$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft File: enMAIRE9JFEdbouFYuck7J6YJRs.mft (raw, json) Hash identifier: +ExoDm9NZgyaNWIXH2AuWLnpuVKtvK3Z35cJJ0CkgWQ= Subject key identifier: 02:F7:82:9F:F8:51:2F:05:7D:0C:51:F7:CA:A7:2F:48:6C:3C:A6:33 Authority key identifier: 7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B Certificate issuer: /CN=A91EA9C0/serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft Manifest number: AF Signing time: Fri 17 Apr 2026 06:54:49 +0000 Manifest this update: Fri 17 Apr 2026 06:54:48 +0000 Manifest next update: Fri 24 Apr 2026 06:54:48 +0000 Files and hashes: 1: enMAIRE9JFEdbouFYuck7J6YJRs.crl (hash: gVVmdlo4c5hv8SvcilrgRoLjt7iQCUXyzSHR+SfitaU=) 2: 51E2DA3C032811F1B93270B91D3D8C67.roa (hash: 3U4FEVRGy9jE+wB4tgnDMOY88kDC7cd7O9eOZNx+krU=) 3: 38A5CCEC0EFD11F198037EE50C3D8C67.roa (hash: Ws5xeasORqbsl//ZjsZh/u1HnC6Hx/gc7hpsz4QOW5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9C0, serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B Validity Not Before: Apr 17 06:54:48 2026 GMT Not After : Apr 24 06:54:48 2026 GMT Subject: CN=69e1d939-0964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6b:49:a9:cc:90:56:d7:72:e5:dd:2f:21:a8: 50:f9:f4:c9:a4:c3:80:bb:62:d6:db:b6:3b:a4:06: 90:8f:bc:aa:64:fa:be:a4:c7:e5:50:49:79:2c:92: 48:50:28:5f:c3:97:8e:b5:db:00:4c:5e:a7:54:2a: b9:0c:66:b1:7c:6a:80:55:69:a8:1a:74:75:d4:01: e8:47:67:97:33:ed:48:81:9d:3b:28:ab:44:3d:e9: 1d:b0:fe:da:ff:cb:e9:21:cf:33:3b:ee:05:c2:92: 93:d5:03:05:c6:07:88:da:47:43:cc:dc:e1:da:f6: 2b:0d:0a:73:3c:99:ce:37:f2:a5:1b:62:57:71:6f: 40:3d:ef:fc:38:da:2d:d2:6e:a6:d2:e8:22:3c:1c: 87:39:fe:46:00:1a:81:d8:44:5a:54:08:1f:5e:7c: 57:56:7a:50:ab:f0:da:93:88:c2:25:81:d9:c9:66: e5:16:32:60:90:b6:db:c7:72:9a:f7:50:7b:3c:cc: 6a:d0:15:7f:72:7f:c3:d1:2a:2a:ea:b7:68:c0:1e: 15:87:9c:fa:18:37:ca:1e:69:b1:61:f7:9b:84:dc: 25:fb:76:41:a4:9c:ea:7e:71:f5:bc:4c:61:eb:7e: c0:a9:70:63:a9:77:49:87:04:02:b1:4d:3b:32:f8: e4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F7:82:9F:F8:51:2F:05:7D:0C:51:F7:CA:A7:2F:48:6C:3C:A6:33 X509v3 Authority Key Identifier: keyid:7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:1d:e9:ac:62:d3:a4:56:83:2e:a9:f7:a1:c2:9a:9a:b2:48: 8a:5a:c3:ef:5a:66:6c:5a:67:b9:af:d5:e1:17:0f:1f:0c:c7: