
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
File: enMAIRE9JFEdbouFYuck7J6YJRs.mft (raw, json)
Hash identifier: taGU8i8jf+staFiFfbraiB+AiSTw9RNuYZfjjFH9IAU=
Subject key identifier: 00:B0:59:0D:EE:CA:49:E3:AC:50:D7:B0:86:B3:CB:EE:FF:84:F5:04
Authority key identifier: 7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B
Certificate issuer: /CN=A91EA9C0/serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
Certificate serial: D6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
Manifest number: CD
Signing time: Sat 13 Jun 2026 06:56:36 +0000
Manifest this update: Sat 13 Jun 2026 06:56:35 +0000
Manifest next update: Sat 20 Jun 2026 06:56:35 +0000
Files and hashes: 1: enMAIRE9JFEdbouFYuck7J6YJRs.crl (hash: FlSgu4iy5zRbXWguKTSMMQY+zmmUyYUHbmdC2+Qm5p4=)
2: 38A5CCEC0EFD11F198037EE50C3D8C67.roa (hash: 05pC1QjdXz/JcKagpqRB8Es2Hu2WFfz+kHjfBEq36Yo=)
3: 51E2DA3C032811F1B93270B91D3D8C67.roa (hash: ZdHxlT3OqwPC+xGI71Ljv6ozI4riSBo2nvgbAgHx1Rg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl
rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:56:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA9C0, serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
Validity
Not Before: Jun 13 06:56:35 2026 GMT
Not After : Jun 20 06:56:35 2026 GMT
Subject: CN=6a2cff24-5854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:c3:4d:50:46:d0:7e:33:4f:3b:e5:25:44:
23:99:f0:80:ae:05:28:68:51:d5:31:0a:16:72:5f:
bf:90:af:fc:d2:c0:94:85:4c:d7:8b:f9:ff:5b:db:
5b:1a:38:0c:37:81:04:ad:d8:08:4b:18:3b:04:60:
d0:cb:ac:d1:30:8a:4e:52:77:48:7a:7f:f9:d1:4a:
ec:1c:ff:fc:a5:da:f6:bd:ed:a7:0b:b0:6d:8c:54:
8a:3a:d2:a9:f4:81:56:d0:0e:82:a2:1e:7f:ce:da:
33:2f:51:9c:b8:6a:51:d9:7a:f4:5e:6f:0a:c5:bd:
d3:52:85:48:49:d5:a1:c1:b4:f9:3f:d0:dd:e6:85:
6b:95:fa:50:19:bf:59:a4:da:40:10:a0:34:c7:e4:
2d:e1:4a:3b:98:fb:ec:5a:8b:c8:cb:77:ee:f8:be:
3b:1b:dd:af:2d:99:6a:6c:9c:e9:f1:e7:47:e9:63:
06:b2:aa:a6:0b:86:84:83:12:49:e7:ea:91:55:60:
af:2e:23:91:25:ee:09:d5:a2:c6:2a:97:79:61:64:
e0:6f:54:2e:2d:c3:75:57:54:b7:24:04:af:3a:bb:
79:aa:ad:f8:09:b1:ef:47:6c:7f:ae:17:86:a1:d3:
d1:62:7f:e7:bb:a5:65:58:93:1e:16:0e:1c:3e:f8:
ec:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B0:59:0D:EE:CA:49:E3:AC:50:D7:B0:86:B3:CB:EE:FF:84:F5:04
X509v3 Authority Key Identifier:
keyid:7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:6f:6b:82:4e:d7:2d:27:fa:34:fb:50:cf:6b:57:01:57:96:
67:63:f0:57:e9:4b:53:1e:84:dc:df:e8:ec:f8:a1:e2:fb:17:
75:82:8f:15:9a:95:e5:6f:c0:2c:ee:46:d2:4b:c8:e3:30:07:
90:e1:ec:5a:83:7c:8f:36:e0:14:65:9f:c9:f5:dd:68:a0:80:
ed:e8:0b:03:79:85:ee:a7:de:1e:ef:b8:33:83:15:5f:d4:9e:
2d:c0:61:f1:1e:29:2d:87:be:8a:98:12:3f:7b:6d:47:ad:e4:
16:55:cd:95:38:03:54:b3:1c:55:b6:da:03:e7:f2:da:70:97:
65:b2:6b:a1:fc:f6:1e:8c:f0:f3:4c:f7:80:23:d2:8d:6f:4b:
f7:cd:62:00:99:bf:f0:28:b6:f4:a4:48:e3:c5:07:a6:0c:09:
08:bb:36:03:59:17:ed:34:9d:b8:b4:c9:c2:f3:13:d2:58:8a:
6e:d8:08:5e:82:92:fe:a4:b9:fc:14:b5:82:d4:16:ec:1b:ae:
8c:82:9f:6f:43:b5:a0:60:24:ba:c3:96:83:70:99:b5:01:0d:
0f:f7:c0:6f:32:67:8e:13:c5:e4:25:5d:14:5e:19:37:f5:db:
8a:5c:5f:e4:03:e6:2b:94:f0:24:c4:cb:57:bc:b3:6f:7b:5d:
86:16:e2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:59:23 2026 by rpki-client