$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft File: enMAIRE9JFEdbouFYuck7J6YJRs.mft (raw, json) Hash identifier: YTSxn/jRdJSmfmj8SsAkswXKOQnIOy2RyQ7JTJGB+ug= Subject key identifier: 65:51:8A:EA:98:64:C3:29:31:DA:EB:C2:36:99:AE:19:21:14:39:64 Authority key identifier: 7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B Certificate issuer: /CN=A91EA9C0/serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft Manifest number: 56 Signing time: Wed 05 Nov 2025 07:24:19 +0000 Manifest this update: Wed 05 Nov 2025 07:24:19 +0000 Manifest next update: Wed 12 Nov 2025 07:24:19 +0000 Files and hashes: 1: enMAIRE9JFEdbouFYuck7J6YJRs.crl (hash: X8Su1hZKjuuHrWnpzMcj5vGiu/DMUpD9qI07trwxFng=) 2: 28BB8F3E7CFD11F0A33DEA21C4F9AE02.roa (hash: r4KaPqqtCXW7b+8GzlZoQ18nPDvw2xoi898WdJXVWq0=) 3: 27D35A2A7CFD11F0A33DEA21C4F9AE02.roa (hash: WMBMTYm4zJmJb6l3lGaR3MIPCoKpE7rld4fHZdKyhLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9C0, serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B Validity Not Before: Nov 5 07:24:19 2025 GMT Not After : Nov 12 07:24:19 2025 GMT Subject: CN=690afba3-04a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cb:0f:a5:ae:7c:93:5c:61:e6:87:dd:04:2e: e9:30:4d:dc:4e:b8:4b:83:45:ed:2e:e9:96:ec:29: 79:b7:49:07:64:bb:05:cc:64:92:f4:64:3c:25:69: 8f:46:de:0b:06:3c:33:83:a4:8b:79:17:db:58:4a: 95:85:7c:75:67:0d:29:88:7b:b4:71:76:b0:00:34: 9c:a3:b2:18:2f:95:4d:22:87:1d:f3:ce:f5:4b:15: fd:84:05:dd:9f:82:51:d3:7a:00:c5:e2:0a:32:7b: 70:c4:2b:a9:85:9e:b7:c0:f8:46:f4:2f:d3:5c:30: 0f:6c:c5:d1:80:24:ed:ea:fc:cc:b7:b9:18:8a:b1: 03:39:ab:b1:b8:74:cf:93:9a:6e:b0:e3:b2:5d:a0: c7:42:73:14:4d:94:ab:b0:a5:b7:60:13:7e:a5:51: c1:f9:fc:2f:21:38:89:ef:fa:d1:d6:96:1d:b3:2e: f6:ae:48:e2:c0:32:10:19:c7:a0:08:7f:cb:9d:82: 84:53:ab:31:d2:c6:0a:d3:48:3f:60:6b:4d:a4:b1: 67:33:27:93:ef:08:a9:10:d9:93:23:82:ce:a8:0f: 94:73:0e:95:91:f1:55:10:f2:70:84:af:5d:a3:e3: 88:33:b2:d3:9e:6a:6e:84:86:29:a0:c6:a7:5c:49: a3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:51:8A:EA:98:64:C3:29:31:DA:EB:C2:36:99:AE:19:21:14:39:64 X509v3 Authority Key Identifier: keyid:7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:cb:22:c7:3c:e0:7a:43:83:5e:d0:43:58:db:63:41:3c:61: b0:12:4f:10:82:b4:06:33:cd:75:6f:64:c4:41:32:11:3f:59: 