d0:1f:28:40:15:e6:67:c4:38:26:b2:44:97:32:73:3a:8c:3d: a6:ca:1a:fd:f6:f7:82:0d:fc:46:aa:19:a5:8f:1e:2c:8b:d1: 47:31:59:a6:1f:5f:23:cc:23:3c:4e:73:11:23:de:58:9c:6b: fd:bd:7b:e0:2e:b4:6b:12:97:da:40:e6:38:eb:94:2f:39:38: f1:dc:2f:a0:94:51:1d:8c:39:c7:3e:8e:aa:0f:ee:fb:f0:ef: 52:c6:5a:b7:9a:57:8f:26:f7:4f:6c:59:1b:96:22:73:19:ed: c3:c0:2a:41:21:39:f0:56:aa:91:0c:61:64:d3:3f:b7:0f:c9: 8b:4a:fa:6a:8f:5b:90:58:fd:61:0a:bf:75:13:18:81:9b:be: b3:d1:df:44:8c:4b:18:ab:11:1d:31:10:32:0e:14:c9:3a:97: 3e:b5:4c:14:1f:e0:21:26:7c:a9:67:b2:98:8d:d1:6b:93:73: f1:06:9b:c3:9a:20:16:d4:3f:fb:1f:c2:cd:e5:8a:6e:41:18: 8a:6d:93:a9:6b:08:9f:0e:9c:57:a2:d3:b0:33:0f:80:42:69: 42:18:b4:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5QzAxMTAvBgNVBAUTKDdBNzMwMDIxMTEzRDI0NTExRDZFOEI4NTYyRTcyNEVD OUU5ODI1MUIwHhcNMjYwNDE3MDY1NDQ4WhcNMjYwNDI0MDY1NDQ4WjAYMRYwFAYD VQQDEw02OWUxZDkzOS0wOTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGtJqcyQVtdy5d0vIahQ+fTJpMOAu2LW27Y7pAaQj7yqZPq+pMflUEl5LJJI UChfw5eOtdsATF6nVCq5DGaxfGqAVWmoGnR11AHoR2eXM+1IgZ07KKtEPekdsP7a /8vpIc8zO+4FwpKT1QMFxgeI2kdDzNzh2vYrDQpzPJnON/KlG2JXcW9APe/8ONot 0m6m0ugiPByHOf5GABqB2ERaVAgfXnxXVnpQq/Dak4jCJYHZyWblFjJgkLbbx3Ka 91B7PMxq0BV/cn/D0Soq6rdowB4Vh5z6GDfKHmmxYfebhNwl+3ZBpJzqfnH1vExh 637AqXBjqXdJhwQCsU07MvjkewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAL3gp/4 US8FfQxR98qnL0hsPKYzMB8GA1UdIwQYMBaAFHpzACERPSRRHW6LhWLnJOyemCUb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlDMC81MjlCQzJGQzM4 ODIxMUYwOENDQjE4NjZDNEY5QUUwMi9lbk1BSVJFOUpGRWRib3VGWXVjazdKNllK UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2VuTUFJUkU5SkZFZGJvdUZZdWNrN0o2WUpScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTlDMC81MjlCQzJGQzM4ODIxMUYwOENDQjE4NjZDNEY5QUUwMi9lbk1BSVJFOUpG RWRib3VGWXVjazdKNllKUnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgh3prGLTpFaDLqn3ocKamrJIilrD71pmbFpnua/V4RcPHwzH0B8oQBXmZ8Q4 JrJElzJzOow9psoa/fb3gg38RqoZpY8eLIvRRzFZph9fI8wjPE5zESPeWJxr/b17 4C60axKX2kDmOOuULzk48dwvoJRRHYw5xz6Oqg/u+/DvUsZat5pXjyb3T2xZG5Yi cxntw8AqQSE58FaqkQxhZNM/tw/Ji0r6ao9bkFj9YQq/dRMYgZu+s9HfRIxLGKsR HTEQMg4UyTqXPrVMFB/gISZ8qWeymI3Ra5Nz8Qabw5ogFtQ/+x/CzeWKbkEYim2T qWsInw6cV6LTsDMPgEJpQhi0Uw== -----END CERTIFICATE-----Generated at Fri Apr 17 10:45:56 2026 by rpki-client