a: 4c:c7:6d:eb:9a:78:88:b3:65:f8:96:05:22:cb:56: ed:f8:2a:ea:d9:9c:1b:88:41:09:52:1a:ba:2c:7c: eb:3d:6a:7d:9d:45:0e:6a:49:22:04:e1:bb:02:70: 34:61:3d:a1:b3:ed:58:a6:29:da:4e:8b:e6:e5:84: b3:ef:38:bd:7d:33:2c:b3:83:26:98:4b:45:32:46: 92:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:12:D3:B9:97:73:38:54:16:5C:47:E7:43:A0:6F:22:96:5E:0F:7B X509v3 Authority Key Identifier: keyid:7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:76:32:f4:f5:33:c8:4f:01:20:b5:26:1a:58:d1:70:b9:f3: 86:5f:b0:b6:51:ba:80:aa:14:75:d6:f7:12:68:b8:74:ac:7b: cb:8d:33:0e:5e:5b:5a:0f:1d:39:e4:77:8a:a3:74:bc:df:6c: 82:28:5b:5e:71:aa:32:11:a2:b9:4d:03:f5:74:7f:eb:5b:90: 0c:ac:ba:47:92:04:d2:7a:bf:54:57:88:a7:b2:ae:00:fd:6a: b9:13:c0:76:15:2c:ae:b9:21:8e:72:76:00:70:3f:ee:fd:eb: 14:dc:1d:de:94:38:69:c4:9a:31:de:aa:6e:7b:9c:dc:b4:35: 03:d5:1b:fe:3d:41:58:89:f8:00:bc:9a:19:1a:08:12:6a:0c: 8a:68:66:9d:a7:35:fa:82:1b:80:56:a6:9d:39:58:ba:c9:e3: 7d:6e:b9:d5:0d:1d:4a:30:22:16:a7:10:76:5b:c7:8e:2f:2d: de:df:df:7d:74:56:a1:cc:cb:fe:b9:b6:ae:58:43:8b:73:a3: 0d:42:0e:35:a5:90:b2:0c:b7:9a:a9:75:ff:ce:b2:8a:ac:7b: 54:29:95:9f:dc:3b:d7:7e:78:89:6a:48:26:5c:0e:0e:d3:6b: 05:b2:75:45:f3:a0:82:d3:56:89:69:c5:4e:f5:b9:d0:63:57: 57:d9:a5:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTlDMDExMC8GA1UEBRMoN0E3MzAwMjExMTNEMjQ1MTFENkU4Qjg1NjJFNzI0RUM5 RTk4MjUxQjAeFw0yNTA2MDMwODAzMzBaFw0yNTA2MTAwODAzMzBaMBgxFjAUBgNV BAMTDTY4M2VhYzUyLTNhZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXiVUrQvpdisjEU4k5x5p64jxKwHf1ujdXkGpykwtkba2HN/4vrTV0isfI9Ins MJbx8zEPNPPqpN5SaNLGKhWd1Gl4ZvaiCi1ATsasZPQ6j2f+zm8vWEMC+1D/9TDR Bd4qEsciK9ia0RJhWi/wZlD3XO9x3upE7TWJXPAteBJUen8dWVaK0U/tr9aabM/0 e30lXSis9HPKUWw8sVYM+4ysdCygZ5KgQvaq8ypUfhZ3/jtgGkzHbeuaeIizZfiW BSLLVu34KurZnBuIQQlSGrosfOs9an2dRQ5qSSIE4bsCcDRhPaGz7VimKdpOi+bl hLPvOL19MyyzgyaYS0UyRpInAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxxLTuZdz OFQWXEfnQ6BvIpZeD3swHwYDVR0jBBgwFoAUenMAIRE9JFEdbouFYuck7J6YJRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBOUMwLzUyOUJDMkZDMzg4 MjExRjA4Q0NCMTg2NkM0RjlBRTAyL2VuTUFJUkU5SkZFZGJvdUZZdWNrN0o2WUpS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZW5NQUlSRTlKRkVkYm91Rll1Y2s3SjZZSlJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB OUMwLzUyOUJDMkZDMzg4MjExRjA4Q0NCMTg2NkM0RjlBRTAyL2VuTUFJUkU5SkZF ZGJvdUZZdWNrN0o2WUpScy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHB2MvT1M8hPASC1JhpY0XC584ZfsLZRuoCqFHXW9xJouHSse8uNMw5e W1oPHTnkd4qjdLzfbIIoW15xqjIRorlNA/V0f+tbkAysukeSBNJ6v1RXiKeyrgD9 arkTwHYVLK65IY5ydgBwP+796xTcHd6UOGnEmjHeqm57nNy0NQPVG/49QViJ+AC8 mhkaCBJqDIpoZp2nNfqCG4BWpp05WLrJ431uudUNHUowIhanEHZbx44vLd7f3310 VqHMy/65tq5YQ4tzow1CDjWlkLIMt5qpdf/Osoqse1QplZ/cO9d+eIlqSCZcDg7T awWydUXzoILTVolpxU71udBjV1fZpTc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:41:54 2025 by rpki-client