2b:6b:db:d5:1c:c3:63:6b:2c:86:89:bb:bc:ed:e0:8a:22:12: 38:2e:b2:36:dd:fe:38:74:73:12:83:d0:25:a5:f8:08:0d:3e: 0c:16:c8:8f:3f:7d:f0:97:f3:2c:d9:b6:d8:7e:6d:da:cc:6c: 89:f9:02:76:6a:b6:3a:8f:49:e8:cf:a3:63:3e:cb:eb:9b:bc: ee:05:bd:7f:64:80:7f:76:87:bf:ec:ac:d3:fa:db:21:a0:5e: 4a:39:32:3b:73:9a:3a:15:75:71:4a:58:d8:67:f3:c2:39:30: 8e:07:4c:34:48:12:75:3e:c2:f7:a1:e7:de:8e:c7:df:34:01: 5f:4f:64:53:3f:64:a9:b0:24:aa:78:35:dd:a6:48:e9:56:ac: a3:5d:e0:bb:1d:8f:09:3f:02:25:31:9c:bf:05:5a:ed:b7:e6: 11:f9:6d:9d:b5:d0:86:e4:e0:fa:7a:ee:32:03:74:87:f8:fa: 30:76:2a:58:07:d8:74:c7:a1:63:60:f3:f2:93:a2:ad:dd:75: bc:c5:db:57:8a:3b:22:c5:5d:dd:74:03:23:1b:0d:10:6d:b8: 10:f5:21:60 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTlDMDExMC8GA1UEBRMoN0E3MzAwMjExMTNEMjQ1MTFENkU4Qjg1NjJFNzI0RUM5 RTk4MjUxQjAeFw0yNTExMDUwNzI0MTlaFw0yNTExMTIwNzI0MTlaMBgxFjAUBgNV BAMTDTY5MGFmYmEzLTA0YTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPyw+lrnyTXGHmh90ELukwTdxOuEuDRe0u6ZbsKXm3SQdkuwXMZJL0ZDwlaY9G 3gsGPDODpIt5F9tYSpWFfHVnDSmIe7RxdrAANJyjshgvlU0ihx3zzvVLFf2EBd2f glHTegDF4goye3DEK6mFnrfA+Eb0L9NcMA9sxdGAJO3q/My3uRiKsQM5q7G4dM+T mm6w47JdoMdCcxRNlKuwpbdgE36lUcH5/C8hOInv+tHWlh2zLvauSOLAMhAZx6AI f8udgoRTqzHSxgrTSD9ga02ksWczJ5PvCKkQ2ZMjgs6oD5RzDpWR8VUQ8nCEr12j 44gzstOeam6EhimgxqdcSaNZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZVGK6phk wykx2uvCNpmuGSEUOWQwHwYDVR0jBBgwFoAUenMAIRE9JFEdbouFYuck7J6YJRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBOUMwLzUyOUJDMkZDMzg4 MjExRjA4Q0NCMTg2NkM0RjlBRTAyL2VuTUFJUkU5SkZFZGJvdUZZdWNrN0o2WUpS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZW5NQUlSRTlKRkVkYm91Rll1Y2s3SjZZSlJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB OUMwLzUyOUJDMkZDMzg4MjExRjA4Q0NCMTg2NkM0RjlBRTAyL2VuTUFJUkU5SkZF ZGJvdUZZdWNrN0o2WUpScy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIPLIsc84HpDg17QQ1jbY0E8YbASTxCCtAYzzXVvZMRBMhE/WStr29Uc w2NrLIaJu7zt4IoiEjgusjbd/jh0cxKD0CWl+AgNPgwWyI8/ffCX8yzZtth+bdrM bIn5AnZqtjqPSejPo2M+y+ubvO4FvX9kgH92h7/srNP62yGgXko5MjtzmjoVdXFK WNhn88I5MI4HTDRIEnU+wveh596Ox980AV9PZFM/ZKmwJKp4Nd2mSOlWrKNd4Lsd jwk/AiUxnL8FWu235hH5bZ210Ibk4Pp67jIDdIf4+jB2KlgH2HTHoWNg8/KToq3d dbzF21eKOyLFXd10AyMbDRBtuBD1IWA= -----END CERTIFICATE-----Generated at Wed Nov 5 11:23:37 2025 by rpki-client